<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="14">
<package pkgid="0c441ab003c24651e544001d2a03acfabd80b4151f55a5fd6952b4bf5de51560db46566764a4df317cd0ccefd0257633717457670a71e7bb5f2a88fff4143f78" name="cni-plugins" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="20.30"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version v1.3.0:
  * [sbr]: Ignore LinkNotFoundError during cmdDel
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9
  * Bump to golang 1.20 to pick up go1.19.6 / go1.20.1 CVE fixes
  * Fix ValidateExpectedRoute with non default routes and nil GW
  * tuning: fix cmdCheck when using IFNAME
  * bridge, del: timeout after 55 secs of trying to list rules
  * bridge, spoofcheck: only read the prerouting chain on CNI delete
  * build: consume specific tables/chains via go-nft
  * bridge: add vlan trunk support
  * enable govet and unparam linters
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * Add parameter to disable default vlan
  * bridge, spoof check: remove drop rule index
  * go.mod: bump all deps
  * linter: fix ginkgolinter errors
  * Fix wastedassign linter errors
  * build(deps): bump actions/stale from 7 to 8
  * Fix revive linter errors
  * build(deps): bump actions/setup-go from 3 to 4
  * enable durationcheck,  predeclared, unconvert, unused and wastedassign linters
  * remove govet and gofmt from test_linux.sh
  * enable ginkgolinter linter
  * enable revive linter
  * enable gocritic linter
  * enable gosimple linter
  * enable  nonamedreturns linter
  * enable ineffassign linter
  * enable contextcheck linter
  * enable staticcheck linter
  * ci(lint): setup golangci-lint
  * ci(lint): setup yamllint linter Signed-off-by: Matthieu MOREL &lt;matthieu.morel35@gmail.com&gt;
  * Fix overwritten error var in getMTUByName
  * Update tests to utilize ginkgo/v2
  * Update ginkgo to v2 in go.mod, go.sum, vendor
  * Tap plugin
  * build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.26.0
  * build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
  * Only check ipv6 when an IPv6 is configured
  * Add support for in-container master for macvlans
  * Add support for in-container master for ipvlan
  * Add support for in-container master for vlans
  * bridge: re-fetch mac address
  * Update Allocate method to reuse lease if present
  * build(deps): bump github.com/safchain/ethtool to v0.2.0
  * build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0
  * Add IPv6 support for AddDefaultRoute
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.2
  * build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.5.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * build(deps): bump alpine in /.github/actions/retest-action
  * build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.1.0
  * build(deps): bump github.com/vishvananda/netlink
  * build(deps): bump github.com/alexflint/go-filemutex from 1.1.0 to 1.2.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.8.20 to 0.9.6
  * build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.24.2
  * Update dependabot.yml
  * build(deps): bump actions/checkout from 2 to 3
  * build(deps): bump actions/stale from 4 to 7
  * build(deps): bump actions/setup-go from 2 to 3
  * Update dependabot.yml
  * Update dependabot.yml
  * ci(deps): setup dependabot
  * Fix tuning path validation
  * Update email to gmail
  * Update portmap test's iptables error check
  * Remove references to io/ioutil package
  * fix bug on getting NextIP of addresses with first byte 0
  * Fix path substitution to enable setting sysctls on vlan interfaces
  * support masquerade all config
  * host-local: remove unused Release(ip) from type Store interface
  * Cleanup Socket and Pidfile on exit
  * dummy: Create a Dummy CNI plugin that creates a virtual interface.
  * Use the same options for acquiring, renewing lease
  * bridge: update vlanFiltering variable to make code more readable
  * ci: only rerun failed jobs on `/retest`
  * build: support riscv64
  * Check for duplicated sysctl keys
  * Update github.com/vishvananda/netlink to v1.2.0-beta
  * bridge: support IPAM DNS settings
  * Bump to go 1.18
  * V2 API support for win-overlay CNI
  * bug: return errors when iptables and ip6tables are unusable
  * github: ignore issues with "keep" label from stale closing
  * Make description for `static` plugin more exact
  * workflow: add something to auto-close stale PRs
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * Add sysctl allowlist</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1696852800">- Bump BuildRequired golang version to &gt;= 1.21, fixes bsc#1216006</changelog>
  <changelog author="dcermak@suse.com" date="1709726400">- Update to version 1.4.0:
  * build(deps): bump the golang group with 2 updates
  * Bump to golang:1.21-alpine in release.sh
  * Add CNI_NETNS_OVERRIDE for upcoming CNI change
  * build(deps): bump the golang group with 3 updates
  * revert some code in pr 962
  * bridge: fix spelling
  * bridge: remove useless firstV4Addr
  * bridge: remove useless check
  * Add ndisc_notify in ipvlan for ipv6 ndp
  * macvlan: enable ipv6 ndisc_notify
  * build(deps): bump google.golang.org/grpc from 1.50.1 to 1.56.3
  * build(deps): bump the golang group with 3 updates
  * dependabot: batch updates
  * fix workflow warnings
  * fix lint errors
  * macvlan cmdDel: replace the loadConf function with json.unmarshal
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.28.0
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.11.1
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.13.0
  * Create IPAM files with 0600 permissions
  * build: Use POSIX sh for shell scripts
  * build(deps): bump actions/checkout from 3 to 4
  * ci(lint) extend timeout to 5 min
  * build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
  * vrf: fix route filter to use output iface
  * test_linux.sh: Do not fail if called twice
  * meta: firewall: Fix firewalld test with non-abstract sockets
  * plugins: meta: portmap: Implement a teardown() fast path
  * utils: iptables: Use go-iptables' ChainExists()
  * spoofcheck: Make use of go-nft's ApplyConfigEcho()
  * test: install binaries using `go install`
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * [tuning]add ability to set tx queue len
  * build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.11.0
  * build(deps): bump golang.org/x/sys from 0.7.0 to 0.9.0
  * Fix race conditions in DHCP test
  * Add routes propagation for VRF plugin
  * github: remove stale issue cleanup
  * tap: allow for a tap device to be created as a bridge port
  * build(deps): bump alpine in /.github/actions/retest-action</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718625600">- Update to version 1.5.1:
  * Support DeviceID on Auxiliary Bus
  * Dev/exclude subnets from traffic shaping
  * Use temporary name for netdevice when moving in/out of NS
- Update to version 1.5.0:
  New Features:
  * Support DeviceID on Auxiliary Bus by @adrianchiris in #1003
  * Dev/exclude subnets from traffic shaping by @oOraph in #921
  Fixes:
  * Fix release script in github action by @s1061123 in #1037.
  * Use temporary name for netdevice when moving in/out of NS by @adrianchiris in #1002</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1729598400">- Update to version 1.6.0:
  * Pass status along ipam update
  * feat(dhcp): Cancel backoff retry on stop
  * fix(dhcp): can not renew an ip address
  * build(deps): bump golang.org/x/sys in the golang group
  * VRF: Wait for the local/host routes to be added
  * add problem hint
  * make test working again
  * Revert "Merge pull request #921 from oOraph/dev/exclude_subnets_from_traffic_shapping2"
  * resolve merge conflicts
  * build(deps): bump the golang group across 1 directory with 2 updates
  * host-device: use temp network namespace for rename
  * Fix txqueuelen being accidentally set to zero
  * Ignore link-local routes in SBR tests
  * build(deps): bump the golang group with 3 updates
  * ci, go.mod: bump to go 1.23 (#1094)
  * dhcp: Add priority option to dhcp.
  * .github: add check to verify vendor directory
  * Add nftables backend to portmap
  * Fix portmap unit tests
  * Add a backend abstraction to the portmap plugin
  * Add nftables implementation of ipmasq
  * Vendor nftables library, add utils.SupportsIPTables and utils.SupportsNFTables
  * Use of Scope for routes in IPAM
  * SBR: option to pass the table id (#1088)
  * Update containernetworking/cni to v1.2.3 for GC
  * Update go-iptables
  * macvlan: add bcqueuelen setting
  * build(deps): bump the golang group across 1 directory with 4 updates
  * build: update github.com/vishvananda/netlink to 1.3.0
  * Fix unnecessary retrying when the link is down in dhcp.
  * test: bump go version
  * .github: fix double-triggering CI
  * Change chown to change current dir as well
  * build(deps): bump the golang group with 2 updates</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1729598401">- Require iptables (bsc#1231424)
  * Add cni-iptables.conf to load required kernel modules</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1737979200">- Update to version 1.6.2:
  * portmap: fix iptables conditions detection
  * build(deps): bump the golang group across 1 directory with 7 updates
  * ipmasq: fix nftables backend
  * portmap: fix nftables backend</changelog>
</package>
<package pkgid="5af725c295983617092694fb3b1970afb1b21e06b4c8ff8510bfdec33e3bb376e6b183318d1d203479fc289a1c56ba71ab7a49c263597b1111fec82ab0f40081" name="cni-plugins" arch="src">
  <version epoch="0" ver="1.6.2" rel="20.30"/>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version v1.3.0:
  * [sbr]: Ignore LinkNotFoundError during cmdDel
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9
  * Bump to golang 1.20 to pick up go1.19.6 / go1.20.1 CVE fixes
  * Fix ValidateExpectedRoute with non default routes and nil GW
  * tuning: fix cmdCheck when using IFNAME
  * bridge, del: timeout after 55 secs of trying to list rules
  * bridge, spoofcheck: only read the prerouting chain on CNI delete
  * build: consume specific tables/chains via go-nft
  * bridge: add vlan trunk support
  * enable govet and unparam linters
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * Add parameter to disable default vlan
  * bridge, spoof check: remove drop rule index
  * go.mod: bump all deps
  * linter: fix ginkgolinter errors
  * Fix wastedassign linter errors
  * build(deps): bump actions/stale from 7 to 8
  * Fix revive linter errors
  * build(deps): bump actions/setup-go from 3 to 4
  * enable durationcheck,  predeclared, unconvert, unused and wastedassign linters
  * remove govet and gofmt from test_linux.sh
  * enable ginkgolinter linter
  * enable revive linter
  * enable gocritic linter
  * enable gosimple linter
  * enable  nonamedreturns linter
  * enable ineffassign linter
  * enable contextcheck linter
  * enable staticcheck linter
  * ci(lint): setup golangci-lint
  * ci(lint): setup yamllint linter Signed-off-by: Matthieu MOREL &lt;matthieu.morel35@gmail.com&gt;
  * Fix overwritten error var in getMTUByName
  * Update tests to utilize ginkgo/v2
  * Update ginkgo to v2 in go.mod, go.sum, vendor
  * Tap plugin
  * build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.26.0
  * build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
  * Only check ipv6 when an IPv6 is configured
  * Add support for in-container master for macvlans
  * Add support for in-container master for ipvlan
  * Add support for in-container master for vlans
  * bridge: re-fetch mac address
  * Update Allocate method to reuse lease if present
  * build(deps): bump github.com/safchain/ethtool to v0.2.0
  * build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0
  * Add IPv6 support for AddDefaultRoute
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.2
  * build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.5.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * build(deps): bump alpine in /.github/actions/retest-action
  * build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.1.0
  * build(deps): bump github.com/vishvananda/netlink
  * build(deps): bump github.com/alexflint/go-filemutex from 1.1.0 to 1.2.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.8.20 to 0.9.6
  * build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.24.2
  * Update dependabot.yml
  * build(deps): bump actions/checkout from 2 to 3
  * build(deps): bump actions/stale from 4 to 7
  * build(deps): bump actions/setup-go from 2 to 3
  * Update dependabot.yml
  * Update dependabot.yml
  * ci(deps): setup dependabot
  * Fix tuning path validation
  * Update email to gmail
  * Update portmap test's iptables error check
  * Remove references to io/ioutil package
  * fix bug on getting NextIP of addresses with first byte 0
  * Fix path substitution to enable setting sysctls on vlan interfaces
  * support masquerade all config
  * host-local: remove unused Release(ip) from type Store interface
  * Cleanup Socket and Pidfile on exit
  * dummy: Create a Dummy CNI plugin that creates a virtual interface.
  * Use the same options for acquiring, renewing lease
  * bridge: update vlanFiltering variable to make code more readable
  * ci: only rerun failed jobs on `/retest`
  * build: support riscv64
  * Check for duplicated sysctl keys
  * Update github.com/vishvananda/netlink to v1.2.0-beta
  * bridge: support IPAM DNS settings
  * Bump to go 1.18
  * V2 API support for win-overlay CNI
  * bug: return errors when iptables and ip6tables are unusable
  * github: ignore issues with "keep" label from stale closing
  * Make description for `static` plugin more exact
  * workflow: add something to auto-close stale PRs
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * Add sysctl allowlist</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1696852800">- Bump BuildRequired golang version to &gt;= 1.21, fixes bsc#1216006</changelog>
  <changelog author="dcermak@suse.com" date="1709726400">- Update to version 1.4.0:
  * build(deps): bump the golang group with 2 updates
  * Bump to golang:1.21-alpine in release.sh
  * Add CNI_NETNS_OVERRIDE for upcoming CNI change
  * build(deps): bump the golang group with 3 updates
  * revert some code in pr 962
  * bridge: fix spelling
  * bridge: remove useless firstV4Addr
  * bridge: remove useless check
  * Add ndisc_notify in ipvlan for ipv6 ndp
  * macvlan: enable ipv6 ndisc_notify
  * build(deps): bump google.golang.org/grpc from 1.50.1 to 1.56.3
  * build(deps): bump the golang group with 3 updates
  * dependabot: batch updates
  * fix workflow warnings
  * fix lint errors
  * macvlan cmdDel: replace the loadConf function with json.unmarshal
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.28.0
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.11.1
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.13.0
  * Create IPAM files with 0600 permissions
  * build: Use POSIX sh for shell scripts
  * build(deps): bump actions/checkout from 3 to 4
  * ci(lint) extend timeout to 5 min
  * build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
  * vrf: fix route filter to use output iface
  * test_linux.sh: Do not fail if called twice
  * meta: firewall: Fix firewalld test with non-abstract sockets
  * plugins: meta: portmap: Implement a teardown() fast path
  * utils: iptables: Use go-iptables' ChainExists()
  * spoofcheck: Make use of go-nft's ApplyConfigEcho()
  * test: install binaries using `go install`
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * [tuning]add ability to set tx queue len
  * build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.11.0
  * build(deps): bump golang.org/x/sys from 0.7.0 to 0.9.0
  * Fix race conditions in DHCP test
  * Add routes propagation for VRF plugin
  * github: remove stale issue cleanup
  * tap: allow for a tap device to be created as a bridge port
  * build(deps): bump alpine in /.github/actions/retest-action</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718625600">- Update to version 1.5.1:
  * Support DeviceID on Auxiliary Bus
  * Dev/exclude subnets from traffic shaping
  * Use temporary name for netdevice when moving in/out of NS
- Update to version 1.5.0:
  New Features:
  * Support DeviceID on Auxiliary Bus by @adrianchiris in #1003
  * Dev/exclude subnets from traffic shaping by @oOraph in #921
  Fixes:
  * Fix release script in github action by @s1061123 in #1037.
  * Use temporary name for netdevice when moving in/out of NS by @adrianchiris in #1002</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1729598400">- Update to version 1.6.0:
  * Pass status along ipam update
  * feat(dhcp): Cancel backoff retry on stop
  * fix(dhcp): can not renew an ip address
  * build(deps): bump golang.org/x/sys in the golang group
  * VRF: Wait for the local/host routes to be added
  * add problem hint
  * make test working again
  * Revert "Merge pull request #921 from oOraph/dev/exclude_subnets_from_traffic_shapping2"
  * resolve merge conflicts
  * build(deps): bump the golang group across 1 directory with 2 updates
  * host-device: use temp network namespace for rename
  * Fix txqueuelen being accidentally set to zero
  * Ignore link-local routes in SBR tests
  * build(deps): bump the golang group with 3 updates
  * ci, go.mod: bump to go 1.23 (#1094)
  * dhcp: Add priority option to dhcp.
  * .github: add check to verify vendor directory
  * Add nftables backend to portmap
  * Fix portmap unit tests
  * Add a backend abstraction to the portmap plugin
  * Add nftables implementation of ipmasq
  * Vendor nftables library, add utils.SupportsIPTables and utils.SupportsNFTables
  * Use of Scope for routes in IPAM
  * SBR: option to pass the table id (#1088)
  * Update containernetworking/cni to v1.2.3 for GC
  * Update go-iptables
  * macvlan: add bcqueuelen setting
  * build(deps): bump the golang group across 1 directory with 4 updates
  * build: update github.com/vishvananda/netlink to 1.3.0
  * Fix unnecessary retrying when the link is down in dhcp.
  * test: bump go version
  * .github: fix double-triggering CI
  * Change chown to change current dir as well
  * build(deps): bump the golang group with 2 updates</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1729598401">- Require iptables (bsc#1231424)
  * Add cni-iptables.conf to load required kernel modules</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1737979200">- Update to version 1.6.2:
  * portmap: fix iptables conditions detection
  * build(deps): bump the golang group across 1 directory with 7 updates
  * ipmasq: fix nftables backend
  * portmap: fix nftables backend</changelog>
</package>
<package pkgid="18f2ae7fc71bf93301b193a0b86e71707f706e022ec37d66a8e053729bea024d11ad06204e7b77a0e2ec3bb552295903a724f1d5be0fce2dbcece6960b8bdbe7" name="cni-plugins-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="20.30"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version v1.3.0:
  * [sbr]: Ignore LinkNotFoundError during cmdDel
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9
  * Bump to golang 1.20 to pick up go1.19.6 / go1.20.1 CVE fixes
  * Fix ValidateExpectedRoute with non default routes and nil GW
  * tuning: fix cmdCheck when using IFNAME
  * bridge, del: timeout after 55 secs of trying to list rules
  * bridge, spoofcheck: only read the prerouting chain on CNI delete
  * build: consume specific tables/chains via go-nft
  * bridge: add vlan trunk support
  * enable govet and unparam linters
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * Add parameter to disable default vlan
  * bridge, spoof check: remove drop rule index
  * go.mod: bump all deps
  * linter: fix ginkgolinter errors
  * Fix wastedassign linter errors
  * build(deps): bump actions/stale from 7 to 8
  * Fix revive linter errors
  * build(deps): bump actions/setup-go from 3 to 4
  * enable durationcheck,  predeclared, unconvert, unused and wastedassign linters
  * remove govet and gofmt from test_linux.sh
  * enable ginkgolinter linter
  * enable revive linter
  * enable gocritic linter
  * enable gosimple linter
  * enable  nonamedreturns linter
  * enable ineffassign linter
  * enable contextcheck linter
  * enable staticcheck linter
  * ci(lint): setup golangci-lint
  * ci(lint): setup yamllint linter Signed-off-by: Matthieu MOREL &lt;matthieu.morel35@gmail.com&gt;
  * Fix overwritten error var in getMTUByName
  * Update tests to utilize ginkgo/v2
  * Update ginkgo to v2 in go.mod, go.sum, vendor
  * Tap plugin
  * build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.26.0
  * build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
  * Only check ipv6 when an IPv6 is configured
  * Add support for in-container master for macvlans
  * Add support for in-container master for ipvlan
  * Add support for in-container master for vlans
  * bridge: re-fetch mac address
  * Update Allocate method to reuse lease if present
  * build(deps): bump github.com/safchain/ethtool to v0.2.0
  * build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0
  * Add IPv6 support for AddDefaultRoute
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.2
  * build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.5.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * build(deps): bump alpine in /.github/actions/retest-action
  * build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.1.0
  * build(deps): bump github.com/vishvananda/netlink
  * build(deps): bump github.com/alexflint/go-filemutex from 1.1.0 to 1.2.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.8.20 to 0.9.6
  * build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.24.2
  * Update dependabot.yml
  * build(deps): bump actions/checkout from 2 to 3
  * build(deps): bump actions/stale from 4 to 7
  * build(deps): bump actions/setup-go from 2 to 3
  * Update dependabot.yml
  * Update dependabot.yml
  * ci(deps): setup dependabot
  * Fix tuning path validation
  * Update email to gmail
  * Update portmap test's iptables error check
  * Remove references to io/ioutil package
  * fix bug on getting NextIP of addresses with first byte 0
  * Fix path substitution to enable setting sysctls on vlan interfaces
  * support masquerade all config
  * host-local: remove unused Release(ip) from type Store interface
  * Cleanup Socket and Pidfile on exit
  * dummy: Create a Dummy CNI plugin that creates a virtual interface.
  * Use the same options for acquiring, renewing lease
  * bridge: update vlanFiltering variable to make code more readable
  * ci: only rerun failed jobs on `/retest`
  * build: support riscv64
  * Check for duplicated sysctl keys
  * Update github.com/vishvananda/netlink to v1.2.0-beta
  * bridge: support IPAM DNS settings
  * Bump to go 1.18
  * V2 API support for win-overlay CNI
  * bug: return errors when iptables and ip6tables are unusable
  * github: ignore issues with "keep" label from stale closing
  * Make description for `static` plugin more exact
  * workflow: add something to auto-close stale PRs
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * Add sysctl allowlist</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1696852800">- Bump BuildRequired golang version to &gt;= 1.21, fixes bsc#1216006</changelog>
  <changelog author="dcermak@suse.com" date="1709726400">- Update to version 1.4.0:
  * build(deps): bump the golang group with 2 updates
  * Bump to golang:1.21-alpine in release.sh
  * Add CNI_NETNS_OVERRIDE for upcoming CNI change
  * build(deps): bump the golang group with 3 updates
  * revert some code in pr 962
  * bridge: fix spelling
  * bridge: remove useless firstV4Addr
  * bridge: remove useless check
  * Add ndisc_notify in ipvlan for ipv6 ndp
  * macvlan: enable ipv6 ndisc_notify
  * build(deps): bump google.golang.org/grpc from 1.50.1 to 1.56.3
  * build(deps): bump the golang group with 3 updates
  * dependabot: batch updates
  * fix workflow warnings
  * fix lint errors
  * macvlan cmdDel: replace the loadConf function with json.unmarshal
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.28.0
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0
  * build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.11.1
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.13.0
  * Create IPAM files with 0600 permissions
  * build: Use POSIX sh for shell scripts
  * build(deps): bump actions/checkout from 3 to 4
  * ci(lint) extend timeout to 5 min
  * build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
  * vrf: fix route filter to use output iface
  * test_linux.sh: Do not fail if called twice
  * meta: firewall: Fix firewalld test with non-abstract sockets
  * plugins: meta: portmap: Implement a teardown() fast path
  * utils: iptables: Use go-iptables' ChainExists()
  * spoofcheck: Make use of go-nft's ApplyConfigEcho()
  * test: install binaries using `go install`
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * [tuning]add ability to set tx queue len
  * build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.11.0
  * build(deps): bump golang.org/x/sys from 0.7.0 to 0.9.0
  * Fix race conditions in DHCP test
  * Add routes propagation for VRF plugin
  * github: remove stale issue cleanup
  * tap: allow for a tap device to be created as a bridge port
  * build(deps): bump alpine in /.github/actions/retest-action</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718625600">- Update to version 1.5.1:
  * Support DeviceID on Auxiliary Bus
  * Dev/exclude subnets from traffic shaping
  * Use temporary name for netdevice when moving in/out of NS
- Update to version 1.5.0:
  New Features:
  * Support DeviceID on Auxiliary Bus by @adrianchiris in #1003
  * Dev/exclude subnets from traffic shaping by @oOraph in #921
  Fixes:
  * Fix release script in github action by @s1061123 in #1037.
  * Use temporary name for netdevice when moving in/out of NS by @adrianchiris in #1002</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1729598400">- Update to version 1.6.0:
  * Pass status along ipam update
  * feat(dhcp): Cancel backoff retry on stop
  * fix(dhcp): can not renew an ip address
  * build(deps): bump golang.org/x/sys in the golang group
  * VRF: Wait for the local/host routes to be added
  * add problem hint
  * make test working again
  * Revert "Merge pull request #921 from oOraph/dev/exclude_subnets_from_traffic_shapping2"
  * resolve merge conflicts
  * build(deps): bump the golang group across 1 directory with 2 updates
  * host-device: use temp network namespace for rename
  * Fix txqueuelen being accidentally set to zero
  * Ignore link-local routes in SBR tests
  * build(deps): bump the golang group with 3 updates
  * ci, go.mod: bump to go 1.23 (#1094)
  * dhcp: Add priority option to dhcp.
  * .github: add check to verify vendor directory
  * Add nftables backend to portmap
  * Fix portmap unit tests
  * Add a backend abstraction to the portmap plugin
  * Add nftables implementation of ipmasq
  * Vendor nftables library, add utils.SupportsIPTables and utils.SupportsNFTables
  * Use of Scope for routes in IPAM
  * SBR: option to pass the table id (#1088)
  * Update containernetworking/cni to v1.2.3 for GC
  * Update go-iptables
  * macvlan: add bcqueuelen setting
  * build(deps): bump the golang group across 1 directory with 4 updates
  * build: update github.com/vishvananda/netlink to 1.3.0
  * Fix unnecessary retrying when the link is down in dhcp.
  * test: bump go version
  * .github: fix double-triggering CI
  * Change chown to change current dir as well
  * build(deps): bump the golang group with 2 updates</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1729598401">- Require iptables (bsc#1231424)
  * Add cni-iptables.conf to load required kernel modules</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1737979200">- Update to version 1.6.2:
  * portmap: fix iptables conditions detection
  * build(deps): bump the golang group across 1 directory with 7 updates
  * ipmasq: fix nftables backend
  * portmap: fix nftables backend</changelog>
</package>
<package pkgid="bc30a64664e7c501d90d9453044155b23e4b6c1fd99c1bfd797e01b5e74e8257fef561dd6232924cbdd34be2c8dad148cf351520e31670295fc8775a0eb09bc6" name="golang-github-containers-common" arch="noarch">
  <version epoch="0" ver="0.61.0" rel="4.7"/>
</package>
<package pkgid="2dd4d5289bac02a2c3608ee048758170eddc120e77901fc36968f7b7f7c1522b6753f6e227780f6feba4aedf76df8e03c997412e49fde287d8e32e40a69d7b4f" name="golang-github-containers-common" arch="src">
  <version epoch="0" ver="0.61.0" rel="4.7"/>
</package>
<package pkgid="32c5c4ffd02c375a80b263bc7edcc048f3813a52cc16bc845396af802f5d38a68890ab38581f70f22755b52e7d56b2a2d5e0e35ffdc53b5b9afd763a9204d1f0" name="golang-packaging" arch="noarch">
  <version epoch="0" ver="1709890831.4ba1f49" rel="94.7"/>
  <changelog author="jkowalczyk@suse.com" date="1605268800">- Update to version 15.0.15:
  * Only create directories that do not yet exist
  * filelelist can try to access source_dir independently</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1642593600">- Fixed if statement in spec file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1643716800">- Replace %doc COPYING conditional for 0%{?suse_version} &lt; 1500.
  Use only %license COPYING as per rpmlint, with no conditional.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643716801">- Update to version 15.0.16:
  * Update CHANGELOG file
  * Don't throw an error on prep if  does not exist.
  * Enable -buildmode=pie on riscv64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1644926400">- Move rpm macros from /etc/rpm to /usr/lib/rpm/macros.d
  (boo#1191383).</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1645099200">- Define _rpmmacrodir if not present for SLE-12 compatibility
  Refs boo#1191383
  * _rpmmacrodir /usr/lib/rpm/macros.d added in rpm-4.14.0
  * SLE-12 SP5 has rpm-4.11.2
  * Define _rpmmacrodir in previous location /etc/rpm if undefined
  * Remove define when all supported versions have &gt;=rpm-4.14.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- Update to version 15.0.17 (jsc#PED-1344):
  * Add *.proto to the list of src files (Fixes #40)</changelog>
  <changelog author="dcermak@suse.com" date="1709812800">- Update to version 1709808029.c92c996:
  * WIP: golang bundled provides
  * Update CHANGELOG
  * Add *.proto to the list of src files (Fixes #40)
  * Update CHANGELOG file
  * Don't throw an error on prep if  does not exist.
  * Enable -buildmode=pie on riscv64
  * Only create directories that do not yet exist
  * filelelist can try to access source_dir independently</changelog>
  <changelog author="dcermak@suse.com" date="1709812801">- Update to version 1709809483.e1d0f52:
  * use path</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Update to version 1709890831.4ba1f49:
  * Switch to magic &amp; set exeonly flag</changelog>
</package>
<package pkgid="4f06ae7ca7f1c0c0a874483b0f1fdfbedb8a946c0c4fd3c425cc59195cf7693f16f1aa7a7e76c7615bfbc8ea7d2b982165786d8e96518332bc436465ba69dd52" name="golang-packaging" arch="src">
  <version epoch="0" ver="1709890831.4ba1f49" rel="94.7"/>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1573905600">- Update to version 15.0.12:
  * Drop ppc64-nopie.patch
  * golang.sh: integrate ppc64-nopie.patch -buildmode=pie only on ppc64
  * golang.sh: avoid excessive "rpm --eval..." calls
  * Install Bazel files in src directory
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency
  * Remove s build flag no longer supported in go 1.10 boo#776058
  * Packaging: improve _service tar_scm declarations add _servicedata</changelog>
  <changelog author="jkowalczyk@suse.com" date="1590753600">- Update to version 15.0.13:
  * Preserve modification time of source files
- Mark COPYING as %license on suse_version &gt; 1500</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605096000">- Update to version 15.0.14:
  * Ensure to touch $RPM_BUILD_ROOT only in the various install phases
  * Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605268800">- Update to version 15.0.15:
  * Only create directories that do not yet exist
  * filelelist can try to access source_dir independently</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1642593600">- Fixed if statement in spec file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1643716800">- Replace %doc COPYING conditional for 0%{?suse_version} &lt; 1500.
  Use only %license COPYING as per rpmlint, with no conditional.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643716801">- Update to version 15.0.16:
  * Update CHANGELOG file
  * Don't throw an error on prep if  does not exist.
  * Enable -buildmode=pie on riscv64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1644926400">- Move rpm macros from /etc/rpm to /usr/lib/rpm/macros.d
  (boo#1191383).</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1645099200">- Define _rpmmacrodir if not present for SLE-12 compatibility
  Refs boo#1191383
  * _rpmmacrodir /usr/lib/rpm/macros.d added in rpm-4.14.0
  * SLE-12 SP5 has rpm-4.11.2
  * Define _rpmmacrodir in previous location /etc/rpm if undefined
  * Remove define when all supported versions have &gt;=rpm-4.14.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- Update to version 15.0.17 (jsc#PED-1344):
  * Add *.proto to the list of src files (Fixes #40)</changelog>
  <changelog author="dcermak@suse.com" date="1709812800">- Update to version 1709808029.c92c996:
  * WIP: golang bundled provides
  * Update CHANGELOG
  * Add *.proto to the list of src files (Fixes #40)
  * Update CHANGELOG file
  * Don't throw an error on prep if  does not exist.
  * Enable -buildmode=pie on riscv64
  * Only create directories that do not yet exist
  * filelelist can try to access source_dir independently</changelog>
  <changelog author="dcermak@suse.com" date="1709812801">- Update to version 1709809483.e1d0f52:
  * use path</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Update to version 1709890831.4ba1f49:
  * Switch to magic &amp; set exeonly flag</changelog>
</package>
<package pkgid="5e1974cdd65ad1743c9529b9e7a745278c30a20a7905f707fe1def15541cb3c96cc980a5617dcbc8bfa912d1aac124d62260dec2b83c48a556d35116637269cb" name="runc" arch="ppc64le">
  <version epoch="0" ver="1.4.1" rel="203.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1720785600">- Update to runc v1.2.0~rc2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.2&gt;.
- Re-allow Go 1.22 builds for &gt;= 1.22.4.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1721649600">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.13. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.13&gt;.
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
- Backport &lt;https://github.com/opencontainers/runc/pull/3931&gt; to fix a
  performance issue when running lots of containers, caused by systemd getting
  too many mount notifications. bsc#1214960
  + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
</package>
<package pkgid="dc5c310326bb7673b95b7d740b68a31a44ac40c0605e57019bd9053a40510cb7998d4447c3f64b873c7e0b7a5a1242f870707aabfa9630b7074ddf63e82533cc" name="runc" arch="src">
  <version epoch="0" ver="1.4.1" rel="203.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1720785600">- Update to runc v1.2.0~rc2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.2&gt;.
- Re-allow Go 1.22 builds for &gt;= 1.22.4.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1721649600">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.13. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.13&gt;.
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
- Backport &lt;https://github.com/opencontainers/runc/pull/3931&gt; to fix a
  performance issue when running lots of containers, caused by systemd getting
  too many mount notifications. bsc#1214960
  + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
</package>
<package pkgid="7a686c89dc1c8e25d22b531eeb9e808f528af1590bfacd49fb2a00f2d4eb8aa95678192ef96d5445f9422cdf478cb345555d5213242bb1d37d963db2c32a7f35" name="runc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.1" rel="203.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1720785600">- Update to runc v1.2.0~rc2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.2&gt;.
- Re-allow Go 1.22 builds for &gt;= 1.22.4.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1721649600">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.13. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.13&gt;.
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
- Backport &lt;https://github.com/opencontainers/runc/pull/3931&gt; to fix a
  performance issue when running lots of containers, caused by systemd getting
  too many mount notifications. bsc#1214960
  + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
</package>
<package pkgid="8cfb476c644db9dff9dba96b172e7ba0a9fb32aa0843acfb9b95b35c085b4da1150c43ade8bfe77367fcc3974ba0dba110eb76db2cec7098b9e448a452e8b3d6" name="slirp4netns" arch="ppc64le">
  <version epoch="0" ver="1.3.3" rel="19.9"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692619200">- Update to version 1.2.1:
  * sandbox: Add support for escaping resolv.conf symlinks (#318)
  * parson: update to v1.5.2 (#320)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.2.2
  * Enabled reproducible builds (#324, #325, #326)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1707307200">- New upstream release 1.2.3:
  * Fix some FD leaks (#334, thanks to @giuseppe)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1714132800">- New upstream release 1.3.0
  * Support new `--netns-type=tapfd` (#340, thanks to @helmutg)
  * Do not leak socket in case of success (#339, thanks to @jnovy)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1715688000">- New upstream release 1.3.1, no relevant source change</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to v1.13.2
  * Support libslirp v4.9.0 (#351)</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1748952000">- Update to 1.3.3
  * The official statically-linked binaries are updated to be linked with the new version of libslirp: v4.9.0 -&gt; v4.9.1 (#357)
  * Enabled GitHub Actions Attestations (#355, thanks to @takumin)</changelog>
</package>
<package pkgid="68e2689b143fc3f36d9be3d10a82ae0d7aed8fdf1140c3ddbbcb710acc5fb976f3857e303c86cf4e97d55a181de81f86513f2435ff9ee0a36c0498685d38d8be" name="slirp4netns" arch="src">
  <version epoch="0" ver="1.3.3" rel="19.9"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553860800">- Update to 0.3.0
  * QMP-like JSON API for exposing node ports (--api-socket)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1564660800">- Update to 0.3.1
  * Fix use-after-free</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565006400">- Update to 0.3.2
  * Fix heap overflow in `ip_reass` on big packet input</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565179200">- Add missing licenses to spec file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567080000">- Update to 0.3.3
  * Fix use-after-free in libslirp</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567166400">- Update to 0.4.1
  * Support specifying netns path (slirp4netns --netns-type=path PATH
    TAPNAME)
  * Support specifying --userns-path
  * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
  * Bring up loopback device when --configure is specified
  * Support sandboxing by creating a mount namespace
    (--enable-sandbox)
  * Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1571659200">- Update to 0.4.2
  * Do not propagate mounts to the parent ns in sandbox</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576670400">- Update to 0.4.3
  * api: raise an error if the socket path is too long
  * libslirp: update to v4.1.0: Including the fix for libslirp
    sends RST to app in response to arriving FIN when containerized
    socket is shutdown() with SHUT_WR
  * Fix create_sandbox error</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="Oliver Bengs &lt;appleonkel@opensuse.org&gt; - 1.0.0" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692619200">- Update to version 1.2.1:
  * sandbox: Add support for escaping resolv.conf symlinks (#318)
  * parson: update to v1.5.2 (#320)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.2.2
  * Enabled reproducible builds (#324, #325, #326)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1707307200">- New upstream release 1.2.3:
  * Fix some FD leaks (#334, thanks to @giuseppe)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1714132800">- New upstream release 1.3.0
  * Support new `--netns-type=tapfd` (#340, thanks to @helmutg)
  * Do not leak socket in case of success (#339, thanks to @jnovy)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1715688000">- New upstream release 1.3.1, no relevant source change</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to v1.13.2
  * Support libslirp v4.9.0 (#351)</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1748952000">- Update to 1.3.3
  * The official statically-linked binaries are updated to be linked with the new version of libslirp: v4.9.0 -&gt; v4.9.1 (#357)
  * Enabled GitHub Actions Attestations (#355, thanks to @takumin)</changelog>
</package>
<package pkgid="30aebbd856413403990bfaa389965a3fc734e8c147f8c0bfc7710d80ab3b99b6405c279e4fe8103ef3a2c3f292595a58dae05c2f8aaf063e30b236dd6eeb47e2" name="slirp4netns-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.3" rel="19.9"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692619200">- Update to version 1.2.1:
  * sandbox: Add support for escaping resolv.conf symlinks (#318)
  * parson: update to v1.5.2 (#320)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.2.2
  * Enabled reproducible builds (#324, #325, #326)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1707307200">- New upstream release 1.2.3:
  * Fix some FD leaks (#334, thanks to @giuseppe)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1714132800">- New upstream release 1.3.0
  * Support new `--netns-type=tapfd` (#340, thanks to @helmutg)
  * Do not leak socket in case of success (#339, thanks to @jnovy)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1715688000">- New upstream release 1.3.1, no relevant source change</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to v1.13.2
  * Support libslirp v4.9.0 (#351)</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1748952000">- Update to 1.3.3
  * The official statically-linked binaries are updated to be linked with the new version of libslirp: v4.9.0 -&gt; v4.9.1 (#357)
  * Enabled GitHub Actions Attestations (#355, thanks to @takumin)</changelog>
</package>
<package pkgid="01778882f59c3d290c7482e6cc297440b3d360d14a4ae7f91753280e8f12fdbdd3487215e06befa9b785b6de9c90032c9f31db70709bdc64b55304d8f1e68d59" name="slirp4netns-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.3" rel="19.9"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692619200">- Update to version 1.2.1:
  * sandbox: Add support for escaping resolv.conf symlinks (#318)
  * parson: update to v1.5.2 (#320)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.2.2
  * Enabled reproducible builds (#324, #325, #326)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1707307200">- New upstream release 1.2.3:
  * Fix some FD leaks (#334, thanks to @giuseppe)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1714132800">- New upstream release 1.3.0
  * Support new `--netns-type=tapfd` (#340, thanks to @helmutg)
  * Do not leak socket in case of success (#339, thanks to @jnovy)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1715688000">- New upstream release 1.3.1, no relevant source change</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to v1.13.2
  * Support libslirp v4.9.0 (#351)</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1748952000">- Update to 1.3.3
  * The official statically-linked binaries are updated to be linked with the new version of libslirp: v4.9.0 -&gt; v4.9.1 (#357)
  * Enabled GitHub Actions Attestations (#355, thanks to @takumin)</changelog>
</package>
</otherdata>