<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="154">
<package pkgid="557405d6f97a85af4ca9f0221e78bee7d25e334eabc461c7055ad3bd18dbedb0" name="fdupes" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="a1e61ec0d641201e2b77f70df8efe215748a70ff4bee84c6abb99a01609cb06d" name="fdupes" arch="src">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="9b81e3031cd5106e06c418966e9702de5063bbd46aa950a3e6f51008dd74c519" name="fdupes" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="1490188f6022c8ecee6c2763cb73965f13d2a35d30baa14171cf573e004de122" name="fdupes-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="70a8823257bdfbf6093d0875701bb694cd111ce1e987122d33021f337321c345" name="fdupes-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="d9600cb2e6e40c6da04de1fd285bbeb06eac1568c8a0d4d94578fb95494a48e6" name="fdupes-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="8f5a3af79326d74cc0d2c00abed227302b5b2c0c8c7230df2e80e37cca88a817" name="fdupes-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="2.1"/>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1719662400">- update to 2.3.1:
  * Fix buffer overflow bug in getrealpath() function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Make build recipe succeed with POSIX sh
- Add extra quoting along the way</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745668800">- Update to 2.4.0:
  * Add quick summary option that skips byte-for-byte match confirmation.
  * Reduce number of progress indicator updates for better performance.
- Update to 2.3.2:
  * Keep cursor as close to current group as possible after deleting files.</changelog>
</package>
<package pkgid="e826300b279b5ba0f7ec1f414e8a676d8df5d23cd2cabcd3703a8ef90a862d33" name="flac" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="68844b709155473a528d24b50425e2b86133482340da7e5f6ebcf9fd5b0a2836" name="flac" arch="src">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="5574c3231958aa9a9a46e2cb7b6708c022b9a8d6d7d86e46f5c215724ea05138" name="flac" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="930741d7bae1e3f2a1252f8884cc3049197ca3171f9968e856340221f08331d7" name="flac-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="8ffb0987bc18d984c333e4a0eed48d52224ddafcfa7d00f21cf34d79d9fbabbb" name="flac-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="0b13c22261f892969e47475a114418fbdd4408c1cc8a806402d160ed91d47efc" name="flac-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="bcb91955a058288b7057085662d84974a5f3a112c6ed1641d2c9b5b25f54159a" name="flac-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="bdb3f5c308ab943142ecc11cbce9b80d79e32d0ec50846751933f432c35bc2e9" name="flac-devel" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="2876ce8f419a7cec7998e3ffd9664b4e04de8521966eb3af393e7243da739a60" name="flac-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="4cf81cffbc2211aab77cd813670ae57a464d3bd5e0c6fb35527b2f111a247bf3" name="fluidsynth" arch="aarch64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="2dcf77a115d05e92fcdace1f61baabf00c5429e474d36145c357689547a939e7" name="fluidsynth" arch="src">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="82522bcf6af672ebac2662f959f7e18685731cf5176d03f282e6bd5bfd7431cb" name="fluidsynth" arch="x86_64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="d36310caf385d6825267e6a4f7ba258fd334ff8df741b3802ca87f37d97b786b" name="fluidsynth-debuginfo" arch="aarch64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="79b5bd30899723af24630780becf89570e6acbd96827824293d21f3125727a25" name="fluidsynth-debuginfo" arch="x86_64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="eef0c8d6d3d30320d09044228af4811c82f1b7d4df77ef4ce09e32fa6e189c79" name="fluidsynth-debugsource" arch="aarch64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="3c136e7279f1147a8d09c9bf4506bb27c204a6ab9c6490a680ae03044228b8e3" name="fluidsynth-debugsource" arch="x86_64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="88620f2429d0f4cb9101e6111e5f7c13949a69a2eedf3821842805f0706e9235" name="fluidsynth-devel" arch="aarch64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="6984786d3c632c68debaa04aba209c627298a97a6dc70b4a9bb04715855cad94" name="fluidsynth-devel" arch="x86_64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="75553b1166d05854ca1f65542139779b568784a29543079a090cd47796dcdf3c" name="libFLAC++11" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="53a616c7869eed0d1b17eeb084c3eb2a2890b5da7f1ba51f54c9861775adf405" name="libFLAC++11" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="8015356af09e0e6c707b9de2f4cd1491fd7a40ffc1215b2dc53c8fd96ca137c7" name="libFLAC++11-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="79fc03aa1572e4bf12e4ac5839f41232558e7ed85389679658d6b5bf0c4b29e6" name="libFLAC++11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="e11160d49e9f97b86e26af126133f49488ba50b330358dc2104b81c683d6381f" name="libFLAC14" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="bc587b4bb603ff41b0579066b01247bbf30d8f74a1c79635a54476e3fb40c631" name="libFLAC14" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="e8873b93271b38a6e4da1621806a340aebc996f78b5fc09508fe8f7032f28b57" name="libFLAC14-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="9e883678a764cddc8d9dec70c6e63e8227e30700be2b7af2269702dc53a30928" name="libFLAC14-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="251.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678536000">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1687521600">- Update to version 1.4.3:
  + General
  * All PowerPC-specific code has been removed, as it turned out
    those improvements didn't actually improve anything
  * Large improvements in encoder speed for all presets. The
    largest change is for the fastest presets and for 24-bit and
    32-bit inputs.
