# changelog

author: astieger@suse.com
changelog:
  - GNU wget 1.20.1:
    * --xattr is no longer default since it introduces privacy issues
    * --xattr saves the Referer as scheme/host/port,
      user/pw/path/query/fragment are no longer saved to prevent
      privacy issues
    * --xattr saves the Original URL without user/password to prevent
      privacy issues
    * all of the above fix CVE-2018-20483 (bsc#1120382)


author: seanlew@opensuse.org
changelog:
  - GNU wget 1.20.2:
    * NTLM authentication will retry under certain cases
    * Fixed a buffer overflow vulnerability


author: josef.moellers@suse.com
changelog:
  - Upgrade to GNU wget 1.20.3:
    * Finally fixed the buffer overflow vulnerability
    * obsoletes patch wget-buffer-overflow-CVE-2019-5953.patch
    [bsc#1131493, CVE-2019-5953]


author: josef.moellers@suse.com
changelog:
  - When running recursively, wget will verify the length of the whole
    URL when saving the files. This will make it overwrite files with
    truncated names, throwing the "The name is too long, ... trying to
    shorten" messages. The patch moves the length check code to a
    separate function and call it from the append_dir_structure() for each
    path element.
    [ bsc#1181173, 0001-possibly-truncate-pathname-components.patch]


author: valentin.lefebvre@suse.com
changelog:
  - Update 0001-possibly-truncate-pathname-components.patch
    * Truncate file name even if no directory structure
    * [bsc#1204720]


author: valentin.lefebvre@suse.com
changelog:
  - Fix mishandled semicolons in the userinfo subcomponent could lead to an
    insecure behavior in which data that was supposed to be in the userinfo
    subcomponent is misinterpreted to be part of the host subcomponent.
    [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]


author: valentin.lefebvre@suse.com
changelog:
  - Update 0001-possibly-truncate-pathname-components.patch
    * Take the patch from savannah repository where the checking of the file
      length doesn't include path length.
    * [bsc#1204720, bsc#1231661]


author: valentin.lefebvre@suse.com
changelog:
  - Drop support for shorthand URLs
    * Breaking change to fix CVE-2024-10524.
    [+ drop-support-for-shorthand-URLs.patch, bsc#1233773]


author: cfamullaconrad@suse.com
changelog:
  - ifreload: VLAN changes require device deletion (bsc#1218927)
    [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  - ifcheck: fix config changed check (bsc#1218926)
    [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  - client: fix exit code for no-carrier status (bsc#1219265)
    [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  - dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
    [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  - duid: fix comment for v6time
    (https://github.com/openSUSE/wicked/pull/989)
    [+ 0005-duid-fix-comment-for-v6time.patch]
  - rtnl: fix peer address parsing for non ptp-interfaces
    (https://github.com/openSUSE/wicked/pull/987,
    https://github.com/openSUSE/wicked/pull/988)
    [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
    [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  - system-updater: Parse updater format from XML configuration to
    ensure install calls can run.
    (https://github.com/openSUSE/wicked/pull/985)
    [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]


author: cfamullaconrad@suse.com
changelog:
  - update to version 0.6.74
    + team: add new options like link_watch_policy (jsc#PED-7183)
    + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
    + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
    + vxlan: don't format unknown rtnl attrs (bsc#1219751)
  - removed patches included in the source archive:
    [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
    [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
    [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
    [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
    [- 0005-duid-fix-comment-for-v6time.patch]
    [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
    [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
    [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
    [- 0001-fix_arp_notify_loop_and_burst_sending.patch]


author: cfamullaconrad@suse.com
changelog:
  - addrconf: fix fallback-lease drop (bsc#1220996)
    [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  - extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
    [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  - hide secrets in debug log (bsc#1221194)
    [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
    [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]


author: cfamullaconrad@suse.com
changelog:
  - client: do not convert sec to msec twice (bsc#1222105)
    [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]


author: mt@suse.com
changelog:
  - Update to version 0.6.75:
    - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
    - cleanup: fix overflow warnings in a socket testcase on i586
    - ifcheck: report new and deleted configs as changed (bsc#1218926)
    - man: improve ARP configuration options in the wicked-config.5
    - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
    - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
    - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
      and consistently use config and state info attached to the port
      interface as in rtnetlink(7).
    - Cleanup ifcfg parsing, schema configuration and service properties
    - Migrate ports in xml config and policies already applied in nanny
    - Remove "missed config" generation from finite state machine, which
      is completed while parsing the config or while xml config migration.
    - Issue a warning when "lower" interface (e.g. eth0) config is missed
      while parsing config depending on it (e.g. eth0.42 vlan).
    - Resolve ovs master to the effective bridge in config and wickedd
    - Implement netif-check-state require checks using system relations
      from wickedd/kernel instead of config relations for ifdown and add
      linkDown and deleteDevice checks to all master and lower references.
    - Add a `wicked <ifup|ifdown|ifreload> --dry-run …` option to show the
      system/config interface hierarchies as notice with +/- marked
      interfaces to setup and/or shutdown.
  - Removed patches included in the source archive:
    [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
    [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
    [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
    [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
    [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]


author: mt@suse.com
changelog:
  - client: fix ifreload to pull UP ports/links again when the config
    of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
    [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]


author: mt@suse.com
changelog:
  - arp: increase arp-send retry value to avoid address configuration
    failure due to ENOBUF reported by kernel while duplicate address
    detection with underlying bonding in 802.3ad mode reporting link
    "up & running" too early (bsc#1218668, gh#openSUSE/wicked#1020,
    gh#openSUSE/wicked#1022).
    [+ 0002-increase-arp-retry-attempts-on-sending-bsc1218668.patch]


author: cfamullaconrad@suse.com
changelog:
  - Update to version 0.6.76
    - compat-suse: warn user and create missing parent config of
      infiniband children (gh#openSUSE/wicked#1027)
    - client: fix origin in loaded xml-config with obsolete port
      references but missing port interface config, causing a
      no-carrier of master (bsc#1226125)
    - ipv6: fix setup on ipv6.disable=1 kernel cmdline (bsc#1225976)
    - wireless: add frequency-list in station mode (jsc#PED-8715)
    - client: fix crash while hierarchy traversing due to loop in
      e.g. systemd-nspawn containers (bsc#1226664)
    - man: add supported bonding options to ifcfg-bonding(5) man page
      (gh#openSUSE/wicked#1021)
    - arputil: Document minimal interval for getopts (gh#openSUSE/wicked#1019)
    - man: (re)generate man pages from md sources (gh#openSUSE/wicked#1018)
    - client: warn on interface wait time reached (gh#openSUSE/wicked#1017)
    - compat-suse: fix dummy type detection from ifname to not cause
      conflicts with e.g. correct vlan config on dummy0.42 interfaces
      (gh#openSUSE/wicked#1016)
    - compat-suse: fix infiniband and infiniband child type detection
      from ifname (gh#openSUSE/wicked#1015)
  - Removed patches included in the source archive:
    [- 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]
    [- 0002-increase-arp-retry-attempts-on-sending-bsc1218668.patch]


author: cfamullaconrad@suse.com
changelog:
  - compat-suse: fix dummy interfaces configuration with
    INTERFACETYPE=dummy (boo#1229555, gh#openSUSE/wicked#1031)
    [+ 0001-compat-suse-repair-dummy-interfaces-boo-1229555.patch]


author: cfamullaconrad@suse.com
changelog:
  - Update to version 0.6.77
    - compat-suse: use iftype in sysctl handling (bsc#1230911, gh#openSUSE/wicked#1043)
    - Always generate the ipv4/ipv6 <enabled>true|false</enabled> node
    - Inherit all, default and interface sysctl settings also for loopback,
      except for use_tempaddr and accept_dad.
    - Consider only interface specific accept_redirects sysctl settings.
    - Adopt ifsysctl(5) manual page with wicked specific behavior.
    - route: fix family and destination processing (bsc#1231060)
    - man: improve wicked-config(5) file description (gh#openSUSE/wicked#1039)
    - dhcp4: add ignore-rfc3927-1-6 wicked-config(5) option (jsc#PED-10855, gh#openSUSE/wicked#1038)
    - team: set arp link watcher interval default to 1s (gh#openSUSE/wicked#1037)
    - systemd: use `BindsTo=dbus.service` in favor of `Requisite=` (bsc#1229745)
    - compat-suse: fix use of deprecated `INTERFACETYPE=dummy` (boo#1229555)
    - arp: don't set target broadcast hardware address (gh#openSUSE/wicked#1036)
    - dbus: don't memcpy empty/NULL array value (gh#openSUSE/wicked#1035)
    - ethtool: fix leak and free pause data in ethtool_free (gh#openSUSE/wicked#1030)
  - Removed patches included in the source archive:
    [- 0001-compat-suse-repair-dummy-interfaces-boo-1229555.patch]


author: mpluskal@suse.com
changelog:
  - Update to version 20220606:
    * wireless-regdb: update regulatory database based on preceding changes
    * wireless-regdb: Unify 6 GHz rules for EU contries
    * wireless-regdb: Remove AUTO-BW from 6 GHz rules


author: dmueller@suse.com
changelog:
  - Update to version 20220812:
    * wireless-regdb: update regulatory database based on preceding changes
    * wireless-regdb: update 5 GHz rules for PK and add 60 GHz rule
    * wireless-regdb: add 5 GHz rules for GY
    * wireless-regdb: update regulatory database based on preceding changes
    * wireless-regdb: Unify 6 GHz rules for EU contries
    * wireless-regdb: Remove AUTO-BW from 6 GHz rules
    * wireless-regdb: update regulatory rules for Bulgaria (BG) on 6GHz
    * Regulatory update for 6 GHz operation in FI
    * Regulatory update for 6 GHz operation in United States (US)
    * Regulatory update for 6 GHz operation in Canada (CA)


author: mpluskal@suse.com
changelog:
  - Update to version 20221012:
    * wireless-regdb: update regulatory rules for Switzerland (CH)
    * wireless-regdb: Update regulatory rules for Brazil (BR)


author: mpluskal@suse.com
changelog:
  - Update to version 20221205:
    * wireless-regdb: Update regulatory rules for Japan (JP) on 6GHz
    * wireless-regdb: Update regulatory rules for Japan (JP) on 5GHz


author: mpluskal@suse.com
changelog:
  - Update to version 20230213:
    * wireless-regdb: update regulatory database based on preceding changes
    * wireless-regdb: Update regulatory info for Russia (RU) on 5GHz


author: mpluskal@suse.com
changelog:
  - Update to version 20230503:
    * wireless-regdb: update regulatory database based on preceding changes
    * wireless-regdb: Update regulatory rules for Hong Kong (HK)
    * wireless-regdb: update regulatory rules for India (IN)
    * wireless-regdb: Update regulatory rules for Russia (RU). Remove DFS requirement.
    * Update regulatory info for Russia (RU) on 6GHz


author: mpluskal@suse.com
changelog:
  - Update to version 20230721:
    * wireless-regdb: Update regulatory info for Türkiye (TR)
    * wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidelines


author: mpluskal@suse.com
changelog:
  - Update to version 20230901:
    * wireless-regdb: update regulatory database based on preceding changes
    * wireless-regdb: Update regulatory rules for Australia (AU) for June 2023


author: dimstar@opensuse.org
changelog:
  - Update to version 1.6.1:
    + Copy pInfo->driver to option list to fix hotplugging of
      keyboard device
    + unify capitalization of joystick properties
    + Return proper default for unknown values in
      pInfo->device_control.
  - Use %x11_abi_xinput_req instead of static ABI Requires.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.6.2:
    + jast_axis: tune accelerated axis transformation to better work
      with circular axis fields (fdo#42399).
    + backend_evdev: fix scaling overflow for high resolution axes
      (fdo#42399).
    + Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS.
    + configure: enable debug output code by default.
    + config:
    - Warning in default xorg.conf.d snippet: do not enable by
      default.
    - Mention use cases for when to use the module and when not to.
    + man:
    - More manpage tuning and polishing.
    - Mention use cases for when to use the module and when not to.
    - Some typos and grammar fixes.
    - Point out that the joystick module is not a joystick driver.
    + Silence compiler warnings.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - modernize spec file:
    * use https urls
    * move license to licensedir
    * remove unnecessary attributes and add curly braces where spec-cleaner
      likes them


author: Stefan Dirsch <sndirsch@suse.com>
changelog:
  - Update to version 1.6.4
    * Fix quoting in man page synopsis section
    * Update README for gitlab migration
    * Update configure.ac bug URL for gitlab migration
    * Fix spelling/wording issues
    * gitlab CI: add a basic build test
    * gitlab CI: stop requiring Signed-off-by in commits
    * autogen.sh: Implement GNOME Build API
    * autogen.sh: use quoted string variables
    * Adapt to USB HID header changes on NetBSD-8.99.9.
    * autogen: add default patch prefix
    * configure: Drop AM_MAINTAINER_MODE
    * autogen.sh: use exec instead of waiting for configure to finish


author: dimstar@opensuse.org
changelog:
  - Update to version 1.6.1:
    + man: link to xkeyboard-config(7) (fdo#14494)
  - Use %x11_abi_xinput_req instead of static ABI Requires


author: tobias.johannes.klausmann@mni.thm.de
changelog:
  - Update to version 1.6.2:
    + This release includes bugfixes for Solaris & DragonFly BSD, and
      sets the "Device Node" Xi property for easier device
      identification on multi-kbd systems.


author: vuntz@opensuse.org
changelog:
  - Update to version 1.7.0:
    + Use sigsafe logging for keyboard debug messages.
    + Build improvements.
  - Remove unneeded autoconf, automake, libtool BuildRequires, as
    well as call to autoreconf.


author: tobias.johannes.klausmann@mni.thm.de
changelog:
  - Update to version 1.8.0:
    Consider this the NetBSD release, bringing the driver closer to sync with
    the NetBSD source directory. Non-BSD platforms should not be affected by
    these changes.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.8.1:
    + linux: bring our process group to the foreground (fdo#89653).
    + Mark xf86OSKbdPreInit as _X_EXPORT in header to match
      definitions.
    + Init LEDs to zero before querying the value.
    + Detangle inet keys and jp Henkan/ Muhenkan keys.


author: tobias.johannes.klausmann@mni.thm.de
changelog:
  - Add patch U_Use-xf86AddEnabledDevice-with-threaded-input.patch
    This is in preparation for the upcoming XServer and its threaded input.


author: tobias.johannes.klausmann@mni.thm.de
changelog:
  - Update to version 1.9.0:
    This release supports the X server 1.19
  - Remove upstream patch U_Use-xf86AddEnabledDevice-with-threaded-input.patch


author: sndirsch@suse.com
changelog:
  - Release 1.4.1:
    * A few cleanup patches that have been sitting on the branch for
      almost a year.


author: sndirsch@suse.com
changelog:
  - includes everything needed for missing sle issue entries:
    fate #315643-315645, 319159-319161, 319618 (bsc#1041352)


author: zaitor@opensuse.org
changelog:
  - Update to version 0.4.3:
    + Port to new server API.
    + Convert to new screen conversion APIs.
    + Add compat-api + makefile.
    + Add MOD_CLASS_VIDEODRV to FBDevVersRec
    + Perform XV initialization only if the server supports it.
    + Avoid unused variables when XSERVER_LIBPCIACCESS is defined.
    + man: Stop mentioning server's -scanpci option.
    + Upgrade to util-macros 1.8 for additional man page support.
    + Other minor codefixes.


author: mstaudt@suse.com
changelog:
  - Fix build with Xorg server 1.20 by updating to current Git.
    U_01-Default-to-32bpp-if-the-console-is-8bpp-and-we-weren-t-told-otherwise.patch
    U_02-Use-own-thunk-functions-instead-of-fbdevHW-Weak.patch
    U_03-Pass-the-pci-device-if-any-through-to-fbdevhw-in-probe-and-preinit.patch
    U_04-Initialize-pci_dev.patch
    U_05-Fix-shadow-fb-allocation-size-v2.patch
    U_11-Remove-dead-pix24bpp-variable.patch
    U_12-Use-shadowUpdate32to24-at-24bpp.patch
    U_13-Use-ifdef-instead-of-if-to-avoid-build-error.patch


author: sndirsch@suse.com
changelog:
  - Update to version 0.5.0
    * Compatibility updates for xserver 1.20.
  - supersedes the following patches
    * U_01-Default-to-32bpp-if-the-console-is-8bpp-and-we-weren-t-told-otherwise.patch
    * U_02-Use-own-thunk-functions-instead-of-fbdevHW-Weak.patch
    * U_03-Pass-the-pci-device-if-any-through-to-fbdevhw-in-probe-and-preinit.patch
    * U_04-Initialize-pci_dev.patch
    * U_05-Fix-shadow-fb-allocation-size-v2.patch
    * U_11-Remove-dead-pix24bpp-variable.patch
    * U_12-Use-shadowUpdate32to24-at-24bpp.patch
    * U_13-Use-ifdef-instead-of-if-to-avoid-build-error.patch


author: eich@suse.com
changelog:
  - u_DPMS-Query-DPMS-capabilites-and-query-current-state-before-changing.patch
    If the Xserver provides the VBEDPMSGetCapabilities() and VBEDPMSGet()
    API, check DPMS capabilities if a requested DPMS mode is supported before
    changing, and only change DPMS mode when the new state is different from
    the old (bsc#947356, boo#947493).


author: sndirsch@suse.com
changelog:
  - includes everything needed for missing sle issue entries:
    fate #315643-315645, 319159-319161, 319618 (bsc#1041379)


author: sndirsch@suse.com
changelog:
  - Update to version 2.4.0
    * Nothing terribly exciting, but enough bug fixes to justify a
      release.
  - supersedes u_Enable-DefaultRefresh-by-default.patch


author: sndirsch@suse.com
changelog:
  - Update to version 2.5.0
    "This release rolls up a few minor bug fixes since 2.4.0. We now refuse
    to run on machines with UEFI firmware (on Linux only, patches welcome
    for other OSes) since it won't work in the general case and you
    probably have a kernel framebuffer driver running already. We also only
    attempt to use 24bpp if the alternative would be pseudocolor, but note
    that since xserver 1.20 24bpp will not work at all. If you'd like to
    fix that case, please note that it is filed as issue #4:
    https://gitlab.freedesktop.org/xorg/driver/xf86-video-vesa/-/issues/4
    We also notice several cases of running on emulated GPUs, in which case
    the shadow framebuffer is disabled by default to improve performance by
    reducing the number of copies.
    All users are recommended to upgrade, ideally to a better video card
    and/or driver."


author: tiwai@suse.de
changelog:
  - Refuse vesa driver on the system with simpledrmfb (bsc#1193539):
    u_Refuse-to-run-on-machines-with-simpledrmfb-too.patch


author: dmueller@suse.com
changelog:
  - update to 2.6.0:
    * Refuse to run if framebuffer or dri devices are present
    * VESAValidMode: remove duplicate call to VESAGetRec
    * VESADGASetMode: remove unused variable scrnIdx
    * Build xz tarballs instead of bzip2


author: crrodriguez@opensuse.org
changelog:
  - