<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="145">
<package pkgid="8fbe094c28d2b7acbdbe5dc02c8e54a2f9085f66ba9cfde418b6d728f70fb855" name="amavisd-milter" arch="src">
  <version epoch="0" ver="1.6.0" rel="1.1"/>
  <changelog author="mkubecek@suse.cz" date="1419163200">- initial checkin of version 1.6.0</changelog>
</package>
<package pkgid="798e510db302201766d5fee93c4c5dab526832d2ff6b3ab60263dc984cdcbc3e" name="amavisd-milter" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="1.1"/>
  <changelog author="mkubecek@suse.cz" date="1419163200">- initial checkin of version 1.6.0</changelog>
</package>
<package pkgid="718a009098609ead8617b42c99c261a863d85756725206ace41e5a7bcac96ff6" name="amavisd-milter-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="1.1"/>
  <changelog author="mkubecek@suse.cz" date="1419163200">- initial checkin of version 1.6.0</changelog>
</package>
<package pkgid="f7460707f0c90e1580ae6088a514add875ca5fd612f241f58baf98702466afb1" name="amavisd-milter-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="1.1"/>
  <changelog author="mkubecek@suse.cz" date="1419163200">- initial checkin of version 1.6.0</changelog>
</package>
<package pkgid="7d77a5ea47fe3f810bde28325fba39e0a4b3d814d84840a136ca11b3c1571a2e" name="conntrack-tools" arch="src">
  <version epoch="0" ver="1.4.8" rel="104.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.2
  * This release includes bugfixes and the connlabel support.</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1443614400">- fix SLE11 SP1 build (we are not using xz compressed tarball)</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- move closer to security:netfilter package (SLE11-SP1 build no
  longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- do not require systemd machinery unless necessary
- use compatible SPDX identifier</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="8dda5c363af078a4decd0abff31595dbd62be034833571e229f1b05ca167c34f" name="conntrack-tools" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="104.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1443614400">- fix SLE11 SP1 build (we are not using xz compressed tarball)</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- move closer to security:netfilter package (SLE11-SP1 build no
  longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- do not require systemd machinery unless necessary
- use compatible SPDX identifier</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="11d7b2ce484b6e4c055b09cb88b2d28c2ffb28926f5c79da7e4eb1a7cb224169" name="conntrack-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="104.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1443614400">- fix SLE11 SP1 build (we are not using xz compressed tarball)</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- move closer to security:netfilter package (SLE11-SP1 build no
  longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- do not require systemd machinery unless necessary
- use compatible SPDX identifier</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="4b5fa650f240bd63a4e33c10061fd62633606830170eabbba53b1bd9b55f83ad" name="conntrack-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="104.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1443614400">- fix SLE11 SP1 build (we are not using xz compressed tarball)</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- move closer to security:netfilter package (SLE11-SP1 build no
  longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- do not require systemd machinery unless necessary
- use compatible SPDX identifier</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="1159c244500f09843c46bc83a2c23b208efb71a367fa65cd10bfd0fe1490ffbe" name="conntrackd" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="104.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1443614400">- fix SLE11 SP1 build (we are not using xz compressed tarball)</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- move closer to security:netfilter package (SLE11-SP1 build no
  longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- do not require systemd machinery unless necessary
- use compatible SPDX identifier</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="a4757d6a0155f6fe1431384c8e23cb60b4b91f343e03e8fa87202d254e8af70f" name="conntrackd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="104.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="mkubecek@suse.cz" date="1443614400">- fix SLE11 SP1 build (we are not using xz compressed tarball)</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- move closer to security:netfilter package (SLE11-SP1 build no
  longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- do not require systemd machinery unless necessary
- use compatible SPDX identifier</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="34a37e1ad840f303f94fc8427be1e65a3d4f3c2c5db45edae522cb596898ee72" name="cronolog" arch="src">
  <version epoch="0" ver="1.6.2" rel="2.1"/>
  <changelog author="mkubecek@suse.cz" date="1349179200">- move to OBS
- specfile cleanup
- start a changelog
- recompress source tarball using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1349179201">- move cronolog and cronosplit to /usr/bin</changelog>
</package>
<package pkgid="6f91d7f3aa880bc73202e3c4b923deefd1ddd39d5e2f3fa33b59714118647a24" name="cronolog" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="2.1"/>
  <changelog author="mkubecek@suse.cz" date="1349179200">- move to OBS
- specfile cleanup
- start a changelog
- recompress source tarball using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1349179201">- move cronolog and cronosplit to /usr/bin</changelog>
</package>
<package pkgid="fa3713cfde9b74d814cd3dd82aad6a9b5d3daf4853cbe05b33af3b210917c271" name="cronolog-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="2.1"/>
  <changelog author="mkubecek@suse.cz" date="1349179200">- move to OBS
- specfile cleanup
- start a changelog
- recompress source tarball using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1349179201">- move cronolog and cronosplit to /usr/bin</changelog>
</package>
<package pkgid="f239807c26551eb98a5f29bc7d17c599ed7b1584493007550f0c57635d8688c5" name="cronolog-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="2.1"/>
  <changelog author="mkubecek@suse.cz" date="1349179200">- move to OBS
- specfile cleanup
- start a changelog
- recompress source tarball using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1349179201">- move cronolog and cronosplit to /usr/bin</changelog>
</package>
<package pkgid="73145fbb04ac390b24595fbcc60d62458b7405fd5b1b84da891d311ebfa86e33" name="dhcpcd" arch="src">
  <version epoch="0" ver="3.2.3" rel="47.10.1"/>
  <changelog author="varkoly@suse.de" date="1259323200">- bnc#552916 - dhcp client swamps network with dhcp requests although ip already obtained
- bnc#551376 - dhcpcd does not honor -p / --persistent option breaking nfs/iscsi root systems</changelog>
  <changelog author="mt@suse.de" date="1259582400">- bnc#518219 - call (/etc/sysconfig/network/scripts/dhcpcd-hook)
  dhcpcd script once again with "complete" when all configuration
  is done and hostname is set, to allow ifup-dhcp to synchronize
  using it and report correct status (bnc#518219).</changelog>
  <changelog author="jengelh@medozas.de" date="1261310400">- enable parallel build</changelog>
  <changelog author="varkoly@suse.de" date="1263297600">- bnc#569972 - dhcpcd sets bad routes
- bnc#556613 - hostname issues during installation from network</changelog>
  <changelog author="varkoly@suse.de" date="1263902400">- bnc#565030 - L3: dhcpcd not using router component of dhcp server
  option 33 (Static Route)</changelog>
  <changelog author="varkoly@novell.com" date="1265716800">- bnc#577402 - dhcpcp with Patch bnc#565030 has netlink error with /32 netmask</changelog>
  <changelog author="varkoly@novell.com" date="1270814400">- bnc#564441 - e1000 and dhcpd hickup</changelog>
  <changelog author="varkoly@novell.com" date="1277294400">- bnc#579438 dhcpcd sometime loops endless after adding wlan usb stick
  with dhcp ip lease time infinity</changelog>
  <changelog author="varkoly@novell.com" date="1291118400">- bnc#654649 - dhcpcd ignores -G (--nogateway) option and sets default route</changelog>
  <changelog author="varkoly@novell.com" date="1301572800">- bnc#675052 - discard string options such as host and domain names
  containing disallowed characters or beeing too long. This proctive
  patch limits root-path to a-zA-Z0-9, #%+-_:.,@~/\[]= and a space
  (CVE-2011-0997).
- fixed to read netbios scope from info file as string
- bnc#668194 - handle packets with xen partial UDP checksums
- bnc#657402 - send renew messages as unicast directly to the server</changelog>
  <changelog author="mt@suse.de" date="1303214400">- Fixed a bug causing a crash in the sip option check, when the
  option data can't be decoded (bnc#687850).
- Relaxed the check of the domain-name option causing a regression,
  when the server is misusing it to provide a domain list and does
  not provide it using the domain-search option (bnc#675052).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="eich@suse.com" date="1319198400">- N_When-getting-a-new-lease-send-the-serverID-and-lease-addr-in-a-DHCP_REQUEST-package.patch
  When getting a new lease send the serverID and lease
  addr in a DHCP_REQUEST package (bnc #725856).</changelog>
  <changelog author="rschweikert@suse.com" date="1328702400">- place binary into /usr tree (UsrMerge project)</changelog>
  <changelog author="dvaleev@suse.com" date="1355832000">- dhcpcd-unused.patch fixes ppc build error. Where unused expects
  an argument</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Update homepage URL</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- add explicit insserv requirements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix build on UsrMerged systems
- drop insserv related stuff as it wasn't actually used</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="9ca4ff46fc289c80c5ac9b33d7f0da84dfdda96c6eaa5c51e8490b9079478701" name="dhcpcd" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="47.10.1"/>
  <changelog author="mt@suse.de" date="1303214400">- Fixed a bug causing a crash in the sip option check, when the
  option data can't be decoded (bnc#687850).
- Relaxed the check of the domain-name option causing a regression,
  when the server is misusing it to provide a domain list and does
  not provide it using the domain-search option (bnc#675052).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="eich@suse.com" date="1319198400">- N_When-getting-a-new-lease-send-the-serverID-and-lease-addr-in-a-DHCP_REQUEST-package.patch
  When getting a new lease send the serverID and lease
  addr in a DHCP_REQUEST package (bnc #725856).</changelog>
  <changelog author="rschweikert@suse.com" date="1328702400">- place binary into /usr tree (UsrMerge project)</changelog>
  <changelog author="dvaleev@suse.com" date="1355832000">- dhcpcd-unused.patch fixes ppc build error. Where unused expects
  an argument</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Update homepage URL</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- add explicit insserv requirements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix build on UsrMerged systems
- drop insserv related stuff as it wasn't actually used</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="dfccf1990088f3ef7664ec698aea1a9109e2b9b04773534700a3f3865ca0ef8c" name="dhcpcd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="47.10.1"/>
  <changelog author="mt@suse.de" date="1303214400">- Fixed a bug causing a crash in the sip option check, when the
  option data can't be decoded (bnc#687850).
- Relaxed the check of the domain-name option causing a regression,
  when the server is misusing it to provide a domain list and does
  not provide it using the domain-search option (bnc#675052).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="eich@suse.com" date="1319198400">- N_When-getting-a-new-lease-send-the-serverID-and-lease-addr-in-a-DHCP_REQUEST-package.patch
  When getting a new lease send the serverID and lease
  addr in a DHCP_REQUEST package (bnc #725856).</changelog>
  <changelog author="rschweikert@suse.com" date="1328702400">- place binary into /usr tree (UsrMerge project)</changelog>
  <changelog author="dvaleev@suse.com" date="1355832000">- dhcpcd-unused.patch fixes ppc build error. Where unused expects
  an argument</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Update homepage URL</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- add explicit insserv requirements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix build on UsrMerged systems
- drop insserv related stuff as it wasn't actually used</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="d2b05bcf199dede28fc55af7695eb151cdef44ddedcb6836620cbb7a4b36b195" name="dhcpcd-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="47.10.1"/>
  <changelog author="mt@suse.de" date="1303214400">- Fixed a bug causing a crash in the sip option check, when the
  option data can't be decoded (bnc#687850).
- Relaxed the check of the domain-name option causing a regression,
  when the server is misusing it to provide a domain list and does
  not provide it using the domain-search option (bnc#675052).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="eich@suse.com" date="1319198400">- N_When-getting-a-new-lease-send-the-serverID-and-lease-addr-in-a-DHCP_REQUEST-package.patch
  When getting a new lease send the serverID and lease
  addr in a DHCP_REQUEST package (bnc #725856).</changelog>
  <changelog author="rschweikert@suse.com" date="1328702400">- place binary into /usr tree (UsrMerge project)</changelog>
  <changelog author="dvaleev@suse.com" date="1355832000">- dhcpcd-unused.patch fixes ppc build error. Where unused expects
  an argument</changelog>
  <changelog author="jengelh@inai.de" date="1410436800">- Update homepage URL</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- add explicit insserv requirements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix build on UsrMerged systems
- drop insserv related stuff as it wasn't actually used</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="4ee84365be3174ec526471bef81280d6df067fe87d2ed1bbd2e2c0f6528cbb72" name="ethtool" arch="src">
  <version epoch="0" ver="7.1" rel="162.1"/>
  <changelog author="mkubecek@suse.cz" date="1665403200">- update to upstream release 6.0
  * Fix: advertisement modes autoselection by lanes (-s)</changelog>
  <changelog author="mkubecek@suse.cz" date="1671451200">- update to upstream release 6.1
  * Feature: update link mode tables
  * Feature: register dump for NXP ENETC driver (-d)
  * Feature: report TCP header-data split (-g)
  * Feature: support new message types in pretty print
  * Fix: man page syntax fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1676980800">- update to upstream release 6.2
  * Feature: link down event statistics (no option)
  * Feature: JSON output for coalesce (-c)
  * Feature: new link modes (no option)
  * Feature: JSON output for ring (-g)
  * Feature: netlink handler for RSS get (-x)
  * Fix: fix boolean value output in JSON output
- enforce "-std=c11" on SLE &lt;= 12 where the default is older</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677844800">- Split bash-completion to separate sub-package</changelog>
  <changelog author="mkubecek@suse.cz" date="1683547200">- update to upstream release 6.3
  * Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
  * Feature: MAC Merge layer support (--show-mm, --set-mm)
  * Feature: pass source of statistics for port stats
  * Feature: get/set rx push in ringparams (-g and -G)
  * Feature: coalesce tx aggregation parameters (-c and -C)
  * Feature: PSE and PD devices (--show-pse, --set-pse)
  * Fix: minor fixes of help text (--help)
  * Fix: fix build on systems with older system headers
  * Fix: fix netlink support when PLCA is not present (no option)
  * Fix: fixes for issues found with gcc13 -fanalyzer
  * Fix: fix return code in rxclass_rule_ins (-N)
  * Fix: more robust argc/argv handling</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
  <changelog author="mkubecek@suse.cz" date="1700740800">- update to upstream release 6.6
  * Feature: support for more CMIS transceiver modules (-m)
  * Fix: fix build on systems with old kernel uapi headers</changelog>
  <changelog author="mkubecek@suse.cz" date="1706443200">- update to upstream release 6.7
  * Feature: support for setting TCP data split
  * Fix: fix new gcc14 warning
  * Fix: fix SFF-8472 transceiver module identification (-m)</changelog>
  <changelog author="mkubecek@suse.cz" date="1716465600">- update to upstream release 6.9
  * Feature: support for rx-flow-hash gtp (-N)
  * Feature: support for RSS input transformation (-X)
  * Fix: typo in coalescing output (-c)
  * Fix: document all debugging flags in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1723204800">- update to upstream release 6.10
  * Feature: suport for PoE in PSE (--show-pse and --set-pse)
  * Feature: add statistics support to tsinfo (-T)
  * Feature: add JSON output to base command (no option)
  * Feature: add JSON output to EEE info (--show-eee)
  * Fix: qsfp: better handling on page 03h read failure (-m)
  * Fix: handle zero arguments for module eeprom dump (-m)
  * Fix: check for missing arguments in do_srxfh() (-X)
  * Misc: more descriptive error when JSON output is not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1728388800">- update to upstream release 6.11
  * Feature: cmis: print active and inactive firmware versions
  * Feature: flash transceiver module firmware (--flash-module-firmware)
  * Feature: add T1BRR 10Mb/s mode to link mode tables
  * Feature: support for disabling netlink from command line
  * Fix: fix lanes parameter format specifier
  * Fix: add missing clause 33 PSE manual description
  * Fix: qsf: Better handling of Page A2h netlink read failure
  * Fix: rss: retrieve ring count using ETHTOOL_GRXRINGS ioctl (-x)</changelog>
  <changelog author="mkubecek@suse.cz" date="1744027200">- update to upstream release 6.14
  * Feature: list PHYs (--show-phys)
  * Feature: target a specific PHY with some commands (--phy)
  * Feature: more attributes for C33 PSE (--show-pse, --set-pse)
  * Feature: source information for cable tests (--cable-test[-tdr])
  * Feature: JSON output for module info (-m)
  * Feature: misc RSS hash info improvements (-x)
  * Feature: tsinfo hwtstamp provider (--{get,set}-hwtimestamp-cfg)
  * Fix: fix wrong auto-negotiation state (no option)
  * Fix: more explicit RSS context action (-n)
  * Fix: print PHY address as decimal (no option)
  * Fix: fix return value on flow hashing error (-N)
  * Fix: fix JSON output for IRQ coalescing
  * Fix: fix MDI-X info output (no option)
  * Misc: add '-j' alias for --json
  * Misc: provide AppStream metainfo XML</changelog>
  <changelog author="mkubecek@suse.cz" date="1745409600">- fix AppStream metainfo XML file
  * misc-fix-AppStream-metainfo-XML.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1750680000">- update to upstream release 6.15
  * Feature: support OR-XOR symmetric RSS hash type (-x/-X)
  * Feature: dump registers for hibmcge driver (-d)
  * Feature: configure header-data split threshold (-g/-G)
  * Feature: dump registers for fbnic driver (-d)
  * Feature: JSON output for channels info (-l)
  * Fix: incorrect data in appstream metainfo XML
  * Fix: prevent potential null pointer dereferences
  * Fix: more consistent and better parseable per lane signal info (-d)
- drop misc-fix-AppStream-metainfo-XML.patch (no longer needed)</changelog>
  <changelog author="ohering@suse.de" date="1775044800">- add netlink support for RX CQE Coalescing params (bsc#1261256)
  5a6848026277296a151664666ef1c25821787043.patch
  d35d87fbcda97fe31df79d62277743214641892a.patch
  bf023af442f63e16f1699128c7ce467eddc6d340.patch</changelog>
  <changelog author="jengelh@inai.de" date="1776772800">- Update to release 6.19
  * tsinfo: Add support for PTP hardware source
  * monitor: Add notification handling for PLCA configuration
  * rxfh: IPv6 Flow Label hash support
  * netlink: fec: add errors histogram statistics
- Delete 5a6848026277296a151664666ef1c25821787043.patch (merged)
- Move bash-completions into main package.
  &lt;https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6TVWFHYEP4CFEJZSULQLIB2POYVHKJLS/&gt;</changelog>
  <changelog author="mkubecek@suse.cz" date="1777377600">- update to upstream release 7.0
  * Feature: support MSE display (--show-mse)
  * Feature: add 2 new link_ext_state names
  * Fix: fix index calculation in ixgbe register dump (-d)
  * Fix: cmis wavelength tolerance output (-m)
  * Fix: duplicate sfpid Active Cu compliance output (-m)</changelog>
  <changelog author="jengelh@inai.de" date="1783684800">- Update to release 7.1
  * Added netlink support for RX CQE Coalescing params
  * netlink: module-eeprom: Add 'hex on pages on' option for
    page-organized hex dump
  * netlink: fec: Add missing newlines in FEC statistics output
  * ethtool: Add man page and bash completion for 'pages on|off'
  * ethtool: Update pause stats struct
  * ethtool: Add --disable-netlink to help output
  * qsfp: add support for newer SFF-8636 compliance codes
  * sfpid: add support for newer SFF-8472 compliance codes
  * sfpid: fix 10G Base-ER module detection
- Delete bf023af442f63e16f1699128c7ce467eddc6d340.patch,
  d35d87fbcda97fe31df79d62277743214641892a.patch (merged)</changelog>
</package>
<package pkgid="b4d9ecd1d62ebada236ddb2fd94e756976f2a45e303e1c106c28d9821a64d967" name="ethtool" arch="x86_64">
  <version epoch="0" ver="7.1" rel="162.1"/>
  <changelog author="mkubecek@suse.cz" date="1665403200">- update to upstream release 6.0
  * Fix: advertisement modes autoselection by lanes (-s)</changelog>
  <changelog author="mkubecek@suse.cz" date="1671451200">- update to upstream release 6.1
  * Feature: update link mode tables
  * Feature: register dump for NXP ENETC driver (-d)
  * Feature: report TCP header-data split (-g)
  * Feature: support new message types in pretty print
  * Fix: man page syntax fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1676980800">- update to upstream release 6.2
  * Feature: link down event statistics (no option)
  * Feature: JSON output for coalesce (-c)
  * Feature: new link modes (no option)
  * Feature: JSON output for ring (-g)
  * Feature: netlink handler for RSS get (-x)
  * Fix: fix boolean value output in JSON output
- enforce "-std=c11" on SLE &lt;= 12 where the default is older</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677844800">- Split bash-completion to separate sub-package</changelog>
  <changelog author="mkubecek@suse.cz" date="1683547200">- update to upstream release 6.3
  * Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
  * Feature: MAC Merge layer support (--show-mm, --set-mm)
  * Feature: pass source of statistics for port stats
  * Feature: get/set rx push in ringparams (-g and -G)
  * Feature: coalesce tx aggregation parameters (-c and -C)
  * Feature: PSE and PD devices (--show-pse, --set-pse)
  * Fix: minor fixes of help text (--help)
  * Fix: fix build on systems with older system headers
  * Fix: fix netlink support when PLCA is not present (no option)
  * Fix: fixes for issues found with gcc13 -fanalyzer
  * Fix: fix return code in rxclass_rule_ins (-N)
  * Fix: more robust argc/argv handling</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
  <changelog author="mkubecek@suse.cz" date="1700740800">- update to upstream release 6.6
  * Feature: support for more CMIS transceiver modules (-m)
  * Fix: fix build on systems with old kernel uapi headers</changelog>
  <changelog author="mkubecek@suse.cz" date="1706443200">- update to upstream release 6.7
  * Feature: support for setting TCP data split
  * Fix: fix new gcc14 warning
  * Fix: fix SFF-8472 transceiver module identification (-m)</changelog>
  <changelog author="mkubecek@suse.cz" date="1716465600">- update to upstream release 6.9
  * Feature: support for rx-flow-hash gtp (-N)
  * Feature: support for RSS input transformation (-X)
  * Fix: typo in coalescing output (-c)
  * Fix: document all debugging flags in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1723204800">- update to upstream release 6.10
  * Feature: suport for PoE in PSE (--show-pse and --set-pse)
  * Feature: add statistics support to tsinfo (-T)
  * Feature: add JSON output to base command (no option)
  * Feature: add JSON output to EEE info (--show-eee)
  * Fix: qsfp: better handling on page 03h read failure (-m)
  * Fix: handle zero arguments for module eeprom dump (-m)
  * Fix: check for missing arguments in do_srxfh() (-X)
  * Misc: more descriptive error when JSON output is not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1728388800">- update to upstream release 6.11
  * Feature: cmis: print active and inactive firmware versions
  * Feature: flash transceiver module firmware (--flash-module-firmware)
  * Feature: add T1BRR 10Mb/s mode to link mode tables
  * Feature: support for disabling netlink from command line
  * Fix: fix lanes parameter format specifier
  * Fix: add missing clause 33 PSE manual description
  * Fix: qsf: Better handling of Page A2h netlink read failure
  * Fix: rss: retrieve ring count using ETHTOOL_GRXRINGS ioctl (-x)</changelog>
  <changelog author="mkubecek@suse.cz" date="1744027200">- update to upstream release 6.14
  * Feature: list PHYs (--show-phys)
  * Feature: target a specific PHY with some commands (--phy)
  * Feature: more attributes for C33 PSE (--show-pse, --set-pse)
  * Feature: source information for cable tests (--cable-test[-tdr])
  * Feature: JSON output for module info (-m)
  * Feature: misc RSS hash info improvements (-x)
  * Feature: tsinfo hwtstamp provider (--{get,set}-hwtimestamp-cfg)
  * Fix: fix wrong auto-negotiation state (no option)
  * Fix: more explicit RSS context action (-n)
  * Fix: print PHY address as decimal (no option)
  * Fix: fix return value on flow hashing error (-N)
  * Fix: fix JSON output for IRQ coalescing
  * Fix: fix MDI-X info output (no option)
  * Misc: add '-j' alias for --json
  * Misc: provide AppStream metainfo XML</changelog>
  <changelog author="mkubecek@suse.cz" date="1745409600">- fix AppStream metainfo XML file
  * misc-fix-AppStream-metainfo-XML.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1750680000">- update to upstream release 6.15
  * Feature: support OR-XOR symmetric RSS hash type (-x/-X)
  * Feature: dump registers for hibmcge driver (-d)
  * Feature: configure header-data split threshold (-g/-G)
  * Feature: dump registers for fbnic driver (-d)
  * Feature: JSON output for channels info (-l)
  * Fix: incorrect data in appstream metainfo XML
  * Fix: prevent potential null pointer dereferences
  * Fix: more consistent and better parseable per lane signal info (-d)
- drop misc-fix-AppStream-metainfo-XML.patch (no longer needed)</changelog>
  <changelog author="ohering@suse.de" date="1775044800">- add netlink support for RX CQE Coalescing params (bsc#1261256)
  5a6848026277296a151664666ef1c25821787043.patch
  d35d87fbcda97fe31df79d62277743214641892a.patch
  bf023af442f63e16f1699128c7ce467eddc6d340.patch</changelog>
  <changelog author="jengelh@inai.de" date="1776772800">- Update to release 6.19
  * tsinfo: Add support for PTP hardware source
  * monitor: Add notification handling for PLCA configuration
  * rxfh: IPv6 Flow Label hash support
  * netlink: fec: add errors histogram statistics
- Delete 5a6848026277296a151664666ef1c25821787043.patch (merged)
- Move bash-completions into main package.
  &lt;https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6TVWFHYEP4CFEJZSULQLIB2POYVHKJLS/&gt;</changelog>
  <changelog author="mkubecek@suse.cz" date="1777377600">- update to upstream release 7.0
  * Feature: support MSE display (--show-mse)
  * Feature: add 2 new link_ext_state names
  * Fix: fix index calculation in ixgbe register dump (-d)
  * Fix: cmis wavelength tolerance output (-m)
  * Fix: duplicate sfpid Active Cu compliance output (-m)</changelog>
  <changelog author="jengelh@inai.de" date="1783684800">- Update to release 7.1
  * Added netlink support for RX CQE Coalescing params
  * netlink: module-eeprom: Add 'hex on pages on' option for
    page-organized hex dump
  * netlink: fec: Add missing newlines in FEC statistics output
  * ethtool: Add man page and bash completion for 'pages on|off'
  * ethtool: Update pause stats struct
  * ethtool: Add --disable-netlink to help output
  * qsfp: add support for newer SFF-8636 compliance codes
  * sfpid: add support for newer SFF-8472 compliance codes
  * sfpid: fix 10G Base-ER module detection
- Delete bf023af442f63e16f1699128c7ce467eddc6d340.patch,
  d35d87fbcda97fe31df79d62277743214641892a.patch (merged)</changelog>
</package>
<package pkgid="8ada0008b7953b38de0ea87bb2d5bd22734d999eb95829aaac0b802d955f18d8" name="ethtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.1" rel="162.1"/>
  <changelog author="mkubecek@suse.cz" date="1665403200">- update to upstream release 6.0
  * Fix: advertisement modes autoselection by lanes (-s)</changelog>
  <changelog author="mkubecek@suse.cz" date="1671451200">- update to upstream release 6.1
  * Feature: update link mode tables
  * Feature: register dump for NXP ENETC driver (-d)
  * Feature: report TCP header-data split (-g)
  * Feature: support new message types in pretty print
  * Fix: man page syntax fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1676980800">- update to upstream release 6.2
  * Feature: link down event statistics (no option)
  * Feature: JSON output for coalesce (-c)
  * Feature: new link modes (no option)
  * Feature: JSON output for ring (-g)
  * Feature: netlink handler for RSS get (-x)
  * Fix: fix boolean value output in JSON output
- enforce "-std=c11" on SLE &lt;= 12 where the default is older</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677844800">- Split bash-completion to separate sub-package</changelog>
  <changelog author="mkubecek@suse.cz" date="1683547200">- update to upstream release 6.3
  * Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
  * Feature: MAC Merge layer support (--show-mm, --set-mm)
  * Feature: pass source of statistics for port stats
  * Feature: get/set rx push in ringparams (-g and -G)
  * Feature: coalesce tx aggregation parameters (-c and -C)
  * Feature: PSE and PD devices (--show-pse, --set-pse)
  * Fix: minor fixes of help text (--help)
  * Fix: fix build on systems with older system headers
  * Fix: fix netlink support when PLCA is not present (no option)
  * Fix: fixes for issues found with gcc13 -fanalyzer
  * Fix: fix return code in rxclass_rule_ins (-N)
  * Fix: more robust argc/argv handling</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
  <changelog author="mkubecek@suse.cz" date="1700740800">- update to upstream release 6.6
  * Feature: support for more CMIS transceiver modules (-m)
  * Fix: fix build on systems with old kernel uapi headers</changelog>
  <changelog author="mkubecek@suse.cz" date="1706443200">- update to upstream release 6.7
  * Feature: support for setting TCP data split
  * Fix: fix new gcc14 warning
  * Fix: fix SFF-8472 transceiver module identification (-m)</changelog>
  <changelog author="mkubecek@suse.cz" date="1716465600">- update to upstream release 6.9
  * Feature: support for rx-flow-hash gtp (-N)
  * Feature: support for RSS input transformation (-X)
  * Fix: typo in coalescing output (-c)
  * Fix: document all debugging flags in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1723204800">- update to upstream release 6.10
  * Feature: suport for PoE in PSE (--show-pse and --set-pse)
  * Feature: add statistics support to tsinfo (-T)
  * Feature: add JSON output to base command (no option)
  * Feature: add JSON output to EEE info (--show-eee)
  * Fix: qsfp: better handling on page 03h read failure (-m)
  * Fix: handle zero arguments for module eeprom dump (-m)
  * Fix: check for missing arguments in do_srxfh() (-X)
  * Misc: more descriptive error when JSON output is not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1728388800">- update to upstream release 6.11
  * Feature: cmis: print active and inactive firmware versions
  * Feature: flash transceiver module firmware (--flash-module-firmware)
  * Feature: add T1BRR 10Mb/s mode to link mode tables
  * Feature: support for disabling netlink from command line
  * Fix: fix lanes parameter format specifier
  * Fix: add missing clause 33 PSE manual description
  * Fix: qsf: Better handling of Page A2h netlink read failure
  * Fix: rss: retrieve ring count using ETHTOOL_GRXRINGS ioctl (-x)</changelog>
  <changelog author="mkubecek@suse.cz" date="1744027200">- update to upstream release 6.14
  * Feature: list PHYs (--show-phys)
  * Feature: target a specific PHY with some commands (--phy)
  * Feature: more attributes for C33 PSE (--show-pse, --set-pse)
  * Feature: source information for cable tests (--cable-test[-tdr])
  * Feature: JSON output for module info (-m)
  * Feature: misc RSS hash info improvements (-x)
  * Feature: tsinfo hwtstamp provider (--{get,set}-hwtimestamp-cfg)
  * Fix: fix wrong auto-negotiation state (no option)
  * Fix: more explicit RSS context action (-n)
  * Fix: print PHY address as decimal (no option)
  * Fix: fix return value on flow hashing error (-N)
  * Fix: fix JSON output for IRQ coalescing
  * Fix: fix MDI-X info output (no option)
  * Misc: add '-j' alias for --json
  * Misc: provide AppStream metainfo XML</changelog>
  <changelog author="mkubecek@suse.cz" date="1745409600">- fix AppStream metainfo XML file
  * misc-fix-AppStream-metainfo-XML.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1750680000">- update to upstream release 6.15
  * Feature: support OR-XOR symmetric RSS hash type (-x/-X)
  * Feature: dump registers for hibmcge driver (-d)
  * Feature: configure header-data split threshold (-g/-G)
  * Feature: dump registers for fbnic driver (-d)
  * Feature: JSON output for channels info (-l)
  * Fix: incorrect data in appstream metainfo XML
  * Fix: prevent potential null pointer dereferences
  * Fix: more consistent and better parseable per lane signal info (-d)
- drop misc-fix-AppStream-metainfo-XML.patch (no longer needed)</changelog>
  <changelog author="ohering@suse.de" date="1775044800">- add netlink support for RX CQE Coalescing params (bsc#1261256)
  5a6848026277296a151664666ef1c25821787043.patch
  d35d87fbcda97fe31df79d62277743214641892a.patch
  bf023af442f63e16f1699128c7ce467eddc6d340.patch</changelog>
  <changelog author="jengelh@inai.de" date="1776772800">- Update to release 6.19
  * tsinfo: Add support for PTP hardware source
  * monitor: Add notification handling for PLCA configuration
  * rxfh: IPv6 Flow Label hash support
  * netlink: fec: add errors histogram statistics
- Delete 5a6848026277296a151664666ef1c25821787043.patch (merged)
- Move bash-completions into main package.
  &lt;https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6TVWFHYEP4CFEJZSULQLIB2POYVHKJLS/&gt;</changelog>
  <changelog author="mkubecek@suse.cz" date="1777377600">- update to upstream release 7.0
  * Feature: support MSE display (--show-mse)
  * Feature: add 2 new link_ext_state names
  * Fix: fix index calculation in ixgbe register dump (-d)
  * Fix: cmis wavelength tolerance output (-m)
  * Fix: duplicate sfpid Active Cu compliance output (-m)</changelog>
  <changelog author="jengelh@inai.de" date="1783684800">- Update to release 7.1
  * Added netlink support for RX CQE Coalescing params
  * netlink: module-eeprom: Add 'hex on pages on' option for
    page-organized hex dump
  * netlink: fec: Add missing newlines in FEC statistics output
  * ethtool: Add man page and bash completion for 'pages on|off'
  * ethtool: Update pause stats struct
  * ethtool: Add --disable-netlink to help output
  * qsfp: add support for newer SFF-8636 compliance codes
  * sfpid: add support for newer SFF-8472 compliance codes
  * sfpid: fix 10G Base-ER module detection
- Delete bf023af442f63e16f1699128c7ce467eddc6d340.patch,
  d35d87fbcda97fe31df79d62277743214641892a.patch (merged)</changelog>
</package>
<package pkgid="4baaebea9f27907c1fb2bfcfd22b463b94dab936b0cbdc15beefdd3c896c93fe" name="ethtool-debugsource" arch="x86_64">
  <version epoch="0" ver="7.1" rel="162.1"/>
  <changelog author="mkubecek@suse.cz" date="1665403200">- update to upstream release 6.0
  * Fix: advertisement modes autoselection by lanes (-s)</changelog>
  <changelog author="mkubecek@suse.cz" date="1671451200">- update to upstream release 6.1
  * Feature: update link mode tables
  * Feature: register dump for NXP ENETC driver (-d)
  * Feature: report TCP header-data split (-g)
  * Feature: support new message types in pretty print
  * Fix: man page syntax fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1676980800">- update to upstream release 6.2
  * Feature: link down event statistics (no option)
  * Feature: JSON output for coalesce (-c)
  * Feature: new link modes (no option)
  * Feature: JSON output for ring (-g)
  * Feature: netlink handler for RSS get (-x)
  * Fix: fix boolean value output in JSON output
- enforce "-std=c11" on SLE &lt;= 12 where the default is older</changelog>
  <changelog author="gmbr3@opensuse.org" date="1677844800">- Split bash-completion to separate sub-package</changelog>
  <changelog author="mkubecek@suse.cz" date="1683547200">- update to upstream release 6.3
  * Feature: PLCA support (--[gs]et-plca-cfg, --get-plca-status)
  * Feature: MAC Merge layer support (--show-mm, --set-mm)
  * Feature: pass source of statistics for port stats
  * Feature: get/set rx push in ringparams (-g and -G)
  * Feature: coalesce tx aggregation parameters (-c and -C)
  * Feature: PSE and PD devices (--show-pse, --set-pse)
  * Fix: minor fixes of help text (--help)
  * Fix: fix build on systems with older system headers
  * Fix: fix netlink support when PLCA is not present (no option)
  * Fix: fixes for issues found with gcc13 -fanalyzer
  * Fix: fix return code in rxclass_rule_ins (-N)
  * Fix: more robust argc/argv handling</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212800">- make ethtool-bash-completion noarch</changelog>
  <changelog author="mkubecek@suse.cz" date="1688212801">- update to upstream release 6.4
  * Feature: get/set Tx push buffer length (-G)
  * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m)
  * Fix: fix duplex setting parser (-s)
  * Misc: check and require C11 language standard
  * Misc: clean up obsolete pre-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1694520000">- update to upstream release 6.5
  * Feature: register dump for hns3 driver (-d)
  * Fix: fix fallback to ioctl for sset (-s)
  * Fix: fix empty slot search in rmgr (-N)</changelog>
  <changelog author="mkubecek@suse.cz" date="1700740800">- update to upstream release 6.6
  * Feature: support for more CMIS transceiver modules (-m)
  * Fix: fix build on systems with old kernel uapi headers</changelog>
  <changelog author="mkubecek@suse.cz" date="1706443200">- update to upstream release 6.7
  * Feature: support for setting TCP data split
  * Fix: fix new gcc14 warning
  * Fix: fix SFF-8472 transceiver module identification (-m)</changelog>
  <changelog author="mkubecek@suse.cz" date="1716465600">- update to upstream release 6.9
  * Feature: support for rx-flow-hash gtp (-N)
  * Feature: support for RSS input transformation (-X)
  * Fix: typo in coalescing output (-c)
  * Fix: document all debugging flags in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1723204800">- update to upstream release 6.10
  * Feature: suport for PoE in PSE (--show-pse and --set-pse)
  * Feature: add statistics support to tsinfo (-T)
  * Feature: add JSON output to base command (no option)
  * Feature: add JSON output to EEE info (--show-eee)
  * Fix: qsfp: better handling on page 03h read failure (-m)
  * Fix: handle zero arguments for module eeprom dump (-m)
  * Fix: check for missing arguments in do_srxfh() (-X)
  * Misc: more descriptive error when JSON output is not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1728388800">- update to upstream release 6.11
  * Feature: cmis: print active and inactive firmware versions
  * Feature: flash transceiver module firmware (--flash-module-firmware)
  * Feature: add T1BRR 10Mb/s mode to link mode tables
  * Feature: support for disabling netlink from command line
  * Fix: fix lanes parameter format specifier
  * Fix: add missing clause 33 PSE manual description
  * Fix: qsf: Better handling of Page A2h netlink read failure
  * Fix: rss: retrieve ring count using ETHTOOL_GRXRINGS ioctl (-x)</changelog>
  <changelog author="mkubecek@suse.cz" date="1744027200">- update to upstream release 6.14
  * Feature: list PHYs (--show-phys)
  * Feature: target a specific PHY with some commands (--phy)
  * Feature: more attributes for C33 PSE (--show-pse, --set-pse)
  * Feature: source information for cable tests (--cable-test[-tdr])
  * Feature: JSON output for module info (-m)
  * Feature: misc RSS hash info improvements (-x)
  * Feature: tsinfo hwtstamp provider (--{get,set}-hwtimestamp-cfg)
  * Fix: fix wrong auto-negotiation state (no option)
  * Fix: more explicit RSS context action (-n)
  * Fix: print PHY address as decimal (no option)
  * Fix: fix return value on flow hashing error (-N)
  * Fix: fix JSON output for IRQ coalescing
  * Fix: fix MDI-X info output (no option)
  * Misc: add '-j' alias for --json
  * Misc: provide AppStream metainfo XML</changelog>
  <changelog author="mkubecek@suse.cz" date="1745409600">- fix AppStream metainfo XML file
  * misc-fix-AppStream-metainfo-XML.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1750680000">- update to upstream release 6.15
  * Feature: support OR-XOR symmetric RSS hash type (-x/-X)
  * Feature: dump registers for hibmcge driver (-d)
  * Feature: configure header-data split threshold (-g/-G)
  * Feature: dump registers for fbnic driver (-d)
  * Feature: JSON output for channels info (-l)
  * Fix: incorrect data in appstream metainfo XML
  * Fix: prevent potential null pointer dereferences
  * Fix: more consistent and better parseable per lane signal info (-d)
- drop misc-fix-AppStream-metainfo-XML.patch (no longer needed)</changelog>
  <changelog author="ohering@suse.de" date="1775044800">- add netlink support for RX CQE Coalescing params (bsc#1261256)
  5a6848026277296a151664666ef1c25821787043.patch
  d35d87fbcda97fe31df79d62277743214641892a.patch
  bf023af442f63e16f1699128c7ce467eddc6d340.patch</changelog>
  <changelog author="jengelh@inai.de" date="1776772800">- Update to release 6.19
  * tsinfo: Add support for PTP hardware source
  * monitor: Add notification handling for PLCA configuration
  * rxfh: IPv6 Flow Label hash support
  * netlink: fec: add errors histogram statistics
- Delete 5a6848026277296a151664666ef1c25821787043.patch (merged)
- Move bash-completions into main package.
  &lt;https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6TVWFHYEP4CFEJZSULQLIB2POYVHKJLS/&gt;</changelog>
  <changelog author="mkubecek@suse.cz" date="1777377600">- update to upstream release 7.0
  * Feature: support MSE display (--show-mse)
  * Feature: add 2 new link_ext_state names
  * Fix: fix index calculation in ixgbe register dump (-d)
  * Fix: cmis wavelength tolerance output (-m)
  * Fix: duplicate sfpid Active Cu compliance output (-m)</changelog>
  <changelog author="jengelh@inai.de" date="1783684800">- Update to release 7.1
  * Added netlink support for RX CQE Coalescing params
  * netlink: module-eeprom: Add 'hex on pages on' option for
    page-organized hex dump
  * netlink: fec: Add missing newlines in FEC statistics output
  * ethtool: Add man page and bash completion for 'pages on|off'
  * ethtool: Update pause stats struct
  * ethtool: Add --disable-netlink to help output
  * qsfp: add support for newer SFF-8636 compliance codes
  * sfpid: add support for newer SFF-8472 compliance codes
  * sfpid: fix 10G Base-ER module detection
- Delete bf023af442f63e16f1699128c7ce467eddc6d340.patch,
  d35d87fbcda97fe31df79d62277743214641892a.patch (merged)</changelog>
</package>
<package pkgid="467b09aa92c164a5fcb71139ffffe5b586d666823d2b0d0a4f03f9ee9309a922" name="git" arch="src">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="3844939734b8477a7829546e39f53c29dceb8483935c33fb14aa04e5de41afe6" name="git" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="fdde39c24158cf4dc0df30e49c00d76d90c5c38671435027863d22a73acc4a4f" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="1724b78bde7f7d669ea4be4279fa2031cc7eac3ac7f93d20252ead4cf97fcb42" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="4e705c71a0572c303e1aa6dad22983b7a64e65050e846751631a6f0d5d6bd01a" name="git-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="283c8fb5ee7606b8a37c10fa09e89ad98d6378158150122f9d755e0e7507bb0f" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="e1d8a8ce189246aff768b1f01095e7cb31778c7964c6188f4c288f34fb1ae2fb" name="git-credential-gnome-keyring-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="7577f064bf380fd816223b7ec9f652ba358736d69216034833071cd2abbf38b1" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="53b78813aa747bfda64638a06bebdf2dc7c679b5d2dca3e507d00c9074ec5367" name="git-credential-libsecret-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="5f0b194b98e44789d1dbfa6b92074185b043efcf0cf0e64894a3710dd2f24667" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="2fc76a5160b335fc17d48e80a341b04d4155cc088c0258a0e7c97d5a2a163396" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="c71e6cb466846d189ffcfb0ccf86ad50f32dd2f82f6af3ca6421900390c243b6" name="git-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="672e67f106a09258bfffcec58becca67d3402bef380b1908bf0f335292641379" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="6c5e75e26dc74a7ef71ecc2dcf6f1e604a244f78e8afef938006e1f8b42d38fb" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="a92d0f59bbb5bf2cf4f3309ce4b85d228ee231f271d44330e014662fd1b82e91" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="e7f659f2068ecd5fb4c8107ded642e5bd09f5fad6e63a30bc3ab1c4b33225721" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="b22c4c9d6ed725248ead0897c2c37e16ccd56d9cb13f1f116faeea6cb5799675" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="371b2bb3c46e3ef9d460d469b50b414d40338b5c66f92036a56056052173e0d6" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="9c3635fa6ba58c4503e50584ae6e02976fabca22a915acf92fc54e3676331669" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="d68dfe7d573d8e9bed61ddeab062e74aa882c7e5342dbc90a77109bb85d11a0a" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="4847a9f2ff41dde82ccd8f4b37900962d6d569d1d95782d5b392340eb1f618e2" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="23bda3cbd8899858f3b73cff194749e9121413bdd44d1fef7c4fc5fa64ef5885" name="iproute2" arch="src">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="0a11a912f84d20beb74096dadaea8be2468d621cfa68f321bf9f6b43afb96108" name="iproute2" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="172f049221b972f90eb141a4e26805f6661d28db384899d7992fec034fb6cac0" name="iproute2-arpd" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="001d221195f3303140b38e4e82eb5f40a89b49286d8aec48eb677f43ea002741" name="iproute2-arpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="f2981124197e283b731ada03be0e1dbc14c4fcb932ed959c9ebce1398dfdcae3" name="iproute2-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="1759a0fe499813f18481b7f0b23af80bc687e0dbcf73bd4bc675ea0e07042b5d" name="iproute2-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="1c03a4c5061076f55c2534eb3b48bcba08b60de5649ca44e9cfa14f11be79ef6" name="iproute2-debugsource" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="c8acbd4196fd632b6ddceeeca76ad7ec0eaf135fd18b5a577f97331667e449a7" name="iptables" arch="src">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="4aef8f7af204a948afe0a0247198261aa8f492cb1503b9e9392c975d19b18272" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="e28093e7026bccb4647f84b1db3f59d8ec77abb5372e1959575881ace2f3a967" name="iptables-backend-nft" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="5621fcf9b6bcd5308875b722626539aacdcc1c880412780881491f3ebd032551" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="4ad5e7f6047734ca2a6100e0ed4745dfa8e5b2e1f28efde9d58b1bad622420b7" name="iptables-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="b4324ac00ae1b0123d349cc0528c060d58a36a8b703b3f4ca201d37f9e2995f2" name="issue-generator" arch="noarch">
  <version epoch="0" ver="9999" rel="1.1"/>
  <changelog author="mkubecek@suse.cz" date="1498392000">- first (and hopefully also last) version of the package</changelog>
</package>
<package pkgid="fcea4dc0f6c828b8fcd96b4666f2f2242adb456a0c3328c426e20877dafff389" name="issue-generator" arch="src">
  <version epoch="0" ver="9999" rel="1.1"/>
  <changelog author="mkubecek@suse.cz" date="1498392000">- first (and hopefully also last) version of the package</changelog>
</package>
<package pkgid="8ce147bf3a26d7bb5c8e77880e10902322c2ffc1224ffc5214bb61bca7f02b53" name="libbpf" arch="src">
  <version epoch="0" ver="1.6.1" rel="60.1"/>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE12 build</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1712145600">- update to 1.4.0:
  * support for BPF token throughout low-level and high-level APIs
    (see also LIBBPF_BPF_TOKEN_PATH envvar)
  * struct_ops functionality around handling multi-kernel
    compatibility using BPF CO-RE principles and approaches
  * BPF arena map support
  * support __arena tagged global variables, which are automatically
    put into BPF arena map
  * BPF cookie support for raw tracepoint BPF programs in attach APIs
    loaded or created, respectively
  * add SEC("sk_skb/verdict") support
  * support global subprog argument tagging for for kprobe/uprobe,
    and perf_event BPF program with newly added __arg_ctx,
    __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena
    annotations
  * add bpf_core_cast() macro, improving ergonomics of
    bpf_rdonly_cast() BPF helper
  * __long() macro added for specifying 64-bit values when declaring
    BTF-defined maps
  * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header
  * show specific error messages when attempting to
    use struct bpf_program/bpf_map instances there were not loaded or
    created
  * fix inner map's max_entries setting logic
  * btf_ext__raw_data() and btf__new_split() APIs are added back
  * ignore DWARF sections in BPF linker sanity checks, improving
    handling of some corner cases
  * fix potential NULL dereference when handling corrupted ELF files.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1714651200">- update to 1.4.1:
  * Bug fix release fixing logic around determining whether to autoload
    SEC("struct_ops") programs in cases when old kernel doesn't support some
    optional callbacks and user reset them to NULL from BPF skeleton.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1715428800">- update to 1.4.2:
  * Another struct_ops-focused bug fix release. It addresses a few more corner
    cases when dealing with SEC("struct_ops") programs.
  * It also improves error messaging around common use case of declaring
    struct_ops BPF program and not referencing it from SEC(".struct_ops")
    variable (backed by struct_ops BPF map).
  * This release should improve overall experience of using BPF struct_ops
    functionality.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="2e0d45a5b025a5a3cb3f46bede8edabd5220fe28c7657db24332d1e8140476d5" name="libbpf-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="60.1"/>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE12 build</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1712145600">- update to 1.4.0:
  * support for BPF token throughout low-level and high-level APIs
    (see also LIBBPF_BPF_TOKEN_PATH envvar)
  * struct_ops functionality around handling multi-kernel
    compatibility using BPF CO-RE principles and approaches
  * BPF arena map support
  * support __arena tagged global variables, which are automatically
    put into BPF arena map
  * BPF cookie support for raw tracepoint BPF programs in attach APIs
    loaded or created, respectively
  * add SEC("sk_skb/verdict") support
  * support global subprog argument tagging for for kprobe/uprobe,
    and perf_event BPF program with newly added __arg_ctx,
    __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena
    annotations
  * add bpf_core_cast() macro, improving ergonomics of
    bpf_rdonly_cast() BPF helper
  * __long() macro added for specifying 64-bit values when declaring
    BTF-defined maps
  * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header
  * show specific error messages when attempting to
    use struct bpf_program/bpf_map instances there were not loaded or
    created
  * fix inner map's max_entries setting logic
  * btf_ext__raw_data() and btf__new_split() APIs are added back
  * ignore DWARF sections in BPF linker sanity checks, improving
    handling of some corner cases
  * fix potential NULL dereference when handling corrupted ELF files.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1714651200">- update to 1.4.1:
  * Bug fix release fixing logic around determining whether to autoload
    SEC("struct_ops") programs in cases when old kernel doesn't support some
    optional callbacks and user reset them to NULL from BPF skeleton.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1715428800">- update to 1.4.2:
  * Another struct_ops-focused bug fix release. It addresses a few more corner
    cases when dealing with SEC("struct_ops") programs.
  * It also improves error messaging around common use case of declaring
    struct_ops BPF program and not referencing it from SEC(".struct_ops")
    variable (backed by struct_ops BPF map).
  * This release should improve overall experience of using BPF struct_ops
    functionality.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="1d70ed79645956283fc0d2b94c4c808ac984d44c945370cfcd0e38ea78b3838f" name="libbpf-devel" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="60.1"/>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE12 build</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1712145600">- update to 1.4.0:
  * support for BPF token throughout low-level and high-level APIs
    (see also LIBBPF_BPF_TOKEN_PATH envvar)
  * struct_ops functionality around handling multi-kernel
    compatibility using BPF CO-RE principles and approaches
  * BPF arena map support
  * support __arena tagged global variables, which are automatically
    put into BPF arena map
  * BPF cookie support for raw tracepoint BPF programs in attach APIs
    loaded or created, respectively
  * add SEC("sk_skb/verdict") support
  * support global subprog argument tagging for for kprobe/uprobe,
    and perf_event BPF program with newly added __arg_ctx,
    __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena
    annotations
  * add bpf_core_cast() macro, improving ergonomics of
    bpf_rdonly_cast() BPF helper
  * __long() macro added for specifying 64-bit values when declaring
    BTF-defined maps
  * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header
  * show specific error messages when attempting to
    use struct bpf_program/bpf_map instances there were not loaded or
    created
  * fix inner map's max_entries setting logic
  * btf_ext__raw_data() and btf__new_split() APIs are added back
  * ignore DWARF sections in BPF linker sanity checks, improving
    handling of some corner cases
  * fix potential NULL dereference when handling corrupted ELF files.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1714651200">- update to 1.4.1:
  * Bug fix release fixing logic around determining whether to autoload
    SEC("struct_ops") programs in cases when old kernel doesn't support some
    optional callbacks and user reset them to NULL from BPF skeleton.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1715428800">- update to 1.4.2:
  * Another struct_ops-focused bug fix release. It addresses a few more corner
    cases when dealing with SEC("struct_ops") programs.
  * It also improves error messaging around common use case of declaring
    struct_ops BPF program and not referencing it from SEC(".struct_ops")
    variable (backed by struct_ops BPF map).
  * This release should improve overall experience of using BPF struct_ops
    functionality.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="a71d63bc0fb0a7883f6cb0767c8792d330510010755a6e42116220faad1c557e" name="libbpf-devel-static" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="60.1"/>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE12 build</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1712145600">- update to 1.4.0:
  * support for BPF token throughout low-level and high-level APIs
    (see also LIBBPF_BPF_TOKEN_PATH envvar)
  * struct_ops functionality around handling multi-kernel
    compatibility using BPF CO-RE principles and approaches
  * BPF arena map support
  * support __arena tagged global variables, which are automatically
    put into BPF arena map
  * BPF cookie support for raw tracepoint BPF programs in attach APIs
    loaded or created, respectively
  * add SEC("sk_skb/verdict") support
  * support global subprog argument tagging for for kprobe/uprobe,
    and perf_event BPF program with newly added __arg_ctx,
    __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena
    annotations
  * add bpf_core_cast() macro, improving ergonomics of
    bpf_rdonly_cast() BPF helper
  * __long() macro added for specifying 64-bit values when declaring
    BTF-defined maps
  * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header
  * show specific error messages when attempting to
    use struct bpf_program/bpf_map instances there were not loaded or
    created
  * fix inner map's max_entries setting logic
  * btf_ext__raw_data() and btf__new_split() APIs are added back
  * ignore DWARF sections in BPF linker sanity checks, improving
    handling of some corner cases
  * fix potential NULL dereference when handling corrupted ELF files.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1714651200">- update to 1.4.1:
  * Bug fix release fixing logic around determining whether to autoload
    SEC("struct_ops") programs in cases when old kernel doesn't support some
    optional callbacks and user reset them to NULL from BPF skeleton.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1715428800">- update to 1.4.2:
  * Another struct_ops-focused bug fix release. It addresses a few more corner
    cases when dealing with SEC("struct_ops") programs.
  * It also improves error messaging around common use case of declaring
    struct_ops BPF program and not referencing it from SEC(".struct_ops")
    variable (backed by struct_ops BPF map).
  * This release should improve overall experience of using BPF struct_ops
    functionality.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="85a9e8875e7cda9a288e775905b75be3c2d3e583f028ee2433c7822dc682453b" name="libbpf1" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="60.1"/>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE12 build</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1712145600">- update to 1.4.0:
  * support for BPF token throughout low-level and high-level APIs
    (see also LIBBPF_BPF_TOKEN_PATH envvar)
  * struct_ops functionality around handling multi-kernel
    compatibility using BPF CO-RE principles and approaches
  * BPF arena map support
  * support __arena tagged global variables, which are automatically
    put into BPF arena map
  * BPF cookie support for raw tracepoint BPF programs in attach APIs
    loaded or created, respectively
  * add SEC("sk_skb/verdict") support
  * support global subprog argument tagging for for kprobe/uprobe,
    and perf_event BPF program with newly added __arg_ctx,
    __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena
    annotations
  * add bpf_core_cast() macro, improving ergonomics of
    bpf_rdonly_cast() BPF helper
  * __long() macro added for specifying 64-bit values when declaring
    BTF-defined maps
  * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header
  * show specific error messages when attempting to
    use struct bpf_program/bpf_map instances there were not loaded or
    created
  * fix inner map's max_entries setting logic
  * btf_ext__raw_data() and btf__new_split() APIs are added back
  * ignore DWARF sections in BPF linker sanity checks, improving
    handling of some corner cases
  * fix potential NULL dereference when handling corrupted ELF files.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1714651200">- update to 1.4.1:
  * Bug fix release fixing logic around determining whether to autoload
    SEC("struct_ops") programs in cases when old kernel doesn't support some
    optional callbacks and user reset them to NULL from BPF skeleton.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1715428800">- update to 1.4.2:
  * Another struct_ops-focused bug fix release. It addresses a few more corner
    cases when dealing with SEC("struct_ops") programs.
  * It also improves error messaging around common use case of declaring
    struct_ops BPF program and not referencing it from SEC(".struct_ops")
    variable (backed by struct_ops BPF map).
  * This release should improve overall experience of using BPF struct_ops
    functionality.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="8ca80183a1188edfb5b16b4e510b895c424c9be7b573bf912ac516e34cc64fd8" name="libbpf1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="60.1"/>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE12 build</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.3.0:
  * support for `netfilter` programs is added
    `SEC("netfilter")` is now available
  * API function `bpf_program__attach_netfilter()` is now
    available
  * support for `tcx` BPF programs is added:
  * the following new SEC definitions are now available:
    SEC("tc/egress"), SEC("tc/ingress"), SEC("tcx/egress"),
    SEC("tcx/ingress")
  * the following SEC definitions are now considered legacy:
    SEC("tc"), SEC("action"), SEC("classifier")
  * functions `bpf_prog_attach_opts()` and
    `bpf_prog_query_opts()` are extended to work with `tcx`
    programs, plus two new API functions are added:
  * the following new SEC definitions are now available:
    SEC("uprobe.multi"), SEC("uprobe.multi.s"),
    SEC("uretprobe.multi"), SEC("uretprobe.multi.s")
  * support for section `SEC("usdt.s")` is added for sleepable
    `usdt` programs;
  * support for Unix domain socket cgroup BPF programs is added
    the following new SEC definitions are now available:
    SEC("cgroup/connect_unix"),SEC("cgroup/sendmsg_unix"),
    SEC("cgroup/recvmsg_unix"), SEC("cgroup/getpeername_unix"),
    SEC("cgroup/getsockname_unix")
  * new `LIBBPF_OPTS_RESET()` utility macro;
  * new `bpf_object__unpin()` function to complement existing
    `bpf_object__pin()`;
  * new API functions for work with ring buffers
  * uprobe SEC matcher extended to allow golang symbols;
  * uprobe support for symbols versioning;
  * `bpf_map__set_value_size()` can now be used to resize memory
    mapped region for memory mapped maps;
  * `struct bpf_xdp_query_opts` extended with `xdp_zc_max_segs`
    output field;
  * basic BTF sanity check pass added to reject bogus BTF.
  * fix for btf_dump__dump_type_data() when type contains
    bitfields;
  * fix for correct work of offsetof() and container_of() macro
    with CO-RE;
  * no longer attempt to load modules BTF when resolving CO-RE
    relocations if CAP_SYS_ADMIN are absent;
  * regex based function search for "kprobe.multi/" programs no
    longer attempts to trace functions that cannot be traced;
  * bpf_program__set_type() no longer resets sec_def if it is set
    to a custom fallback SEC handler;
  * fix for memory leak possible after
    bpf_program__set_attach_target() call;</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1712145600">- update to 1.4.0:
  * support for BPF token throughout low-level and high-level APIs
    (see also LIBBPF_BPF_TOKEN_PATH envvar)
  * struct_ops functionality around handling multi-kernel
    compatibility using BPF CO-RE principles and approaches
  * BPF arena map support
  * support __arena tagged global variables, which are automatically
    put into BPF arena map
  * BPF cookie support for raw tracepoint BPF programs in attach APIs
    loaded or created, respectively
  * add SEC("sk_skb/verdict") support
  * support global subprog argument tagging for for kprobe/uprobe,
    and perf_event BPF program with newly added __arg_ctx,
    __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena
    annotations
  * add bpf_core_cast() macro, improving ergonomics of
    bpf_rdonly_cast() BPF helper
  * __long() macro added for specifying 64-bit values when declaring
    BTF-defined maps
  * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header
  * show specific error messages when attempting to
    use struct bpf_program/bpf_map instances there were not loaded or
    created
  * fix inner map's max_entries setting logic
  * btf_ext__raw_data() and btf__new_split() APIs are added back
  * ignore DWARF sections in BPF linker sanity checks, improving
    handling of some corner cases
  * fix potential NULL dereference when handling corrupted ELF files.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1714651200">- update to 1.4.1:
  * Bug fix release fixing logic around determining whether to autoload
    SEC("struct_ops") programs in cases when old kernel doesn't support some
    optional callbacks and user reset them to NULL from BPF skeleton.</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1715428800">- update to 1.4.2:
  * Another struct_ops-focused bug fix release. It addresses a few more corner
    cases when dealing with SEC("struct_ops") programs.
  * It also improves error messaging around common use case of declaring
    struct_ops BPF program and not referencing it from SEC(".struct_ops")
    variable (backed by struct_ops BPF map).
  * This release should improve overall experience of using BPF struct_ops
    functionality.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- update to 1.4.3:
  * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally)
    duping FDs</changelog>
  <changelog author="dmueller@suse.com" date="1721304000">- update to 1.4.5:
  * Another small bug fix release backporting https://github.com/
    libbpf/libbpf/commit/d9f9fd5b22223ae69c62e083da6093d95a0db799
    which works around kernel-side bug with USDT PID filtering on
    kernels that support multi-uprobe (but have broken PID
    filtering).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1725451200">- update to 1.4.6:
  * BPF skeleton forward compatibility fix (f6f2402);
  * BTF endianness inheritance bug fix (fe28fae).</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- update to 1.4.7:
  * fix interop issues between generic bpf_object__open() APIs and BPF
    subskeleton w.r.t. global data handling
  * speed up BTF sanity checks by skipping already validated base BTF
  * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program
    in some cases</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289601">- update to 1.5.0:
  * libbpf can now open (but not load!) BPF objects of non-native endianness,
    enabling cross-architecture support for BPF skeleton generation and BPF
    object introspection
  * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of
    &lt;skeleton&gt;__attach() call
  * BPF kprobe session programs support (SEC("kprobe.session"))
  * allow specifying kernel module name for fentry/fexit BPF programs
    (SEC(fentry/module:function)
  * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used
    to set default log verboseness
  * BPF ringbuf APIs that limit maximum number of consumed records at a time
    (ring_buffer__consume_n(), ring__consume_n())
  * distilled BTF support (btf__distill_base(), btf__relocate())
  * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs
    (bpf_program__attach_sockmap())
  * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any
  * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures
  * better GCC-BPF source code compatibility
  * __bpf_fastcall support for a few BPF helpers
  * __uptr annotation definition added to bpf/bpf_helpers.h API header
  * fixes and improvements around handling missing and nulled out struct_ops
    programs
  * fixed mmap()-ing logic for global data, fixing interop between generic
    bpf_object__open() APIs and BPF subskeletons
  * BPF skeleton backwards compatibility handling fixes
  * handle LTO-produced *.llvm.&lt;hash&gt; symbols better
  * feature detection fixes in the presence of BPF token inside user namespace
  * older kernels have broken PID filtering logic for multi-uprobes, libbpf now
    detects this and avoids the use of multi-uprobes for USDTs
  * fix accidental drop of FD_CLOEXEC flag during BPF map reuse
  * few BTF dumper formatting fixes
  * a few more small fixes all around.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Drop libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch
  * included since 1.4.0</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1747742400">- update to 1.5.1:
  * Patch release with a single backported change that improves compatibility
    story of older versions of libbpf-cargo.
    https://github.com/libbpf/libbpf/commit/
    453601a65a6ebcf523b009585b49ce0ad0adeff1</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749124800">- Workaround kernel module size increase due to BTF deduplication
  issue since the introduction of TYPEOF_UNQUAL (poo#183503 bsc#1244135)
  * add 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1753099200">- update to 1.6.0:
  * add more control over BPF object lifetime with new preparation step
    (bpf_object__prepare() API)
  * libbpf will report symbolic error code (e.g., "-EINVAL") in addition to
    human-readable error description
  * bpf_prog_stream_read() API
  * BPF token support when attaching BPF trampoline-based BPF programs in
    bpf_program__set_attach_target()
  * BPF token support for BPF_BTF_GET_FD_BY_ID command
  * support multi-uprobe session (SEC("uprobe.session")) BPF programs
  * support unique_match option for multi-kprobe attachment
  * support creating and destroying qdisk with BPF_TC_QDISC flag;
  * bpf_program__attach_cgroup_opts() which enables more precise cgroup-based
    attachment ordering
  * automatically take advantage of memory-mappable kernel BTF
    (/sys/kernel/btf/vmlinux), if supported
  * emit_strings option for BTF dumper API, improving string-like data printing
  * add BPF program's func and line info accessors
  * BPF linker supports linking ELF object files coming from memory buffer and
    referenced by FD, in addition to file path-based APIs;
  * small improvements to BTF dedup to handle rare quirky corner cases produces
    by some compilers
  * add likely() and unlikely() convenience macros;
  * __arg_untrusted annotation for BPF global subprog arguments;
  * bpf_stream_printk() macro for working with BPF streams;
  * bpf_usdt_arg_size() API
- update to 1.6.0:
  * fixing a possible crash when handling BPF arena global variable relocations
- drop 0001-libbpf-Add-identical-pointer-detection-to-btf_dedup_.patch, which
  is now included</changelog>
</package>
<package pkgid="022a9801eff784d93669262fb597ac83bf25a92fc2e1654d16af2a9a2aeec9ea" name="libip4tc2" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="474271fec9f68fcde6ef14a1bede7a42ef149e59390e71256b59e01b2680c88a" name="libip4tc2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="6d79237f6691cb4c9aad54204a51d54f9d913eb178a6046680dd40640ba0b353" name="libip6tc2" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="a169da1b7d359a1e78626336ce1090381a26890e0b3f49e41b8cd4675f1b68e3" name="libip6tc2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="8d8a289b34698027faa3255bdd65bf1ba6b39065de128de9173aab862f1d53ce" name="libipq-devel" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="10e73e1715098fee0155bc192a04a3d5507c197f41956dff5b04730d1ecfafa5" name="libipq0" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="4f6199fe621359a1346ffff865ff357c0850bc33fb0a2494589296081cf2da22" name="libipq0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="f3062ca66448367a699715d1c5426c45e3a77fec05cd7a236f60ae868f6082ee" name="libiptc-devel" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="c9a8d406706591ebb35ac967ca30797224e1e6d934d3b1511d6002c035f739a7" name="libjansson" arch="src">
  <version epoch="0" ver="2.15.1" rel="6.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="info@paolostivanin.com" date="1747310400">- Update to 2.14.1:
  * Fix thread safety of encoding and decoding when uselocale() or newlocale()
    is used to switch locales inside the threads (#674, #675, #677).
  * Use David M. Gay’s dtoa() algorithm to avoid misprinting issues of
    real numbers that are not exactly representable as a double() (#680).</changelog>
  <changelog author="info@paolostivanin.com" date="1770379200">- Update to 2.15.0:
  * Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2
  * Optimize serialization</changelog>
  <changelog author="info@paolostivanin.com" date="1782993600">- Update to 2.15.1:
  * Include the object key or array index in unpack type mismatch error
    messages (@cwalther in #731)
  * Reject negative string length in the json_pack s# and +# formats
    (@akheron in #740)
  * Limit recursion depth in dump, equal and deep copy to prevent stack
    overflow (@akheron in #741)</changelog>
</package>
<package pkgid="0cae9f3090e96ee2bfe8a0d065fd6dd203c6145a4b475ef140c481b65b5881bb" name="libjansson-debugsource" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="6.1"/>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="info@paolostivanin.com" date="1747310400">- Update to 2.14.1:
  * Fix thread safety of encoding and decoding when uselocale() or newlocale()
    is used to switch locales inside the threads (#674, #675, #677).
  * Use David M. Gay’s dtoa() algorithm to avoid misprinting issues of
    real numbers that are not exactly representable as a double() (#680).</changelog>
  <changelog author="info@paolostivanin.com" date="1770379200">- Update to 2.15.0:
  * Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2
  * Optimize serialization</changelog>
  <changelog author="info@paolostivanin.com" date="1782993600">- Update to 2.15.1:
  * Include the object key or array index in unpack type mismatch error
    messages (@cwalther in #731)
  * Reject negative string length in the json_pack s# and +# formats
    (@akheron in #740)
  * Limit recursion depth in dump, equal and deep copy to prevent stack
    overflow (@akheron in #741)</changelog>
</package>
<package pkgid="a2816f5d6d2c1daf4342eab22d54168eeddc2f33c0aa516703b2fa38386abaae" name="libjansson-devel" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="6.1"/>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="info@paolostivanin.com" date="1747310400">- Update to 2.14.1:
  * Fix thread safety of encoding and decoding when uselocale() or newlocale()
    is used to switch locales inside the threads (#674, #675, #677).
  * Use David M. Gay’s dtoa() algorithm to avoid misprinting issues of
    real numbers that are not exactly representable as a double() (#680).</changelog>
  <changelog author="info@paolostivanin.com" date="1770379200">- Update to 2.15.0:
  * Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2
  * Optimize serialization</changelog>
  <changelog author="info@paolostivanin.com" date="1782993600">- Update to 2.15.1:
  * Include the object key or array index in unpack type mismatch error
    messages (@cwalther in #731)
  * Reject negative string length in the json_pack s# and +# formats
    (@akheron in #740)
  * Limit recursion depth in dump, equal and deep copy to prevent stack
    overflow (@akheron in #741)</changelog>
</package>
<package pkgid="9bd5b1557b3f7ff1d7cdb5554673b361b2a4f733959c5d0c155cf6d2d234ecca" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="6.1"/>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="info@paolostivanin.com" date="1747310400">- Update to 2.14.1:
  * Fix thread safety of encoding and decoding when uselocale() or newlocale()
    is used to switch locales inside the threads (#674, #675, #677).
  * Use David M. Gay’s dtoa() algorithm to avoid misprinting issues of
    real numbers that are not exactly representable as a double() (#680).</changelog>
  <changelog author="info@paolostivanin.com" date="1770379200">- Update to 2.15.0:
  * Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2
  * Optimize serialization</changelog>
  <changelog author="info@paolostivanin.com" date="1782993600">- Update to 2.15.1:
  * Include the object key or array index in unpack type mismatch error
    messages (@cwalther in #731)
  * Reject negative string length in the json_pack s# and +# formats
    (@akheron in #740)
  * Limit recursion depth in dump, equal and deep copy to prevent stack
    overflow (@akheron in #741)</changelog>
</package>
<package pkgid="e689842fe58ccdce43d3382613fe530e31d55cfbb586237597f9c41f2e943644" name="libjansson4-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="6.1"/>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- update to new upstream release 2.11
  * New features:
  - Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
  - Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
  - Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
  - Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Bug Fixes:
  - Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
  - Make json_equal() const-correct (#344).
  - Fix incomplete stealing of references by `json_pack()` (#374)
- changelog from 2.9
  * New features:
  - Add JSON_EMBED encoding flag allowing arrays and objects to
    be encoded into existing streams (#329).
  - Add `json_dumpb()` function for dumping to a pre-allocated
    buffer (#328).
  - Add `json_dumpfd()` and `json_loadfd()` functions for dumping
    to streaming file descriptors (#328).
  - Add support for parsing buffers larger than 2GB (#309).</changelog>
  <changelog author="info@paolostivanin.com" date="1548331200">- update to new upstream release 2.12
  * Bug fixes:
  - Fix error message in `json_pack()` for NULL object (#409).
  - Avoid invalid memory read in `json_pack()` (#421).
  - Call va_end after va_copy in `json_vsprintf()` (#427).
  - Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
  - Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).</changelog>
  <changelog author="info@paolostivanin.com" date="1588939200">- Update to 2.13.1
  * New Features:
  - Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
  - Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
  - Add json_object_update_recursive()
  * Bug fixes:
  - Add infinite loop check in json_deep_copy()
  - Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
  - Update version detection for sphinx-build
  * Documentation improvements</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1642507200">- Update to 2.14:
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
  * Fixes:
    + Handle `sprintf` corner cases.
  * Build:
    + Symbol versioning for all exported symbols (gh#akheron/jansson#523).
    + Fix compiler warnings.
  * Documentation:
    + Small fixes.
    + Sphinx 3 compatibility (gh#akheron/jansson#530).
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Cleanup with spec-cleaner.
- Add check section.</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="info@paolostivanin.com" date="1747310400">- Update to 2.14.1:
  * Fix thread safety of encoding and decoding when uselocale() or newlocale()
    is used to switch locales inside the threads (#674, #675, #677).
  * Use David M. Gay’s dtoa() algorithm to avoid misprinting issues of
    real numbers that are not exactly representable as a double() (#680).</changelog>
  <changelog author="info@paolostivanin.com" date="1770379200">- Update to 2.15.0:
  * Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2
  * Optimize serialization</changelog>
  <changelog author="info@paolostivanin.com" date="1782993600">- Update to 2.15.1:
  * Include the object key or array index in unpack type mismatch error
    messages (@cwalther in #731)
  * Reject negative string length in the json_pack s# and +# formats
    (@akheron in #740)
  * Limit recursion depth in dump, equal and deep copy to prevent stack
    overflow (@akheron in #741)</changelog>
</package>
<package pkgid="dc690314653ad6cabc08b62d519895770d7ad6425c826ce61d5bfabddabd5538" name="libmnl" arch="src">
  <version epoch="0" ver="1.0.5" rel="54.2"/>
  <changelog author="jengelh@medozas.de" date="1287489600">- Initial package</changelog>
  <changelog author="jengelh@medozas.de" date="1292587200">- Update to initial public tarball release, version 1.0.0
  * Added checking variants of the put function family.
  * Message batching infrastructure
- Run spec-beautifier on .spec file</changelog>
  <changelog author="jengelh@medozas.de" date="1293364800">- Update to libmnl 1.0.1
  * examples: fix wrong group mask number in nfct-event
  * header: fix signess issues in MNL_SOCKET_BUFFER_SIZE</changelog>
  <changelog author="jengelh@medozas.de" date="1325160000">- SPDX format for License: tag
- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to new upstream release 1.0.2
  * build and compile updates
  * header: fix invalid use of type void * in arithmetic of
  mnl_for_each_nest(...)
  * doc: fix wrong comment describing mnl_nlmsg_batch_stop</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="mkubecek@suse.cz" date="1589284800">- more SLE11/SLE12 build fixes
  * handle missing %make_build
  * handle missing %license
  * define BuildRoot
  * restore %defattr</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="0ccaf29e0891f48c5969e450812ce8019915eb19c244beeadefe9f309fee2367" name="libmnl-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="54.2"/>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="mkubecek@suse.cz" date="1589284800">- more SLE11/SLE12 build fixes
  * handle missing %make_build
  * handle missing %license
  * define BuildRoot
  * restore %defattr</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="b7eb6929c66bcc93ea5d74672b839e23c5852a9db39a416976e7f098271343d0" name="libmnl-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="54.2"/>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="mkubecek@suse.cz" date="1589284800">- more SLE11/SLE12 build fixes
  * handle missing %make_build
  * handle missing %license
  * define BuildRoot
  * restore %defattr</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="3868444bfaa0190b5a34e66e74fdf8d320d18d988a520f55d0874e41b3218d1f" name="libmnl0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="54.2"/>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="mkubecek@suse.cz" date="1589284800">- more SLE11/SLE12 build fixes
  * handle missing %make_build
  * handle missing %license
  * define BuildRoot
  * restore %defattr</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="8323a60fa0439a90bf56361d1e02b6a77519954fffc1843bca1d0febcec1f1a7" name="libmnl0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="54.2"/>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11 SP2 and older</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587038400">- package the license text</changelog>
  <changelog author="mkubecek@suse.cz" date="1589284800">- more SLE11/SLE12 build fixes
  * handle missing %make_build
  * handle missing %license
  * define BuildRoot
  * restore %defattr</changelog>
  <changelog author="jengelh@inai.de" date="1649160000">- Update to release 1.0.5
  * New example program
  * "MNL_SOCKET_DUMP_SIZE" define, holding a recommended buffer
    size for netlink dumps.
  * Resolved compiler warnings</changelog>
</package>
<package pkgid="2d166e48964a6b2421fdb0bff4e2e554d02ad57a78d1eca0833bbd330f21f975" name="libnetfilter_conntrack" arch="src">
  <version epoch="0" ver="1.1.0" rel="6.1"/>
  <changelog author="jengelh@medozas.de" date="1279195200">- new upstream release 0.0.102
  * support for conntrack zones
  * support for TCP window scale factor</changelog>
  <changelog author="jengelh@medozas.de" date="1283947200">- new upstream release 0.9.0
  * ct: fix regression with helpers for Linux kernel &gt;= 2.6.34
  * ct: fix EINVAL if not TCP attributes are set for Linux
  kernel &lt;= 2.6.25</changelog>
  <changelog author="jengelh@medozas.de" date="1298548800">- new upstream release 0.9.1
  * add support for CTA_SECCTX and CTA_EXPECT_ZONE
  * allow to use nfct handler for conntrack and expectations at
  the same time
  * conntrack: add timestamp support</changelog>
  <changelog author="jengelh@medozas.de" date="1325160000">- SPDX format for License: tag
- Use separate include directory to catch compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325678400">- Update to new upstream release 1.0.0
  * build and compilation updates
  * expect: fix missing parsing of master tuple
  * expect: nfexp_snprintf prints expectation timeout if present
  * expect: nfexp_snprintf displays mask and master tuple information
  * expect: add nfexp_send()
  * expect: support CTA_EXPECT_HELP_NAME
  * src: clarify licensing terms of library (GPLv2+)
  * conntrack: fix size of CTA_PROTOINFO_TCP_FLAGS_ORIGINAL in ARM
  * conntrack: fix set operation for master IPv6 src and dst
  * expect: add nfexp_cmp</changelog>
  <changelog author="jengelh@inai.de" date="1337428800">- Update to new upstream release 1.0.1
  * add NAT, expectfn and class support
  * conntrack: add new ATTR_GRP_[ORIG|REPL]_ADDR_[SRC|DST] attributes</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl,
  and also has several fixes.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.0.3
  * Treat the ATTR_HELPER_INFO attribute as the variable-length type
  that it actually is.
  * Fix a use after free when nfct_clone was used with certain
  attribute data types.</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.0.4
  * This release includes connlabel support, one memleak fix and
  fixes in the comparison API.</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
  <changelog author="jengelh@inai.de" date="1727352000">- Update to release 1.1.0
  * Enhancements for filtering dump and flush commands, see
    struct nfct_filter_dump and nfct_nlmsg_build_filter().
  * ctnetlink event BPF fixes (endianness issue, IPv6 matching)
    and enhancements (zone matching).</changelog>
</package>
<package pkgid="3b7ad1fa6f2e7cccc600a915d2961a2dcba4a9e77dd8ca5eba930ce19a751727" name="libnetfilter_conntrack-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
  <changelog author="jengelh@inai.de" date="1727352000">- Update to release 1.1.0
  * Enhancements for filtering dump and flush commands, see
    struct nfct_filter_dump and nfct_nlmsg_build_filter().
  * ctnetlink event BPF fixes (endianness issue, IPv6 matching)
    and enhancements (zone matching).</changelog>
</package>
<package pkgid="53864868a481116929b067f08b6236fd176daabdac82c4702107ca2632a5a76b" name="libnetfilter_conntrack-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
  <changelog author="jengelh@inai.de" date="1727352000">- Update to release 1.1.0
  * Enhancements for filtering dump and flush commands, see
    struct nfct_filter_dump and nfct_nlmsg_build_filter().
  * ctnetlink event BPF fixes (endianness issue, IPv6 matching)
    and enhancements (zone matching).</changelog>
</package>
<package pkgid="1904c571864d441de9a750a811cb176a6c82a0ca69cab30c461b14f78a4aed02" name="libnetfilter_conntrack3" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
  <changelog author="jengelh@inai.de" date="1727352000">- Update to release 1.1.0
  * Enhancements for filtering dump and flush commands, see
    struct nfct_filter_dump and nfct_nlmsg_build_filter().
  * ctnetlink event BPF fixes (endianness issue, IPv6 matching)
    and enhancements (zone matching).</changelog>
</package>
<package pkgid="bb16ede1503206c1979c5b5ce4740920f82b72cec35c18d07edfa85bd5db7de2" name="libnetfilter_conntrack3-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.0.8
  * conntrack: support for IPS_OFFLOAD</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="jengelh@inai.de" date="1644840000">- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.</changelog>
  <changelog author="jengelh@inai.de" date="1727352000">- Update to release 1.1.0
  * Enhancements for filtering dump and flush commands, see
    struct nfct_filter_dump and nfct_nlmsg_build_filter().
  * ctnetlink event BPF fixes (endianness issue, IPv6 matching)
    and enhancements (zone matching).</changelog>
</package>
<package pkgid="e4084b3c8a380da5d16efb94ef27a162722ed3a02b5e5e9a616627095c82274f" name="libnetfilter_cthelper" arch="src">
  <version epoch="0" ver="1.0.1" rel="42.2"/>
  <changelog author="jengelh@inai.de" date="1338811200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking builds on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="d7bb300a6900d517d4d7d0d32acdb7b4add997b817736f45b8de2d605999cd78" name="libnetfilter_cthelper-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="42.2"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking builds on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="7d98bd955897a6a0250f2058d0937ab0f32d04bb1f9bbccb26cd4753d1743054" name="libnetfilter_cthelper-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="42.2"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking builds on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="242b88a8bc8810f0fce06d978a049f01abfffef6528df7c700392ba73aa66d89" name="libnetfilter_cthelper0" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="42.2"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking builds on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="1fd32acfe7fbf7185a60f6475fa69fc26c0e7b77beb34baee7c86c63a103bcaf" name="libnetfilter_cthelper0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="42.2"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking builds on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow build on uclinux
  * Resolve use-after-free in nfct_helper_free()
  * Resolve double free in nfct-helper-add example
  * Fixed incorrect netlink message building with multiple nfct
    helper policies
- Drop fix_h_expect_policy_free.patch (merged)</changelog>
</package>
<package pkgid="860ebdd35bbabe92508ddb7d2221bd7e140a4f0132304fb6052dd005ff9c6234" name="libnetfilter_cttimeout" arch="src">
  <version epoch="0" ver="1.0.1" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="20b849ecd4024f2529e965ec431a4bf6cb9faa38837451444184dfacb7dd5806" name="libnetfilter_cttimeout-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="b4304fdf7dab99db3336d25d4e39f84e2e288a6f1b042350d93db4a221b9aaf7" name="libnetfilter_cttimeout-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="20965b3171fbb8665f464b1a21b9b85fd275c3707d5a610f93bfda22a55e4edc" name="libnetfilter_cttimeout1" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="b4214477c02d6dddda65055cd1a87e30e62d2a06734b368c38f468cd467bf9cc" name="libnetfilter_cttimeout1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1651752000">- Update to release 1.0.1
  * Allow building on uclinux</changelog>
</package>
<package pkgid="ef0c803758e13fe9a276f2fe9094df2230759c5c61569c397170151fa34366dd" name="libnetfilter_queue" arch="src">
  <version epoch="0" ver="1.0.5" rel="62.1"/>
  <changelog author="jengelh@medozas.de" date="1266926400">- add baselibs.conf
- use %_smp_mflags
- remove unnecessary PreReq: glibc
- secure the *.la delete call
- wrap description at col 70
- merge extra libnetfilter_queue_libipq package back into main</changelog>
  <changelog author="jengelh@medozas.de" date="1278849600">- Update to new upstream release 1.0.0
  * Deprecate nfq_set_verdict_mark in favor of nfq_set_verdict2
  * Add nfq_snprintf_xml to output packet as XML</changelog>
  <changelog author="jengelh@medozas.de" date="1325160000">- Use SPDX format for License: tag
- Use separate include directory to detect compilation errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to new upstream release 1.0.1
  * build and compile fixes
  * add NFQNL_MSG_VERDICT_BATCH support
  * add notes on NF_STOLEN and NF_REPEAT to documentation
  * utils: document ENOBUFS in nfqnl_test.c
  * nfq: add missing documentation on nfq_snprintf_xml
  * doc: document some performance tweaks for libnetfilter_queue
  * doc: fix wrong documentation on NFQNL_COPY_NONE</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Update to new upstream release 1.0.3
  * No changelog was provided, in fact, no release announcement
    has been made.
- Drop rhel6-iptos.diff, we do not particularly care for RHEL6.</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.0.4
  * Add new nfq_get_skbinfo() helper. This allows to detect when
    packet checksums have been validated already or if they will
    be filled in by tx checksum offload on transmit later on.</changelog>
  <changelog author="jengelh@inai.de" date="1591963200">- Update to release 1.0.5
  * Change in build procedure regarding Doxygen only.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
</package>
<package pkgid="6c581afa557d9899ee38ee38b2f4259d3d6b5116a49419a08b40373111839d61" name="libnetfilter_queue-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Update to new upstream release 1.0.3
  * No changelog was provided, in fact, no release announcement
    has been made.
- Drop rhel6-iptos.diff, we do not particularly care for RHEL6.</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.0.4
  * Add new nfq_get_skbinfo() helper. This allows to detect when
    packet checksums have been validated already or if they will
    be filled in by tx checksum offload on transmit later on.</changelog>
  <changelog author="jengelh@inai.de" date="1591963200">- Update to release 1.0.5
  * Change in build procedure regarding Doxygen only.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
</package>
<package pkgid="dc7bbc8651c51b8fc6f5988fc2a02f20dd32072154c9c0a41871b601b08c576e" name="libnetfilter_queue-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Update to new upstream release 1.0.3
  * No changelog was provided, in fact, no release announcement
    has been made.
- Drop rhel6-iptos.diff, we do not particularly care for RHEL6.</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.0.4
  * Add new nfq_get_skbinfo() helper. This allows to detect when
    packet checksums have been validated already or if they will
    be filled in by tx checksum offload on transmit later on.</changelog>
  <changelog author="jengelh@inai.de" date="1591963200">- Update to release 1.0.5
  * Change in build procedure regarding Doxygen only.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
</package>
<package pkgid="b130ab883ef88d20447c1dabc9ac8544f7b02bcfb26c3d2d91c5a8f23166e69e" name="libnetfilter_queue1" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Update to new upstream release 1.0.3
  * No changelog was provided, in fact, no release announcement
    has been made.
- Drop rhel6-iptos.diff, we do not particularly care for RHEL6.</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.0.4
  * Add new nfq_get_skbinfo() helper. This allows to detect when
    packet checksums have been validated already or if they will
    be filled in by tx checksum offload on transmit later on.</changelog>
  <changelog author="jengelh@inai.de" date="1591963200">- Update to release 1.0.5
  * Change in build procedure regarding Doxygen only.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
</package>
<package pkgid="5cf98edb867d7c84b187281bb9a0d3b312af699a5b9b45344ffdf2c66c27a8b3" name="libnetfilter_queue1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- fix build on SLE11</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Update to new upstream release 1.0.3
  * No changelog was provided, in fact, no release announcement
    has been made.
- Drop rhel6-iptos.diff, we do not particularly care for RHEL6.</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.0.4
  * Add new nfq_get_skbinfo() helper. This allows to detect when
    packet checksums have been validated already or if they will
    be filled in by tx checksum offload on transmit later on.</changelog>
  <changelog author="jengelh@inai.de" date="1591963200">- Update to release 1.0.5
  * Change in build procedure regarding Doxygen only.</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
</package>
<package pkgid="bb71b02f9fbda40f5ef3d457159f9a1d2997886035c85c77b0179a3238f60dd3" name="libnetlink-devel" arch="x86_64">
  <version epoch="0" ver="6.16" rel="19.1"/>
  <changelog author="gmbr3@opensuse.org" date="1665230400">- update to 6.0:
  * ipstats: Add param.h for musl
  * Update kernel headers
  * libbpf: add xdp program name support
  * iplink: bond_slave: add per port prio support
  * seg6: add support for SRv6 Headend Reduced Encapsulation
  * lib: Introduce ppp protocols
  * f_flower: Introduce PPPoE support</changelog>
  <changelog author="jengelh@inai.de" date="1669118400">- Replace routel program by a non-python version [boo#1205632]</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 6.1:
  * man: ss.8: fix a typo
  * testsuite: fix build failure
  * genl: remove unused vars in Makefile
  * json: do not escape single quotes
  * ip-monitor: Do not error out when RTNLGRP_STATS is not available
  * ip-link: man: Document existence of netns argument in add command
  * macsec: add Extended Packet Number support
  * macsec: add user manual description for extended packet number feature
  * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces
  * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes
  * ip: add NLM_F_ECHO support
  * libnetlink: add offset for nl_dump_ext_ack_done
  * tc/tc_monitor: print netlink extack message
  * rtnetlink: add new function rtnl_echo_talk()
  * ip: fix return value for rtnl_talk failures
  * iplink_bridge: Add no_linklocal_learn option support
  * devlink: use dl_no_arg instead of checking dl_argc == 0
  * devlink: remove dl_argv_parse_put
  * mnlg: remove unnused mnlg_socket structure
  * utils: extract CTRL_ATTR_MAXATTR and save it
  * devlink: expose nested devlink for a line card object
  * devlink: load port-ifname map on demand
  * devlink: fix parallel flash notifications processing
  * devlink: move use_iec into struct dl
  * devlink: fix typo in variable name in ifname_map_cb()
  * devlink: load ifname map on demand from ifname_map_rev_lookup() as well
  * dcb: unblock mnl_socket_recvfrom if not message received
  * libnetlink: Fix memory leak in __rtnl_talk_iov()
  * tc_util: Fix no error return when large parent id used
  * tc_util: Change datatype for maj to avoid overflow issue
  * ss: man: add missing entries for MPTCP
  * ss: man: add missing entries for TIPC
  * ss: usage: add missing parameters
  * ss: re-add TIPC query support
  * devlink: Fix setting parent for 'rate add'
  * link: display 'allmulti' counter
  * seg6: add support for flavors in SRv6 End* behaviors
  * tc: ct: Fix invalid pointer dereference
  * uapi: update from 6.1 pre rc1
  * u32: fix json formatting of flowid
  * tc_stab: remove dead code
  * uapi: update for in.h and ip.h
  * remove #if 0 code
  * tc: add json support to size table
  * tc: put size table options in json object
  * tc/basic: fix json output filter
  * iplink: support JSON in MPLS output
  * tc: print errors on stderr
  * ip: print mpls errors on stderr
  * tc: make prefix const
  * man: add missing tc class show
  * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays
  * ip link: add sub-command to view and change DSA conduit interface</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="jengelh@inai.de" date="1678190400">- Update to release 6.2
  * f_flower: Introduce L2TPv3 support
  * bridge: fdb: Add support for locked FDB entries
  * bridge: link: Add MAC Authentication Bypass (MAB) support
  * ip: Support --json on `ip neigh get`
  * tc: Add JSON output to tc-class</changelog>
  <changelog author="jengelh@inai.de" date="1679313600">- Delete xfrm-support-displaying-transformations-used-for-Mob.patch
  (mip6d-ng is abandoned too)</changelog>
  <changelog author="info@paolostivanin.com" date="1683201600">- Update to release 6.3:
  * New release of iproute2 corresponding to the 6.3 kernel.
    No large feature improvements only incremental improvements to
    the bridge mdb support, mostly just bug fixes.
- Rebase patches.</changelog>
  <changelog author="mkubecek@suse.cz" date="1686571200">- make extended Supplements syntax conditional (fixes SLE12 builds)</changelog>
  <changelog author="jengelh@inai.de" date="1689336000">- Update to release 6.4
  * bridge: mdb: added underlay destination IP support, UDP
    destination port support, destination VNI support, source VNI
    support, outgoing interface support
  * macvlan: added the "bclim" parameter</changelog>
  <changelog author="jengelh@inai.de" date="1694520000">- Update to release 6.5
  * rdma: Report device protocol
  * ip: error out if iplink does not consume all options</changelog>
  <changelog author="jengelh@inai.de" date="1701345600">- Update to release 6.6
  * bridge: Add backup nexthop ID support
  * tc: Classifier support for SPI field
  * tc: support the netem seed parameter for loss and corruption
    events
  * tc: remove support for CBQ
  * tc: remove support for RSVP classifier
  * tc: remove tcindex classifier
  * tc: remove dsmark qdisc
  * tc: drop support for ATM qdisc</changelog>
  <changelog author="jengelh@inai.de" date="1706702400">- Update to release 6.7
  * devlink: Support setting port function ipsec_crypto cap and
    ipsec_packet cap
  * iplink: bridge: Add support for bridge FDB learning limits
  * bridge: fdb: support match on source VNI, nexthop ID,
    destination VNI, destination port, destination IP address and
    [no]router flag in the flush command
  * bridge: mdb: Add get support</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 6.8
  * ip, link: Add support for netkit (a veth-like netdev with
    BPF-programmable transmit queue)
  * ip route: add support for TCP microsecond timestamp
  * bridge: mdb: add flush support</changelog>
  <changelog author="jengelh@inai.de" date="1715860800">- Update to release 6.9
  * ss: add option to suppress queue columns
  * m_mirred: allow mirred to block
  * tc: add NLM_F_ECHO support for actions and filters
  * ip/bond: add coupled_control support
  * ss: add support for BPF socket-local storage
  * ip: ioam6: add monitor command</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 6.10
  * ip: ipnexthop: Support dumping next hop group stats
  * ip: Support filter links with no VF info
  * ip: PFCP device support
  * ip link: hsr: Add support for passing information about
    INTERLINK device</changelog>
  <changelog author="pvorel@suse.cz" date="1737547200">- Update to release 6.13
  * ip rule: added DSCP support
  * ip: added "down" filter for ``ip addr/link show``
  * rdma: added support for ``monitor`` subcommand
  * tc: added support for Hold/Release mechanism in TSN as per
    IEEE 802.1Q-2018
  * vdpa: added support for setting the MAC address in vDPA tool</changelog>
  <changelog author="jengelh@inai.de" date="1744286400">- Update to release 6.14
  * Add IPv6 flow label support to `ip route` and `ip rule`
  * Add `ip monitor maddress` support
  * ss: Display seq counters as decimal for mptcp subflows</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- avoid traditional %patch syntax (fix 16.0 build)</changelog>
  <changelog author="jengelh@inai.de" date="1748865600">- Update to release 6.15
  * tc_util: Add support for 64-bit hardware packets counter
  * iprule: Allow specifying ports in hexadecimal notation
  * iprule: Add port mask support
  * iprule: Add DSCP mask support</changelog>
  <changelog author="pvorel@suse.cz" date="1754913600">- Update to release 6.16
  https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/
  * bond: fix stack smash in xstats
  * tc: Parse FQ band weights correctly</changelog>
</package>
<package pkgid="5062b964ee27266e602317b435b0daf49c2b7fb2551adcd1cd68527dbb332480" name="libnfnetlink" arch="src">
  <version epoch="0" ver="1.0.2" rel="62.1"/>
  <changelog author="bitshuffler #suse@irc.freenode.org" date="1246363200">- Updated to 1.0.0</changelog>
  <changelog author="jengelh@medozas.de" date="1266926400">- add baselibs.conf
- use %_smp_mflags
- secure *.la delete call
- wrap description at col 70</changelog>
  <changelog author="jengelh@medozas.de" date="1267185600">- update to 1.0.0+git1 to have license file available</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1321963200">- Make License field SPDX compliant (bnc#731935)</changelog>
  <changelog author="jengelh@medozas.de" date="1325160000">- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325332800">- Update to new git snapshot 1.0.0+git28
  * build updates, license update</changelog>
  <changelog author="cfarrell@suse.com" date="1328875200">- license update: GPL-2.0
  Look at e.g. src/iftable.c - please check if GPL-3.0 applications require
  this library</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mkubecek@suse.cz" date="1523361600">- fix SLE11 build (no %license macro there)</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="c8f64a669eaa150590277da81b30c14414d3a5d076ef0e67b4c78a118df56264" name="libnfnetlink-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mkubecek@suse.cz" date="1523361600">- fix SLE11 build (no %license macro there)</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="45c41cbbb92495a2aa21354679cff57cf7940bddab05c561b0c23ae1e523799b" name="libnfnetlink-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mkubecek@suse.cz" date="1523361600">- fix SLE11 build (no %license macro there)</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="534ef190c08e132e5f41556bf049694cda7e01ef20c9c8a857aec2190262a35d" name="libnfnetlink0" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mkubecek@suse.cz" date="1523361600">- fix SLE11 build (no %license macro there)</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="d1bded3ad00a803064d058dda2610c807a406ee4a6615aa16ec34a3b258fffa1" name="libnfnetlink0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="62.1"/>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mkubecek@suse.cz" date="1523361600">- fix SLE11 build (no %license macro there)</changelog>
  <changelog author="jengelh@inai.de" date="1602676800">- Modernize specfile constructs.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="jengelh@inai.de" date="1649246400">- Update to release 1.0.2
  * Resolved Valgrind warnings due to uninitialized padding in
    netlink messages.</changelog>
</package>
<package pkgid="ca86c078fbb4ebcfeb20db5e6d613c2ad19c453a81352afe75a909c9f3ddd6fa" name="libnftnl" arch="src">
  <version epoch="0" ver="1.2.7" rel="71.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 1.0.8
  * ct: add support for zone, helper and eventmask
  * exthdr: tcp option set support
  * rt: tcpmss get support
  * ct: add average bytes per packet counter support
  * exthdr: Add support for exthdr flags
- Add bufferov.diff
- Drop baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Update to new upstream release 1.0.9
  * Mostly bug fixes plus one new nftnl_expr_fprintf() function.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 1.1.0
  * Add new API infrastructure to support "flow tables".</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 1.1.1
  * expr: add map lookups for numgen and hash statements
  * rule: add nftnl_rule_list_insert_at()
  * expr: add connlimit support
  * expr: extend fwd to support address and protocol</changelog>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.1.2
  * This release adds supports for new kernel extensions: tproxy,
    tunneling, xfrm, osf, conntrack timeouts and helpers. This
    release deprecates the nftnl_rule_cmp() interface and the low
    level JSON infrastructure.
- Remove bufferov.diff (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.1.3
  * expr: osf: add version option support
  * udata: add NFTNL_UDATA_* definitions
  * chain: support per chain rules listing</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 1.1.4
  * Add ct id support, add ct expectation support,
    add synproxy support.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.1.5
  * flowtable: add support for handle attribute
  * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data()</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.1.6
  * add slave device matching
  * support for NFTNL_SET_EXPR</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
  <changelog author="jengelh@inai.de" date="1721131200">- Update to release 1.2.7
  * Avoid potential use-after-free when clearing set's expression
    list
  * Avoid misc buffer overflows in attribute setters
  * Implement nftnl_obj_unset symbol already exported in
    libnftnl.map
  * Remove unimplemented symbols from libnftnl.map
  * Validate per-expression and per-object attribute value and
    data length
  * Fix synproxy object setter with unaligned data</changelog>
</package>
<package pkgid="3885c71f142bd3fd78924c2efd7a3cbea95070ca39b7f0c27e9ede9bb32c38db" name="libnftnl-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="71.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 1.0.8
  * ct: add support for zone, helper and eventmask
  * exthdr: tcp option set support
  * rt: tcpmss get support
  * ct: add average bytes per packet counter support
  * exthdr: Add support for exthdr flags
- Add bufferov.diff
- Drop baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Update to new upstream release 1.0.9
  * Mostly bug fixes plus one new nftnl_expr_fprintf() function.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 1.1.0
  * Add new API infrastructure to support "flow tables".</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 1.1.1
  * expr: add map lookups for numgen and hash statements
  * rule: add nftnl_rule_list_insert_at()
  * expr: add connlimit support
  * expr: extend fwd to support address and protocol</changelog>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.1.2
  * This release adds supports for new kernel extensions: tproxy,
    tunneling, xfrm, osf, conntrack timeouts and helpers. This
    release deprecates the nftnl_rule_cmp() interface and the low
    level JSON infrastructure.
- Remove bufferov.diff (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.1.3
  * expr: osf: add version option support
  * udata: add NFTNL_UDATA_* definitions
  * chain: support per chain rules listing</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 1.1.4
  * Add ct id support, add ct expectation support,
    add synproxy support.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.1.5
  * flowtable: add support for handle attribute
  * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data()</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.1.6
  * add slave device matching
  * support for NFTNL_SET_EXPR</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
  <changelog author="jengelh@inai.de" date="1721131200">- Update to release 1.2.7
  * Avoid potential use-after-free when clearing set's expression
    list
  * Avoid misc buffer overflows in attribute setters
  * Implement nftnl_obj_unset symbol already exported in
    libnftnl.map
  * Remove unimplemented symbols from libnftnl.map
  * Validate per-expression and per-object attribute value and
    data length
  * Fix synproxy object setter with unaligned data</changelog>
</package>
<package pkgid="76b3ef4ed118bfee801c83b3556140367957504127d4540576ae721af12c02cc" name="libnftnl-devel" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="71.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 1.0.8
  * ct: add support for zone, helper and eventmask
  * exthdr: tcp option set support
  * rt: tcpmss get support
  * ct: add average bytes per packet counter support
  * exthdr: Add support for exthdr flags
- Add bufferov.diff
- Drop baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Update to new upstream release 1.0.9
  * Mostly bug fixes plus one new nftnl_expr_fprintf() function.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 1.1.0
  * Add new API infrastructure to support "flow tables".</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 1.1.1
  * expr: add map lookups for numgen and hash statements
  * rule: add nftnl_rule_list_insert_at()
  * expr: add connlimit support
  * expr: extend fwd to support address and protocol</changelog>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.1.2
  * This release adds supports for new kernel extensions: tproxy,
    tunneling, xfrm, osf, conntrack timeouts and helpers. This
    release deprecates the nftnl_rule_cmp() interface and the low
    level JSON infrastructure.
- Remove bufferov.diff (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.1.3
  * expr: osf: add version option support
  * udata: add NFTNL_UDATA_* definitions
  * chain: support per chain rules listing</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 1.1.4
  * Add ct id support, add ct expectation support,
    add synproxy support.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.1.5
  * flowtable: add support for handle attribute
  * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data()</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.1.6
  * add slave device matching
  * support for NFTNL_SET_EXPR</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
  <changelog author="jengelh@inai.de" date="1721131200">- Update to release 1.2.7
  * Avoid potential use-after-free when clearing set's expression
    list
  * Avoid misc buffer overflows in attribute setters
  * Implement nftnl_obj_unset symbol already exported in
    libnftnl.map
  * Remove unimplemented symbols from libnftnl.map
  * Validate per-expression and per-object attribute value and
    data length
  * Fix synproxy object setter with unaligned data</changelog>
</package>
<package pkgid="f4d01ad965be701a6b54454836eff2dae5d8ff9cb879326bcaf46c9c05d1a322" name="libnftnl11" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="71.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 1.0.8
  * ct: add support for zone, helper and eventmask
  * exthdr: tcp option set support
  * rt: tcpmss get support
  * ct: add average bytes per packet counter support
  * exthdr: Add support for exthdr flags
- Add bufferov.diff
- Drop baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Update to new upstream release 1.0.9
  * Mostly bug fixes plus one new nftnl_expr_fprintf() function.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 1.1.0
  * Add new API infrastructure to support "flow tables".</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 1.1.1
  * expr: add map lookups for numgen and hash statements
  * rule: add nftnl_rule_list_insert_at()
  * expr: add connlimit support
  * expr: extend fwd to support address and protocol</changelog>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.1.2
  * This release adds supports for new kernel extensions: tproxy,
    tunneling, xfrm, osf, conntrack timeouts and helpers. This
    release deprecates the nftnl_rule_cmp() interface and the low
    level JSON infrastructure.
- Remove bufferov.diff (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.1.3
  * expr: osf: add version option support
  * udata: add NFTNL_UDATA_* definitions
  * chain: support per chain rules listing</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 1.1.4
  * Add ct id support, add ct expectation support,
    add synproxy support.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.1.5
  * flowtable: add support for handle attribute
  * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data()</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.1.6
  * add slave device matching
  * support for NFTNL_SET_EXPR</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
  <changelog author="jengelh@inai.de" date="1721131200">- Update to release 1.2.7
  * Avoid potential use-after-free when clearing set's expression
    list
  * Avoid misc buffer overflows in attribute setters
  * Implement nftnl_obj_unset symbol already exported in
    libnftnl.map
  * Remove unimplemented symbols from libnftnl.map
  * Validate per-expression and per-object attribute value and
    data length
  * Fix synproxy object setter with unaligned data</changelog>
</package>
<package pkgid="72fab81dbe8e30cfd98b894038814d7f191dc872b061553195a9f8e2cd24ce52" name="libnftnl11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="71.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 1.0.8
  * ct: add support for zone, helper and eventmask
  * exthdr: tcp option set support
  * rt: tcpmss get support
  * ct: add average bytes per packet counter support
  * exthdr: Add support for exthdr flags
- Add bufferov.diff
- Drop baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Update to new upstream release 1.0.9
  * Mostly bug fixes plus one new nftnl_expr_fprintf() function.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 1.1.0
  * Add new API infrastructure to support "flow tables".</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 1.1.1
  * expr: add map lookups for numgen and hash statements
  * rule: add nftnl_rule_list_insert_at()
  * expr: add connlimit support
  * expr: extend fwd to support address and protocol</changelog>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.1.2
  * This release adds supports for new kernel extensions: tproxy,
    tunneling, xfrm, osf, conntrack timeouts and helpers. This
    release deprecates the nftnl_rule_cmp() interface and the low
    level JSON infrastructure.
- Remove bufferov.diff (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.1.3
  * expr: osf: add version option support
  * udata: add NFTNL_UDATA_* definitions
  * chain: support per chain rules listing</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 1.1.4
  * Add ct id support, add ct expectation support,
    add synproxy support.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.1.5
  * flowtable: add support for handle attribute
  * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data()</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.1.6
  * add slave device matching
  * support for NFTNL_SET_EXPR</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Update to release 1.2.0
  * table: add table owner support
  * expr: socket: add cgroups v2 support</changelog>
  <changelog author="jengelh@inai.de" date="1637236800">- Update to release 1.2.1
  * expr: add last match time support
  * expr: missing netlink attribute in last expression</changelog>
  <changelog author="jengelh@inai.de" date="1654603200">- Update to release 1.2.2
  * exthdr: tcp option reset support</changelog>
  <changelog author="jengelh@inai.de" date="1660046400">- Update to release 1.2.3
  * This release includes a compile time bugfix with clang and
  - D_FORTIFY_SOURCE=2.</changelog>
  <changelog author="jengelh@inai.de" date="1668081600">- Update to release 1.2.4
  * rule, set_elem: remove trailing \n in userdata snprintf
  * libnftnl: Fix res_id byte order</changelog>
  <changelog author="jengelh@inai.de" date="1678363200">- Update to release 1.2.5
  * expr: add inner support</changelog>
  <changelog author="jengelh@inai.de" date="1689076800">- Update to release 1.2.6
  * expr: meta: introduce broute meta expression</changelog>
  <changelog author="jengelh@inai.de" date="1721131200">- Update to release 1.2.7
  * Avoid potential use-after-free when clearing set's expression
    list
  * Avoid misc buffer overflows in attribute setters
  * Implement nftnl_obj_unset symbol already exported in
    libnftnl.map
  * Remove unimplemented symbols from libnftnl.map
  * Validate per-expression and per-object attribute value and
    data length
  * Fix synproxy object setter with unaligned data</changelog>
</package>
<package pkgid="948c3df58c47bb21cc97d82c3fb53312d3acd9ed0eac1577365c76fea71f22af" name="libpcap" arch="src">
  <version epoch="0" ver="1.10.5" rel="108.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 SP0-2 build</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
</package>
<package pkgid="87b17fd79a7a94effe9d1a8ff65c031fff39dd3751945a022cdedd184941da62" name="libpcap-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="108.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 SP0-2 build</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
</package>
<package pkgid="aac3c8814c6be8b0405f2c36182f2fa367f0a5a09a364694ddd0997cacb0ae0b" name="libpcap-devel" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="108.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 SP0-2 build</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
</package>
<package pkgid="75b3ee38fa40523a4ba5f81c4619b19636ec9bb01d1fc05a314f1be0bba40719" name="libpcap-devel-static" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="108.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 SP0-2 build</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
</package>
<package pkgid="d4375125f23898d9e8e51a11d70693c7f221f8f397c4f35c5ff82b3cced55b29" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="108.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 SP0-2 build</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
</package>
<package pkgid="1e441349c65b7f4696d9d200cde43739ea8170aed0907e6b65e3b06e3e2a95f3" name="libpcap1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="108.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 SP0-2 build</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
</package>
<package pkgid="dbd31e31d806476b789f2a1434facbaa2a372a529116957c24b477600a6b4127" name="libxtables-devel" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="015637ab6e253c63c916fcc50514611a0230ff694305c30705451caec928b849" name="libxtables12" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="adf1353411d19d77495f8e519e6825d8daf2fcd1250873cc3ec2d416e2287fa7" name="libxtables12-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="2d79f434efe353fdbfa1ce7dfb420bed62b0aaedc9a69cf96bb654bf8dc6493c" name="netperf" arch="src">
  <version epoch="0" ver="2.7.0" rel="13.1"/>
  <changelog author="mpluskal@suse.com" date="1428321600">- Initial package for openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1428494400">- Update license</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Make dependency on libsmbios conditional only to supported
  architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1441281600">- Update to 2.7.0
  * See ChangeLog for full list of changes
- Add patches from gentoo
  * netperf-fix-scripts.patch
  * netperf-2.6.0-log-dir.patch
  * netperf-2.7.0-includes.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1591876800">- Fix building with gcc10
- Sync patches from gentoo, add:
  * netperf-2.7.0-inline.patch
  * netperf-2.7.0-space.patch
- Do not use url for sources as upstream is not reachable</changelog>
  <changelog author="mkubecek@suse.cz" date="1613649600">- undo specfile "modernization" which looks cool but is only good
  to break builds for non-recent targets</changelog>
</package>
<package pkgid="954d40c22473f18a80a2c09977dc06889267ddaf6054a3e1539a3aa3c499f7b6" name="netperf" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="13.1"/>
  <changelog author="mpluskal@suse.com" date="1428321600">- Initial package for openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1428494400">- Update license</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Make dependency on libsmbios conditional only to supported
  architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1441281600">- Update to 2.7.0
  * See ChangeLog for full list of changes
- Add patches from gentoo
  * netperf-fix-scripts.patch
  * netperf-2.6.0-log-dir.patch
  * netperf-2.7.0-includes.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1591876800">- Fix building with gcc10
- Sync patches from gentoo, add:
  * netperf-2.7.0-inline.patch
  * netperf-2.7.0-space.patch
- Do not use url for sources as upstream is not reachable</changelog>
  <changelog author="mkubecek@suse.cz" date="1613649600">- undo specfile "modernization" which looks cool but is only good
  to break builds for non-recent targets</changelog>
</package>
<package pkgid="c37701c7ca9b5227fcb006784b1ff2110e5f687cda05684fd7801525dd8cad0a" name="netperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="13.1"/>
  <changelog author="mpluskal@suse.com" date="1428321600">- Initial package for openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1428494400">- Update license</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Make dependency on libsmbios conditional only to supported
  architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1441281600">- Update to 2.7.0
  * See ChangeLog for full list of changes
- Add patches from gentoo
  * netperf-fix-scripts.patch
  * netperf-2.6.0-log-dir.patch
  * netperf-2.7.0-includes.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1591876800">- Fix building with gcc10
- Sync patches from gentoo, add:
  * netperf-2.7.0-inline.patch
  * netperf-2.7.0-space.patch
- Do not use url for sources as upstream is not reachable</changelog>
  <changelog author="mkubecek@suse.cz" date="1613649600">- undo specfile "modernization" which looks cool but is only good
  to break builds for non-recent targets</changelog>
</package>
<package pkgid="13cabc120a885be1225aadfe33edc7878db2c00a764935d5b4d238007cd1ad38" name="netperf-debugsource" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="13.1"/>
  <changelog author="mpluskal@suse.com" date="1428321600">- Initial package for openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1428494400">- Update license</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Make dependency on libsmbios conditional only to supported
  architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1441281600">- Update to 2.7.0
  * See ChangeLog for full list of changes
- Add patches from gentoo
  * netperf-fix-scripts.patch
  * netperf-2.6.0-log-dir.patch
  * netperf-2.7.0-includes.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1591876800">- Fix building with gcc10
- Sync patches from gentoo, add:
  * netperf-2.7.0-inline.patch
  * netperf-2.7.0-space.patch
- Do not use url for sources as upstream is not reachable</changelog>
  <changelog author="mkubecek@suse.cz" date="1613649600">- undo specfile "modernization" which looks cool but is only good
  to break builds for non-recent targets</changelog>
</package>
<package pkgid="6a223ee6920a998d7b8956cb78a00365de19ffdbcc66ba120c5493cebd302c6d" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="526.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- git 2.27.0:
  * "git describe" will always use the "long" version when giving
    its output based misplaced tags
  * "git pull" issues a warning message until the pull.rebase
    configuration variable is explicitly given
  * The transport protocol version 2, which was promoted to the
    default in Git 2.26 release, turned out to have some remaining
    rough edges, so it has been demoted from the default
  * A handful of options to configure SSL when talking to proxies
    have been added
  * Smudge/clean conversion filters are now given more information
  * many bug fixes, improvements, and additional workflow options
- drop upstreamed patches:
  * 0001-fetch-pack-return-enum-from-process_acks.patch
  * 0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
  * 0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch
- drop unneeded patches:
  * 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1595937600">- git 2.28.0
  * "fetch.writeCommitGraph" is deemed to be still a bit too risky and
    is no longer part of the "feature.experimental" set.
  * The commands in the "diff" family learned to honor "diff.relative"
    configuration variable.
  * "git diff-files" has been taught to say paths that are marked as
    intent-to-add are new files, not modified from an empty blob.
  * "git gui" now allows opening work trees from the start-up dialog.
  * "git bugreport" learns to report what shell is in use.
  * SHA-256 migration work continues, including CVS/SVN interface.
  * Some repositories in the wild have commits that record nonsense
    committer timezone (e.g. rails.git); "git fast-import" learned an
    option to pass these nonsense timestamps intact to allow recreating
    existing repositories as-is.
  * Other code cleanup, docfix, build fix, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603108800">- git 2.29.0:
  * The transport protocol v2 has become the default again
  * "git worktree" gained a "repair" subcommand, "git init
  - -separate-git-dir" no longer corrupts administrative data
    related to linked worktrees
  * "git maintenance" introduced for repository maintenance tasks
  * enhancements to multiple workflows, addition of configuration
    options and supported parameters, and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603454400">- git 2.29.1:
  * build system fixes for non-default installations
    (not affecting this package)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603972800">- git 2.29.2: "--committer-date-is-author-date" option of "rebase"
  and "am" subcommands lost the e-mail address by mistake in 2.29</changelog>
  <changelog author="mrueckert@suse.de" date="1605873600">- only pull asciidoctor for the default ruby version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- git 2.30.0:
  * Userdiff updates for PHP, Rust, CSS
  * New features and options to multiple subcommands and workflows
  * Avoid administrator error leading to data loss with
    "git push --force-with-lease[=&lt;ref&gt;]" by introducing
    "--force-if-includes"
  * Updates to shell autocompletion
  * Bug fixes and internal improvements</changelog>
  <changelog author="mmachova@suse.com" date="1612958400">- git 2.30.1
  * Bugfix release
  * "git stash" did not work well in a sparsely checked out working
    tree.
  * Newline characters in the host and path part of git:// URL are
    now forbidden.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- git 2.30.2:
  * CVE-2021-21300: On case-insensitive file systems with support
    for symbolic links, if Git is configured globally to apply
    delay-capable clean/smudge filters (such as Git LFS), Git could
    be fooled into running remote code during a clone (boo#1183026)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615809600">- git 2.31.0:
  * Use of "pack-redundant" command is discouraged and will trigger
    a warning. The replacement is "repack -d".
  * The "--format=%(trailers)" mechanism gets enhanced to make it
    easier to design output for machine consumption.
  * No longer give message to choose between rebase or merge upon
    pull if the history fast-forwards
  * The configuration variable 'core.abbrev' can be set to 'no' to
    force no abbreviation regardless of the hash algorithm.
  * "git rev-parse" can be explicitly told to give output as absolute
    or relative path with the `--path-format=(absolute|relative)` option.
  * Bash completion (in contrib/) update to make it easier for
    end-users to add completion for their custom "git" subcommands.
  * "git maintenance" learned to drive scheduled maintenance on
    platforms whose native scheduling methods are not 'cron'.
  * After expiring a reflog and making a single commit, the reflog for
    the branch would record a single entry that knows both @{0} and
    @{1}, but we failed to answer "what commit were we on?", i.e. @{1}
  * "git bundle" learns "--stdin" option to read its refs from the
    standard input.  Also, it now does not lose refs whey they point
    at the same object.
  * "git log" learned a new "--diff-merges=&lt;how&gt;" option.
  * "git ls-files" can and does show multiple entries when the index is
    unmerged, which is a source for confusion unless -s/-u option is in
    use.  A new option --deduplicate has been introduced.
  * `git worktree list` now annotates worktrees as prunable, shows
    locked and prunable attributes in --porcelain mode, and gained
    a --verbose option.
  * "git clone" tries to locally check out the branch pointed at by
    HEAD of the remote repository after it is done, but the protocol
    did not convey the information necessary to do so when copying an
    empty repository.  The protocol v2 learned how to do so.
  * There are other ways than ".." for a single token to denote a
    "commit range", namely "&lt;rev&gt;^!" and "&lt;rev&gt;^-&lt;n&gt;", but "git
    range-diff" did not understand them.
  * The "git range-diff" command learned "--(left|right)-only" option
    to show only one side of the compared range.
  * "git mergetool" feeds three versions (base, local and remote) of
    a conflicted path unmodified.  The command learned to optionally
    prepare these files with unconflicted parts already resolved.
  * The .mailmap is documented to be read only from the root level of a
    working tree, but a stray file in a bare repository also was read
    by accident, which has been corrected.
  * "git maintenance" tool learned a new "pack-refs" maintenance task.
  * The error message given when a configuration variable that is
    expected to have a boolean value has been improved.
  * Signed commits and tags now allow verification of objects, whose
    two object names (one in SHA-1, the other in SHA-256) are both
    signed.
  * "git rev-list" command learned "--disk-usage" option.
  * "git {diff,log} --{skip,rotate}-to=&lt;path&gt;" allows the user to
    discard diff output for early paths or move them to the end of the
    output.
  * "git difftool" learned "--skip-to=&lt;path&gt;" option to restart an
    interrupted session from an arbitrary path.
  * "git grep" has been tweaked to be limited to the sparse checkout
    paths.
  * "git rebase --[no-]fork-point" gained a configuration variable
    rebase.forkPoint so that users do not have to keep specifying a
    non-default setting.
  * many bug fixes</changelog>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file</changelog>
</package>
<package pkgid="32459df7e0fff8ede483b1db1f0771b89672de110308914711deaccb1cc8998d" name="scponly" arch="src">
  <version epoch="0" ver="4.8" rel="7.1"/>
  <changelog author="mike@mk-sys.cz" date="1258113600">- update to version 4.8</changelog>
  <changelog author="mike@mk-sys.cz" date="1303041600">- minor specfile cleanup
- repacked source using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1322222400">- moved to BuildService</changelog>
  <changelog author="mkubecek@suse.cz" date="1328184000">- update URL tag</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- use SPDX license tag to silence post-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- configure.in-add-another-possible-path-for-sftp-serv.patch:
  fix Factory build failure after sftp-server path change</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="15be5505351e92ec5e423180cf9f850475c90752111c0105e63e0a35a8a383b9" name="scponly" arch="x86_64">
  <version epoch="0" ver="4.8" rel="7.1"/>
  <changelog author="mike@mk-sys.cz" date="1258113600">- update to version 4.8</changelog>
  <changelog author="mike@mk-sys.cz" date="1303041600">- minor specfile cleanup
- repacked source using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1322222400">- moved to BuildService</changelog>
  <changelog author="mkubecek@suse.cz" date="1328184000">- update URL tag</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- use SPDX license tag to silence post-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- configure.in-add-another-possible-path-for-sftp-serv.patch:
  fix Factory build failure after sftp-server path change</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="5f1c05169e447217c6ee35cf62b2e0ae44a84f907b6183acb38b6806c6beb491" name="scponly-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8" rel="7.1"/>
  <changelog author="mike@mk-sys.cz" date="1258113600">- update to version 4.8</changelog>
  <changelog author="mike@mk-sys.cz" date="1303041600">- minor specfile cleanup
- repacked source using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1322222400">- moved to BuildService</changelog>
  <changelog author="mkubecek@suse.cz" date="1328184000">- update URL tag</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- use SPDX license tag to silence post-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- configure.in-add-another-possible-path-for-sftp-serv.patch:
  fix Factory build failure after sftp-server path change</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="03b0a55211f1ebe94aecabdda66b51f5664ea483d8236875e64d827131e7e7e3" name="scponly-debugsource" arch="x86_64">
  <version epoch="0" ver="4.8" rel="7.1"/>
  <changelog author="mike@mk-sys.cz" date="1258113600">- update to version 4.8</changelog>
  <changelog author="mike@mk-sys.cz" date="1303041600">- minor specfile cleanup
- repacked source using bzip2</changelog>
  <changelog author="mkubecek@suse.cz" date="1322222400">- moved to BuildService</changelog>
  <changelog author="mkubecek@suse.cz" date="1328184000">- update URL tag</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- use SPDX license tag to silence post-build checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- configure.in-add-another-possible-path-for-sftp-serv.patch:
  fix Factory build failure after sftp-server path change</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- update specfile to "modern" %patch syntax</changelog>
</package>
<package pkgid="21e141833a34c027f66a6833722da9a946c1fd027b935f122322a59d9a751711" name="stunnel" arch="src">
  <version epoch="0" ver="5.57" rel="5.1"/>
  <changelog author="mkubecek@suse.cz" date="1350388800">- upgrade to upstream version 4.54
  * fixed "Application Failed to Initialize Properly (0xc0150002)"
    error
  * fixed missing SSL state debug log entries
  * fixed a race condition in libwrap code resulting in random
    stalls
  * session cache purged at configuration file reload to reduce
    memory leak
  * fixed bug in "transparent = destination" functionality
    (regression introduced in 4.51)
  * "transparent = destination" is now a valid endpoint in inetd
    mode
  * multiple "connect" targets fixed to also work with delayed
    resolver
  * the number of resolver retries of EAI_AGAIN error has been
    limited to 3 in order to prevent infinite loops
  * new service level options sessionCacheSize, reset and
    renegotiation
  * new parameters to configure TLS v1.1/v1.2 with OpenSSL version
    1.0.1 or higher
- really use more CPU's for build (fix typo in _smp_mflags)</changelog>
  <changelog author="mkubecek@suse.cz" date="1363608000">- upgrade to upstream version 4.55
  * Buffer overflow vulnerability fixed in the NTLM authentication
    of the CONNECT protocol negotiation (CVE-2013-1762)
  * Fixed write half-close handling in the transfer() function
  * Fixed EAGAIN error handling in the transfer() function
  * Restored default signal handlers before execvp()
  * Fixed memory leaks in protocol negotiation
  * Fixed a file descriptor leak during configuration file reload
  * Closed SSL sockets were removed from the the transfer() c-&gt;fds
    poll
  * Minor fix in handling exotic inetd-mode configurations
  * IPv6 compilation fix in protocol.c
  * Feature: SNI wildcard matching in server mode</changelog>
  <changelog author="mkubecek@suse.cz" date="1364990400">- upgrade to upstream version 4.56
  * Fixed a regression bug introduced in version 4.55 causing
    random crashes on several platforms
  * Fixed incorrect "stunnel -exit" process synchronisation
  * Fixed FIPS detection with new versions of the OpenSSL library
  * Failure to open the log file at startup is no longer ignored</changelog>
  <changelog author="mkubecek@suse.cz" date="1401278400">- upgrade to upstream version 5.01
  * Added PRNG state update in fork threading (CVE-2014-0016)
  * Default "fips" option value is now "no"
  * Default "pid" is now "", i.e. not to create a pid file at startup
  * Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2"
  * Default "libwrap" setting is now "no" to improve performance.
  * TLS 1.1 and TLS 1.2 are now allowed in the FIPS mode
  * New service-level option "redirect" to redirect SSL client
    connections on authentication failures instead of rejecting them
  * New global "engineDefault" configuration file option to control
    which OpenSSL tasks are delegated to the current engine
  * New service-level configuration file option "engineId" to
    select the engine by identifier
  * New global configuration file option "log" to control whether
    to append (the default), or to overwrite log file while
    (re)opening
  * Improved readability of error messages printed when stunnel
    refuses to start due to a critical error.
  * Search all certificates with the same subject name for a
    matching public key rather than only the first one
- stunnel-4.53-dont-generate-certificate.patch:
  deleted (no longer needed)</changelog>
  <changelog author="mkubecek@suse.cz" date="1409832000">- upgrade to upstream version 5.03
  * it is now possible to add protocol negotiations at multiple
    connection phases
  * protocols can individually decide whether the remote connection
    will be established before or after SSL/TLS is negotiated
  * heap memory blocks are wiped before release
  * safe_memcmp() function implemented with execution time not
    dependent on the compared data
  * fixed "failover = rr" broken since version 5.00
  * fixed "taskbar = no" broken since version 5.00
  * FIPS autoconfiguration cleanup
  * FIPS canister updated to version 2.0.6
  * improved SNI diagnostic logging
  * fixed whitespace handling in the stunnel.init script</changelog>
  <changelog author="mkubecek@suse.cz" date="1415102400">- upgrade to upstream version 5.07
  * support for UTF-8 config file and log file
  * missing REMOTE_PORT environmental variable is provided to
    processes spawned with "exec" on Unix platforms
  * The parameter of "options" can now be prefixed with "-" to
    clear an SSL option, for example:
    "options = -LEGACY_SERVER_CONNECT"
  * fixed POLLIN|POLLHUP condition handling error resulting in
    prematurely closed (truncated) connection
  * fixed a null pointer dereference regression bug in the
    "transparent = destination" functionality
  * fixed erroneously closed stdin/stdout/stderr if specified as
    the -fd commandline option parameter
  * the insecure SSLv2 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv2".
  * the insecure SSLv3 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv3".
  * default sslVersion changed to "all" (also in FIPS mode) to
    autonegotiate the highest supported TLS version.
  * added missing SSL options to match OpenSSL 1.0.1j
  * new "-options" commandline option to display the list of
    supported SSL options
  * fixed FORK threading build regression bug
  * several SMTP server protocol negotiation improvements
  * DH parameters are no longer generated by "make cert"
  * new --disable-systemd ./configure option
  * setuid/setgid commented out in stunnel.conf-sample
  * compilation fix for OpenSSL with disabled SSLv2 or SSLv3
  * non-blocking mode set on inetd and systemd descriptors</changelog>
  <changelog author="mkubecek@suse.cz" date="1415102401">- add missing tarball</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- upgrade to upstream version 5.19
  * add SOCKS 4/5 protocol support
  * fixed improper hangup condition handling
  * fixed missing -pic linker option
  * added PSK authentication with two new service-level
    configuration file options "PSKsecrets" and "PSKidentity"
  * added additional security checks to the OpenSSL memory
    management functions
  * added support for the OPENSSL_NO_OCSP and OPENSSL_NO_ENGINE
    OpenSSL configuration flags
  * added compatibility with the current OpenSSL 1.1.0-dev tree
  * removed defective s_poll_error() code occasionally causing
    connections to be prematurely closed (truncated)
  * fix OpenSSL compatibility
  * OCSP AIA (Authority Information Access) support
  * additional security features of the linker are enabled:
    "-z relro", "-z now", "-z noexecstack"
  * removed dereferences of internal OpenSSL data structures
  * PSK key lookup algorithm performance improved from O(N)
    (linear) to O(log N) (logarithmic)
  * new service-level option "logId" to specify the connection
    identifier type
  * new service-level option "debug" to individually control
    logging verbosity of defined services
  * the "service" option was modified to also control the syslog
    service name
  * the "redirect" option now also redirects clients on SSL session
    reuse
  * fixed a memory allocation error during Unix daemon shutdown
  * fixed handling multiple connect/redirect destinations
  * added new service-level options "checkHost", "checkEmail" and
    "checkIP" for additional checks of the peer certificate subject
  * added session persistence based on negotiated TLS sessions
  * MEDIUM ciphers (currently SEED and RC4) are removed from the
    default cipher list
  * the "redirect" option was improved to not only redirect
    sessions established with an untrusted certificate, but also
    sessions established without a client certificate
  * OpenSSL version checking modified to distinguish FIPS and
    non-FIPS builds
  * randomize the initial value of the round-robin counter
  * new stunnel.conf templates are provided
  * fixed memory leaks in certificate verification
  * fixed a NULL pointer dereference causing the service to crash
  * added "include" configuration file option to include all
    configuration file parts located in a specified directory
  * log file is reopened every 24 hours.  With "log = overwrite"
    this feature can be used to prevent filling up disk space
  * temporary DH parameters are refreshed every 24 hours, unless
    static DH parameters were provided in the certificate file
  * unique initial DH parameters are distributed with each release
  * warnings are logged on potentially insecure authentication
  * added a runtime check whether COMP_zlib() method is implemented
    in order to improve compatibility with the Debian OpenSSL build
  * improved socket error handling
  * fixed some typos in docs and scripts
  * fixed a log level check condition
- fix build on SLE11</changelog>
  <changelog author="mkubecek@suse.cz" date="1437998400">- upgrade to upstream version 5.20
  * The SSL library detection algorithm was made a bit smarter
  * warnings about insecure authentication were modified to include
    the name of the affected service section
  * a warning was added to stunnel.init if no pid file was
    specified in the configuration file
  * signal pipe reinitialization added to prevent turning the main
    accepting thread into a busy wait loop when an external
    condition breaks the signal pipe
  * generated temporary DH parameters are used for configuration
    reload instead of the static defaults
  * LSB compatibility fixes added to the stunnel.init script</changelog>
  <changelog author="mkubecek@suse.cz" date="1445515200">- upgrade to upstream version 5.24
  * fixed the FORK and UCONTEXT threading support
  * fixed "failover=prio" (broken since stunnel 5.15
  * added a retry when sleep(3) was interrupted by a signal in the
    cron thread scheduler
  * signal names are displayed instead of numbers
  * first resolve IPv4 addresses on passive resolver requests
  * fixed a number of OCSP bugs.  The most severe of those bugs
    caused stunnel to treat OCSP responses that failed
    OCSP_basic_verify() checks as if they were successful
  * "OCSPaia = yes" added to the configuration file templates
  * improved double free detection
  * client-side support for the SOCKS protocol
  * reject SOCKS requests to connect loopback addresses
  * new service-level option "OCSPnonce"
  * the ca-certs.pem file is now updated on stunnel upgrade
  * added IPv6 support to the transparent proxy code
  * fixed the RESOLVE [F0] TOR extension support in SOCKS5
  * fixed the error code reported on the failed bind() requests
  * fixed the sequential log id with the FORK threading
  * custom CRL verification was replaced with the internal OpenSSL
    functionality
  * added a new "protocolDomain" option for the NTLM authentication
  * improved compatibility of the NTLM phase 1 message
  * "setuid" and "setgid" options are now also available in service
    sections.  They can be used to set owner and group of the Unix
    socket specified with "accept"
  * added support for the new OpenSSL 1.0.2 SSL options
  * added OPENSSL_NO_EGD support</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- upgrade to upstream version 5.29
  * fix the "s_poll_wait returned 1, but no descriptor is ready"
    internal error
  * fix "exec" hangs due to incorrect thread-local storage handling
  * fix PRNG initialization
  * fix incomplete initialization
  * fix exit codes for information requests (as in "stunnel
  - version" or "stunnel -help")
  * fix configuration file reload for relative stunnel.conf path on
    Unix
  * fix ignoring CRLfile unless CAfile was also specified
  * setting socket options no longer performed on PTYs
  * SMTP client protocol negotiation support for
    "protocolUsername", "protocolPassword", and
    "protocolAuthentication"
  * new service-level option "config" to specify configuration
    commands introduced in OpenSSL 1.0.2
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added reading server certificates from hardware engines
  * performance improvement: rwlocks used for locking with pthreads</changelog>
  <changelog author="mkubecek@suse.cz" date="1474891200">- upgrade to upstream version 5.36
  * only reset the watchdog if some data was actually transferred
  * fixed logging an incorrect value of the round-robin starting
    point
  * fixed a TLS session caching memory leak; before stunnel 5.27
    this leak only emerged with sessiond enabled
  * fixed a FORK threading build regression bug
  * OPENSSL_NO_DH compilation fix
  * fixed malfunctioning "verify = 4"
  * fixed incorrectly enforced client certificate requests
  * fixed thread safety of the configuration file reopening
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added logging the list of client CAs requested by the server
  * new "socket = a:IPV6_V6ONLY=yes" option to only bind IPv6
  * memory leak detection
  * SNI support also enabled on OpenSSL 0.9.8f and later
  * added support for PKCS #12 (.p12/.pfx) certificates
  * added three new service-level options: requireCert,
    verifyChain, and verifyPeer for fine-grained certificate
    verification control
  * removed direct zlib dependency
- use original gzipped tarball again
- add tarball signature and public key
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1480075200">- upgrade to upstream version 5.38
  * the default SNI target (not handled by any slave service) is
    handled by the master service rather than rejected
  * removed thread synchronization in the FORK threading model</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400000">- upgrade to upstream version 5.44
  * "sni=" can be used to prevent sending the SNI extension
  * the AI_ADDRCONFIG resolver flag is used when available
  * fixed a memory allocation bug causing crashes with OpenSSL
    1.1.0
  * fixed error handling for mixed IPv4/IPv6 destinations
  * per-destination TLS session cache added for the client mode
  * new "logId" parameter "process" added to log PID values
  * added support for the new SSL_set_options() values
  * fixed "logId" parameter to also work in inetd mode
  * "delay = yes" properly enforces "failover = prio"
  * fixed resolving addresses with unconfigured network interfaces
  * DH ciphersuites are now disabled by default
  * daily server DH parameter regeneration is only performed if DH
    ciphersuites are enabled in the configuration file
  * "checkHost" and "checkEmail" were modified to require either
    "verifyChain" or "verifyPeer"
  * fixed setting default ciphers
  * default engine UI set with ENGINE_CTRL_SET_USER_INTERFACE
  * key file name added into the passphrase console prompt
  * performance optimization in memory leak detection
  * fixed crashes with the OpenSSL 1.1.0 branch
  * fixed certificate verification with "verifyPeer = yes" and
    "verifyChain = no" (the default), while the peer only returns a
    single certificate
  * "redirect" also supports "exec" and not only "connect"
  * fixed premature cron thread initialization causing hangs
  * fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1
  * allow for multiple "accept" ports per section
  * self-test framework (make check)
  * added config load before OpenSSL init
  * openSSL 1.1.1-dev compilation fixes
  * fixed round-robin failover in the FORK threading model
  * fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * minor fixes of the logging subsystem
  * default accept address restored to INADDR_ANY
  * fixed removing the pid file after configuration reload
  * updated documentation
- adjust to new Factory checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400001">- Factory build now requires us to use %{_fillupdir} macro but
  it's only defined in Factory... so let's jump through some more
  hoops to make people with "Factory only" thinking happy</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- upgrade to upstream version 5.45
  * delayed deallocation of service sections after configuration file reload
  * deprecated the sslVersion option
  * the "socket" option is now also available in service sections
  * implemented try-restart in the SysV init script
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1
  * default "failover" value changed from "rr" to "prio"
  * new "make check" tests</changelog>
  <changelog author="mkubecek@suse.cz" date="1556280000">- upgrade to upstream version 5.53
  * update default cipher list to a safer value
  * restore default accept address to INADDR_ANY
  * fix requesting client certificate when specified by global
    option
  * certificate subject checks modified to accept certificates if
    at least one of the specified checks matches
  * log negotiated or resumed TLS session IDs
  * check whether "output" is not a relative file name
  * add sslVersion, sslVersionMin and sslVersionMax for OpenSSL
    1.1.0 and later
  * automatically convert hex PSK keys to binary
  * SMTP HELO before authentication
  * new "curves" option to control the list of elliptic curves in
    openssl &gt;= 1.1.0
  * new "ciphersuites" option to control the list of permitted TLS
    1.3 ciphersuites
  * include file name and line number in OpenSSL errors
  * compatibility with the current OpenSSL 3.0.0-dev branch
  * various performance improvements
  * error message improvements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- update stunnel.keyring with new developer key
- upgrade to upstream version 5.57
  * new "ticketKeySecret" and "ticketMacSecret" options
  * add logging the list of active connections on SIGUSR2
  * logging of the assigned bind address instead of the requested
    bind address
  * terminate service threads before OpenSSL cleanup to prevent
    occasional stunnel crashes at shutdown
  * support for engines without PRNG seeding methods
  * retry unsuccessful port binding on configuration file reload
  * terminate clients on exit in the FORK threading model
  * fix "redirect" option to properly handle "verifyChain = yes"
  * new securityLevel configuration file option
  * support for modern PostgreSQL clients
  * TLS 1.3 configuration updated for better compatibility
  * various fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- rpmlintrc: more general filters for bogus check errors</changelog>
</package>
<package pkgid="133970bab10736405558f12c65e049db5927e9afa0ead6b2e4f93de9f9fcfff7" name="stunnel" arch="x86_64">
  <version epoch="0" ver="5.57" rel="5.1"/>
  <changelog author="mkubecek@suse.cz" date="1415102400">- upgrade to upstream version 5.07
  * support for UTF-8 config file and log file
  * missing REMOTE_PORT environmental variable is provided to
    processes spawned with "exec" on Unix platforms
  * The parameter of "options" can now be prefixed with "-" to
    clear an SSL option, for example:
    "options = -LEGACY_SERVER_CONNECT"
  * fixed POLLIN|POLLHUP condition handling error resulting in
    prematurely closed (truncated) connection
  * fixed a null pointer dereference regression bug in the
    "transparent = destination" functionality
  * fixed erroneously closed stdin/stdout/stderr if specified as
    the -fd commandline option parameter
  * the insecure SSLv2 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv2".
  * the insecure SSLv3 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv3".
  * default sslVersion changed to "all" (also in FIPS mode) to
    autonegotiate the highest supported TLS version.
  * added missing SSL options to match OpenSSL 1.0.1j
  * new "-options" commandline option to display the list of
    supported SSL options
  * fixed FORK threading build regression bug
  * several SMTP server protocol negotiation improvements
  * DH parameters are no longer generated by "make cert"
  * new --disable-systemd ./configure option
  * setuid/setgid commented out in stunnel.conf-sample
  * compilation fix for OpenSSL with disabled SSLv2 or SSLv3
  * non-blocking mode set on inetd and systemd descriptors</changelog>
  <changelog author="mkubecek@suse.cz" date="1415102401">- add missing tarball</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- upgrade to upstream version 5.19
  * add SOCKS 4/5 protocol support
  * fixed improper hangup condition handling
  * fixed missing -pic linker option
  * added PSK authentication with two new service-level
    configuration file options "PSKsecrets" and "PSKidentity"
  * added additional security checks to the OpenSSL memory
    management functions
  * added support for the OPENSSL_NO_OCSP and OPENSSL_NO_ENGINE
    OpenSSL configuration flags
  * added compatibility with the current OpenSSL 1.1.0-dev tree
  * removed defective s_poll_error() code occasionally causing
    connections to be prematurely closed (truncated)
  * fix OpenSSL compatibility
  * OCSP AIA (Authority Information Access) support
  * additional security features of the linker are enabled:
    "-z relro", "-z now", "-z noexecstack"
  * removed dereferences of internal OpenSSL data structures
  * PSK key lookup algorithm performance improved from O(N)
    (linear) to O(log N) (logarithmic)
  * new service-level option "logId" to specify the connection
    identifier type
  * new service-level option "debug" to individually control
    logging verbosity of defined services
  * the "service" option was modified to also control the syslog
    service name
  * the "redirect" option now also redirects clients on SSL session
    reuse
  * fixed a memory allocation error during Unix daemon shutdown
  * fixed handling multiple connect/redirect destinations
  * added new service-level options "checkHost", "checkEmail" and
    "checkIP" for additional checks of the peer certificate subject
  * added session persistence based on negotiated TLS sessions
  * MEDIUM ciphers (currently SEED and RC4) are removed from the
    default cipher list
  * the "redirect" option was improved to not only redirect
    sessions established with an untrusted certificate, but also
    sessions established without a client certificate
  * OpenSSL version checking modified to distinguish FIPS and
    non-FIPS builds
  * randomize the initial value of the round-robin counter
  * new stunnel.conf templates are provided
  * fixed memory leaks in certificate verification
  * fixed a NULL pointer dereference causing the service to crash
  * added "include" configuration file option to include all
    configuration file parts located in a specified directory
  * log file is reopened every 24 hours.  With "log = overwrite"
    this feature can be used to prevent filling up disk space
  * temporary DH parameters are refreshed every 24 hours, unless
    static DH parameters were provided in the certificate file
  * unique initial DH parameters are distributed with each release
  * warnings are logged on potentially insecure authentication
  * added a runtime check whether COMP_zlib() method is implemented
    in order to improve compatibility with the Debian OpenSSL build
  * improved socket error handling
  * fixed some typos in docs and scripts
  * fixed a log level check condition
- fix build on SLE11</changelog>
  <changelog author="mkubecek@suse.cz" date="1437998400">- upgrade to upstream version 5.20
  * The SSL library detection algorithm was made a bit smarter
  * warnings about insecure authentication were modified to include
    the name of the affected service section
  * a warning was added to stunnel.init if no pid file was
    specified in the configuration file
  * signal pipe reinitialization added to prevent turning the main
    accepting thread into a busy wait loop when an external
    condition breaks the signal pipe
  * generated temporary DH parameters are used for configuration
    reload instead of the static defaults
  * LSB compatibility fixes added to the stunnel.init script</changelog>
  <changelog author="mkubecek@suse.cz" date="1445515200">- upgrade to upstream version 5.24
  * fixed the FORK and UCONTEXT threading support
  * fixed "failover=prio" (broken since stunnel 5.15
  * added a retry when sleep(3) was interrupted by a signal in the
    cron thread scheduler
  * signal names are displayed instead of numbers
  * first resolve IPv4 addresses on passive resolver requests
  * fixed a number of OCSP bugs.  The most severe of those bugs
    caused stunnel to treat OCSP responses that failed
    OCSP_basic_verify() checks as if they were successful
  * "OCSPaia = yes" added to the configuration file templates
  * improved double free detection
  * client-side support for the SOCKS protocol
  * reject SOCKS requests to connect loopback addresses
  * new service-level option "OCSPnonce"
  * the ca-certs.pem file is now updated on stunnel upgrade
  * added IPv6 support to the transparent proxy code
  * fixed the RESOLVE [F0] TOR extension support in SOCKS5
  * fixed the error code reported on the failed bind() requests
  * fixed the sequential log id with the FORK threading
  * custom CRL verification was replaced with the internal OpenSSL
    functionality
  * added a new "protocolDomain" option for the NTLM authentication
  * improved compatibility of the NTLM phase 1 message
  * "setuid" and "setgid" options are now also available in service
    sections.  They can be used to set owner and group of the Unix
    socket specified with "accept"
  * added support for the new OpenSSL 1.0.2 SSL options
  * added OPENSSL_NO_EGD support</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- upgrade to upstream version 5.29
  * fix the "s_poll_wait returned 1, but no descriptor is ready"
    internal error
  * fix "exec" hangs due to incorrect thread-local storage handling
  * fix PRNG initialization
  * fix incomplete initialization
  * fix exit codes for information requests (as in "stunnel
  - version" or "stunnel -help")
  * fix configuration file reload for relative stunnel.conf path on
    Unix
  * fix ignoring CRLfile unless CAfile was also specified
  * setting socket options no longer performed on PTYs
  * SMTP client protocol negotiation support for
    "protocolUsername", "protocolPassword", and
    "protocolAuthentication"
  * new service-level option "config" to specify configuration
    commands introduced in OpenSSL 1.0.2
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added reading server certificates from hardware engines
  * performance improvement: rwlocks used for locking with pthreads</changelog>
  <changelog author="mkubecek@suse.cz" date="1474891200">- upgrade to upstream version 5.36
  * only reset the watchdog if some data was actually transferred
  * fixed logging an incorrect value of the round-robin starting
    point
  * fixed a TLS session caching memory leak; before stunnel 5.27
    this leak only emerged with sessiond enabled
  * fixed a FORK threading build regression bug
  * OPENSSL_NO_DH compilation fix
  * fixed malfunctioning "verify = 4"
  * fixed incorrectly enforced client certificate requests
  * fixed thread safety of the configuration file reopening
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added logging the list of client CAs requested by the server
  * new "socket = a:IPV6_V6ONLY=yes" option to only bind IPv6
  * memory leak detection
  * SNI support also enabled on OpenSSL 0.9.8f and later
  * added support for PKCS #12 (.p12/.pfx) certificates
  * added three new service-level options: requireCert,
    verifyChain, and verifyPeer for fine-grained certificate
    verification control
  * removed direct zlib dependency
- use original gzipped tarball again
- add tarball signature and public key
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1480075200">- upgrade to upstream version 5.38
  * the default SNI target (not handled by any slave service) is
    handled by the master service rather than rejected
  * removed thread synchronization in the FORK threading model</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400000">- upgrade to upstream version 5.44
  * "sni=" can be used to prevent sending the SNI extension
  * the AI_ADDRCONFIG resolver flag is used when available
  * fixed a memory allocation bug causing crashes with OpenSSL
    1.1.0
  * fixed error handling for mixed IPv4/IPv6 destinations
  * per-destination TLS session cache added for the client mode
  * new "logId" parameter "process" added to log PID values
  * added support for the new SSL_set_options() values
  * fixed "logId" parameter to also work in inetd mode
  * "delay = yes" properly enforces "failover = prio"
  * fixed resolving addresses with unconfigured network interfaces
  * DH ciphersuites are now disabled by default
  * daily server DH parameter regeneration is only performed if DH
    ciphersuites are enabled in the configuration file
  * "checkHost" and "checkEmail" were modified to require either
    "verifyChain" or "verifyPeer"
  * fixed setting default ciphers
  * default engine UI set with ENGINE_CTRL_SET_USER_INTERFACE
  * key file name added into the passphrase console prompt
  * performance optimization in memory leak detection
  * fixed crashes with the OpenSSL 1.1.0 branch
  * fixed certificate verification with "verifyPeer = yes" and
    "verifyChain = no" (the default), while the peer only returns a
    single certificate
  * "redirect" also supports "exec" and not only "connect"
  * fixed premature cron thread initialization causing hangs
  * fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1
  * allow for multiple "accept" ports per section
  * self-test framework (make check)
  * added config load before OpenSSL init
  * openSSL 1.1.1-dev compilation fixes
  * fixed round-robin failover in the FORK threading model
  * fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * minor fixes of the logging subsystem
  * default accept address restored to INADDR_ANY
  * fixed removing the pid file after configuration reload
  * updated documentation
- adjust to new Factory checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400001">- Factory build now requires us to use %{_fillupdir} macro but
  it's only defined in Factory... so let's jump through some more
  hoops to make people with "Factory only" thinking happy</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- upgrade to upstream version 5.45
  * delayed deallocation of service sections after configuration file reload
  * deprecated the sslVersion option
  * the "socket" option is now also available in service sections
  * implemented try-restart in the SysV init script
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1
  * default "failover" value changed from "rr" to "prio"
  * new "make check" tests</changelog>
  <changelog author="mkubecek@suse.cz" date="1556280000">- upgrade to upstream version 5.53
  * update default cipher list to a safer value
  * restore default accept address to INADDR_ANY
  * fix requesting client certificate when specified by global
    option
  * certificate subject checks modified to accept certificates if
    at least one of the specified checks matches
  * log negotiated or resumed TLS session IDs
  * check whether "output" is not a relative file name
  * add sslVersion, sslVersionMin and sslVersionMax for OpenSSL
    1.1.0 and later
  * automatically convert hex PSK keys to binary
  * SMTP HELO before authentication
  * new "curves" option to control the list of elliptic curves in
    openssl &gt;= 1.1.0
  * new "ciphersuites" option to control the list of permitted TLS
    1.3 ciphersuites
  * include file name and line number in OpenSSL errors
  * compatibility with the current OpenSSL 3.0.0-dev branch
  * various performance improvements
  * error message improvements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- update stunnel.keyring with new developer key
- upgrade to upstream version 5.57
  * new "ticketKeySecret" and "ticketMacSecret" options
  * add logging the list of active connections on SIGUSR2
  * logging of the assigned bind address instead of the requested
    bind address
  * terminate service threads before OpenSSL cleanup to prevent
    occasional stunnel crashes at shutdown
  * support for engines without PRNG seeding methods
  * retry unsuccessful port binding on configuration file reload
  * terminate clients on exit in the FORK threading model
  * fix "redirect" option to properly handle "verifyChain = yes"
  * new securityLevel configuration file option
  * support for modern PostgreSQL clients
  * TLS 1.3 configuration updated for better compatibility
  * various fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- rpmlintrc: more general filters for bogus check errors</changelog>
</package>
<package pkgid="0bac2298c694c4767656572294f48f8a2342216b2615ca5786f0cdd4f192edf2" name="stunnel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.57" rel="5.1"/>
  <changelog author="mkubecek@suse.cz" date="1415102400">- upgrade to upstream version 5.07
  * support for UTF-8 config file and log file
  * missing REMOTE_PORT environmental variable is provided to
    processes spawned with "exec" on Unix platforms
  * The parameter of "options" can now be prefixed with "-" to
    clear an SSL option, for example:
    "options = -LEGACY_SERVER_CONNECT"
  * fixed POLLIN|POLLHUP condition handling error resulting in
    prematurely closed (truncated) connection
  * fixed a null pointer dereference regression bug in the
    "transparent = destination" functionality
  * fixed erroneously closed stdin/stdout/stderr if specified as
    the -fd commandline option parameter
  * the insecure SSLv2 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv2".
  * the insecure SSLv3 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv3".
  * default sslVersion changed to "all" (also in FIPS mode) to
    autonegotiate the highest supported TLS version.
  * added missing SSL options to match OpenSSL 1.0.1j
  * new "-options" commandline option to display the list of
    supported SSL options
  * fixed FORK threading build regression bug
  * several SMTP server protocol negotiation improvements
  * DH parameters are no longer generated by "make cert"
  * new --disable-systemd ./configure option
  * setuid/setgid commented out in stunnel.conf-sample
  * compilation fix for OpenSSL with disabled SSLv2 or SSLv3
  * non-blocking mode set on inetd and systemd descriptors</changelog>
  <changelog author="mkubecek@suse.cz" date="1415102401">- add missing tarball</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- upgrade to upstream version 5.19
  * add SOCKS 4/5 protocol support
  * fixed improper hangup condition handling
  * fixed missing -pic linker option
  * added PSK authentication with two new service-level
    configuration file options "PSKsecrets" and "PSKidentity"
  * added additional security checks to the OpenSSL memory
    management functions
  * added support for the OPENSSL_NO_OCSP and OPENSSL_NO_ENGINE
    OpenSSL configuration flags
  * added compatibility with the current OpenSSL 1.1.0-dev tree
  * removed defective s_poll_error() code occasionally causing
    connections to be prematurely closed (truncated)
  * fix OpenSSL compatibility
  * OCSP AIA (Authority Information Access) support
  * additional security features of the linker are enabled:
    "-z relro", "-z now", "-z noexecstack"
  * removed dereferences of internal OpenSSL data structures
  * PSK key lookup algorithm performance improved from O(N)
    (linear) to O(log N) (logarithmic)
  * new service-level option "logId" to specify the connection
    identifier type
  * new service-level option "debug" to individually control
    logging verbosity of defined services
  * the "service" option was modified to also control the syslog
    service name
  * the "redirect" option now also redirects clients on SSL session
    reuse
  * fixed a memory allocation error during Unix daemon shutdown
  * fixed handling multiple connect/redirect destinations
  * added new service-level options "checkHost", "checkEmail" and
    "checkIP" for additional checks of the peer certificate subject
  * added session persistence based on negotiated TLS sessions
  * MEDIUM ciphers (currently SEED and RC4) are removed from the
    default cipher list
  * the "redirect" option was improved to not only redirect
    sessions established with an untrusted certificate, but also
    sessions established without a client certificate
  * OpenSSL version checking modified to distinguish FIPS and
    non-FIPS builds
  * randomize the initial value of the round-robin counter
  * new stunnel.conf templates are provided
  * fixed memory leaks in certificate verification
  * fixed a NULL pointer dereference causing the service to crash
  * added "include" configuration file option to include all
    configuration file parts located in a specified directory
  * log file is reopened every 24 hours.  With "log = overwrite"
    this feature can be used to prevent filling up disk space
  * temporary DH parameters are refreshed every 24 hours, unless
    static DH parameters were provided in the certificate file
  * unique initial DH parameters are distributed with each release
  * warnings are logged on potentially insecure authentication
  * added a runtime check whether COMP_zlib() method is implemented
    in order to improve compatibility with the Debian OpenSSL build
  * improved socket error handling
  * fixed some typos in docs and scripts
  * fixed a log level check condition
- fix build on SLE11</changelog>
  <changelog author="mkubecek@suse.cz" date="1437998400">- upgrade to upstream version 5.20
  * The SSL library detection algorithm was made a bit smarter
  * warnings about insecure authentication were modified to include
    the name of the affected service section
  * a warning was added to stunnel.init if no pid file was
    specified in the configuration file
  * signal pipe reinitialization added to prevent turning the main
    accepting thread into a busy wait loop when an external
    condition breaks the signal pipe
  * generated temporary DH parameters are used for configuration
    reload instead of the static defaults
  * LSB compatibility fixes added to the stunnel.init script</changelog>
  <changelog author="mkubecek@suse.cz" date="1445515200">- upgrade to upstream version 5.24
  * fixed the FORK and UCONTEXT threading support
  * fixed "failover=prio" (broken since stunnel 5.15
  * added a retry when sleep(3) was interrupted by a signal in the
    cron thread scheduler
  * signal names are displayed instead of numbers
  * first resolve IPv4 addresses on passive resolver requests
  * fixed a number of OCSP bugs.  The most severe of those bugs
    caused stunnel to treat OCSP responses that failed
    OCSP_basic_verify() checks as if they were successful
  * "OCSPaia = yes" added to the configuration file templates
  * improved double free detection
  * client-side support for the SOCKS protocol
  * reject SOCKS requests to connect loopback addresses
  * new service-level option "OCSPnonce"
  * the ca-certs.pem file is now updated on stunnel upgrade
  * added IPv6 support to the transparent proxy code
  * fixed the RESOLVE [F0] TOR extension support in SOCKS5
  * fixed the error code reported on the failed bind() requests
  * fixed the sequential log id with the FORK threading
  * custom CRL verification was replaced with the internal OpenSSL
    functionality
  * added a new "protocolDomain" option for the NTLM authentication
  * improved compatibility of the NTLM phase 1 message
  * "setuid" and "setgid" options are now also available in service
    sections.  They can be used to set owner and group of the Unix
    socket specified with "accept"
  * added support for the new OpenSSL 1.0.2 SSL options
  * added OPENSSL_NO_EGD support</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- upgrade to upstream version 5.29
  * fix the "s_poll_wait returned 1, but no descriptor is ready"
    internal error
  * fix "exec" hangs due to incorrect thread-local storage handling
  * fix PRNG initialization
  * fix incomplete initialization
  * fix exit codes for information requests (as in "stunnel
  - version" or "stunnel -help")
  * fix configuration file reload for relative stunnel.conf path on
    Unix
  * fix ignoring CRLfile unless CAfile was also specified
  * setting socket options no longer performed on PTYs
  * SMTP client protocol negotiation support for
    "protocolUsername", "protocolPassword", and
    "protocolAuthentication"
  * new service-level option "config" to specify configuration
    commands introduced in OpenSSL 1.0.2
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added reading server certificates from hardware engines
  * performance improvement: rwlocks used for locking with pthreads</changelog>
  <changelog author="mkubecek@suse.cz" date="1474891200">- upgrade to upstream version 5.36
  * only reset the watchdog if some data was actually transferred
  * fixed logging an incorrect value of the round-robin starting
    point
  * fixed a TLS session caching memory leak; before stunnel 5.27
    this leak only emerged with sessiond enabled
  * fixed a FORK threading build regression bug
  * OPENSSL_NO_DH compilation fix
  * fixed malfunctioning "verify = 4"
  * fixed incorrectly enforced client certificate requests
  * fixed thread safety of the configuration file reopening
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added logging the list of client CAs requested by the server
  * new "socket = a:IPV6_V6ONLY=yes" option to only bind IPv6
  * memory leak detection
  * SNI support also enabled on OpenSSL 0.9.8f and later
  * added support for PKCS #12 (.p12/.pfx) certificates
  * added three new service-level options: requireCert,
    verifyChain, and verifyPeer for fine-grained certificate
    verification control
  * removed direct zlib dependency
- use original gzipped tarball again
- add tarball signature and public key
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1480075200">- upgrade to upstream version 5.38
  * the default SNI target (not handled by any slave service) is
    handled by the master service rather than rejected
  * removed thread synchronization in the FORK threading model</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400000">- upgrade to upstream version 5.44
  * "sni=" can be used to prevent sending the SNI extension
  * the AI_ADDRCONFIG resolver flag is used when available
  * fixed a memory allocation bug causing crashes with OpenSSL
    1.1.0
  * fixed error handling for mixed IPv4/IPv6 destinations
  * per-destination TLS session cache added for the client mode
  * new "logId" parameter "process" added to log PID values
  * added support for the new SSL_set_options() values
  * fixed "logId" parameter to also work in inetd mode
  * "delay = yes" properly enforces "failover = prio"
  * fixed resolving addresses with unconfigured network interfaces
  * DH ciphersuites are now disabled by default
  * daily server DH parameter regeneration is only performed if DH
    ciphersuites are enabled in the configuration file
  * "checkHost" and "checkEmail" were modified to require either
    "verifyChain" or "verifyPeer"
  * fixed setting default ciphers
  * default engine UI set with ENGINE_CTRL_SET_USER_INTERFACE
  * key file name added into the passphrase console prompt
  * performance optimization in memory leak detection
  * fixed crashes with the OpenSSL 1.1.0 branch
  * fixed certificate verification with "verifyPeer = yes" and
    "verifyChain = no" (the default), while the peer only returns a
    single certificate
  * "redirect" also supports "exec" and not only "connect"
  * fixed premature cron thread initialization causing hangs
  * fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1
  * allow for multiple "accept" ports per section
  * self-test framework (make check)
  * added config load before OpenSSL init
  * openSSL 1.1.1-dev compilation fixes
  * fixed round-robin failover in the FORK threading model
  * fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * minor fixes of the logging subsystem
  * default accept address restored to INADDR_ANY
  * fixed removing the pid file after configuration reload
  * updated documentation
- adjust to new Factory checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400001">- Factory build now requires us to use %{_fillupdir} macro but
  it's only defined in Factory... so let's jump through some more
  hoops to make people with "Factory only" thinking happy</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- upgrade to upstream version 5.45
  * delayed deallocation of service sections after configuration file reload
  * deprecated the sslVersion option
  * the "socket" option is now also available in service sections
  * implemented try-restart in the SysV init script
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1
  * default "failover" value changed from "rr" to "prio"
  * new "make check" tests</changelog>
  <changelog author="mkubecek@suse.cz" date="1556280000">- upgrade to upstream version 5.53
  * update default cipher list to a safer value
  * restore default accept address to INADDR_ANY
  * fix requesting client certificate when specified by global
    option
  * certificate subject checks modified to accept certificates if
    at least one of the specified checks matches
  * log negotiated or resumed TLS session IDs
  * check whether "output" is not a relative file name
  * add sslVersion, sslVersionMin and sslVersionMax for OpenSSL
    1.1.0 and later
  * automatically convert hex PSK keys to binary
  * SMTP HELO before authentication
  * new "curves" option to control the list of elliptic curves in
    openssl &gt;= 1.1.0
  * new "ciphersuites" option to control the list of permitted TLS
    1.3 ciphersuites
  * include file name and line number in OpenSSL errors
  * compatibility with the current OpenSSL 3.0.0-dev branch
  * various performance improvements
  * error message improvements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- update stunnel.keyring with new developer key
- upgrade to upstream version 5.57
  * new "ticketKeySecret" and "ticketMacSecret" options
  * add logging the list of active connections on SIGUSR2
  * logging of the assigned bind address instead of the requested
    bind address
  * terminate service threads before OpenSSL cleanup to prevent
    occasional stunnel crashes at shutdown
  * support for engines without PRNG seeding methods
  * retry unsuccessful port binding on configuration file reload
  * terminate clients on exit in the FORK threading model
  * fix "redirect" option to properly handle "verifyChain = yes"
  * new securityLevel configuration file option
  * support for modern PostgreSQL clients
  * TLS 1.3 configuration updated for better compatibility
  * various fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- rpmlintrc: more general filters for bogus check errors</changelog>
</package>
<package pkgid="f2b3b7f5d665d77f6c6d62f734b8d7f635441564750341e8c81df4d4dd51fc49" name="stunnel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.57" rel="5.1"/>
  <changelog author="mkubecek@suse.cz" date="1415102400">- upgrade to upstream version 5.07
  * support for UTF-8 config file and log file
  * missing REMOTE_PORT environmental variable is provided to
    processes spawned with "exec" on Unix platforms
  * The parameter of "options" can now be prefixed with "-" to
    clear an SSL option, for example:
    "options = -LEGACY_SERVER_CONNECT"
  * fixed POLLIN|POLLHUP condition handling error resulting in
    prematurely closed (truncated) connection
  * fixed a null pointer dereference regression bug in the
    "transparent = destination" functionality
  * fixed erroneously closed stdin/stdout/stderr if specified as
    the -fd commandline option parameter
  * the insecure SSLv2 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv2".
  * the insecure SSLv3 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv3".
  * default sslVersion changed to "all" (also in FIPS mode) to
    autonegotiate the highest supported TLS version.
  * added missing SSL options to match OpenSSL 1.0.1j
  * new "-options" commandline option to display the list of
    supported SSL options
  * fixed FORK threading build regression bug
  * several SMTP server protocol negotiation improvements
  * DH parameters are no longer generated by "make cert"
  * new --disable-systemd ./configure option
  * setuid/setgid commented out in stunnel.conf-sample
  * compilation fix for OpenSSL with disabled SSLv2 or SSLv3
  * non-blocking mode set on inetd and systemd descriptors</changelog>
  <changelog author="mkubecek@suse.cz" date="1415102401">- add missing tarball</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- upgrade to upstream version 5.19
  * add SOCKS 4/5 protocol support
  * fixed improper hangup condition handling
  * fixed missing -pic linker option
  * added PSK authentication with two new service-level
    configuration file options "PSKsecrets" and "PSKidentity"
  * added additional security checks to the OpenSSL memory
    management functions
  * added support for the OPENSSL_NO_OCSP and OPENSSL_NO_ENGINE
    OpenSSL configuration flags
  * added compatibility with the current OpenSSL 1.1.0-dev tree
  * removed defective s_poll_error() code occasionally causing
    connections to be prematurely closed (truncated)
  * fix OpenSSL compatibility
  * OCSP AIA (Authority Information Access) support
  * additional security features of the linker are enabled:
    "-z relro", "-z now", "-z noexecstack"
  * removed dereferences of internal OpenSSL data structures
  * PSK key lookup algorithm performance improved from O(N)
    (linear) to O(log N) (logarithmic)
  * new service-level option "logId" to specify the connection
    identifier type
  * new service-level option "debug" to individually control
    logging verbosity of defined services
  * the "service" option was modified to also control the syslog
    service name
  * the "redirect" option now also redirects clients on SSL session
    reuse
  * fixed a memory allocation error during Unix daemon shutdown
  * fixed handling multiple connect/redirect destinations
  * added new service-level options "checkHost", "checkEmail" and
    "checkIP" for additional checks of the peer certificate subject
  * added session persistence based on negotiated TLS sessions
  * MEDIUM ciphers (currently SEED and RC4) are removed from the
    default cipher list
  * the "redirect" option was improved to not only redirect
    sessions established with an untrusted certificate, but also
    sessions established without a client certificate
  * OpenSSL version checking modified to distinguish FIPS and
    non-FIPS builds
  * randomize the initial value of the round-robin counter
  * new stunnel.conf templates are provided
  * fixed memory leaks in certificate verification
  * fixed a NULL pointer dereference causing the service to crash
  * added "include" configuration file option to include all
    configuration file parts located in a specified directory
  * log file is reopened every 24 hours.  With "log = overwrite"
    this feature can be used to prevent filling up disk space
  * temporary DH parameters are refreshed every 24 hours, unless
    static DH parameters were provided in the certificate file
  * unique initial DH parameters are distributed with each release
  * warnings are logged on potentially insecure authentication
  * added a runtime check whether COMP_zlib() method is implemented
    in order to improve compatibility with the Debian OpenSSL build
  * improved socket error handling
  * fixed some typos in docs and scripts
  * fixed a log level check condition
- fix build on SLE11</changelog>
  <changelog author="mkubecek@suse.cz" date="1437998400">- upgrade to upstream version 5.20
  * The SSL library detection algorithm was made a bit smarter
  * warnings about insecure authentication were modified to include
    the name of the affected service section
  * a warning was added to stunnel.init if no pid file was
    specified in the configuration file
  * signal pipe reinitialization added to prevent turning the main
    accepting thread into a busy wait loop when an external
    condition breaks the signal pipe
  * generated temporary DH parameters are used for configuration
    reload instead of the static defaults
  * LSB compatibility fixes added to the stunnel.init script</changelog>
  <changelog author="mkubecek@suse.cz" date="1445515200">- upgrade to upstream version 5.24
  * fixed the FORK and UCONTEXT threading support
  * fixed "failover=prio" (broken since stunnel 5.15
  * added a retry when sleep(3) was interrupted by a signal in the
    cron thread scheduler
  * signal names are displayed instead of numbers
  * first resolve IPv4 addresses on passive resolver requests
  * fixed a number of OCSP bugs.  The most severe of those bugs
    caused stunnel to treat OCSP responses that failed
    OCSP_basic_verify() checks as if they were successful
  * "OCSPaia = yes" added to the configuration file templates
  * improved double free detection
  * client-side support for the SOCKS protocol
  * reject SOCKS requests to connect loopback addresses
  * new service-level option "OCSPnonce"
  * the ca-certs.pem file is now updated on stunnel upgrade
  * added IPv6 support to the transparent proxy code
  * fixed the RESOLVE [F0] TOR extension support in SOCKS5
  * fixed the error code reported on the failed bind() requests
  * fixed the sequential log id with the FORK threading
  * custom CRL verification was replaced with the internal OpenSSL
    functionality
  * added a new "protocolDomain" option for the NTLM authentication
  * improved compatibility of the NTLM phase 1 message
  * "setuid" and "setgid" options are now also available in service
    sections.  They can be used to set owner and group of the Unix
    socket specified with "accept"
  * added support for the new OpenSSL 1.0.2 SSL options
  * added OPENSSL_NO_EGD support</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- upgrade to upstream version 5.29
  * fix the "s_poll_wait returned 1, but no descriptor is ready"
    internal error
  * fix "exec" hangs due to incorrect thread-local storage handling
  * fix PRNG initialization
  * fix incomplete initialization
  * fix exit codes for information requests (as in "stunnel
  - version" or "stunnel -help")
  * fix configuration file reload for relative stunnel.conf path on
    Unix
  * fix ignoring CRLfile unless CAfile was also specified
  * setting socket options no longer performed on PTYs
  * SMTP client protocol negotiation support for
    "protocolUsername", "protocolPassword", and
    "protocolAuthentication"
  * new service-level option "config" to specify configuration
    commands introduced in OpenSSL 1.0.2
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added reading server certificates from hardware engines
  * performance improvement: rwlocks used for locking with pthreads</changelog>
  <changelog author="mkubecek@suse.cz" date="1474891200">- upgrade to upstream version 5.36
  * only reset the watchdog if some data was actually transferred
  * fixed logging an incorrect value of the round-robin starting
    point
  * fixed a TLS session caching memory leak; before stunnel 5.27
    this leak only emerged with sessiond enabled
  * fixed a FORK threading build regression bug
  * OPENSSL_NO_DH compilation fix
  * fixed malfunctioning "verify = 4"
  * fixed incorrectly enforced client certificate requests
  * fixed thread safety of the configuration file reopening
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added logging the list of client CAs requested by the server
  * new "socket = a:IPV6_V6ONLY=yes" option to only bind IPv6
  * memory leak detection
  * SNI support also enabled on OpenSSL 0.9.8f and later
  * added support for PKCS #12 (.p12/.pfx) certificates
  * added three new service-level options: requireCert,
    verifyChain, and verifyPeer for fine-grained certificate
    verification control
  * removed direct zlib dependency
- use original gzipped tarball again
- add tarball signature and public key
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1480075200">- upgrade to upstream version 5.38
  * the default SNI target (not handled by any slave service) is
    handled by the master service rather than rejected
  * removed thread synchronization in the FORK threading model</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400000">- upgrade to upstream version 5.44
  * "sni=" can be used to prevent sending the SNI extension
  * the AI_ADDRCONFIG resolver flag is used when available
  * fixed a memory allocation bug causing crashes with OpenSSL
    1.1.0
  * fixed error handling for mixed IPv4/IPv6 destinations
  * per-destination TLS session cache added for the client mode
  * new "logId" parameter "process" added to log PID values
  * added support for the new SSL_set_options() values
  * fixed "logId" parameter to also work in inetd mode
  * "delay = yes" properly enforces "failover = prio"
  * fixed resolving addresses with unconfigured network interfaces
  * DH ciphersuites are now disabled by default
  * daily server DH parameter regeneration is only performed if DH
    ciphersuites are enabled in the configuration file
  * "checkHost" and "checkEmail" were modified to require either
    "verifyChain" or "verifyPeer"
  * fixed setting default ciphers
  * default engine UI set with ENGINE_CTRL_SET_USER_INTERFACE
  * key file name added into the passphrase console prompt
  * performance optimization in memory leak detection
  * fixed crashes with the OpenSSL 1.1.0 branch
  * fixed certificate verification with "verifyPeer = yes" and
    "verifyChain = no" (the default), while the peer only returns a
    single certificate
  * "redirect" also supports "exec" and not only "connect"
  * fixed premature cron thread initialization causing hangs
  * fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1
  * allow for multiple "accept" ports per section
  * self-test framework (make check)
  * added config load before OpenSSL init
  * openSSL 1.1.1-dev compilation fixes
  * fixed round-robin failover in the FORK threading model
  * fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * minor fixes of the logging subsystem
  * default accept address restored to INADDR_ANY
  * fixed removing the pid file after configuration reload
  * updated documentation
- adjust to new Factory checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400001">- Factory build now requires us to use %{_fillupdir} macro but
  it's only defined in Factory... so let's jump through some more
  hoops to make people with "Factory only" thinking happy</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- upgrade to upstream version 5.45
  * delayed deallocation of service sections after configuration file reload
  * deprecated the sslVersion option
  * the "socket" option is now also available in service sections
  * implemented try-restart in the SysV init script
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1
  * default "failover" value changed from "rr" to "prio"
  * new "make check" tests</changelog>
  <changelog author="mkubecek@suse.cz" date="1556280000">- upgrade to upstream version 5.53
  * update default cipher list to a safer value
  * restore default accept address to INADDR_ANY
  * fix requesting client certificate when specified by global
    option
  * certificate subject checks modified to accept certificates if
    at least one of the specified checks matches
  * log negotiated or resumed TLS session IDs
  * check whether "output" is not a relative file name
  * add sslVersion, sslVersionMin and sslVersionMax for OpenSSL
    1.1.0 and later
  * automatically convert hex PSK keys to binary
  * SMTP HELO before authentication
  * new "curves" option to control the list of elliptic curves in
    openssl &gt;= 1.1.0
  * new "ciphersuites" option to control the list of permitted TLS
    1.3 ciphersuites
  * include file name and line number in OpenSSL errors
  * compatibility with the current OpenSSL 3.0.0-dev branch
  * various performance improvements
  * error message improvements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- update stunnel.keyring with new developer key
- upgrade to upstream version 5.57
  * new "ticketKeySecret" and "ticketMacSecret" options
  * add logging the list of active connections on SIGUSR2
  * logging of the assigned bind address instead of the requested
    bind address
  * terminate service threads before OpenSSL cleanup to prevent
    occasional stunnel crashes at shutdown
  * support for engines without PRNG seeding methods
  * retry unsuccessful port binding on configuration file reload
  * terminate clients on exit in the FORK threading model
  * fix "redirect" option to properly handle "verifyChain = yes"
  * new securityLevel configuration file option
  * support for modern PostgreSQL clients
  * TLS 1.3 configuration updated for better compatibility
  * various fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- rpmlintrc: more general filters for bogus check errors</changelog>
</package>
<package pkgid="b178cc2a460dc6b6caa1a1e4f7f3b43da4a411e7d7c77af75741d4d73b9da5d5" name="stunnel-doc" arch="noarch">
  <version epoch="0" ver="5.57" rel="5.1"/>
  <changelog author="mkubecek@suse.cz" date="1415102400">- upgrade to upstream version 5.07
  * support for UTF-8 config file and log file
  * missing REMOTE_PORT environmental variable is provided to
    processes spawned with "exec" on Unix platforms
  * The parameter of "options" can now be prefixed with "-" to
    clear an SSL option, for example:
    "options = -LEGACY_SERVER_CONNECT"
  * fixed POLLIN|POLLHUP condition handling error resulting in
    prematurely closed (truncated) connection
  * fixed a null pointer dereference regression bug in the
    "transparent = destination" functionality
  * fixed erroneously closed stdin/stdout/stderr if specified as
    the -fd commandline option parameter
  * the insecure SSLv2 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv2".
  * the insecure SSLv3 protocol is now disabled by default.
    It can be enabled with "options = -NO_SSLv3".
  * default sslVersion changed to "all" (also in FIPS mode) to
    autonegotiate the highest supported TLS version.
  * added missing SSL options to match OpenSSL 1.0.1j
  * new "-options" commandline option to display the list of
    supported SSL options
  * fixed FORK threading build regression bug
  * several SMTP server protocol negotiation improvements
  * DH parameters are no longer generated by "make cert"
  * new --disable-systemd ./configure option
  * setuid/setgid commented out in stunnel.conf-sample
  * compilation fix for OpenSSL with disabled SSLv2 or SSLv3
  * non-blocking mode set on inetd and systemd descriptors</changelog>
  <changelog author="mkubecek@suse.cz" date="1415102401">- add missing tarball</changelog>
  <changelog author="mkubecek@suse.cz" date="1435579200">- upgrade to upstream version 5.19
  * add SOCKS 4/5 protocol support
  * fixed improper hangup condition handling
  * fixed missing -pic linker option
  * added PSK authentication with two new service-level
    configuration file options "PSKsecrets" and "PSKidentity"
  * added additional security checks to the OpenSSL memory
    management functions
  * added support for the OPENSSL_NO_OCSP and OPENSSL_NO_ENGINE
    OpenSSL configuration flags
  * added compatibility with the current OpenSSL 1.1.0-dev tree
  * removed defective s_poll_error() code occasionally causing
    connections to be prematurely closed (truncated)
  * fix OpenSSL compatibility
  * OCSP AIA (Authority Information Access) support
  * additional security features of the linker are enabled:
    "-z relro", "-z now", "-z noexecstack"
  * removed dereferences of internal OpenSSL data structures
  * PSK key lookup algorithm performance improved from O(N)
    (linear) to O(log N) (logarithmic)
  * new service-level option "logId" to specify the connection
    identifier type
  * new service-level option "debug" to individually control
    logging verbosity of defined services
  * the "service" option was modified to also control the syslog
    service name
  * the "redirect" option now also redirects clients on SSL session
    reuse
  * fixed a memory allocation error during Unix daemon shutdown
  * fixed handling multiple connect/redirect destinations
  * added new service-level options "checkHost", "checkEmail" and
    "checkIP" for additional checks of the peer certificate subject
  * added session persistence based on negotiated TLS sessions
  * MEDIUM ciphers (currently SEED and RC4) are removed from the
    default cipher list
  * the "redirect" option was improved to not only redirect
    sessions established with an untrusted certificate, but also
    sessions established without a client certificate
  * OpenSSL version checking modified to distinguish FIPS and
    non-FIPS builds
  * randomize the initial value of the round-robin counter
  * new stunnel.conf templates are provided
  * fixed memory leaks in certificate verification
  * fixed a NULL pointer dereference causing the service to crash
  * added "include" configuration file option to include all
    configuration file parts located in a specified directory
  * log file is reopened every 24 hours.  With "log = overwrite"
    this feature can be used to prevent filling up disk space
  * temporary DH parameters are refreshed every 24 hours, unless
    static DH parameters were provided in the certificate file
  * unique initial DH parameters are distributed with each release
  * warnings are logged on potentially insecure authentication
  * added a runtime check whether COMP_zlib() method is implemented
    in order to improve compatibility with the Debian OpenSSL build
  * improved socket error handling
  * fixed some typos in docs and scripts
  * fixed a log level check condition
- fix build on SLE11</changelog>
  <changelog author="mkubecek@suse.cz" date="1437998400">- upgrade to upstream version 5.20
  * The SSL library detection algorithm was made a bit smarter
  * warnings about insecure authentication were modified to include
    the name of the affected service section
  * a warning was added to stunnel.init if no pid file was
    specified in the configuration file
  * signal pipe reinitialization added to prevent turning the main
    accepting thread into a busy wait loop when an external
    condition breaks the signal pipe
  * generated temporary DH parameters are used for configuration
    reload instead of the static defaults
  * LSB compatibility fixes added to the stunnel.init script</changelog>
  <changelog author="mkubecek@suse.cz" date="1445515200">- upgrade to upstream version 5.24
  * fixed the FORK and UCONTEXT threading support
  * fixed "failover=prio" (broken since stunnel 5.15
  * added a retry when sleep(3) was interrupted by a signal in the
    cron thread scheduler
  * signal names are displayed instead of numbers
  * first resolve IPv4 addresses on passive resolver requests
  * fixed a number of OCSP bugs.  The most severe of those bugs
    caused stunnel to treat OCSP responses that failed
    OCSP_basic_verify() checks as if they were successful
  * "OCSPaia = yes" added to the configuration file templates
  * improved double free detection
  * client-side support for the SOCKS protocol
  * reject SOCKS requests to connect loopback addresses
  * new service-level option "OCSPnonce"
  * the ca-certs.pem file is now updated on stunnel upgrade
  * added IPv6 support to the transparent proxy code
  * fixed the RESOLVE [F0] TOR extension support in SOCKS5
  * fixed the error code reported on the failed bind() requests
  * fixed the sequential log id with the FORK threading
  * custom CRL verification was replaced with the internal OpenSSL
    functionality
  * added a new "protocolDomain" option for the NTLM authentication
  * improved compatibility of the NTLM phase 1 message
  * "setuid" and "setgid" options are now also available in service
    sections.  They can be used to set owner and group of the Unix
    socket specified with "accept"
  * added support for the new OpenSSL 1.0.2 SSL options
  * added OPENSSL_NO_EGD support</changelog>
  <changelog author="mkubecek@suse.cz" date="1452600000">- upgrade to upstream version 5.29
  * fix the "s_poll_wait returned 1, but no descriptor is ready"
    internal error
  * fix "exec" hangs due to incorrect thread-local storage handling
  * fix PRNG initialization
  * fix incomplete initialization
  * fix exit codes for information requests (as in "stunnel
  - version" or "stunnel -help")
  * fix configuration file reload for relative stunnel.conf path on
    Unix
  * fix ignoring CRLfile unless CAfile was also specified
  * setting socket options no longer performed on PTYs
  * SMTP client protocol negotiation support for
    "protocolUsername", "protocolPassword", and
    "protocolAuthentication"
  * new service-level option "config" to specify configuration
    commands introduced in OpenSSL 1.0.2
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added reading server certificates from hardware engines
  * performance improvement: rwlocks used for locking with pthreads</changelog>
  <changelog author="mkubecek@suse.cz" date="1474891200">- upgrade to upstream version 5.36
  * only reset the watchdog if some data was actually transferred
  * fixed logging an incorrect value of the round-robin starting
    point
  * fixed a TLS session caching memory leak; before stunnel 5.27
    this leak only emerged with sessiond enabled
  * fixed a FORK threading build regression bug
  * OPENSSL_NO_DH compilation fix
  * fixed malfunctioning "verify = 4"
  * fixed incorrectly enforced client certificate requests
  * fixed thread safety of the configuration file reopening
  * improved compatibility with the current OpenSSL 1.1.0-dev tree
  * added logging the list of client CAs requested by the server
  * new "socket = a:IPV6_V6ONLY=yes" option to only bind IPv6
  * memory leak detection
  * SNI support also enabled on OpenSSL 0.9.8f and later
  * added support for PKCS #12 (.p12/.pfx) certificates
  * added three new service-level options: requireCert,
    verifyChain, and verifyPeer for fine-grained certificate
    verification control
  * removed direct zlib dependency
- use original gzipped tarball again
- add tarball signature and public key
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1480075200">- upgrade to upstream version 5.38
  * the default SNI target (not handled by any slave service) is
    handled by the master service rather than rejected
  * removed thread synchronization in the FORK threading model</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400000">- upgrade to upstream version 5.44
  * "sni=" can be used to prevent sending the SNI extension
  * the AI_ADDRCONFIG resolver flag is used when available
  * fixed a memory allocation bug causing crashes with OpenSSL
    1.1.0
  * fixed error handling for mixed IPv4/IPv6 destinations
  * per-destination TLS session cache added for the client mode
  * new "logId" parameter "process" added to log PID values
  * added support for the new SSL_set_options() values
  * fixed "logId" parameter to also work in inetd mode
  * "delay = yes" properly enforces "failover = prio"
  * fixed resolving addresses with unconfigured network interfaces
  * DH ciphersuites are now disabled by default
  * daily server DH parameter regeneration is only performed if DH
    ciphersuites are enabled in the configuration file
  * "checkHost" and "checkEmail" were modified to require either
    "verifyChain" or "verifyPeer"
  * fixed setting default ciphers
  * default engine UI set with ENGINE_CTRL_SET_USER_INTERFACE
  * key file name added into the passphrase console prompt
  * performance optimization in memory leak detection
  * fixed crashes with the OpenSSL 1.1.0 branch
  * fixed certificate verification with "verifyPeer = yes" and
    "verifyChain = no" (the default), while the peer only returns a
    single certificate
  * "redirect" also supports "exec" and not only "connect"
  * fixed premature cron thread initialization causing hangs
  * fixed "verifyPeer = yes" on OpenSSL &lt;= 1.0.1
  * allow for multiple "accept" ports per section
  * self-test framework (make check)
  * added config load before OpenSSL init
  * openSSL 1.1.1-dev compilation fixes
  * fixed round-robin failover in the FORK threading model
  * fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown()
  * minor fixes of the logging subsystem
  * default accept address restored to INADDR_ANY
  * fixed removing the pid file after configuration reload
  * updated documentation
- adjust to new Factory checks</changelog>
  <changelog author="mkubecek@suse.cz" date="1517400001">- Factory build now requires us to use %{_fillupdir} macro but
  it's only defined in Factory... so let's jump through some more
  hoops to make people with "Factory only" thinking happy</changelog>
  <changelog author="mkubecek@suse.cz" date="1527422400">- upgrade to upstream version 5.45
  * delayed deallocation of service sections after configuration file reload
  * deprecated the sslVersion option
  * the "socket" option is now also available in service sections
  * implemented try-restart in the SysV init script
  * TLS 1.3 compliant session handling for OpenSSL 1.1.1
  * default "failover" value changed from "rr" to "prio"
  * new "make check" tests</changelog>
  <changelog author="mkubecek@suse.cz" date="1556280000">- upgrade to upstream version 5.53
  * update default cipher list to a safer value
  * restore default accept address to INADDR_ANY
  * fix requesting client certificate when specified by global
    option
  * certificate subject checks modified to accept certificates if
    at least one of the specified checks matches
  * log negotiated or resumed TLS session IDs
  * check whether "output" is not a relative file name
  * add sslVersion, sslVersionMin and sslVersionMax for OpenSSL
    1.1.0 and later
  * automatically convert hex PSK keys to binary
  * SMTP HELO before authentication
  * new "curves" option to control the list of elliptic curves in
    openssl &gt;= 1.1.0
  * new "ciphersuites" option to control the list of permitted TLS
    1.3 ciphersuites
  * include file name and line number in OpenSSL errors
  * compatibility with the current OpenSSL 3.0.0-dev branch
  * various performance improvements
  * error message improvements</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- add rpmlintrc to suppress bogus build errors in Factory</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044801">- update stunnel.keyring with new developer key
- upgrade to upstream version 5.57
  * new "ticketKeySecret" and "ticketMacSecret" options
  * add logging the list of active connections on SIGUSR2
  * logging of the assigned bind address instead of the requested
    bind address
  * terminate service threads before OpenSSL cleanup to prevent
    occasional stunnel crashes at shutdown
  * support for engines without PRNG seeding methods
  * retry unsuccessful port binding on configuration file reload
  * terminate clients on exit in the FORK threading model
  * fix "redirect" option to properly handle "verifyChain = yes"
  * new securityLevel configuration file option
  * support for modern PostgreSQL clients
  * TLS 1.3 configuration updated for better compatibility
  * various fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- rpmlintrc: more general filters for bogus check errors</changelog>
</package>
<package pkgid="5ee85a6b46fc1a959918fd5b29425fe8bdbb59be50abbd0092bb7caca01a73c1" name="tcpdump" arch="src">
  <version epoch="0" ver="4.99.5" rel="90.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Security fix [bsc#1068716, CVE-2017-16808]
  * Heap-based buffer over-read related to aoe_print and lookup_emem
  * Added tcpdump-CVE-2017-16808.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883201">- Use %license macro for LICENSE file</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883202">- Security fix [bsc#1142439, CVE-2019-1010220]
  * Buffer Over-read in print_prefix which may expose data
  * Added tcpdump-CVE-2019-1010220.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Update to 4.9.3 [bsc#1153098]
  * Fix buffer overflow/overread vulnerabilities:
  - CVE-2017-16808 (AoE)
  - CVE-2018-14468 (FrameRelay)
  - CVE-2018-14469 (IKEv1)
  - CVE-2018-14470 (BABEL)
  - CVE-2018-14466 (AFS/RX)
  - CVE-2018-14461 (LDP)
  - CVE-2018-14462 (ICMP)
  - CVE-2018-14465 (RSVP)
  - CVE-2018-14881 (BGP)
  - CVE-2018-14464 (LMP)
  - CVE-2018-14463 (VRRP)
  - CVE-2018-14467 (BGP)
  - CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
  - CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
  - CVE-2018-14880 (OSPF6)
  - CVE-2018-16451 (SMB)
  - CVE-2018-14882 (RPL)
  - CVE-2018-16227 (802.11)
  - CVE-2018-16229 (DCCP)
  - CVE-2018-16301 (was fixed in libpcap)
  - CVE-2018-16230 (BGP)
  - CVE-2018-16452 (SMB)
  - CVE-2018-16300 (BGP)
  - CVE-2018-16228 (HNCP)
  - CVE-2019-15166 (LMP)
  - CVE-2019-15167 (VRRP)
  * Fix for cmdline argument/local issues:
  - CVE-2018-14879 (tcpdump -V)
- Drop patches fixed upstream:
  * tcpdump-CVE-2017-16808.patch
  * tcpdump-CVE-2019-1010220.patch
  * tcpdump-ikev2pI2.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1571140800">- Trim CFLAGS</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 build (%make_build, %license)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- ignore make check failure for PowerPC as tracked upstream
  https://github.com/the-tcpdump-group/tcpdump/issues/814</changelog>
  <changelog author="pmonreal@suse.com" date="1604577600">- Security fix: [bsc#1178466, CVE-2020-8037]
  * PPP decapsulator: Allocate the right buffer size
- Add tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1609761600">- Remove unrecognized configure option: enable-ipv6</changelog>
  <changelog author="pmonreal@suse.com" date="1609761601">- Update to 4.99.0
  IMPORTANT: Upsteam moved the default install directory to bindir.
    For compatibility, tcpdump is still being installed in
    sbindir and a symlink in bindir has been added.
  * Print unsupported link-layer protocol packets in hex.
  * Add support for new network protocols and DLTs: Arista, Autosar
    SOME/IP, Broadcom LI and Ethernet switches tag, IEEE 802.15.9,
    IP-over-InfiniBand (IPoIB), Linux SLL2, Linux vsockmon, MACsec,
    Marvell Distributed Switch Architecture, OpenFlow 1.3, Precision
    Time Protocol (PTP), SSH, WHOIS, ZigBee Encapsulation Protocol (ZEP).
  * Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16,
    HNCP, ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP
    ping, MPTCP, NFS, NSH, NTP, OSPF, OSPF6, PGM, PIM, PPTP, RADIUS,
    RSVP, Rx, SMB, UDLD, VXLAN-GPE.
  * User interface:
  - Make SLL2 the default for Linux "any" pseudo-device.
  - Add --micro and --nano shorthands.
  - Add --count to print a counter only instead of decoding.
  - Add --print, to cause packet printing even with -w.
  - Add support for remote capture if libpcap supports it.
  - Flush the output packet buffer on a SIGUSR2.
  - Handle very large -f files by rejecting them.
  * Source code:
  - Introduce new helper functions, including GET_*(),
    nd_print_protocol(), nd_print_invalid(), nd_print_trunc(),
    nd_trunc_longjmp() and others.
  - Put integer signedness right in many cases.
  - Introduce nd_uint*, nd_mac_addr, nd_ipv4 and nd_ipv6 types
    to fix alignment issues, especially on SPARC.
  - Use a table instead of getprotobynumber().
  - Get rid of ND_UNALIGNED and ND_TCHECK().
  - Make roundup2() generally available.
  - Resync SMI list against Wireshark.
- Remove patches fixed upstream:
  * tcpdump-CVE-2018-19519.patch
  * tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613736000">- Fix excess of precission in floating point registers for i586
  until resolved upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1623585600">- update to 4.99.1:
  * Squelch some compiler warnings
  * ICMP: Update the snapend for some nested IP packets
  * MACsec: Update the snapend thus the ICV field is not payload
    for the caller
  * EIGRP: Fix packet header fields
  * SMB: Disable printer by default in CMake builds
  * OLSR: Print the protocol name even if the packet is invalid
  * MSDP: Print ": " before the protocol name
  * ESP: Remove padding, padding length and next header from the buffer
  * DHCPv6: Update the snapend for nested DHCPv6 packets
  * OpenFlow 1.0: Get snapend right for nested frames
  * TCP: Update the snapend before decoding a MPTCP option
  * Ethernet, IEEE 802.15.4, IP, L2TP, TCP, ZEP: Add bounds checks
  * ForCES: Refine SPARSEDATA-TLV length check
  * ASCII/hex: Use nd_trunc_longjmp() in truncation cases
  * GeoNet: Add a ND_TCHECK_LEN() call
  * Replace ND_TCHECK_/memcpy() pairs with GET_CPY_BYTES()
  * BGP: Fix overwrites of global 'astostr' temporary buffer
  * ARP: fix overwrites of static buffer in q922_string()
  * Frame Relay: have q922_string() handle errors better</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 4.99.2:
  * Multiple fixes and improvements to BGP, DSA, EAP, 802.11,
    802.15.4, RRCP, MPLS, ICMP, VQP, Juniper, lwres, Ethernet,
    IPX, Zephyr, VRRP, DCCP, IPv6, ISAKMP, RADIUS, TCP, RESp,
    Arista, sFlow, VRRP, OSPF, OSPFv3, ICMPv3, ICMPv6, NFS, PTP,
    WHOIS, MPTCP, ESP, PPP, ZEP printers
  * Build system updates, developer visible fixes, documentation</changelog>
  <changelog author="dmueller@suse.com" date="1673956800">- update to 4.99.3:
  * Updated printers:
    PTP: Use the proper values for the control field and print un-allocated
    values for the message field as "Reserved" instead of "none".
  * Source code:
    smbutil.c: Replace obsolete function call (asctime)
  * Documentation:
    Reformat the installation notes (INSTALL.txt) in Markdown.
    Convert CONTRIBUTING to Markdown.
    CONTRIBUTING.md: Document the use of "protocol: " in a commit summary.
    Add a README file for NetBSD.
    Fix CMake build to set man page section numbers in tcpdump.1</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 4.99.4:
  * LSP ping: Fix "Unused value" warnings from Coverity
  * CVE-2023-1801: out-of-bounds write in the SMB printer (boo#1210265)
  * DNS: sync resource types with IANA
  * ICMPv6: Update the output to show a RPL DAO field name
  Geneve: Fix the Geneve UDP port test
  * build system tweaks and documentation updates</changelog>
  <changelog author="fcrozat@suse.com" date="1708344000">- Update url for tcpdump keyring and refresh keyring.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 4.99.5:
  * Refine protocol decoding for:
  - BGP: Fix an undefined behavior when it tries to parse a too-short packet.
  - CARP: Print the protocol name before any GET_().
  - CDP: only hex-dump unknown TLVs in verbose mode.
  - DHCP: parse the SZTP redirect tag.
  - DHCPv6: client-id/server-id DUID type 2 correction; parse the user class,
    boot file URL, and SZTP redirect options; add DUID-UUID printing (RFC6355).
  - DNS: Detect and correctly handle too-short URI RRs.
  - EAP: Assign ndo_protocol in the eap_print() function.
  - Frame Relay (Multilink): Fix the Timestamp Information Element printing.
  - ICMPv6: Fix printing the Home Agent Address Discovery Reply Message.
  - IEEE 802.11: no need for an element ID in the structures for IEs, make
    the length in the IE structures a u_int, include the "TA" field while
    printing Block Ack Control frame.
  - IP: Enable TSO (TCP Segmentation Offload) support; fix printing invalid
    cases as invalid, not truncated; use ND_ICHECKMSG_ZU() to test the
    header length.
  - IPv6: Fix printing invalid cases as invalid, not truncated; use
    ND_ICHECKMSG_U() to print an invalid version.
  - IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers.
  - ISAKMP: Fix printing Delete payload SPI when size is zero.
  - Kerberos: Print the protocol name, remove a redundant bounds check.
  - lwres: Fix an undefined behavior in pointer arithmetic.
  - OpenFlow 1.0: Fix indentation of PORT_MOD, improve handling of
    some lengths, and fix handling of snapend.
  - TCP: Test ports &lt; 1024 in port order to select the printer.
  - UDP: Move source port equal BCM_LI_PORT to bottom of long if else chain.
  - UDP: Test ports &lt; 1024 in port order to select the printer.
  - LDP: Add missing fields of the Common Session Parameters TLV and fix the
    offset for the A&amp;D bits.
  - NFLOG: Use correct AF code points on all OSes.
  - OSPF: Pad TLVs in LS_OPAQUE_TYPE_RI to multiples of 4 bytes.
  - OSPF: Update LS-Ack printing not to run off the end of the packet.
  - OSPF6: Fix an undefined behavior.
  - PPP: Check if there is some data to hexdump.
  - PPP: Remove an extra colon before LCP Callback Operation.
  - Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397;
    Note: This problem does not affect any tcpdump release.
  - PTP: Fix spelling of type SIGNALING, Parse major and minor version
    correctly, Print majorSdoId field instead of just the first bit.
  - RPKI-Router: Refine length and bounds checks.
  - RX, SNMP, ZEP, smbutil.c: Use the "%Y-%m-%d" date format.
  * User interface:
  - Print the supported time stamp types (-J) to stdout instead of stderr.
  - Print the list of data link types (-L) to stdout instead of stderr.
  - Update --version option to print 32/64-bit build and time_t size.
  - Support "3des" as an alias for "des_ede3_cbc" even if the crypto
    library doesn't support adding aliases.
  * Source code:
  - tcpdump: Fix a memory leak.
  - child_cleanup: reap as many child processes as possible.
  - Ignore failures when setting the default "any" device DLL to LINUX_SLL2.
  - Fix for backends which doesn't support capsicum.
  - Introduce new ND_ICHECK*() macros to deduplicate more code.
  - Skip privilege dropping when using -Z root on --with-user builds.
  - Free interface list just before exiting where it wasn't being freed.</changelog>
  <changelog author="pmonreal@suse.com" date="1733313600">- Update tcpdump.keyring with upstream RSA signing key.</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- drop SLE11 build hack</changelog>
</package>
<package pkgid="a203a76fd1889a9008af71f9b9b362065cc4251f203b1473de878f8e016f3ab6" name="tcpdump" arch="x86_64">
  <version epoch="0" ver="4.99.5" rel="90.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Security fix [bsc#1068716, CVE-2017-16808]
  * Heap-based buffer over-read related to aoe_print and lookup_emem
  * Added tcpdump-CVE-2017-16808.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883201">- Use %license macro for LICENSE file</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883202">- Security fix [bsc#1142439, CVE-2019-1010220]
  * Buffer Over-read in print_prefix which may expose data
  * Added tcpdump-CVE-2019-1010220.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Update to 4.9.3 [bsc#1153098]
  * Fix buffer overflow/overread vulnerabilities:
  - CVE-2017-16808 (AoE)
  - CVE-2018-14468 (FrameRelay)
  - CVE-2018-14469 (IKEv1)
  - CVE-2018-14470 (BABEL)
  - CVE-2018-14466 (AFS/RX)
  - CVE-2018-14461 (LDP)
  - CVE-2018-14462 (ICMP)
  - CVE-2018-14465 (RSVP)
  - CVE-2018-14881 (BGP)
  - CVE-2018-14464 (LMP)
  - CVE-2018-14463 (VRRP)
  - CVE-2018-14467 (BGP)
  - CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
  - CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
  - CVE-2018-14880 (OSPF6)
  - CVE-2018-16451 (SMB)
  - CVE-2018-14882 (RPL)
  - CVE-2018-16227 (802.11)
  - CVE-2018-16229 (DCCP)
  - CVE-2018-16301 (was fixed in libpcap)
  - CVE-2018-16230 (BGP)
  - CVE-2018-16452 (SMB)
  - CVE-2018-16300 (BGP)
  - CVE-2018-16228 (HNCP)
  - CVE-2019-15166 (LMP)
  - CVE-2019-15167 (VRRP)
  * Fix for cmdline argument/local issues:
  - CVE-2018-14879 (tcpdump -V)
- Drop patches fixed upstream:
  * tcpdump-CVE-2017-16808.patch
  * tcpdump-CVE-2019-1010220.patch
  * tcpdump-ikev2pI2.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1571140800">- Trim CFLAGS</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 build (%make_build, %license)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- ignore make check failure for PowerPC as tracked upstream
  https://github.com/the-tcpdump-group/tcpdump/issues/814</changelog>
  <changelog author="pmonreal@suse.com" date="1604577600">- Security fix: [bsc#1178466, CVE-2020-8037]
  * PPP decapsulator: Allocate the right buffer size
- Add tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1609761600">- Remove unrecognized configure option: enable-ipv6</changelog>
  <changelog author="pmonreal@suse.com" date="1609761601">- Update to 4.99.0
  IMPORTANT: Upsteam moved the default install directory to bindir.
    For compatibility, tcpdump is still being installed in
    sbindir and a symlink in bindir has been added.
  * Print unsupported link-layer protocol packets in hex.
  * Add support for new network protocols and DLTs: Arista, Autosar
    SOME/IP, Broadcom LI and Ethernet switches tag, IEEE 802.15.9,
    IP-over-InfiniBand (IPoIB), Linux SLL2, Linux vsockmon, MACsec,
    Marvell Distributed Switch Architecture, OpenFlow 1.3, Precision
    Time Protocol (PTP), SSH, WHOIS, ZigBee Encapsulation Protocol (ZEP).
  * Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16,
    HNCP, ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP
    ping, MPTCP, NFS, NSH, NTP, OSPF, OSPF6, PGM, PIM, PPTP, RADIUS,
    RSVP, Rx, SMB, UDLD, VXLAN-GPE.
  * User interface:
  - Make SLL2 the default for Linux "any" pseudo-device.
  - Add --micro and --nano shorthands.
  - Add --count to print a counter only instead of decoding.
  - Add --print, to cause packet printing even with -w.
  - Add support for remote capture if libpcap supports it.
  - Flush the output packet buffer on a SIGUSR2.
  - Handle very large -f files by rejecting them.
  * Source code:
  - Introduce new helper functions, including GET_*(),
    nd_print_protocol(), nd_print_invalid(), nd_print_trunc(),
    nd_trunc_longjmp() and others.
  - Put integer signedness right in many cases.
  - Introduce nd_uint*, nd_mac_addr, nd_ipv4 and nd_ipv6 types
    to fix alignment issues, especially on SPARC.
  - Use a table instead of getprotobynumber().
  - Get rid of ND_UNALIGNED and ND_TCHECK().
  - Make roundup2() generally available.
  - Resync SMI list against Wireshark.
- Remove patches fixed upstream:
  * tcpdump-CVE-2018-19519.patch
  * tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613736000">- Fix excess of precission in floating point registers for i586
  until resolved upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1623585600">- update to 4.99.1:
  * Squelch some compiler warnings
  * ICMP: Update the snapend for some nested IP packets
  * MACsec: Update the snapend thus the ICV field is not payload
    for the caller
  * EIGRP: Fix packet header fields
  * SMB: Disable printer by default in CMake builds
  * OLSR: Print the protocol name even if the packet is invalid
  * MSDP: Print ": " before the protocol name
  * ESP: Remove padding, padding length and next header from the buffer
  * DHCPv6: Update the snapend for nested DHCPv6 packets
  * OpenFlow 1.0: Get snapend right for nested frames
  * TCP: Update the snapend before decoding a MPTCP option
  * Ethernet, IEEE 802.15.4, IP, L2TP, TCP, ZEP: Add bounds checks
  * ForCES: Refine SPARSEDATA-TLV length check
  * ASCII/hex: Use nd_trunc_longjmp() in truncation cases
  * GeoNet: Add a ND_TCHECK_LEN() call
  * Replace ND_TCHECK_/memcpy() pairs with GET_CPY_BYTES()
  * BGP: Fix overwrites of global 'astostr' temporary buffer
  * ARP: fix overwrites of static buffer in q922_string()
  * Frame Relay: have q922_string() handle errors better</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 4.99.2:
  * Multiple fixes and improvements to BGP, DSA, EAP, 802.11,
    802.15.4, RRCP, MPLS, ICMP, VQP, Juniper, lwres, Ethernet,
    IPX, Zephyr, VRRP, DCCP, IPv6, ISAKMP, RADIUS, TCP, RESp,
    Arista, sFlow, VRRP, OSPF, OSPFv3, ICMPv3, ICMPv6, NFS, PTP,
    WHOIS, MPTCP, ESP, PPP, ZEP printers
  * Build system updates, developer visible fixes, documentation</changelog>
  <changelog author="dmueller@suse.com" date="1673956800">- update to 4.99.3:
  * Updated printers:
    PTP: Use the proper values for the control field and print un-allocated
    values for the message field as "Reserved" instead of "none".
  * Source code:
    smbutil.c: Replace obsolete function call (asctime)
  * Documentation:
    Reformat the installation notes (INSTALL.txt) in Markdown.
    Convert CONTRIBUTING to Markdown.
    CONTRIBUTING.md: Document the use of "protocol: " in a commit summary.
    Add a README file for NetBSD.
    Fix CMake build to set man page section numbers in tcpdump.1</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 4.99.4:
  * LSP ping: Fix "Unused value" warnings from Coverity
  * CVE-2023-1801: out-of-bounds write in the SMB printer (boo#1210265)
  * DNS: sync resource types with IANA
  * ICMPv6: Update the output to show a RPL DAO field name
  Geneve: Fix the Geneve UDP port test
  * build system tweaks and documentation updates</changelog>
  <changelog author="fcrozat@suse.com" date="1708344000">- Update url for tcpdump keyring and refresh keyring.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 4.99.5:
  * Refine protocol decoding for:
  - BGP: Fix an undefined behavior when it tries to parse a too-short packet.
  - CARP: Print the protocol name before any GET_().
  - CDP: only hex-dump unknown TLVs in verbose mode.
  - DHCP: parse the SZTP redirect tag.
  - DHCPv6: client-id/server-id DUID type 2 correction; parse the user class,
    boot file URL, and SZTP redirect options; add DUID-UUID printing (RFC6355).
  - DNS: Detect and correctly handle too-short URI RRs.
  - EAP: Assign ndo_protocol in the eap_print() function.
  - Frame Relay (Multilink): Fix the Timestamp Information Element printing.
  - ICMPv6: Fix printing the Home Agent Address Discovery Reply Message.
  - IEEE 802.11: no need for an element ID in the structures for IEs, make
    the length in the IE structures a u_int, include the "TA" field while
    printing Block Ack Control frame.
  - IP: Enable TSO (TCP Segmentation Offload) support; fix printing invalid
    cases as invalid, not truncated; use ND_ICHECKMSG_ZU() to test the
    header length.
  - IPv6: Fix printing invalid cases as invalid, not truncated; use
    ND_ICHECKMSG_U() to print an invalid version.
  - IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers.
  - ISAKMP: Fix printing Delete payload SPI when size is zero.
  - Kerberos: Print the protocol name, remove a redundant bounds check.
  - lwres: Fix an undefined behavior in pointer arithmetic.
  - OpenFlow 1.0: Fix indentation of PORT_MOD, improve handling of
    some lengths, and fix handling of snapend.
  - TCP: Test ports &lt; 1024 in port order to select the printer.
  - UDP: Move source port equal BCM_LI_PORT to bottom of long if else chain.
  - UDP: Test ports &lt; 1024 in port order to select the printer.
  - LDP: Add missing fields of the Common Session Parameters TLV and fix the
    offset for the A&amp;D bits.
  - NFLOG: Use correct AF code points on all OSes.
  - OSPF: Pad TLVs in LS_OPAQUE_TYPE_RI to multiples of 4 bytes.
  - OSPF: Update LS-Ack printing not to run off the end of the packet.
  - OSPF6: Fix an undefined behavior.
  - PPP: Check if there is some data to hexdump.
  - PPP: Remove an extra colon before LCP Callback Operation.
  - Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397;
    Note: This problem does not affect any tcpdump release.
  - PTP: Fix spelling of type SIGNALING, Parse major and minor version
    correctly, Print majorSdoId field instead of just the first bit.
  - RPKI-Router: Refine length and bounds checks.
  - RX, SNMP, ZEP, smbutil.c: Use the "%Y-%m-%d" date format.
  * User interface:
  - Print the supported time stamp types (-J) to stdout instead of stderr.
  - Print the list of data link types (-L) to stdout instead of stderr.
  - Update --version option to print 32/64-bit build and time_t size.
  - Support "3des" as an alias for "des_ede3_cbc" even if the crypto
    library doesn't support adding aliases.
  * Source code:
  - tcpdump: Fix a memory leak.
  - child_cleanup: reap as many child processes as possible.
  - Ignore failures when setting the default "any" device DLL to LINUX_SLL2.
  - Fix for backends which doesn't support capsicum.
  - Introduce new ND_ICHECK*() macros to deduplicate more code.
  - Skip privilege dropping when using -Z root on --with-user builds.
  - Free interface list just before exiting where it wasn't being freed.</changelog>
  <changelog author="pmonreal@suse.com" date="1733313600">- Update tcpdump.keyring with upstream RSA signing key.</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- drop SLE11 build hack</changelog>
</package>
<package pkgid="285b02472b290575c439a94996d82e66d01b8aa7289242d684c0aacfd9186bf7" name="tcpdump-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.99.5" rel="90.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Security fix [bsc#1068716, CVE-2017-16808]
  * Heap-based buffer over-read related to aoe_print and lookup_emem
  * Added tcpdump-CVE-2017-16808.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883201">- Use %license macro for LICENSE file</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883202">- Security fix [bsc#1142439, CVE-2019-1010220]
  * Buffer Over-read in print_prefix which may expose data
  * Added tcpdump-CVE-2019-1010220.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Update to 4.9.3 [bsc#1153098]
  * Fix buffer overflow/overread vulnerabilities:
  - CVE-2017-16808 (AoE)
  - CVE-2018-14468 (FrameRelay)
  - CVE-2018-14469 (IKEv1)
  - CVE-2018-14470 (BABEL)
  - CVE-2018-14466 (AFS/RX)
  - CVE-2018-14461 (LDP)
  - CVE-2018-14462 (ICMP)
  - CVE-2018-14465 (RSVP)
  - CVE-2018-14881 (BGP)
  - CVE-2018-14464 (LMP)
  - CVE-2018-14463 (VRRP)
  - CVE-2018-14467 (BGP)
  - CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
  - CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
  - CVE-2018-14880 (OSPF6)
  - CVE-2018-16451 (SMB)
  - CVE-2018-14882 (RPL)
  - CVE-2018-16227 (802.11)
  - CVE-2018-16229 (DCCP)
  - CVE-2018-16301 (was fixed in libpcap)
  - CVE-2018-16230 (BGP)
  - CVE-2018-16452 (SMB)
  - CVE-2018-16300 (BGP)
  - CVE-2018-16228 (HNCP)
  - CVE-2019-15166 (LMP)
  - CVE-2019-15167 (VRRP)
  * Fix for cmdline argument/local issues:
  - CVE-2018-14879 (tcpdump -V)
- Drop patches fixed upstream:
  * tcpdump-CVE-2017-16808.patch
  * tcpdump-CVE-2019-1010220.patch
  * tcpdump-ikev2pI2.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1571140800">- Trim CFLAGS</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 build (%make_build, %license)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- ignore make check failure for PowerPC as tracked upstream
  https://github.com/the-tcpdump-group/tcpdump/issues/814</changelog>
  <changelog author="pmonreal@suse.com" date="1604577600">- Security fix: [bsc#1178466, CVE-2020-8037]
  * PPP decapsulator: Allocate the right buffer size
- Add tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1609761600">- Remove unrecognized configure option: enable-ipv6</changelog>
  <changelog author="pmonreal@suse.com" date="1609761601">- Update to 4.99.0
  IMPORTANT: Upsteam moved the default install directory to bindir.
    For compatibility, tcpdump is still being installed in
    sbindir and a symlink in bindir has been added.
  * Print unsupported link-layer protocol packets in hex.
  * Add support for new network protocols and DLTs: Arista, Autosar
    SOME/IP, Broadcom LI and Ethernet switches tag, IEEE 802.15.9,
    IP-over-InfiniBand (IPoIB), Linux SLL2, Linux vsockmon, MACsec,
    Marvell Distributed Switch Architecture, OpenFlow 1.3, Precision
    Time Protocol (PTP), SSH, WHOIS, ZigBee Encapsulation Protocol (ZEP).
  * Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16,
    HNCP, ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP
    ping, MPTCP, NFS, NSH, NTP, OSPF, OSPF6, PGM, PIM, PPTP, RADIUS,
    RSVP, Rx, SMB, UDLD, VXLAN-GPE.
  * User interface:
  - Make SLL2 the default for Linux "any" pseudo-device.
  - Add --micro and --nano shorthands.
  - Add --count to print a counter only instead of decoding.
  - Add --print, to cause packet printing even with -w.
  - Add support for remote capture if libpcap supports it.
  - Flush the output packet buffer on a SIGUSR2.
  - Handle very large -f files by rejecting them.
  * Source code:
  - Introduce new helper functions, including GET_*(),
    nd_print_protocol(), nd_print_invalid(), nd_print_trunc(),
    nd_trunc_longjmp() and others.
  - Put integer signedness right in many cases.
  - Introduce nd_uint*, nd_mac_addr, nd_ipv4 and nd_ipv6 types
    to fix alignment issues, especially on SPARC.
  - Use a table instead of getprotobynumber().
  - Get rid of ND_UNALIGNED and ND_TCHECK().
  - Make roundup2() generally available.
  - Resync SMI list against Wireshark.
- Remove patches fixed upstream:
  * tcpdump-CVE-2018-19519.patch
  * tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613736000">- Fix excess of precission in floating point registers for i586
  until resolved upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1623585600">- update to 4.99.1:
  * Squelch some compiler warnings
  * ICMP: Update the snapend for some nested IP packets
  * MACsec: Update the snapend thus the ICV field is not payload
    for the caller
  * EIGRP: Fix packet header fields
  * SMB: Disable printer by default in CMake builds
  * OLSR: Print the protocol name even if the packet is invalid
  * MSDP: Print ": " before the protocol name
  * ESP: Remove padding, padding length and next header from the buffer
  * DHCPv6: Update the snapend for nested DHCPv6 packets
  * OpenFlow 1.0: Get snapend right for nested frames
  * TCP: Update the snapend before decoding a MPTCP option
  * Ethernet, IEEE 802.15.4, IP, L2TP, TCP, ZEP: Add bounds checks
  * ForCES: Refine SPARSEDATA-TLV length check
  * ASCII/hex: Use nd_trunc_longjmp() in truncation cases
  * GeoNet: Add a ND_TCHECK_LEN() call
  * Replace ND_TCHECK_/memcpy() pairs with GET_CPY_BYTES()
  * BGP: Fix overwrites of global 'astostr' temporary buffer
  * ARP: fix overwrites of static buffer in q922_string()
  * Frame Relay: have q922_string() handle errors better</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 4.99.2:
  * Multiple fixes and improvements to BGP, DSA, EAP, 802.11,
    802.15.4, RRCP, MPLS, ICMP, VQP, Juniper, lwres, Ethernet,
    IPX, Zephyr, VRRP, DCCP, IPv6, ISAKMP, RADIUS, TCP, RESp,
    Arista, sFlow, VRRP, OSPF, OSPFv3, ICMPv3, ICMPv6, NFS, PTP,
    WHOIS, MPTCP, ESP, PPP, ZEP printers
  * Build system updates, developer visible fixes, documentation</changelog>
  <changelog author="dmueller@suse.com" date="1673956800">- update to 4.99.3:
  * Updated printers:
    PTP: Use the proper values for the control field and print un-allocated
    values for the message field as "Reserved" instead of "none".
  * Source code:
    smbutil.c: Replace obsolete function call (asctime)
  * Documentation:
    Reformat the installation notes (INSTALL.txt) in Markdown.
    Convert CONTRIBUTING to Markdown.
    CONTRIBUTING.md: Document the use of "protocol: " in a commit summary.
    Add a README file for NetBSD.
    Fix CMake build to set man page section numbers in tcpdump.1</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 4.99.4:
  * LSP ping: Fix "Unused value" warnings from Coverity
  * CVE-2023-1801: out-of-bounds write in the SMB printer (boo#1210265)
  * DNS: sync resource types with IANA
  * ICMPv6: Update the output to show a RPL DAO field name
  Geneve: Fix the Geneve UDP port test
  * build system tweaks and documentation updates</changelog>
  <changelog author="fcrozat@suse.com" date="1708344000">- Update url for tcpdump keyring and refresh keyring.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 4.99.5:
  * Refine protocol decoding for:
  - BGP: Fix an undefined behavior when it tries to parse a too-short packet.
  - CARP: Print the protocol name before any GET_().
  - CDP: only hex-dump unknown TLVs in verbose mode.
  - DHCP: parse the SZTP redirect tag.
  - DHCPv6: client-id/server-id DUID type 2 correction; parse the user class,
    boot file URL, and SZTP redirect options; add DUID-UUID printing (RFC6355).
  - DNS: Detect and correctly handle too-short URI RRs.
  - EAP: Assign ndo_protocol in the eap_print() function.
  - Frame Relay (Multilink): Fix the Timestamp Information Element printing.
  - ICMPv6: Fix printing the Home Agent Address Discovery Reply Message.
  - IEEE 802.11: no need for an element ID in the structures for IEs, make
    the length in the IE structures a u_int, include the "TA" field while
    printing Block Ack Control frame.
  - IP: Enable TSO (TCP Segmentation Offload) support; fix printing invalid
    cases as invalid, not truncated; use ND_ICHECKMSG_ZU() to test the
    header length.
  - IPv6: Fix printing invalid cases as invalid, not truncated; use
    ND_ICHECKMSG_U() to print an invalid version.
  - IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers.
  - ISAKMP: Fix printing Delete payload SPI when size is zero.
  - Kerberos: Print the protocol name, remove a redundant bounds check.
  - lwres: Fix an undefined behavior in pointer arithmetic.
  - OpenFlow 1.0: Fix indentation of PORT_MOD, improve handling of
    some lengths, and fix handling of snapend.
  - TCP: Test ports &lt; 1024 in port order to select the printer.
  - UDP: Move source port equal BCM_LI_PORT to bottom of long if else chain.
  - UDP: Test ports &lt; 1024 in port order to select the printer.
  - LDP: Add missing fields of the Common Session Parameters TLV and fix the
    offset for the A&amp;D bits.
  - NFLOG: Use correct AF code points on all OSes.
  - OSPF: Pad TLVs in LS_OPAQUE_TYPE_RI to multiples of 4 bytes.
  - OSPF: Update LS-Ack printing not to run off the end of the packet.
  - OSPF6: Fix an undefined behavior.
  - PPP: Check if there is some data to hexdump.
  - PPP: Remove an extra colon before LCP Callback Operation.
  - Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397;
    Note: This problem does not affect any tcpdump release.
  - PTP: Fix spelling of type SIGNALING, Parse major and minor version
    correctly, Print majorSdoId field instead of just the first bit.
  - RPKI-Router: Refine length and bounds checks.
  - RX, SNMP, ZEP, smbutil.c: Use the "%Y-%m-%d" date format.
  * User interface:
  - Print the supported time stamp types (-J) to stdout instead of stderr.
  - Print the list of data link types (-L) to stdout instead of stderr.
  - Update --version option to print 32/64-bit build and time_t size.
  - Support "3des" as an alias for "des_ede3_cbc" even if the crypto
    library doesn't support adding aliases.
  * Source code:
  - tcpdump: Fix a memory leak.
  - child_cleanup: reap as many child processes as possible.
  - Ignore failures when setting the default "any" device DLL to LINUX_SLL2.
  - Fix for backends which doesn't support capsicum.
  - Introduce new ND_ICHECK*() macros to deduplicate more code.
  - Skip privilege dropping when using -Z root on --with-user builds.
  - Free interface list just before exiting where it wasn't being freed.</changelog>
  <changelog author="pmonreal@suse.com" date="1733313600">- Update tcpdump.keyring with upstream RSA signing key.</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- drop SLE11 build hack</changelog>
</package>
<package pkgid="5a381d3e9cf7d912561f2b586c8ec324c1dd61588de8849641f92d1caa16cb00" name="tcpdump-debugsource" arch="x86_64">
  <version epoch="0" ver="4.99.5" rel="90.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Security fix [bsc#1068716, CVE-2017-16808]
  * Heap-based buffer over-read related to aoe_print and lookup_emem
  * Added tcpdump-CVE-2017-16808.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883201">- Use %license macro for LICENSE file</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883202">- Security fix [bsc#1142439, CVE-2019-1010220]
  * Buffer Over-read in print_prefix which may expose data
  * Added tcpdump-CVE-2019-1010220.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Update to 4.9.3 [bsc#1153098]
  * Fix buffer overflow/overread vulnerabilities:
  - CVE-2017-16808 (AoE)
  - CVE-2018-14468 (FrameRelay)
  - CVE-2018-14469 (IKEv1)
  - CVE-2018-14470 (BABEL)
  - CVE-2018-14466 (AFS/RX)
  - CVE-2018-14461 (LDP)
  - CVE-2018-14462 (ICMP)
  - CVE-2018-14465 (RSVP)
  - CVE-2018-14881 (BGP)
  - CVE-2018-14464 (LMP)
  - CVE-2018-14463 (VRRP)
  - CVE-2018-14467 (BGP)
  - CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
  - CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
  - CVE-2018-14880 (OSPF6)
  - CVE-2018-16451 (SMB)
  - CVE-2018-14882 (RPL)
  - CVE-2018-16227 (802.11)
  - CVE-2018-16229 (DCCP)
  - CVE-2018-16301 (was fixed in libpcap)
  - CVE-2018-16230 (BGP)
  - CVE-2018-16452 (SMB)
  - CVE-2018-16300 (BGP)
  - CVE-2018-16228 (HNCP)
  - CVE-2019-15166 (LMP)
  - CVE-2019-15167 (VRRP)
  * Fix for cmdline argument/local issues:
  - CVE-2018-14879 (tcpdump -V)
- Drop patches fixed upstream:
  * tcpdump-CVE-2017-16808.patch
  * tcpdump-CVE-2019-1010220.patch
  * tcpdump-ikev2pI2.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1571140800">- Trim CFLAGS</changelog>
  <changelog author="mkubecek@suse.cz" date="1572782400">- fix SLE12 build (%make_build, %license)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- ignore make check failure for PowerPC as tracked upstream
  https://github.com/the-tcpdump-group/tcpdump/issues/814</changelog>
  <changelog author="pmonreal@suse.com" date="1604577600">- Security fix: [bsc#1178466, CVE-2020-8037]
  * PPP decapsulator: Allocate the right buffer size
- Add tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1609761600">- Remove unrecognized configure option: enable-ipv6</changelog>
  <changelog author="pmonreal@suse.com" date="1609761601">- Update to 4.99.0
  IMPORTANT: Upsteam moved the default install directory to bindir.
    For compatibility, tcpdump is still being installed in
    sbindir and a symlink in bindir has been added.
  * Print unsupported link-layer protocol packets in hex.
  * Add support for new network protocols and DLTs: Arista, Autosar
    SOME/IP, Broadcom LI and Ethernet switches tag, IEEE 802.15.9,
    IP-over-InfiniBand (IPoIB), Linux SLL2, Linux vsockmon, MACsec,
    Marvell Distributed Switch Architecture, OpenFlow 1.3, Precision
    Time Protocol (PTP), SSH, WHOIS, ZigBee Encapsulation Protocol (ZEP).
  * Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16,
    HNCP, ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP
    ping, MPTCP, NFS, NSH, NTP, OSPF, OSPF6, PGM, PIM, PPTP, RADIUS,
    RSVP, Rx, SMB, UDLD, VXLAN-GPE.
  * User interface:
  - Make SLL2 the default for Linux "any" pseudo-device.
  - Add --micro and --nano shorthands.
  - Add --count to print a counter only instead of decoding.
  - Add --print, to cause packet printing even with -w.
  - Add support for remote capture if libpcap supports it.
  - Flush the output packet buffer on a SIGUSR2.
  - Handle very large -f files by rejecting them.
  * Source code:
  - Introduce new helper functions, including GET_*(),
    nd_print_protocol(), nd_print_invalid(), nd_print_trunc(),
    nd_trunc_longjmp() and others.
  - Put integer signedness right in many cases.
  - Introduce nd_uint*, nd_mac_addr, nd_ipv4 and nd_ipv6 types
    to fix alignment issues, especially on SPARC.
  - Use a table instead of getprotobynumber().
  - Get rid of ND_UNALIGNED and ND_TCHECK().
  - Make roundup2() generally available.
  - Resync SMI list against Wireshark.
- Remove patches fixed upstream:
  * tcpdump-CVE-2018-19519.patch
  * tcpdump-CVE-2020-8037.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613736000">- Fix excess of precission in floating point registers for i586
  until resolved upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1623585600">- update to 4.99.1:
  * Squelch some compiler warnings
  * ICMP: Update the snapend for some nested IP packets
  * MACsec: Update the snapend thus the ICV field is not payload
    for the caller
  * EIGRP: Fix packet header fields
  * SMB: Disable printer by default in CMake builds
  * OLSR: Print the protocol name even if the packet is invalid
  * MSDP: Print ": " before the protocol name
  * ESP: Remove padding, padding length and next header from the buffer
  * DHCPv6: Update the snapend for nested DHCPv6 packets
  * OpenFlow 1.0: Get snapend right for nested frames
  * TCP: Update the snapend before decoding a MPTCP option
  * Ethernet, IEEE 802.15.4, IP, L2TP, TCP, ZEP: Add bounds checks
  * ForCES: Refine SPARSEDATA-TLV length check
  * ASCII/hex: Use nd_trunc_longjmp() in truncation cases
  * GeoNet: Add a ND_TCHECK_LEN() call
  * Replace ND_TCHECK_/memcpy() pairs with GET_CPY_BYTES()
  * BGP: Fix overwrites of global 'astostr' temporary buffer
  * ARP: fix overwrites of static buffer in q922_string()
  * Frame Relay: have q922_string() handle errors better</changelog>
  <changelog author="mkubecek@suse.cz" date="1665662400">- fix SLE11 build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 4.99.2:
  * Multiple fixes and improvements to BGP, DSA, EAP, 802.11,
    802.15.4, RRCP, MPLS, ICMP, VQP, Juniper, lwres, Ethernet,
    IPX, Zephyr, VRRP, DCCP, IPv6, ISAKMP, RADIUS, TCP, RESp,
    Arista, sFlow, VRRP, OSPF, OSPFv3, ICMPv3, ICMPv6, NFS, PTP,
    WHOIS, MPTCP, ESP, PPP, ZEP printers
  * Build system updates, developer visible fixes, documentation</changelog>
  <changelog author="dmueller@suse.com" date="1673956800">- update to 4.99.3:
  * Updated printers:
    PTP: Use the proper values for the control field and print un-allocated
    values for the message field as "Reserved" instead of "none".
  * Source code:
    smbutil.c: Replace obsolete function call (asctime)
  * Documentation:
    Reformat the installation notes (INSTALL.txt) in Markdown.
    Convert CONTRIBUTING to Markdown.
    CONTRIBUTING.md: Document the use of "protocol: " in a commit summary.
    Add a README file for NetBSD.
    Fix CMake build to set man page section numbers in tcpdump.1</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 4.99.4:
  * LSP ping: Fix "Unused value" warnings from Coverity
  * CVE-2023-1801: out-of-bounds write in the SMB printer (boo#1210265)
  * DNS: sync resource types with IANA
  * ICMPv6: Update the output to show a RPL DAO field name
  Geneve: Fix the Geneve UDP port test
  * build system tweaks and documentation updates</changelog>
  <changelog author="fcrozat@suse.com" date="1708344000">- Update url for tcpdump keyring and refresh keyring.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 4.99.5:
  * Refine protocol decoding for:
  - BGP: Fix an undefined behavior when it tries to parse a too-short packet.
  - CARP: Print the protocol name before any GET_().
  - CDP: only hex-dump unknown TLVs in verbose mode.
  - DHCP: parse the SZTP redirect tag.
  - DHCPv6: client-id/server-id DUID type 2 correction; parse the user class,
    boot file URL, and SZTP redirect options; add DUID-UUID printing (RFC6355).
  - DNS: Detect and correctly handle too-short URI RRs.
  - EAP: Assign ndo_protocol in the eap_print() function.
  - Frame Relay (Multilink): Fix the Timestamp Information Element printing.
  - ICMPv6: Fix printing the Home Agent Address Discovery Reply Message.
  - IEEE 802.11: no need for an element ID in the structures for IEs, make
    the length in the IE structures a u_int, include the "TA" field while
    printing Block Ack Control frame.
  - IP: Enable TSO (TCP Segmentation Offload) support; fix printing invalid
    cases as invalid, not truncated; use ND_ICHECKMSG_ZU() to test the
    header length.
  - IPv6: Fix printing invalid cases as invalid, not truncated; use
    ND_ICHECKMSG_U() to print an invalid version.
  - IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers.
  - ISAKMP: Fix printing Delete payload SPI when size is zero.
  - Kerberos: Print the protocol name, remove a redundant bounds check.
  - lwres: Fix an undefined behavior in pointer arithmetic.
  - OpenFlow 1.0: Fix indentation of PORT_MOD, improve handling of
    some lengths, and fix handling of snapend.
  - TCP: Test ports &lt; 1024 in port order to select the printer.
  - UDP: Move source port equal BCM_LI_PORT to bottom of long if else chain.
  - UDP: Test ports &lt; 1024 in port order to select the printer.
  - LDP: Add missing fields of the Common Session Parameters TLV and fix the
    offset for the A&amp;D bits.
  - NFLOG: Use correct AF code points on all OSes.
  - OSPF: Pad TLVs in LS_OPAQUE_TYPE_RI to multiples of 4 bytes.
  - OSPF: Update LS-Ack printing not to run off the end of the packet.
  - OSPF6: Fix an undefined behavior.
  - PPP: Check if there is some data to hexdump.
  - PPP: Remove an extra colon before LCP Callback Operation.
  - Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397;
    Note: This problem does not affect any tcpdump release.
  - PTP: Fix spelling of type SIGNALING, Parse major and minor version
    correctly, Print majorSdoId field instead of just the first bit.
  - RPKI-Router: Refine length and bounds checks.
  - RX, SNMP, ZEP, smbutil.c: Use the "%Y-%m-%d" date format.
  * User interface:
  - Print the supported time stamp types (-J) to stdout instead of stderr.
  - Print the list of data link types (-L) to stdout instead of stderr.
  - Update --version option to print 32/64-bit build and time_t size.
  - Support "3des" as an alias for "des_ede3_cbc" even if the crypto
    library doesn't support adding aliases.
  * Source code:
  - tcpdump: Fix a memory leak.
  - child_cleanup: reap as many child processes as possible.
  - Ignore failures when setting the default "any" device DLL to LINUX_SLL2.
  - Fix for backends which doesn't support capsicum.
  - Introduce new ND_ICHECK*() macros to deduplicate more code.
  - Skip privilege dropping when using -Z root on --with-user builds.
  - Free interface list just before exiting where it wasn't being freed.</changelog>
  <changelog author="pmonreal@suse.com" date="1733313600">- Update tcpdump.keyring with upstream RSA signing key.</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- drop SLE11 build hack</changelog>
</package>
<package pkgid="a46bf9047694156e86782c4a26d0bb8b3c84b7d774942a26976c6b0f1fc3f8bd" name="tcpreplay" arch="src">
  <version epoch="0" ver="4.5.5" rel="45.1"/>
  <changelog author="mkubecek@suse.cz" date="1479729600">- update to version 4.1.2
  * increase max packet size to 65549 (CVE-2016-6160 bsc#987846)
  * minor build fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- 278-fail-if-capture-has-a-packet-that-is-too-large.patch:
  buffer overflow in tcpcapinfo utility triggered by too large
  packet (CVE-2017-6429 bsc#1028234)</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 4.2.6:
  * Test fails on sparc64 (#393)
- Changes for version 4.2.5:
  * Fix issues found by scan-build (#384)
  * Improve --portmap help message (#381)
  * AFL detected security crash in fuzz feature (#380)
  * Coverity static scan detected issues (#374)
  * Fuzz should not be overwritting Layer 3 (#372)
  * Add --fuzz-factor option to specify fuzz ratio (#371)
  * Warnings when building on old distributions (#368)
  * Fix more Lintian detected spelling errors (#365)
  * Fuzz test failure on ARM and MIPS (#364)
- Changes for version 4.2.4:
  * Fix Lintian detected spelling errors (#362)
- Changes for version 4.2.3:
  * Archive (remove) QuickTX until maintainer found (#357)
  * Ubuntu precise 32bit_build (#356)
- Changes for version 4.2.2:
  * Archive (remove) QuickTX (#357)
  * Missing symbol pcap_version on macOS 10.12.4 (#356)
- Changes for version 4.2.1:
  * Fix reporting of rates &lt; 1Mbps (#348)
  * Option --unique-ip not working properly (#346)
- Changes for version 4.2.0:
  * MAC rewriting capabilities (#313)
  * Fix several issues identified by Coverity (#305)
  * Packet destortion --fuzz-seed option by Gabriel Ganne (#302)
  * Add --unique-ip-loops option to modify IPs every few loops
    (#296)
  * Netmap startup delay increase (#290)
  * tcpcapinfo buffer overflow vulnerablily (#278)
  * Update git-clone instructions by Kyle McDonald (#277)
  * Allow fractions for --pps option (#270)
  * Print per-loop stats with --stats=0 (#269)
  * Add protection against packet drift by Guillaume Scott (#268)
  * Print flow stats periodically with --stats output (#262)
  * Include Travis-CI build support by Ilya Shipitsin (#264) (#285)
  * tcpreplay won't replay all packets in a pcap file with --netmap
    (#255)
  * First and last packet times in --stats output (#239)
  * Switch to wire speed after 30 minutes at 6 Gbps (#210)
  * tcprewrite fix checksum properly for fragmented packets (#190)
- Drop no longer needed patch (already in upstream):
  * 278-fail-if-capture-has-a-packet-that-is-too-large.patch
- Use %make_install macro
- Update dependencies to support (libnl3 and dbus-1)</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Trim history recap in description.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 4.3.1:
  * Fix checkspell detected typos (#531)
  * Heap overflow packet2tree and get_l2len (#530)
- Update to version 4.3.0:
  * Fix TCP sequence edit seeding (#514)
  * Fix issues identified by Codacy (#493)
  * CVE-2018-18408 use-after-free in post_args (#489 bsc#1112354)
  * CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488 bsc#1112355)
  * CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486 bsc#1110786)
  * CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485 bsc#1110333)
  * CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484 bsc#1110285)
  * Out-of-tree build (#483)
  * CVE-20180-13112 heap-buffer-overflow in get_l2len (#477)
  * Closing stdin on pipe (#479)
  * Second pcap file hangs on multiplier option (#466)
  * TCP sequence edit ACK corruption (#451)
  * TCP sequence number edit initial SYN packet should have 0 ACK (#450)
  * Travis CI build fails due to new build images (#432)
  * Upgrade libopts to 5.18.12 to address version build issues (#430)
  * Add ability to change tcp SEQ/ACK numbers (#425)
  * Hang using loop and netmap options (#424)
  * tcpprep -S not working for large cache files (#423)
  * Unable to tcprewrite range of ports with --portmap (#422)
  * --maxsleep broken for values less than 1000 (#421)
  * -T flag breaks traffic replay timing (#421)
  * Respect 2nd packet timing (#418)
  * Avoid non-blocking behaviour when using STDIN (#416)
  * pcap containing &gt;1020 packets produces invalid cache file (#415)
  * manpage typos (#413)
  * Fails to open tap0 on Zephyr (#411)
  * Heap-buffer-overflow in get_l2protocol (#410)
  * Heap-buffer-overflow in packet2tree (#409)
  * Heap-buffer-overflow in getl2len (#408)
  * Heap-buffer-overflow in flow_decode (#407)
  * Rewrite zero IP total length field to match packet length (#406)
  * Stack-buffer-overflow in tcapinfo (#405)
  * tcpprep --include option does not exclude (#404)
  * Negative-size-param memset in dlt_radiotap_get_80211 (#402)
  * tcpreplay --verbose option not working (#398)
  * Fix replay when using --with-testnic (#178)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552564800">- Update to version 4.3.2
  * CVE-2019-8381 memory access in do_checksum() (#538 bsc#1125753)
  * CVE-2019-8376 NULL pointer dereference get_layer4_v6() (#517 bsc#1125755)
  * CVE-2019-8377 NULL points dereference get_ipv6_i4proto() (#536 bsc#1125754)
  * Rename Ethereal to Wireshark (#545)</changelog>
  <changelog author="mpluskal@suse.com" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="mpluskal@suse.com" date="1592222400">- Update to version 4.3.3:
  * Increase cache buffers size to accomodate VLAN edits (#594)
  * Correct L2 header length to correct IP header offset (#583)
  * Fix warnings from gcc version 10 (#580)
  * Heap Buffer Overflow in randomize_iparp (#579)
  * Use after free in get_ipv6_next (#578)
  * Heap Buffer Overflow in git_ipv6_next (#576)
  * Call pcap_freecode() on pcap_compile() (#572)
  * Increase max snaplen to 262144 (#571)
  * Fix divide by zero in fuzzing (#570)
  * Unique IP repeats at very high iteration counts (#566)
  * Fails to compile on FreeBSD amd64 13.0 (#558)
  * Heap Buffer Overflow in do_checksum (#556) (#577)
  * Attempt to correct corrupt pcap files, if possible (#557)
  * Fix GCC v10 warnings (#555)
  * Remove some duplicated SOURCES entries (#551)
  * Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
  * Implement –loopdelay-ms when using –loop=0 (#546)
  * Heap overflow packet2tree and get_l2len (#530)</changelog>
  <changelog author="rpm@fthiessen.de" date="1620475200">- Update to version 4.3.4
  * Fixes ASAN reports memory leaks while running tests
  * clean up new_cidr_map() string manipulation on error exit
  * Fixed invalid --pps value protection
  * Fixed packets slowly drift further and further behind when they
    should be sent
  * Fixed 64 bit rollover can cause pps replay issues after several
    hours
  * DLT_NULL/DLT_LOOP support for cross-platform PF_INET6
  * Fixed heap buffer overflow in tcpreplay fast_edit_packet
  * Fixed heap buffer overflow in tcpreplay get_next_packet
  * Fixed CVE-2020-24266 heap buffer overflow in tcpprep get_l2len
  * Fixed CVE-2020-24265 heap buffer overflow in tcpprep
  * handle malformed and unsupported packets as soft errors
  * Fixed tcprewrite --fixlen not working on DLT conversion
  * Fixed with multiplier option only first file can be sent and hang
  * do not create tap0 if device already exists</changelog>
  <changelog author="dmueller@suse.com" date="1658059200">- update to 4.4.1:
  * fix support for feeding PCAP files from STDIN
  * fix Debian/kfreebsd build
  * fix typos
  * safeguard against corrupt packet lengths in checksum functions
  * fix double free in Juniper DLT
  * fix to flows.c, fix #665
  * update Travis CI to focal
  * LINUX installed netmap auto detection
  * Support for Q-in-Q VLAN tags
  * skipbroadcast
  * add security policy document
  * Directories of pcaps as arguments
  * stage PR from @halver94
  * fix PPS calc for long-running sessions
  * Improve SDK selection
  * fix directory include feature
  * mac os tests fail
  * Revert "send_packet: Avoid clock drift
  * mac update on multicast</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 4.4.2:
  * This is Tcpreplay suite 4.4.2
  * This release contains bug fixes only.
  * What's Changed
  * Bug #716 heap-buffer-overflow in get_l2len_protocol()
  * Bug #721 fixed typo in tcpliveplay.c
  * Bug #717 avoid assertion in get_layer4_v6
  * Bug #718 improved heap-overflow protection
  * Bug #719 better overflow protection in parse_mpls
  * Bug #725 FORCE_ALIGN on arm
  * Bug #729 tcpreplay_edit: disallow both -K and -l options
  * Bug #735 heap-overflow in get_l2len_protocol
  * Bug #745 remove autogen.sh from distribution tarballs</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 4.4.3:
  * upgrade autogen/libopts to version 5.18.16
  * avoid implicit int in configure.ac
  * remove invalid assert in tree
  * program exit after send error
  * make libpcap version test more robust
  * looping inflates some packet counters</changelog>
  <changelog author="mardnh@gmx.de" date="1689076800">- Update to 4.4.4:
  * overflow check fix for parse_mpls.
  * tcpreplay-edit: prevent L2 flooding of ipv6 unicast packets.
  * CVE-2023-27786: bugs caused by strtok_r. (boo#1209416)
  * CVE-2023-27783 reachable assert in tcpedit_dlt_cleanup
    (boo#1209413)
  * reachable assert in fast_edit_packet.</changelog>
  <changelog author="mpluskal@suse.com" date="1733832000">- Update to version 4.5.1:
  * AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING)
  * -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface
  * --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w.
  * --fixhdrlen tcpreplay option - added to control action on packet length changes
  * -W tcpreplay option - suppress warnings when replaying
  * SLL2( Linux "cooked" capture encapsulation v2)
  * Haiku support</changelog>
  <changelog author="pgajdos@suse.com" date="1755518400">- build with gcc15</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- security update
- added patches
  CVE-2025-8746 [bsc#1247917], improper input validation and memory bounds checking when processing certain malformed configuration files
  + tcpreplay-CVE-2025-8746.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1762430400">- update to version 4.5.2:
  - bugfix release
  - see https://github.com/appneta/tcpreplay/compare/v4.5.1...v4.5.2
    for full list of changes since v4.5.1
  - includes fixes for
  - CVE-2025-9157 / bsc#1248322
  - CVE-2025-51006 / bsc#1250356
- drop build workarounds for SLE11; since %autosetup and %license
  were introduced into the specfile recently, the package would not
  build on SLE11 or older anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1784548800">- Update to version 4.5.3:
  * tcpreplay: fix --multiplier timing drift and miscalibrated
    overflow guards in calc_sleep_time
  * sendpacket: retry EAGAIN/ENOBUFS a bounded number of times
    instead of retrying endlessly; warn when sending on a
    down/no-carrier interface on Linux
  * sendpacket: fix AF_XDP transmission by no longer inhibiting
    libbpf's default XDP program load; route "zc:" PF_RING ZC
    device names through libpcap
  * netmap: bound and make abortable the TX-ring drain wait;
    remove stray switch defaults in nm_do_ioctl() that broke
  - -netmap
  * tcprewrite: fix adding a VLAN tag with missing options;
    rewrite addresses embedded in ICMPv6 error messages
  * tcpprep: fix buffer overflow on truncated packets
  * tcpedit: fix wrong end-of-buffer pointer in TCP-sequence and
    portmap rewrite
  * tcpliveplay: call pcap_breakloop() from the SIGALRM handler so
    an unresponsive peer is reported promptly
  * fragroute: fix overflow on packets carrying too many MPLS
    labels; fix TAILQ_FOREACH_REVERSE portability across queue.h
    variants
  * tcpr_random: fix signed left-shift undefined behaviour
  * configure: stop --with-netmap from leaking -I&lt;DIR&gt;/sys into
    CFLAGS
- Convert BuildRequires to pkgconfig() style and drop the obsolete
  Group tag
- Add tcpreplay-fix-txring-includes.patch: fix the __GLIBC_MINOR
  typo in txring.h (the macro is __GLIBC_MINOR__, so the version
  check silently evaluated to 0) and include &lt;linux/if_packet.h&gt;,
  which is what actually defines the PACKET_TX_RING API - glibc's
  &lt;netpacket/packet.h&gt; never provided it, so correcting the typo
  alone does not compile.  Sent upstream
- Restore Linux TX_RING packet injection support, which was
  disabled by accident: configure probes it by including both
  &lt;netpacket/packet.h&gt; and &lt;linux/if_packet.h&gt;, and before C23
  those two collide on struct sockaddr_ll, so the probe always
  failed and tcpreplay fell back to the slower PF_PACKET send()
  path.  configure now reports "Linux TX_RING: yes"
- Narrow the -std=gnu11 pin to the bundled libopts directory
  rather than the whole tree.  The pin is still required there
  (autoopts is not C23-clean under gcc &gt;= 15), but applying it
  globally is what dragged the TX_RING probe below C23</changelog>
  <changelog author="mpluskal@suse.com" date="1784808000">- Update to version 4.5.4 (security-only release):
  * Fix heap buffer overflow in the tcprewrite fragroute
    tcp_opt module (GHSA-pfqg-243f-8q25, CWE-787, CVSS 8.4):
    tcp_opt_apply() passed sizeof(pkt-&gt;pkt_data) - ETH_HDR_LEN
    as the capacity bound, but pkt_data is a pointer so
    sizeof() was 8 and the subtraction underflowed size_t,
    disabling the bounds check and allowing an out-of-bounds
    heap write. Now bounded by the real buffer extent.
  * Fix heap buffer overflow in the tcprewrite fragroute
    ip6_opt module (GHSA-2wmf-4p77-784q, CWE-787): IPv6
    routing/extension-header insertion used memmove()/memcpy()
    without checking the inserted bytes fit the remaining
    buffer headroom.
  * Fix the same class of unchecked option-insertion overflow
    in the fragroute ip_opt module (src/fragroute/mod_ip_opt.c).
  * Fix SEGV in the tcpedit DLT_JUNIPER_ETHER plugin used as a
    decoder (GHSA-ww62-mxv7-pg55, CWE-704, CWE-843): the plugin
    read ctx-&gt;encoder-&gt;config although it only ever decodes,
    a type confusion that crashed tcpedit on DLT_JUNIPER_ETHER
    input (e.g. tcprewrite --dlt=enet); now reads
    ctx-&gt;decoder-&gt;config.
  * Fix crash in remove_settings() on failed text_mmap
    (GHSA-5cjx-62pj-pmgq, CVE-2025-8746, CWE-476): the
    AutoOpts option-file save/rewrite path dereferenced the
    text_mmap() result without checking for MAP_FAILED.
  * Fix buffer overflow in the KHIAL sendpacket() path
    (GHSA-pjh6-6hrw-vcwr, CWE-787, CVSS 6.6):
    buffer_payload_size added instead of subtracted the
    pcap_pkthdr size, overstating the send buffer by 48 bytes
    and overflowing it for packets &gt;= 10024 bytes.
- Drop tcpreplay-CVE-2025-8746.patch: the remove_settings()
  MAP_FAILED guard (CVE-2025-8746 / GHSA-5cjx-62pj-pmgq) is
  now fixed upstream in 4.5.4.</changelog>
  <changelog author="mpluskal@suse.com" date="1784980800">- Update to version 4.5.5 - a security release:
  * Fix heap buffer over-read in get_layer4_v6(), reachable by
    reading an untrusted pcap with any of the tools
    (GHSA-jj65-mrgg-f5fx)
  * Fix stack buffer overflow in the fragroute rules-file parser
    (GHSA-777w-9599-w8g4)
  * Fix out-of-bounds write on an empty fragroute rules file
    (GHSA-p7xp-4gj2-x56c)
  * Fix off-by-one heap overflows in the fragroute ip_chaff and
    tcp_chaff modules (GHSA-m655-53p4-6qm8, GHSA-v8c4-9w98-9v6v)
  * Fix heap overflow via negative fragment/segment sizes in the
    fragroute ip_frag and tcp_seg modules (GHSA-27v4-xhfx-g2rx)
  * Harden fragroute allocation-failure and rule-list cleanup
    paths and add the first fragroute test cases</changelog>
</package>
<package pkgid="e02c0e9c181c043bcead5f88887650ab1e0cdb2a792abe9512bfaec3beb4e809" name="tcpreplay" arch="x86_64">
  <version epoch="0" ver="4.5.5" rel="45.1"/>
  <changelog author="mkubecek@suse.cz" date="1479729600">- update to version 4.1.2
  * increase max packet size to 65549 (CVE-2016-6160 bsc#987846)
  * minor build fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- 278-fail-if-capture-has-a-packet-that-is-too-large.patch:
  buffer overflow in tcpcapinfo utility triggered by too large
  packet (CVE-2017-6429 bsc#1028234)</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 4.2.6:
  * Test fails on sparc64 (#393)
- Changes for version 4.2.5:
  * Fix issues found by scan-build (#384)
  * Improve --portmap help message (#381)
  * AFL detected security crash in fuzz feature (#380)
  * Coverity static scan detected issues (#374)
  * Fuzz should not be overwritting Layer 3 (#372)
  * Add --fuzz-factor option to specify fuzz ratio (#371)
  * Warnings when building on old distributions (#368)
  * Fix more Lintian detected spelling errors (#365)
  * Fuzz test failure on ARM and MIPS (#364)
- Changes for version 4.2.4:
  * Fix Lintian detected spelling errors (#362)
- Changes for version 4.2.3:
  * Archive (remove) QuickTX until maintainer found (#357)
  * Ubuntu precise 32bit_build (#356)
- Changes for version 4.2.2:
  * Archive (remove) QuickTX (#357)
  * Missing symbol pcap_version on macOS 10.12.4 (#356)
- Changes for version 4.2.1:
  * Fix reporting of rates &lt; 1Mbps (#348)
  * Option --unique-ip not working properly (#346)
- Changes for version 4.2.0:
  * MAC rewriting capabilities (#313)
  * Fix several issues identified by Coverity (#305)
  * Packet destortion --fuzz-seed option by Gabriel Ganne (#302)
  * Add --unique-ip-loops option to modify IPs every few loops
    (#296)
  * Netmap startup delay increase (#290)
  * tcpcapinfo buffer overflow vulnerablily (#278)
  * Update git-clone instructions by Kyle McDonald (#277)
  * Allow fractions for --pps option (#270)
  * Print per-loop stats with --stats=0 (#269)
  * Add protection against packet drift by Guillaume Scott (#268)
  * Print flow stats periodically with --stats output (#262)
  * Include Travis-CI build support by Ilya Shipitsin (#264) (#285)
  * tcpreplay won't replay all packets in a pcap file with --netmap
    (#255)
  * First and last packet times in --stats output (#239)
  * Switch to wire speed after 30 minutes at 6 Gbps (#210)
  * tcprewrite fix checksum properly for fragmented packets (#190)
- Drop no longer needed patch (already in upstream):
  * 278-fail-if-capture-has-a-packet-that-is-too-large.patch
- Use %make_install macro
- Update dependencies to support (libnl3 and dbus-1)</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Trim history recap in description.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 4.3.1:
  * Fix checkspell detected typos (#531)
  * Heap overflow packet2tree and get_l2len (#530)
- Update to version 4.3.0:
  * Fix TCP sequence edit seeding (#514)
  * Fix issues identified by Codacy (#493)
  * CVE-2018-18408 use-after-free in post_args (#489 bsc#1112354)
  * CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488 bsc#1112355)
  * CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486 bsc#1110786)
  * CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485 bsc#1110333)
  * CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484 bsc#1110285)
  * Out-of-tree build (#483)
  * CVE-20180-13112 heap-buffer-overflow in get_l2len (#477)
  * Closing stdin on pipe (#479)
  * Second pcap file hangs on multiplier option (#466)
  * TCP sequence edit ACK corruption (#451)
  * TCP sequence number edit initial SYN packet should have 0 ACK (#450)
  * Travis CI build fails due to new build images (#432)
  * Upgrade libopts to 5.18.12 to address version build issues (#430)
  * Add ability to change tcp SEQ/ACK numbers (#425)
  * Hang using loop and netmap options (#424)
  * tcpprep -S not working for large cache files (#423)
  * Unable to tcprewrite range of ports with --portmap (#422)
  * --maxsleep broken for values less than 1000 (#421)
  * -T flag breaks traffic replay timing (#421)
  * Respect 2nd packet timing (#418)
  * Avoid non-blocking behaviour when using STDIN (#416)
  * pcap containing &gt;1020 packets produces invalid cache file (#415)
  * manpage typos (#413)
  * Fails to open tap0 on Zephyr (#411)
  * Heap-buffer-overflow in get_l2protocol (#410)
  * Heap-buffer-overflow in packet2tree (#409)
  * Heap-buffer-overflow in getl2len (#408)
  * Heap-buffer-overflow in flow_decode (#407)
  * Rewrite zero IP total length field to match packet length (#406)
  * Stack-buffer-overflow in tcapinfo (#405)
  * tcpprep --include option does not exclude (#404)
  * Negative-size-param memset in dlt_radiotap_get_80211 (#402)
  * tcpreplay --verbose option not working (#398)
  * Fix replay when using --with-testnic (#178)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552564800">- Update to version 4.3.2
  * CVE-2019-8381 memory access in do_checksum() (#538 bsc#1125753)
  * CVE-2019-8376 NULL pointer dereference get_layer4_v6() (#517 bsc#1125755)
  * CVE-2019-8377 NULL points dereference get_ipv6_i4proto() (#536 bsc#1125754)
  * Rename Ethereal to Wireshark (#545)</changelog>
  <changelog author="mpluskal@suse.com" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="mpluskal@suse.com" date="1592222400">- Update to version 4.3.3:
  * Increase cache buffers size to accomodate VLAN edits (#594)
  * Correct L2 header length to correct IP header offset (#583)
  * Fix warnings from gcc version 10 (#580)
  * Heap Buffer Overflow in randomize_iparp (#579)
  * Use after free in get_ipv6_next (#578)
  * Heap Buffer Overflow in git_ipv6_next (#576)
  * Call pcap_freecode() on pcap_compile() (#572)
  * Increase max snaplen to 262144 (#571)
  * Fix divide by zero in fuzzing (#570)
  * Unique IP repeats at very high iteration counts (#566)
  * Fails to compile on FreeBSD amd64 13.0 (#558)
  * Heap Buffer Overflow in do_checksum (#556) (#577)
  * Attempt to correct corrupt pcap files, if possible (#557)
  * Fix GCC v10 warnings (#555)
  * Remove some duplicated SOURCES entries (#551)
  * Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
  * Implement –loopdelay-ms when using –loop=0 (#546)
  * Heap overflow packet2tree and get_l2len (#530)</changelog>
  <changelog author="rpm@fthiessen.de" date="1620475200">- Update to version 4.3.4
  * Fixes ASAN reports memory leaks while running tests
  * clean up new_cidr_map() string manipulation on error exit
  * Fixed invalid --pps value protection
  * Fixed packets slowly drift further and further behind when they
    should be sent
  * Fixed 64 bit rollover can cause pps replay issues after several
    hours
  * DLT_NULL/DLT_LOOP support for cross-platform PF_INET6
  * Fixed heap buffer overflow in tcpreplay fast_edit_packet
  * Fixed heap buffer overflow in tcpreplay get_next_packet
  * Fixed CVE-2020-24266 heap buffer overflow in tcpprep get_l2len
  * Fixed CVE-2020-24265 heap buffer overflow in tcpprep
  * handle malformed and unsupported packets as soft errors
  * Fixed tcprewrite --fixlen not working on DLT conversion
  * Fixed with multiplier option only first file can be sent and hang
  * do not create tap0 if device already exists</changelog>
  <changelog author="dmueller@suse.com" date="1658059200">- update to 4.4.1:
  * fix support for feeding PCAP files from STDIN
  * fix Debian/kfreebsd build
  * fix typos
  * safeguard against corrupt packet lengths in checksum functions
  * fix double free in Juniper DLT
  * fix to flows.c, fix #665
  * update Travis CI to focal
  * LINUX installed netmap auto detection
  * Support for Q-in-Q VLAN tags
  * skipbroadcast
  * add security policy document
  * Directories of pcaps as arguments
  * stage PR from @halver94
  * fix PPS calc for long-running sessions
  * Improve SDK selection
  * fix directory include feature
  * mac os tests fail
  * Revert "send_packet: Avoid clock drift
  * mac update on multicast</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 4.4.2:
  * This is Tcpreplay suite 4.4.2
  * This release contains bug fixes only.
  * What's Changed
  * Bug #716 heap-buffer-overflow in get_l2len_protocol()
  * Bug #721 fixed typo in tcpliveplay.c
  * Bug #717 avoid assertion in get_layer4_v6
  * Bug #718 improved heap-overflow protection
  * Bug #719 better overflow protection in parse_mpls
  * Bug #725 FORCE_ALIGN on arm
  * Bug #729 tcpreplay_edit: disallow both -K and -l options
  * Bug #735 heap-overflow in get_l2len_protocol
  * Bug #745 remove autogen.sh from distribution tarballs</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 4.4.3:
  * upgrade autogen/libopts to version 5.18.16
  * avoid implicit int in configure.ac
  * remove invalid assert in tree
  * program exit after send error
  * make libpcap version test more robust
  * looping inflates some packet counters</changelog>
  <changelog author="mardnh@gmx.de" date="1689076800">- Update to 4.4.4:
  * overflow check fix for parse_mpls.
  * tcpreplay-edit: prevent L2 flooding of ipv6 unicast packets.
  * CVE-2023-27786: bugs caused by strtok_r. (boo#1209416)
  * CVE-2023-27783 reachable assert in tcpedit_dlt_cleanup
    (boo#1209413)
  * reachable assert in fast_edit_packet.</changelog>
  <changelog author="mpluskal@suse.com" date="1733832000">- Update to version 4.5.1:
  * AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING)
  * -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface
  * --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w.
  * --fixhdrlen tcpreplay option - added to control action on packet length changes
  * -W tcpreplay option - suppress warnings when replaying
  * SLL2( Linux "cooked" capture encapsulation v2)
  * Haiku support</changelog>
  <changelog author="pgajdos@suse.com" date="1755518400">- build with gcc15</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- security update
- added patches
  CVE-2025-8746 [bsc#1247917], improper input validation and memory bounds checking when processing certain malformed configuration files
  + tcpreplay-CVE-2025-8746.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1762430400">- update to version 4.5.2:
  - bugfix release
  - see https://github.com/appneta/tcpreplay/compare/v4.5.1...v4.5.2
    for full list of changes since v4.5.1
  - includes fixes for
  - CVE-2025-9157 / bsc#1248322
  - CVE-2025-51006 / bsc#1250356
- drop build workarounds for SLE11; since %autosetup and %license
  were introduced into the specfile recently, the package would not
  build on SLE11 or older anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1784548800">- Update to version 4.5.3:
  * tcpreplay: fix --multiplier timing drift and miscalibrated
    overflow guards in calc_sleep_time
  * sendpacket: retry EAGAIN/ENOBUFS a bounded number of times
    instead of retrying endlessly; warn when sending on a
    down/no-carrier interface on Linux
  * sendpacket: fix AF_XDP transmission by no longer inhibiting
    libbpf's default XDP program load; route "zc:" PF_RING ZC
    device names through libpcap
  * netmap: bound and make abortable the TX-ring drain wait;
    remove stray switch defaults in nm_do_ioctl() that broke
  - -netmap
  * tcprewrite: fix adding a VLAN tag with missing options;
    rewrite addresses embedded in ICMPv6 error messages
  * tcpprep: fix buffer overflow on truncated packets
  * tcpedit: fix wrong end-of-buffer pointer in TCP-sequence and
    portmap rewrite
  * tcpliveplay: call pcap_breakloop() from the SIGALRM handler so
    an unresponsive peer is reported promptly
  * fragroute: fix overflow on packets carrying too many MPLS
    labels; fix TAILQ_FOREACH_REVERSE portability across queue.h
    variants
  * tcpr_random: fix signed left-shift undefined behaviour
  * configure: stop --with-netmap from leaking -I&lt;DIR&gt;/sys into
    CFLAGS
- Convert BuildRequires to pkgconfig() style and drop the obsolete
  Group tag
- Add tcpreplay-fix-txring-includes.patch: fix the __GLIBC_MINOR
  typo in txring.h (the macro is __GLIBC_MINOR__, so the version
  check silently evaluated to 0) and include &lt;linux/if_packet.h&gt;,
  which is what actually defines the PACKET_TX_RING API - glibc's
  &lt;netpacket/packet.h&gt; never provided it, so correcting the typo
  alone does not compile.  Sent upstream
- Restore Linux TX_RING packet injection support, which was
  disabled by accident: configure probes it by including both
  &lt;netpacket/packet.h&gt; and &lt;linux/if_packet.h&gt;, and before C23
  those two collide on struct sockaddr_ll, so the probe always
  failed and tcpreplay fell back to the slower PF_PACKET send()
  path.  configure now reports "Linux TX_RING: yes"
- Narrow the -std=gnu11 pin to the bundled libopts directory
  rather than the whole tree.  The pin is still required there
  (autoopts is not C23-clean under gcc &gt;= 15), but applying it
  globally is what dragged the TX_RING probe below C23</changelog>
  <changelog author="mpluskal@suse.com" date="1784808000">- Update to version 4.5.4 (security-only release):
  * Fix heap buffer overflow in the tcprewrite fragroute
    tcp_opt module (GHSA-pfqg-243f-8q25, CWE-787, CVSS 8.4):
    tcp_opt_apply() passed sizeof(pkt-&gt;pkt_data) - ETH_HDR_LEN
    as the capacity bound, but pkt_data is a pointer so
    sizeof() was 8 and the subtraction underflowed size_t,
    disabling the bounds check and allowing an out-of-bounds
    heap write. Now bounded by the real buffer extent.
  * Fix heap buffer overflow in the tcprewrite fragroute
    ip6_opt module (GHSA-2wmf-4p77-784q, CWE-787): IPv6
    routing/extension-header insertion used memmove()/memcpy()
    without checking the inserted bytes fit the remaining
    buffer headroom.
  * Fix the same class of unchecked option-insertion overflow
    in the fragroute ip_opt module (src/fragroute/mod_ip_opt.c).
  * Fix SEGV in the tcpedit DLT_JUNIPER_ETHER plugin used as a
    decoder (GHSA-ww62-mxv7-pg55, CWE-704, CWE-843): the plugin
    read ctx-&gt;encoder-&gt;config although it only ever decodes,
    a type confusion that crashed tcpedit on DLT_JUNIPER_ETHER
    input (e.g. tcprewrite --dlt=enet); now reads
    ctx-&gt;decoder-&gt;config.
  * Fix crash in remove_settings() on failed text_mmap
    (GHSA-5cjx-62pj-pmgq, CVE-2025-8746, CWE-476): the
    AutoOpts option-file save/rewrite path dereferenced the
    text_mmap() result without checking for MAP_FAILED.
  * Fix buffer overflow in the KHIAL sendpacket() path
    (GHSA-pjh6-6hrw-vcwr, CWE-787, CVSS 6.6):
    buffer_payload_size added instead of subtracted the
    pcap_pkthdr size, overstating the send buffer by 48 bytes
    and overflowing it for packets &gt;= 10024 bytes.
- Drop tcpreplay-CVE-2025-8746.patch: the remove_settings()
  MAP_FAILED guard (CVE-2025-8746 / GHSA-5cjx-62pj-pmgq) is
  now fixed upstream in 4.5.4.</changelog>
  <changelog author="mpluskal@suse.com" date="1784980800">- Update to version 4.5.5 - a security release:
  * Fix heap buffer over-read in get_layer4_v6(), reachable by
    reading an untrusted pcap with any of the tools
    (GHSA-jj65-mrgg-f5fx)
  * Fix stack buffer overflow in the fragroute rules-file parser
    (GHSA-777w-9599-w8g4)
  * Fix out-of-bounds write on an empty fragroute rules file
    (GHSA-p7xp-4gj2-x56c)
  * Fix off-by-one heap overflows in the fragroute ip_chaff and
    tcp_chaff modules (GHSA-m655-53p4-6qm8, GHSA-v8c4-9w98-9v6v)
  * Fix heap overflow via negative fragment/segment sizes in the
    fragroute ip_frag and tcp_seg modules (GHSA-27v4-xhfx-g2rx)
  * Harden fragroute allocation-failure and rule-list cleanup
    paths and add the first fragroute test cases</changelog>
</package>
<package pkgid="06dc9b89c45a0de1d55f011a024cce20c9ed88d02c69c2956b64d694cc457f47" name="tcpreplay-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.5" rel="45.1"/>
  <changelog author="mkubecek@suse.cz" date="1479729600">- update to version 4.1.2
  * increase max packet size to 65549 (CVE-2016-6160 bsc#987846)
  * minor build fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- 278-fail-if-capture-has-a-packet-that-is-too-large.patch:
  buffer overflow in tcpcapinfo utility triggered by too large
  packet (CVE-2017-6429 bsc#1028234)</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 4.2.6:
  * Test fails on sparc64 (#393)
- Changes for version 4.2.5:
  * Fix issues found by scan-build (#384)
  * Improve --portmap help message (#381)
  * AFL detected security crash in fuzz feature (#380)
  * Coverity static scan detected issues (#374)
  * Fuzz should not be overwritting Layer 3 (#372)
  * Add --fuzz-factor option to specify fuzz ratio (#371)
  * Warnings when building on old distributions (#368)
  * Fix more Lintian detected spelling errors (#365)
  * Fuzz test failure on ARM and MIPS (#364)
- Changes for version 4.2.4:
  * Fix Lintian detected spelling errors (#362)
- Changes for version 4.2.3:
  * Archive (remove) QuickTX until maintainer found (#357)
  * Ubuntu precise 32bit_build (#356)
- Changes for version 4.2.2:
  * Archive (remove) QuickTX (#357)
  * Missing symbol pcap_version on macOS 10.12.4 (#356)
- Changes for version 4.2.1:
  * Fix reporting of rates &lt; 1Mbps (#348)
  * Option --unique-ip not working properly (#346)
- Changes for version 4.2.0:
  * MAC rewriting capabilities (#313)
  * Fix several issues identified by Coverity (#305)
  * Packet destortion --fuzz-seed option by Gabriel Ganne (#302)
  * Add --unique-ip-loops option to modify IPs every few loops
    (#296)
  * Netmap startup delay increase (#290)
  * tcpcapinfo buffer overflow vulnerablily (#278)
  * Update git-clone instructions by Kyle McDonald (#277)
  * Allow fractions for --pps option (#270)
  * Print per-loop stats with --stats=0 (#269)
  * Add protection against packet drift by Guillaume Scott (#268)
  * Print flow stats periodically with --stats output (#262)
  * Include Travis-CI build support by Ilya Shipitsin (#264) (#285)
  * tcpreplay won't replay all packets in a pcap file with --netmap
    (#255)
  * First and last packet times in --stats output (#239)
  * Switch to wire speed after 30 minutes at 6 Gbps (#210)
  * tcprewrite fix checksum properly for fragmented packets (#190)
- Drop no longer needed patch (already in upstream):
  * 278-fail-if-capture-has-a-packet-that-is-too-large.patch
- Use %make_install macro
- Update dependencies to support (libnl3 and dbus-1)</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Trim history recap in description.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 4.3.1:
  * Fix checkspell detected typos (#531)
  * Heap overflow packet2tree and get_l2len (#530)
- Update to version 4.3.0:
  * Fix TCP sequence edit seeding (#514)
  * Fix issues identified by Codacy (#493)
  * CVE-2018-18408 use-after-free in post_args (#489 bsc#1112354)
  * CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488 bsc#1112355)
  * CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486 bsc#1110786)
  * CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485 bsc#1110333)
  * CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484 bsc#1110285)
  * Out-of-tree build (#483)
  * CVE-20180-13112 heap-buffer-overflow in get_l2len (#477)
  * Closing stdin on pipe (#479)
  * Second pcap file hangs on multiplier option (#466)
  * TCP sequence edit ACK corruption (#451)
  * TCP sequence number edit initial SYN packet should have 0 ACK (#450)
  * Travis CI build fails due to new build images (#432)
  * Upgrade libopts to 5.18.12 to address version build issues (#430)
  * Add ability to change tcp SEQ/ACK numbers (#425)
  * Hang using loop and netmap options (#424)
  * tcpprep -S not working for large cache files (#423)
  * Unable to tcprewrite range of ports with --portmap (#422)
  * --maxsleep broken for values less than 1000 (#421)
  * -T flag breaks traffic replay timing (#421)
  * Respect 2nd packet timing (#418)
  * Avoid non-blocking behaviour when using STDIN (#416)
  * pcap containing &gt;1020 packets produces invalid cache file (#415)
  * manpage typos (#413)
  * Fails to open tap0 on Zephyr (#411)
  * Heap-buffer-overflow in get_l2protocol (#410)
  * Heap-buffer-overflow in packet2tree (#409)
  * Heap-buffer-overflow in getl2len (#408)
  * Heap-buffer-overflow in flow_decode (#407)
  * Rewrite zero IP total length field to match packet length (#406)
  * Stack-buffer-overflow in tcapinfo (#405)
  * tcpprep --include option does not exclude (#404)
  * Negative-size-param memset in dlt_radiotap_get_80211 (#402)
  * tcpreplay --verbose option not working (#398)
  * Fix replay when using --with-testnic (#178)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552564800">- Update to version 4.3.2
  * CVE-2019-8381 memory access in do_checksum() (#538 bsc#1125753)
  * CVE-2019-8376 NULL pointer dereference get_layer4_v6() (#517 bsc#1125755)
  * CVE-2019-8377 NULL points dereference get_ipv6_i4proto() (#536 bsc#1125754)
  * Rename Ethereal to Wireshark (#545)</changelog>
  <changelog author="mpluskal@suse.com" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="mpluskal@suse.com" date="1592222400">- Update to version 4.3.3:
  * Increase cache buffers size to accomodate VLAN edits (#594)
  * Correct L2 header length to correct IP header offset (#583)
  * Fix warnings from gcc version 10 (#580)
  * Heap Buffer Overflow in randomize_iparp (#579)
  * Use after free in get_ipv6_next (#578)
  * Heap Buffer Overflow in git_ipv6_next (#576)
  * Call pcap_freecode() on pcap_compile() (#572)
  * Increase max snaplen to 262144 (#571)
  * Fix divide by zero in fuzzing (#570)
  * Unique IP repeats at very high iteration counts (#566)
  * Fails to compile on FreeBSD amd64 13.0 (#558)
  * Heap Buffer Overflow in do_checksum (#556) (#577)
  * Attempt to correct corrupt pcap files, if possible (#557)
  * Fix GCC v10 warnings (#555)
  * Remove some duplicated SOURCES entries (#551)
  * Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
  * Implement –loopdelay-ms when using –loop=0 (#546)
  * Heap overflow packet2tree and get_l2len (#530)</changelog>
  <changelog author="rpm@fthiessen.de" date="1620475200">- Update to version 4.3.4
  * Fixes ASAN reports memory leaks while running tests
  * clean up new_cidr_map() string manipulation on error exit
  * Fixed invalid --pps value protection
  * Fixed packets slowly drift further and further behind when they
    should be sent
  * Fixed 64 bit rollover can cause pps replay issues after several
    hours
  * DLT_NULL/DLT_LOOP support for cross-platform PF_INET6
  * Fixed heap buffer overflow in tcpreplay fast_edit_packet
  * Fixed heap buffer overflow in tcpreplay get_next_packet
  * Fixed CVE-2020-24266 heap buffer overflow in tcpprep get_l2len
  * Fixed CVE-2020-24265 heap buffer overflow in tcpprep
  * handle malformed and unsupported packets as soft errors
  * Fixed tcprewrite --fixlen not working on DLT conversion
  * Fixed with multiplier option only first file can be sent and hang
  * do not create tap0 if device already exists</changelog>
  <changelog author="dmueller@suse.com" date="1658059200">- update to 4.4.1:
  * fix support for feeding PCAP files from STDIN
  * fix Debian/kfreebsd build
  * fix typos
  * safeguard against corrupt packet lengths in checksum functions
  * fix double free in Juniper DLT
  * fix to flows.c, fix #665
  * update Travis CI to focal
  * LINUX installed netmap auto detection
  * Support for Q-in-Q VLAN tags
  * skipbroadcast
  * add security policy document
  * Directories of pcaps as arguments
  * stage PR from @halver94
  * fix PPS calc for long-running sessions
  * Improve SDK selection
  * fix directory include feature
  * mac os tests fail
  * Revert "send_packet: Avoid clock drift
  * mac update on multicast</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 4.4.2:
  * This is Tcpreplay suite 4.4.2
  * This release contains bug fixes only.
  * What's Changed
  * Bug #716 heap-buffer-overflow in get_l2len_protocol()
  * Bug #721 fixed typo in tcpliveplay.c
  * Bug #717 avoid assertion in get_layer4_v6
  * Bug #718 improved heap-overflow protection
  * Bug #719 better overflow protection in parse_mpls
  * Bug #725 FORCE_ALIGN on arm
  * Bug #729 tcpreplay_edit: disallow both -K and -l options
  * Bug #735 heap-overflow in get_l2len_protocol
  * Bug #745 remove autogen.sh from distribution tarballs</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 4.4.3:
  * upgrade autogen/libopts to version 5.18.16
  * avoid implicit int in configure.ac
  * remove invalid assert in tree
  * program exit after send error
  * make libpcap version test more robust
  * looping inflates some packet counters</changelog>
  <changelog author="mardnh@gmx.de" date="1689076800">- Update to 4.4.4:
  * overflow check fix for parse_mpls.
  * tcpreplay-edit: prevent L2 flooding of ipv6 unicast packets.
  * CVE-2023-27786: bugs caused by strtok_r. (boo#1209416)
  * CVE-2023-27783 reachable assert in tcpedit_dlt_cleanup
    (boo#1209413)
  * reachable assert in fast_edit_packet.</changelog>
  <changelog author="mpluskal@suse.com" date="1733832000">- Update to version 4.5.1:
  * AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING)
  * -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface
  * --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w.
  * --fixhdrlen tcpreplay option - added to control action on packet length changes
  * -W tcpreplay option - suppress warnings when replaying
  * SLL2( Linux "cooked" capture encapsulation v2)
  * Haiku support</changelog>
  <changelog author="pgajdos@suse.com" date="1755518400">- build with gcc15</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- security update
- added patches
  CVE-2025-8746 [bsc#1247917], improper input validation and memory bounds checking when processing certain malformed configuration files
  + tcpreplay-CVE-2025-8746.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1762430400">- update to version 4.5.2:
  - bugfix release
  - see https://github.com/appneta/tcpreplay/compare/v4.5.1...v4.5.2
    for full list of changes since v4.5.1
  - includes fixes for
  - CVE-2025-9157 / bsc#1248322
  - CVE-2025-51006 / bsc#1250356
- drop build workarounds for SLE11; since %autosetup and %license
  were introduced into the specfile recently, the package would not
  build on SLE11 or older anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1784548800">- Update to version 4.5.3:
  * tcpreplay: fix --multiplier timing drift and miscalibrated
    overflow guards in calc_sleep_time
  * sendpacket: retry EAGAIN/ENOBUFS a bounded number of times
    instead of retrying endlessly; warn when sending on a
    down/no-carrier interface on Linux
  * sendpacket: fix AF_XDP transmission by no longer inhibiting
    libbpf's default XDP program load; route "zc:" PF_RING ZC
    device names through libpcap
  * netmap: bound and make abortable the TX-ring drain wait;
    remove stray switch defaults in nm_do_ioctl() that broke
  - -netmap
  * tcprewrite: fix adding a VLAN tag with missing options;
    rewrite addresses embedded in ICMPv6 error messages
  * tcpprep: fix buffer overflow on truncated packets
  * tcpedit: fix wrong end-of-buffer pointer in TCP-sequence and
    portmap rewrite
  * tcpliveplay: call pcap_breakloop() from the SIGALRM handler so
    an unresponsive peer is reported promptly
  * fragroute: fix overflow on packets carrying too many MPLS
    labels; fix TAILQ_FOREACH_REVERSE portability across queue.h
    variants
  * tcpr_random: fix signed left-shift undefined behaviour
  * configure: stop --with-netmap from leaking -I&lt;DIR&gt;/sys into
    CFLAGS
- Convert BuildRequires to pkgconfig() style and drop the obsolete
  Group tag
- Add tcpreplay-fix-txring-includes.patch: fix the __GLIBC_MINOR
  typo in txring.h (the macro is __GLIBC_MINOR__, so the version
  check silently evaluated to 0) and include &lt;linux/if_packet.h&gt;,
  which is what actually defines the PACKET_TX_RING API - glibc's
  &lt;netpacket/packet.h&gt; never provided it, so correcting the typo
  alone does not compile.  Sent upstream
- Restore Linux TX_RING packet injection support, which was
  disabled by accident: configure probes it by including both
  &lt;netpacket/packet.h&gt; and &lt;linux/if_packet.h&gt;, and before C23
  those two collide on struct sockaddr_ll, so the probe always
  failed and tcpreplay fell back to the slower PF_PACKET send()
  path.  configure now reports "Linux TX_RING: yes"
- Narrow the -std=gnu11 pin to the bundled libopts directory
  rather than the whole tree.  The pin is still required there
  (autoopts is not C23-clean under gcc &gt;= 15), but applying it
  globally is what dragged the TX_RING probe below C23</changelog>
  <changelog author="mpluskal@suse.com" date="1784808000">- Update to version 4.5.4 (security-only release):
  * Fix heap buffer overflow in the tcprewrite fragroute
    tcp_opt module (GHSA-pfqg-243f-8q25, CWE-787, CVSS 8.4):
    tcp_opt_apply() passed sizeof(pkt-&gt;pkt_data) - ETH_HDR_LEN
    as the capacity bound, but pkt_data is a pointer so
    sizeof() was 8 and the subtraction underflowed size_t,
    disabling the bounds check and allowing an out-of-bounds
    heap write. Now bounded by the real buffer extent.
  * Fix heap buffer overflow in the tcprewrite fragroute
    ip6_opt module (GHSA-2wmf-4p77-784q, CWE-787): IPv6
    routing/extension-header insertion used memmove()/memcpy()
    without checking the inserted bytes fit the remaining
    buffer headroom.
  * Fix the same class of unchecked option-insertion overflow
    in the fragroute ip_opt module (src/fragroute/mod_ip_opt.c).
  * Fix SEGV in the tcpedit DLT_JUNIPER_ETHER plugin used as a
    decoder (GHSA-ww62-mxv7-pg55, CWE-704, CWE-843): the plugin
    read ctx-&gt;encoder-&gt;config although it only ever decodes,
    a type confusion that crashed tcpedit on DLT_JUNIPER_ETHER
    input (e.g. tcprewrite --dlt=enet); now reads
    ctx-&gt;decoder-&gt;config.
  * Fix crash in remove_settings() on failed text_mmap
    (GHSA-5cjx-62pj-pmgq, CVE-2025-8746, CWE-476): the
    AutoOpts option-file save/rewrite path dereferenced the
    text_mmap() result without checking for MAP_FAILED.
  * Fix buffer overflow in the KHIAL sendpacket() path
    (GHSA-pjh6-6hrw-vcwr, CWE-787, CVSS 6.6):
    buffer_payload_size added instead of subtracted the
    pcap_pkthdr size, overstating the send buffer by 48 bytes
    and overflowing it for packets &gt;= 10024 bytes.
- Drop tcpreplay-CVE-2025-8746.patch: the remove_settings()
  MAP_FAILED guard (CVE-2025-8746 / GHSA-5cjx-62pj-pmgq) is
  now fixed upstream in 4.5.4.</changelog>
  <changelog author="mpluskal@suse.com" date="1784980800">- Update to version 4.5.5 - a security release:
  * Fix heap buffer over-read in get_layer4_v6(), reachable by
    reading an untrusted pcap with any of the tools
    (GHSA-jj65-mrgg-f5fx)
  * Fix stack buffer overflow in the fragroute rules-file parser
    (GHSA-777w-9599-w8g4)
  * Fix out-of-bounds write on an empty fragroute rules file
    (GHSA-p7xp-4gj2-x56c)
  * Fix off-by-one heap overflows in the fragroute ip_chaff and
    tcp_chaff modules (GHSA-m655-53p4-6qm8, GHSA-v8c4-9w98-9v6v)
  * Fix heap overflow via negative fragment/segment sizes in the
    fragroute ip_frag and tcp_seg modules (GHSA-27v4-xhfx-g2rx)
  * Harden fragroute allocation-failure and rule-list cleanup
    paths and add the first fragroute test cases</changelog>
</package>
<package pkgid="b537ac76b7c7d588933de4934c9f6030e701140b975a7dd24e11f44e3dee0c52" name="tcpreplay-debugsource" arch="x86_64">
  <version epoch="0" ver="4.5.5" rel="45.1"/>
  <changelog author="mkubecek@suse.cz" date="1479729600">- update to version 4.1.2
  * increase max packet size to 65549 (CVE-2016-6160 bsc#987846)
  * minor build fixes</changelog>
  <changelog author="mkubecek@suse.cz" date="1489665600">- 278-fail-if-capture-has-a-packet-that-is-too-large.patch:
  buffer overflow in tcpcapinfo utility triggered by too large
  packet (CVE-2017-6429 bsc#1028234)</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 4.2.6:
  * Test fails on sparc64 (#393)
- Changes for version 4.2.5:
  * Fix issues found by scan-build (#384)
  * Improve --portmap help message (#381)
  * AFL detected security crash in fuzz feature (#380)
  * Coverity static scan detected issues (#374)
  * Fuzz should not be overwritting Layer 3 (#372)
  * Add --fuzz-factor option to specify fuzz ratio (#371)
  * Warnings when building on old distributions (#368)
  * Fix more Lintian detected spelling errors (#365)
  * Fuzz test failure on ARM and MIPS (#364)
- Changes for version 4.2.4:
  * Fix Lintian detected spelling errors (#362)
- Changes for version 4.2.3:
  * Archive (remove) QuickTX until maintainer found (#357)
  * Ubuntu precise 32bit_build (#356)
- Changes for version 4.2.2:
  * Archive (remove) QuickTX (#357)
  * Missing symbol pcap_version on macOS 10.12.4 (#356)
- Changes for version 4.2.1:
  * Fix reporting of rates &lt; 1Mbps (#348)
  * Option --unique-ip not working properly (#346)
- Changes for version 4.2.0:
  * MAC rewriting capabilities (#313)
  * Fix several issues identified by Coverity (#305)
  * Packet destortion --fuzz-seed option by Gabriel Ganne (#302)
  * Add --unique-ip-loops option to modify IPs every few loops
    (#296)
  * Netmap startup delay increase (#290)
  * tcpcapinfo buffer overflow vulnerablily (#278)
  * Update git-clone instructions by Kyle McDonald (#277)
  * Allow fractions for --pps option (#270)
  * Print per-loop stats with --stats=0 (#269)
  * Add protection against packet drift by Guillaume Scott (#268)
  * Print flow stats periodically with --stats output (#262)
  * Include Travis-CI build support by Ilya Shipitsin (#264) (#285)
  * tcpreplay won't replay all packets in a pcap file with --netmap
    (#255)
  * First and last packet times in --stats output (#239)
  * Switch to wire speed after 30 minutes at 6 Gbps (#210)
  * tcprewrite fix checksum properly for fragmented packets (#190)
- Drop no longer needed patch (already in upstream):
  * 278-fail-if-capture-has-a-packet-that-is-too-large.patch
- Use %make_install macro
- Update dependencies to support (libnl3 and dbus-1)</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Trim history recap in description.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 4.3.1:
  * Fix checkspell detected typos (#531)
  * Heap overflow packet2tree and get_l2len (#530)
- Update to version 4.3.0:
  * Fix TCP sequence edit seeding (#514)
  * Fix issues identified by Codacy (#493)
  * CVE-2018-18408 use-after-free in post_args (#489 bsc#1112354)
  * CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488 bsc#1112355)
  * CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486 bsc#1110786)
  * CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485 bsc#1110333)
  * CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484 bsc#1110285)
  * Out-of-tree build (#483)
  * CVE-20180-13112 heap-buffer-overflow in get_l2len (#477)
  * Closing stdin on pipe (#479)
  * Second pcap file hangs on multiplier option (#466)
  * TCP sequence edit ACK corruption (#451)
  * TCP sequence number edit initial SYN packet should have 0 ACK (#450)
  * Travis CI build fails due to new build images (#432)
  * Upgrade libopts to 5.18.12 to address version build issues (#430)
  * Add ability to change tcp SEQ/ACK numbers (#425)
  * Hang using loop and netmap options (#424)
  * tcpprep -S not working for large cache files (#423)
  * Unable to tcprewrite range of ports with --portmap (#422)
  * --maxsleep broken for values less than 1000 (#421)
  * -T flag breaks traffic replay timing (#421)
  * Respect 2nd packet timing (#418)
  * Avoid non-blocking behaviour when using STDIN (#416)
  * pcap containing &gt;1020 packets produces invalid cache file (#415)
  * manpage typos (#413)
  * Fails to open tap0 on Zephyr (#411)
  * Heap-buffer-overflow in get_l2protocol (#410)
  * Heap-buffer-overflow in packet2tree (#409)
  * Heap-buffer-overflow in getl2len (#408)
  * Heap-buffer-overflow in flow_decode (#407)
  * Rewrite zero IP total length field to match packet length (#406)
  * Stack-buffer-overflow in tcapinfo (#405)
  * tcpprep --include option does not exclude (#404)
  * Negative-size-param memset in dlt_radiotap_get_80211 (#402)
  * tcpreplay --verbose option not working (#398)
  * Fix replay when using --with-testnic (#178)</changelog>
  <changelog author="seanlew@opensuse.org" date="1552564800">- Update to version 4.3.2
  * CVE-2019-8381 memory access in do_checksum() (#538 bsc#1125753)
  * CVE-2019-8376 NULL pointer dereference get_layer4_v6() (#517 bsc#1125755)
  * CVE-2019-8377 NULL points dereference get_ipv6_i4proto() (#536 bsc#1125754)
  * Rename Ethereal to Wireshark (#545)</changelog>
  <changelog author="mpluskal@suse.com" date="1591963200">- Fix building with gcc10</changelog>
  <changelog author="mpluskal@suse.com" date="1592222400">- Update to version 4.3.3:
  * Increase cache buffers size to accomodate VLAN edits (#594)
  * Correct L2 header length to correct IP header offset (#583)
  * Fix warnings from gcc version 10 (#580)
  * Heap Buffer Overflow in randomize_iparp (#579)
  * Use after free in get_ipv6_next (#578)
  * Heap Buffer Overflow in git_ipv6_next (#576)
  * Call pcap_freecode() on pcap_compile() (#572)
  * Increase max snaplen to 262144 (#571)
  * Fix divide by zero in fuzzing (#570)
  * Unique IP repeats at very high iteration counts (#566)
  * Fails to compile on FreeBSD amd64 13.0 (#558)
  * Heap Buffer Overflow in do_checksum (#556) (#577)
  * Attempt to correct corrupt pcap files, if possible (#557)
  * Fix GCC v10 warnings (#555)
  * Remove some duplicated SOURCES entries (#551)
  * Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
  * Implement –loopdelay-ms when using –loop=0 (#546)
  * Heap overflow packet2tree and get_l2len (#530)</changelog>
  <changelog author="rpm@fthiessen.de" date="1620475200">- Update to version 4.3.4
  * Fixes ASAN reports memory leaks while running tests
  * clean up new_cidr_map() string manipulation on error exit
  * Fixed invalid --pps value protection
  * Fixed packets slowly drift further and further behind when they
    should be sent
  * Fixed 64 bit rollover can cause pps replay issues after several
    hours
  * DLT_NULL/DLT_LOOP support for cross-platform PF_INET6
  * Fixed heap buffer overflow in tcpreplay fast_edit_packet
  * Fixed heap buffer overflow in tcpreplay get_next_packet
  * Fixed CVE-2020-24266 heap buffer overflow in tcpprep get_l2len
  * Fixed CVE-2020-24265 heap buffer overflow in tcpprep
  * handle malformed and unsupported packets as soft errors
  * Fixed tcprewrite --fixlen not working on DLT conversion
  * Fixed with multiplier option only first file can be sent and hang
  * do not create tap0 if device already exists</changelog>
  <changelog author="dmueller@suse.com" date="1658059200">- update to 4.4.1:
  * fix support for feeding PCAP files from STDIN
  * fix Debian/kfreebsd build
  * fix typos
  * safeguard against corrupt packet lengths in checksum functions
  * fix double free in Juniper DLT
  * fix to flows.c, fix #665
  * update Travis CI to focal
  * LINUX installed netmap auto detection
  * Support for Q-in-Q VLAN tags
  * skipbroadcast
  * add security policy document
  * Directories of pcaps as arguments
  * stage PR from @halver94
  * fix PPS calc for long-running sessions
  * Improve SDK selection
  * fix directory include feature
  * mac os tests fail
  * Revert "send_packet: Avoid clock drift
  * mac update on multicast</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 4.4.2:
  * This is Tcpreplay suite 4.4.2
  * This release contains bug fixes only.
  * What's Changed
  * Bug #716 heap-buffer-overflow in get_l2len_protocol()
  * Bug #721 fixed typo in tcpliveplay.c
  * Bug #717 avoid assertion in get_layer4_v6
  * Bug #718 improved heap-overflow protection
  * Bug #719 better overflow protection in parse_mpls
  * Bug #725 FORCE_ALIGN on arm
  * Bug #729 tcpreplay_edit: disallow both -K and -l options
  * Bug #735 heap-overflow in get_l2len_protocol
  * Bug #745 remove autogen.sh from distribution tarballs</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 4.4.3:
  * upgrade autogen/libopts to version 5.18.16
  * avoid implicit int in configure.ac
  * remove invalid assert in tree
  * program exit after send error
  * make libpcap version test more robust
  * looping inflates some packet counters</changelog>
  <changelog author="mardnh@gmx.de" date="1689076800">- Update to 4.4.4:
  * overflow check fix for parse_mpls.
  * tcpreplay-edit: prevent L2 flooding of ipv6 unicast packets.
  * CVE-2023-27786: bugs caused by strtok_r. (boo#1209416)
  * CVE-2023-27783 reachable assert in tcpedit_dlt_cleanup
    (boo#1209413)
  * reachable assert in fast_edit_packet.</changelog>
  <changelog author="mpluskal@suse.com" date="1733832000">- Update to version 4.5.1:
  * AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING)
  * -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface
  * --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w.
  * --fixhdrlen tcpreplay option - added to control action on packet length changes
  * -W tcpreplay option - suppress warnings when replaying
  * SLL2( Linux "cooked" capture encapsulation v2)
  * Haiku support</changelog>
  <changelog author="pgajdos@suse.com" date="1755518400">- build with gcc15</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- security update
- added patches
  CVE-2025-8746 [bsc#1247917], improper input validation and memory bounds checking when processing certain malformed configuration files
  + tcpreplay-CVE-2025-8746.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1762430400">- update to version 4.5.2:
  - bugfix release
  - see https://github.com/appneta/tcpreplay/compare/v4.5.1...v4.5.2
    for full list of changes since v4.5.1
  - includes fixes for
  - CVE-2025-9157 / bsc#1248322
  - CVE-2025-51006 / bsc#1250356
- drop build workarounds for SLE11; since %autosetup and %license
  were introduced into the specfile recently, the package would not
  build on SLE11 or older anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1784548800">- Update to version 4.5.3:
  * tcpreplay: fix --multiplier timing drift and miscalibrated
    overflow guards in calc_sleep_time
  * sendpacket: retry EAGAIN/ENOBUFS a bounded number of times
    instead of retrying endlessly; warn when sending on a
    down/no-carrier interface on Linux
  * sendpacket: fix AF_XDP transmission by no longer inhibiting
    libbpf's default XDP program load; route "zc:" PF_RING ZC
    device names through libpcap
  * netmap: bound and make abortable the TX-ring drain wait;
    remove stray switch defaults in nm_do_ioctl() that broke
  - -netmap
  * tcprewrite: fix adding a VLAN tag with missing options;
    rewrite addresses embedded in ICMPv6 error messages
  * tcpprep: fix buffer overflow on truncated packets
  * tcpedit: fix wrong end-of-buffer pointer in TCP-sequence and
    portmap rewrite
  * tcpliveplay: call pcap_breakloop() from the SIGALRM handler so
    an unresponsive peer is reported promptly
  * fragroute: fix overflow on packets carrying too many MPLS
    labels; fix TAILQ_FOREACH_REVERSE portability across queue.h
    variants
  * tcpr_random: fix signed left-shift undefined behaviour
  * configure: stop --with-netmap from leaking -I&lt;DIR&gt;/sys into
    CFLAGS
- Convert BuildRequires to pkgconfig() style and drop the obsolete
  Group tag
- Add tcpreplay-fix-txring-includes.patch: fix the __GLIBC_MINOR
  typo in txring.h (the macro is __GLIBC_MINOR__, so the version
  check silently evaluated to 0) and include &lt;linux/if_packet.h&gt;,
  which is what actually defines the PACKET_TX_RING API - glibc's
  &lt;netpacket/packet.h&gt; never provided it, so correcting the typo
  alone does not compile.  Sent upstream
- Restore Linux TX_RING packet injection support, which was
  disabled by accident: configure probes it by including both
  &lt;netpacket/packet.h&gt; and &lt;linux/if_packet.h&gt;, and before C23
  those two collide on struct sockaddr_ll, so the probe always
  failed and tcpreplay fell back to the slower PF_PACKET send()
  path.  configure now reports "Linux TX_RING: yes"
- Narrow the -std=gnu11 pin to the bundled libopts directory
  rather than the whole tree.  The pin is still required there
  (autoopts is not C23-clean under gcc &gt;= 15), but applying it
  globally is what dragged the TX_RING probe below C23</changelog>
  <changelog author="mpluskal@suse.com" date="1784808000">- Update to version 4.5.4 (security-only release):
  * Fix heap buffer overflow in the tcprewrite fragroute
    tcp_opt module (GHSA-pfqg-243f-8q25, CWE-787, CVSS 8.4):
    tcp_opt_apply() passed sizeof(pkt-&gt;pkt_data) - ETH_HDR_LEN
    as the capacity bound, but pkt_data is a pointer so
    sizeof() was 8 and the subtraction underflowed size_t,
    disabling the bounds check and allowing an out-of-bounds
    heap write. Now bounded by the real buffer extent.
  * Fix heap buffer overflow in the tcprewrite fragroute
    ip6_opt module (GHSA-2wmf-4p77-784q, CWE-787): IPv6
    routing/extension-header insertion used memmove()/memcpy()
    without checking the inserted bytes fit the remaining
    buffer headroom.
  * Fix the same class of unchecked option-insertion overflow
    in the fragroute ip_opt module (src/fragroute/mod_ip_opt.c).
  * Fix SEGV in the tcpedit DLT_JUNIPER_ETHER plugin used as a
    decoder (GHSA-ww62-mxv7-pg55, CWE-704, CWE-843): the plugin
    read ctx-&gt;encoder-&gt;config although it only ever decodes,
    a type confusion that crashed tcpedit on DLT_JUNIPER_ETHER
    input (e.g. tcprewrite --dlt=enet); now reads
    ctx-&gt;decoder-&gt;config.
  * Fix crash in remove_settings() on failed text_mmap
    (GHSA-5cjx-62pj-pmgq, CVE-2025-8746, CWE-476): the
    AutoOpts option-file save/rewrite path dereferenced the
    text_mmap() result without checking for MAP_FAILED.
  * Fix buffer overflow in the KHIAL sendpacket() path
    (GHSA-pjh6-6hrw-vcwr, CWE-787, CVSS 6.6):
    buffer_payload_size added instead of subtracted the
    pcap_pkthdr size, overstating the send buffer by 48 bytes
    and overflowing it for packets &gt;= 10024 bytes.
- Drop tcpreplay-CVE-2025-8746.patch: the remove_settings()
  MAP_FAILED guard (CVE-2025-8746 / GHSA-5cjx-62pj-pmgq) is
  now fixed upstream in 4.5.4.</changelog>
  <changelog author="mpluskal@suse.com" date="1784980800">- Update to version 4.5.5 - a security release:
  * Fix heap buffer over-read in get_layer4_v6(), reachable by
    reading an untrusted pcap with any of the tools
    (GHSA-jj65-mrgg-f5fx)
  * Fix stack buffer overflow in the fragroute rules-file parser
    (GHSA-777w-9599-w8g4)
  * Fix out-of-bounds write on an empty fragroute rules file
    (GHSA-p7xp-4gj2-x56c)
  * Fix off-by-one heap overflows in the fragroute ip_chaff and
    tcp_chaff modules (GHSA-m655-53p4-6qm8, GHSA-v8c4-9w98-9v6v)
  * Fix heap overflow via negative fragment/segment sizes in the
    fragroute ip_frag and tcp_seg modules (GHSA-27v4-xhfx-g2rx)
  * Harden fragroute allocation-failure and rule-list cleanup
    paths and add the first fragroute test cases</changelog>
</package>
<package pkgid="aea6f60cfb945d7cd2592f0f4306dafe839bb646edca1350886ff30d78b6bdb5" name="xtables-plugins" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
<package pkgid="9939ca7430e7a1882ba27c85d55b4c4a48466deacd9038c73cb9f388dcf1fbfb" name="xtables-plugins-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
  <changelog author="mkubecek@suse.cz" date="1613044800">- undo specfile "modernization" breaking build on older systems</changelog>
  <changelog author="schubi@suse.com" date="1627992000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.com" date="1631793600">- Removed update-alternatives dependency in libalternatives mode.</changelog>
  <changelog author="schubi@suse.de" date="1634731200">- Added alts requirements for iptables-backend-nft package.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637323200">- Fix libalternatives configuration for ebtables and arptables
  by keeping argv0, fixes bsc#1192799.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Only use nftables backend when iptables-backend-nft is installed
  when using libalternatives</changelog>
  <changelog author="jengelh@inai.de" date="1652443200">- Update to release 1.8.8
  * Add iptables-translate support for: sctp match's
  - -chunk-types option, connlimit match, multiport match's
  - -ports option, and the tcpmss match.
  * Reject setuid executables in libxtables for safety reasons
  * Extended arptables-nft with -C, -I, -R, -S cmomands and the
    "-c N,M" counter syntax.
  * Debug output in iptables-restore (all variants), iptables-nft
    and ebtables-nft when specifying -v multiple times
  * Improved performance of iptables-save and -restore</changelog>
  <changelog author="lnussel@suse.com" date="1658404800">- add baselibs.conf for libip4tc2, will be needed by
  libsystemd-shared-251.so</changelog>
  <changelog author="jengelh@inai.de" date="1673524800">- Update to release 1.8.9
  * arptables-nft: Support --exact flag
  * Support more chunk types in the "sctp" extension
  * Print `--` in ip6tables' "opt" column for consistency with
    iptables
  * More verbose error messages if iptables-nft-restore fails
  * Support `-p Length` with ebtables-nft,
    needed for 802_3 extension.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Use nftables backend by default when nftables is installed, bsc#1206383</changelog>
  <changelog author="jengelh@inai.de" date="1696939200">- Update to release 1.8.10
  * xtables-translate: support rule insert with index
  * broute table support in ebtables-nft
  * nft-variants' debug output (pass multiple ``-v`` flags) now
    contains sets if present
  * Add mld-listener type names to icmp6 match</changelog>
  <changelog author="jengelh@inai.de" date="1697889600">- The presence of nftables does not mandate that iptables use
  backend-nft [bsc#1206383].</changelog>
  <changelog author="jengelh@inai.de" date="1716552000">- Edit iptables-batch-lock.patch, cure use of implicit function,
  fix it to make gcc14 happy.</changelog>
  <changelog author="jengelh@inai.de" date="1731067200">- Update to release 1.8.11
  * New arptables-translate tool
  * ebtables-nft: support --replace and --list-rules commands
  * iptables-translate: support socket match and TPROXY target</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733140800">- Add iptables-nft-fix-interface-comparisons.patch
  * fix '-C' commands for nft backend (bsc#1233690)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1744891200">- Remove legacy backend from SLES16</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1745841600">- Provide ebtables for SLES16</changelog>
</package>
</otherdata>