  * Small improvement in decoder speed for BMI2-capable CPUs
  * Various documentation fixes and cleanups
  * Various fixes
  * Fix building on Universal Windows Platform
  + flac
  * A lot of small fixes for bugs found by fuzzing
  * Various improvements to the --keep-foreign-metadata and
  - -keep-foreign-metadata-if-present options on decoding
    + The output format (WAV/AIFF/RF64 etc.) is now automatically
    selected based on what kind of foreign metadata is stored
    + Decoded file is checked afterwards, to see whether stored
    foreign format data agrees with FLAC audio properties
    + AIFF-C sowt data can now be restored
  * Add --force-legacy-wave-format option, to decode to WAV with
    WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more
    appropriate
  * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format
    to decode to AIFF-C
  * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer
    restricted to known channel orderings
  * Throw an error when WAV or AIFF files are over 4GiB in length
    and the --ignore-chunk-sizes option is not set
  * Warn on testing files when ID3v2 tags are found
  * Warn when data trails the audio data of a WAV/AIFF/RF64/W64
    file
  * Fix output file not being deleted after error on Windows
  * Removal of the --sector--align option
  + metaflac
  * A lot of small fixes for bugs found by fuzzing
  * Added options --append and --data-format, which makes it
    possible to copy metadata blocks from one FLAC file to another
  * Added option --remove-all-tags-except
  * Added option --show-all-tags
  + libFLAC
  * No longer write seektables to Ogg, even when specifically
    asked for. Seektables in Ogg are not defined
  * Add functions FLAC__metadata_object_set_raw and
    FLAC__metadata_object_get_raw to convert between blob and
    FLAC__StreamMetadata
  + Build system
  * Autoconf (configure): The option --enable-64-bit-words is now
    on by default
  * CMake: The option ENABLE_64_BIT_WORDS is now on by default
  + Testing/validation
  * Fuzzers were added for the flac and metaflac command line
    tools
  * Fuzzer coverage was improved
- Changed source to github link since it wasn't released in the
  xiph page.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1739275200">- Update to version 1.5.0
  General
  * Multithreaded encoding is now possible in libFLAC and through
    the flac command line tool.
  * The GFDL license file is updated to version 1.3.
  * The markdown tool documentation is now also converted to HTML,
    for bundling with systems that do not read manpages.
  * Decoding of chained Ogg FLAC files is now possible.
  * Is is now possible in libFLAC, libFLAC++ and metaflac to write
    to a new file when changing metadata, instead of needing to
    verwrite an existing file.
  flac
  * Testing mode (flac -t) now parses all metadata blocks and warns
    the user when ID3v1 metadata is detected.
  * A warning is displayed when frame numbers do not increase
    correctly throughout a file.
  * The explain option (-H or --explain) is now removed, use the
    manpage or html tool documentation instead.
  * Built-in help and tool documentation are improved.
  * When re-encoding a FLAC file from an existing FLAC file, a
    check is added that the MD5 sums of both files are the same.
  libFLAC and libFLAC++
  * The library interfaces have been extended.
    See the porting guide (part of the API documentation).
  * An error is sent when a frame is missing
  * The algorithm of the 'loose mid side' option has changed.
    Instead of checking every few frames which option is best and
    keeping that for the next few frames, a fast heuristic is now
    used. This was necessary to enable multithreading
  * Most level 0 metadata interface functions now also work with
    Ogg FLAC files.
  * When encoding Ogg FLAC files, the callback now returns a
    number of samples instead of always 0.
  * When changing metadata, libFLAC now detects when an input file
    is a symlink, and will refuse to write data to it when an
    in-place rewrite of the metadata cannot happen.
  * When encoding using seektable templates, unused seekpoints
    (with a sample number higher than the total number of samples)
    are converted to placeholders.
  Build system
  * The microbench utility has been removed.
  * Minimum CMake version required (when building with CMake) is
    now formally 3.12.
  Testing/validation
  * Improve fuzzing of allocation failures.
  * Various other fuzzing improvements.
  Documentation
  * The FLAC format is now specified in RFC 9639.
  * The foreign metadata storage format used by the flac command
    line tool is now properly documented.</changelog>
</package>
<package pkgid="ec009873e000ba862ed7e9239dafaf867be49da6cde51866888b21541e20c9fe" name="libaopsf-devel" arch="aarch64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="391ae6777e19d1de63e8080531c01e393fbcbb818dc9cafb8be34d9af51eb631" name="libaopsf-devel" arch="x86_64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="5e2b96b1fac4a1e2b0b1b903a14e606ec88e12019e612a43a73559df3ac0d99b" name="libaopsf-devel-static" arch="aarch64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="c083a78bf0335603efa9fd50b7ce5373595c2a5ebf8eee89359a8379bdd16324" name="libaopsf-devel-static" arch="x86_64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="0e636bd5665d49afb5524fab6d5a823224685242144ef48a2b1e4d794569cbd4" name="libaopsf0" arch="aarch64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="7607ceb6da9f27b97d63a455b660448183b7157e19cbe52d2ba42c7a4edf8fb5" name="libaopsf0" arch="src">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="c388b2d361e345c7f7bdb5a959f62245a9909bf925619891e98e2f320d4fd77d" name="libaopsf0" arch="x86_64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="9e3b8bc11e3aaec5124fb3a58369624a2858109b89e60b1c45f01ced389871b1" name="libaopsf0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="1325ae5a4e72efc02d62df93d7448b47cdc3773acbc77e67a2c0f559a6293433" name="libaopsf0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="01d87ef06bbe87c1ef003a3e67b8dc720e5cbf1ea37e7797cd0ddf5febb8d0ee" name="libaopsf0-debugsource" arch="aarch64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="f3bebb62352e6461253270b5121ea8fca9e769ca57df1095d27efb7a69920f75" name="libaopsf0-debugsource" arch="x86_64">
  <version epoch="0" ver="1662461091.3a3f594" rel="3.2"/>
  <changelog author="tom.mbrt@googlemail.com" date="1485172800">- initial commit</changelog>
</package>
<package pkgid="986e318b9307d9e346e9a6740b090394f06b4825c8e585fac8c7525a10693f16" name="libcue" arch="src">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="b0bd65ba80d070209ad249da4d942af862db35a14d95fb3ba67e24ecf6816c1a" name="libcue-debugsource" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="adb0fceee23352b3ca8c26212e111fbff9959349209c015224222ab38db0ad15" name="libcue-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="0ca9b6cf304274ed912acdfe54a6be0678a5f8476ce390c3864061999ca94c3e" name="libcue-devel" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="28a3b71d2017aeb6148f3ddd39664622c86faaf7f0df9037d427c4d4113f7baa" name="libcue-devel" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="4f10ccbc4ad3541f1fc6f4430a320bfbe53c390bcc2cb2ec325db79c32af47ff" name="libcue2" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="ada17c10ed89a389fc96d47b6e67e26d960bf307c8aa7e23fd9c13cf2788c2fa" name="libcue2" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="ed1f9f6f8365504326213b83a72bf98a0b8b77cb2f2a059ef808d7f06910c5ae" name="libcue2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="56066d07e29f727a59edea808fabccdbe081584b93ceea556f6b3c10dbadcc51" name="libcue2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="37.1"/>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696939200">- Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch
  [CVE-2023-43641]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697025600">- Update to release 2.3.0
  * EOF check [CVE-2023-43641]
- Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch</changelog>
</package>
<package pkgid="2fd95c0766350c883da88b3ab483a4927b6d8d1ffb4b2c68c7eebbe5c40c7ede" name="libebur128-1" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="53e45f954a7d5897420be2c799a3fc297ce460772be76dfa1621aaa8b92876a2" name="libebur128-1" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="ebb25cbf4dec2e06938ab3c1fd8b6e1334f6f5865f74f32251f1e270e74b31bb" name="libebur128-1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="8bc894f8622ff81142dd752f107f8bbdcf9f89bb4d7ad5d854ae41b8691aeb99" name="libebur128-1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="b647265202ae9d93afd98519677ee540cdee678a604e40ad6d6495b5f9c532b1" name="libebur128" arch="src">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="21cdf41fbc478b1026afa961b1476575e975e1e7737d35b23045e24a3d3756ba" name="libebur128-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="0bfb14f6b961ad1e9e764bc0cb6e225f2e60ab9166d3580dd09372563123cc8f" name="libebur128-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="e4680544c0248041f8a7a14839ed2d307cc545cd17380bffbb2934193aa4587e" name="libebur128-devel" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="5769f5c5d14b8aaf421313cc4928a9324e9e2fab7d60090a0383bb05c85b5c0f" name="libebur128-devel" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="21.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739361600">- Add baselibs.conf</changelog>
</package>
<package pkgid="ccc59cf0c1cb376cb7b56b1c72b461724f891a00ce4eec5d62639465870c0ca5" name="libfluidsynth3" arch="aarch64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="b796bc6f7f17688517a195d1ce23351501a6822d22876f860963f5f9e5cf5f78" name="libfluidsynth3" arch="x86_64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="ff666b2e3dbc62d9302075ed66f80d63da2c7069d7edb326159b6843e8229c73" name="libfluidsynth3-debuginfo" arch="aarch64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="7bcc1deebad2277c6122abc26463745a8c867e81cc84c7adc51f8b9a55f75d4d" name="libfluidsynth3-debuginfo" arch="x86_64">
  <version epoch="0" ver="1763847390.4d2550c" rel="212.3"/>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1536926400">- Update to 2.0.0:
  * for a full changelog, see https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-200
  * for API/ABI breaking changes, see http://www.fluidsynth.org/api/index.html#NewIn2_0_0
- bump soversion to 2
- require cmake &gt;= 3.1.0
- execute unit tests (make check)
- remove cmake option 'enable-ladspa' as it's now enabled by default
- add conditionals to spec file to allow builds for other RPM-based distributions</changelog>
</package>
<package pkgid="9e8a25eae21036aca16366cbdf7d997c44927d2e3feeea053780a3072774b137" name="libmad-devel" arch="aarch64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="f399d917d876106a4243259df3299cc4f57faac74e2d8317622521f2831220b6" name="libmad-devel" arch="x86_64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="2587367d96f3f40ab2206c8a3ce81a30a997a6992746b4100a82b29ef9d0b115" name="libmad0" arch="aarch64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="5b7b606ee97b221d28db56994151b9603b311c1dc54599a6e7896b7c93afd8ea" name="libmad0" arch="src">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="a42a672111dd3e39ae14dd4dd634649955d9bb3f781ac4801b14fa989fa04058" name="libmad0" arch="x86_64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="80a5c92636e8c310fb3d2a0e7e56af59b4e3b5cffd4c7a6e1ca0a0662b15feed" name="libmad0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="4719470c9ebc9cefbdea9e52af32b1334806ea0dcf3995d39fb1bb05bdf6c9c7" name="libmad0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="e0dbdbb19a80b4cebe4781473cac9c7d1344a5c9c2d9089a9ddeab351c513cab" name="libmad0-debugsource" arch="aarch64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="c81415f95cefbd898bcf17ee1bcc8d3146ce7b3397770495519ddbce4e973f15" name="libmad0-debugsource" arch="x86_64">
  <version epoch="0" ver="0.15.1b" rel="16.1"/>
  <changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
</package>
<package pkgid="42d1d669db29c438c0abd42c52a21ef8da6b90fab882c0dd3629a15a15a804b0" name="libmpg123-0" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="ce3ec904efabe7d8793fda66f8ac72ac142d96994c03edbd836b81f29961871a" name="libmpg123-0" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="93fd6f74aee7436d208a0ccd9b244bc934b220c42751667763a48db423e69b66" name="libmpg123-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="ff0973dfe4305dee886a2398a9558d350f942810ed244f72bf92039327124bcb" name="libmpg123-0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="10b2c3142ef8128f38dd5f156ad488de68adc0d1c4c1839d23e24ac7c0829555" name="libout123-0" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="5c917b121018e5827f9b94f17f80b47f2410b2a1e1858179d2f97244cc451cbe" name="libout123-0" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="758226d10939add83dbb75ea421d707471f44e7431052803d09456b3c2c07b92" name="libout123-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="bc0ceaf11e82494850e527672d32dbd82e617825f9792989170ed789fbca542d" name="libout123-0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="0c99422a8ef22d212d358ec4131f1c0056491b127cdff53a9bb7b9969cf7bfdd" name="libpsflib1" arch="aarch64">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="7ebc78085a8052380861abdc0e721302473fd5ee47c236ecc0842dcf87c0aedd" name="libpsflib1" arch="src">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="eaf50f62b4e96b8c6d5bd6db56f4a8be329a41faf20526812e7add23e4501a84" name="libpsflib1" arch="x86_64">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="546e8135452df70eabc2ec90d4b57233bb9ebad22e3a273ae7c78bdfe65fe5fc" name="libsmf" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="f4944eb5328c05c09610c482b572dc8d8f65c48a309a641914eade44f1c4e00f" name="libsmf" arch="src">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="af761e9a9ea3145407903049a105e9963094a9d038f41906cf5b3eb4cb48eee2" name="libsmf" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="4f0af3d3c1fe4ba60937cabfaa7cadf7fdb77580e8503cdd09f10a54fc42ca2d" name="libsmf-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="2631a07c47dabdadc41cb08ba5d801511f0b00f2a11df379444d2a736e1d77dd" name="libsmf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="7e2c373bab5868dcccca2c730a6644be891e6b796185c74486133e2fd5765228" name="libsmf-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="1cb44c6b8e0436836640b1432c92af0b50ab23926bd5e08438f39f52844dcece" name="libsmf-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="aa09ea222022110400fbb9651e08d52167f59fe8ac4ffedfe03a983d111a7cb0" name="libsmf-devel" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="fd2cf779bf573f513755534b2ed8d87e1ced641bcedb806bdf54e29205386e2d" name="libsmf-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="b3f5b32c24cb04c2ca931a119edc59b56deb35506302274d39ae7dcabb5aed88" name="libsmf-devel-static" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="52cae11a7a3dbdf0fef58681d3bc8d878f2851d9deb90fa7d88ab89353796c02" name="libsmf-devel-static" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="e0a634632f73b4595763565e413c1c4a5500f00d5857bb189b642dd7d44ba847" name="libsmf0" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="1e22249bb7371245fc042f9f370b22744f51e785f2f4fce8ec167a1726086acd" name="libsmf0" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="058c10b64b45a16304d79441e550f0341ab9b3d90d489f5f4ab71d465ca2b8ea" name="libsmf0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="d70ed906d2ea0ca8b66e7d2015f9d775b7f07f6f92604d4c2bb6f7535d0148e4" name="libsmf0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3" rel="24.1"/>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1651233600">- fix rpath error for fedora package</changelog>
</package>
<package pkgid="e80bfdabd5168c0fce74342582867e5402dbb3fce9eb67baa307182341b829ff" name="libsndfile" arch="src">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="9c62bcd7f514be6c9b1fb8a2f19dcc3ae7cb324ffbd93d8ef300052e67a894d0" name="libsndfile-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="6579ca75088adce68d33ed5b90ab38f6b62f6224fb07cdbb652fbeb014fb7a4f" name="libsndfile-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="2024407aff65cdc41d74ed147680f8289604d15a5a60c47f3a733f8117985629" name="libsndfile-devel" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="2b62fd5d28bde9b3e87734b6a906582d6fa6892e9cd7e9894d7256c682084947" name="libsndfile-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="a4daf30d898426589ec615076e344f8a6cbc0535d177c280a93b0572fd2114ed" name="libsndfile1" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="6cdeedfe3af49e2d016b4dbb22087674d8cfa11f947b71766e9c0c65317e34ff" name="libsndfile1" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="97130c03835ab69f24be463ba9671dec0401ef58d0460de4f8a1300bf899b572" name="libsndfile1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="0e40e89bc92b6de62d6a5145559f44601c397d0e1fb72d50e38e22082d63806b" name="libsndfile1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="154.1"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1732536000">- Fix out-of-bounds read in function vorbis_analysis_wrote in
  ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
  libsndfile-CVE-2024-50612.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1768478400">- Fix memory leak in the mpeg_l3_encoder_init() function
  (CVE-2025-56226, bsc#1256702);
  currently we don't enable MP3, hence unaffected, but just to be
  sure for further enablement:
  libsndfile-CVE-2025-56226.patch
  sndfile-convert-CVE-2025-56226.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1768564800">- No longer build with experimental flag passed to cmake, follow
  upstream default.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="6a2cc442ccb2affeb5187bb7a021e8eef9173efe1fad3fe25f5ef198bc1f7760" name="libsyn123-0" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="59cbbb57de8bc26f62d4288d549d574bd5c21adc77807b8f3da9f6750420600c" name="libsyn123-0" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="68ba441972dadc13508b1e47932adf56eb1f4245864337c36d09da2ee13b4010" name="libsyn123-0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="1f0ba4422d456fa43979207070f6303792143c645be21b33f38d0f529f7c278b" name="libsyn123-0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="20fff0f059f3f5227a088b9d408d065a12e2b6e7260ad4694093dbeaedf0f366" name="mpg123" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="d128e1557ddda79f09b4206866ae3f0a83c7d0138a343bfa74bf004a75b9c37f" name="mpg123" arch="src">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="d1e65ca56dbb8f1a817eaf687dd289f139bbbf367bb4adcb038ea0ebfdcbbad1" name="mpg123" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="b33eb1deba4a17733eeeea52ded3d0450fc45a940a64ec78974279eec279f536" name="mpg123-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="f0e603f1f131489d57cfd4401681784331f780f9f5ddd3775aee895a1172d9c5" name="mpg123-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="b5d7ebd1bd9093e5b806657fe5847a5f5c18e871194505b9295553f8c00b9d59" name="mpg123-debugsource" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="1bb02e7765c9513df8dce540ac629ec7a7348f78f23b279d8c3ebbe8df5cfe23" name="mpg123-debugsource" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="61b927860ca9fefb8b7d3df11f7067d7a713a00028509a91050c382388b1b35f" name="mpg123-devel" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="5a57d7cab08b537eab2469dcf44b048cb2c6005e74ab6a69a8f081d30c2db76c" name="mpg123-devel" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="63de1c987a68bb30fd544c6d96575059fce6b0c9006884125d28c90581f21c66" name="mpg123-jack" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="32b010f31f5b24f22934baceacab077d4010b90eaa5ec6f6415c9d4ca7bf2381" name="mpg123-jack" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="6c1b384d2dc7eadb32d7d5e5e82ead9a2414cfe44f79677377cc1c61799704dc" name="mpg123-jack-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="7c33fe09dc3ede9f30400458027ac77df11eed195e4b33add2ae4c378297bd20" name="mpg123-jack-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="558dbbf913faa1907b63e9b244e12e95ff2a083aa715a54260005eb6b8dd2ebb" name="mpg123-portaudio" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="d1525294a0f54f53620848642b05495fe8725a07dff301d5f54b0eb4982a1ecd" name="mpg123-portaudio" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="8b068b1e94646adae75b21cc93ab57d0dd29a50a804c76c4d7a89e6330bad399" name="mpg123-portaudio-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="7a4b135fb1ff107e8c33d3b3d509c465d7872465523bafb29b7a5f11518b0d79" name="mpg123-portaudio-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="0f0878874d9ab590798bd0b3927b3eca580d30e4c5c5277d2eaf771889e0e76c" name="mpg123-pulse" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="5e564e8b6be4fd21be39feed2a4fca9f83ba250cee78291fc22bb0dae40a4196" name="mpg123-pulse" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="6d45225d47c9b5a553785f0c98c6b9b05c1c2f090f801022a25e96d381e0f0b4" name="mpg123-pulse-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="8b339f9b1324a231fc17a8418a4461f343dacc52c4b1a542e3d505a6e824b5b2" name="mpg123-pulse-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="371510b34208efd102d8765b47259941b6bf3a4787168f93ba90536ab8d7c464" name="mpg123-sdl" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="bfba51ec99d3f42bfa34509878012f44a768b155a489363fb35f0f89376ef721" name="mpg123-sdl" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="1a31b03902494bd552558bf39985bffeb0c69e01483382576d84997b6903b88b" name="mpg123-sdl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="cf5ccd7b360133fd408dfcc082dbe2db5f7303b1b5893d5b82b00114bd7f07fb" name="mpg123-sdl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.7" rel="128.1"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1723032000">- Update to version 1.32.7
  * Fix some laziness (func() to func(void)) for standards
    conformance.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1729944000">- Update to version 1.32.8
  libmpg123:
  * Add sections to assembly to support PAC/BTI code for aarch64
    (-mbranch-protection variants)
  * Prevent premature application of header info into decoding
    structure, at worst having triggered out-of-bounds writes of
    decoded PCM data
  out123:
  * Show --quiet in --longhelp.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1730548800">- Update to version 1.32.9
  libmpg123:
  * Increase the library patchlevel, as was forgotten on previous
    release. Now you can check for distversion &gt;= 1.32.8 or
    mpg123 libversion &gt;= 48 patchlevel 3 to see if you're
    vulnerable to CVE-2024-10573.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1734177600">- Update to version 1.32.10
  * scripts/tag_lyrics.py: fix for python3
  * libout123: Use strtok_r() to avoid conflicts multithreaded
    contexts (both sides should avoid plain strtok()!
  * libmpg123: Un-break DLL builds that need I/O functions
    defined in libmpg123.c
  * ports/cmake: More fixup to also produce .pc files with
    Libs.private.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1741780800">- Replace pkgconfig(sdl) BuildRequires with pkgconfig(sdl2): build
  against SDL 2. This has been supported by mpg123 since v 1.26.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1749384000">- Update to version 1.33.0
  mpg123:
  * Fix printout of filenames at end (convert/limit text
    encoding).
  * Treat HTTP header encoding as unknown/ASCII and formally
    convert to UTF-8.
  * Make --continue mode work with --random.
  out123:
  * Finally give zero exit code when generating sounds, not
    indicating spurious failure.
  build:
  * Use CCASFLAGS for assembler tests, to enable builds that
    enable instruction sets that way.
  * PIC for compat libs (convenience libs used during build)
    only if building shared libs.
  compat:
  * Map strtok use to strtok_r or strtok_s (MS platforms), if
    possible. users only in control_generic and libout123 so far.
    Out123 itself uses mytok.
  * Enable build on PSP by merging in the hotfix of opmitting
    signal code.
  libmpg123:
  * API version 49 with added mpg123_open_handle64(),
    mpg123_open64(), and mpg123_open_fixed64() that are not
    subject to largefile renaming. This means you can still
    access internal I/O with MPG123_PORTABLE_API. The code has
    been there before, anyway.
  * With MPG123_PORTABLE_API, mpg123_open_handle() is hidden now
    (use mpg123_open_handle64() instead).
  * more silence on errors (sideband limit message)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1753617600">- Update to version 1.33.1
  * Finally formatted README. Maybe do it in Markdown sometime,
    as that's the fashion.
  build:
  * The ports/cmake only installs manpages for BUILD_PROGRAMS now.
  * The configure gives better hint if pkg-config was missing
    during generation
  mpg123:
  * Replace usage of signal() in terminal code with our
    sigaction() wrapper to fix repeated handling for --sigusr1
    and --sigusr2, which got subtly broken on Linux + glibc by a
    feature test macro change in mpg123 1.31.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1754481600">- Update to version 1.33.2
  libmpg123:
  * Do not modify raw ID3v2 data while parsing. This used to be
    fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1759752000">- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1766232000">- Update to version 1.33.4
  * mpg123: In terminal control, ignore 7-bit escape sequences to
    avoid spurious actions, e.g. when hitting cursor keys.
  * ports/cmake: Avoid possibly conflicting use of SIZEOF_OFF_T
    CMake variable when embedding mpg123 with other projects
    using cmake and different off_t semantics.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1777118400">- Update to version 1.33.5
  * mpg123: Fix generic control mode for largefile-sensitive
    builds, where 32 bit off_t was used with mpg123 API calls
    expecting 64 bit off_t.
  * mpg123-id3dump, out123: Enable 64 bit offset usage on
    largefile-sensitive
    platforms (regression since 1.32.0).
  * libmpg123: Announce support for shadow stack / IBT in x86-64
    assembly.
  * libmpg123: Also announce PAC/BTI for non-accurate neon64
    (aarch64) synth.
  * libout123: Add a safeguard to ensure variable-length records
    from buffer communication are always zero-terminated.
  * libsyn123: Use union work buffer to avoid casts that may
    look like breaking strict aliasing.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1780747200">- Update to version 1.33.6
  * mpg123
    + Prepare for const-returning strchr().
    + Hide seq_len debugging counter in non-debug mode.
  + Fix memory leak with --network internal due to inverted NULL
    check in net123_close_internal() (handle never NULL in
    practice, though).
  * mpg123, out123: Fix strrchr() usage to be more const and
    correct under C99 as well as C23.
  * mpg123-strip: Also use largefile API properly using
    mpg123config.h, but without actual effect at least on
    Linux/x86. It is cleaner that way, though.
  * libmpg123: Remove unused loop variable in layer2 left over
    from runtime table elimination (32 bit mmx/sse code).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1785758400">- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry &lt;n&gt; where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.</changelog>
</package>
<package pkgid="409e96f9155dc3aa8d9dd3e88d22197a29e4da4228692e4b982e34e09cf8ebd4" name="psflib-devel" arch="aarch64">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="3f2a38f0d125b2915d660e7e64cbff757246b3754ddb65ff34dbefe4635b4489" name="psflib-devel" arch="x86_64">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="e6bd9d34267057120d3cf3a66f1f879615024ee443845de6181918fe984c366d" name="psflib-devel-static" arch="aarch64">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="c4f8513b0f54bd2054f59d4336e6aed1aef8e44c09696a1233987837add40b7b" name="psflib-devel-static" arch="x86_64">
  <version epoch="0" ver="1643610688.3bea757" rel="31.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1458648000">- initial</changelog>
</package>
<package pkgid="90e6066169c9a486fccfeee890b52e79237ca61be097129061e79184ff68fe78" name="rpm-macros-extra" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="6.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt; 1.1.0-1" date="1503230400">- 1.1.0:
  + add brp-radhat script
  + add brp-radhat.d dir
  + add brp.d</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt; 1.2.0-1" date="1563105600">- 1.2.0
  + redefine %_rpmmacrosdir to %_rpmconfigdir/macros.d</changelog>
</package>
<package pkgid="a9c704d2dfbf41b89e5c66f8629c5deffc8c08b72e50fb4db68fe0443229226c" name="rpm-macros-extra" arch="src">
  <version epoch="0" ver="1.2.0" rel="6.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt; 1.1.0-1" date="1503230400">- 1.1.0:
  + add brp-radhat script
  + add brp-radhat.d dir
  + add brp.d</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt; 1.2.0-1" date="1563105600">- 1.2.0
  + redefine %_rpmmacrosdir to %_rpmconfigdir/macros.d</changelog>
</package>
<package pkgid="d7cb5ff51b37bb4be66ae86f8995deaa3639df356dff88136cfb955021529fed" name="vgmstream" arch="aarch64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="46a9b78080f6b6c427403b2d31b45c90ae570c497c6550297bb51dda579b673f" name="vgmstream" arch="src">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="c16d510feba2a8c08b93c7ddfb6803cccd91707752188ac8b48909b153f99147" name="vgmstream" arch="x86_64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="a575176bb6eba41215d654cd43d32df16e0909b7e0a3ed600c9cff8b58e4c741" name="vgmstream-debuginfo" arch="aarch64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="e275e92108bee0c0017b6f9312345ae1448ae1c92423bed4fc3d203a11f01e53" name="vgmstream-debuginfo" arch="x86_64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="a8135bdde07bd5f1686711e2343e8df077c6e58422f62813d84dce73e872e952" name="vgmstream-debugsource" arch="aarch64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="798c810ed74b6e0b9b5bc26a4f8944ed16c581f310cec51069ceb3030e2cb5e3" name="vgmstream-debugsource" arch="x86_64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="475c8c31b08d52d3ebf90b98481430d7a3b5448fe17df244ae7fe107a32391d1" name="vgmstream-devel" arch="aarch64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
<package pkgid="687efe84a61c194133e336fac5912b1c89c4e8e88e87656207d74e717d7b4c21" name="vgmstream-devel" arch="x86_64">
  <version epoch="0" ver="1765385099.e6aaa5b" rel="167.8"/>
</package>
</otherdata>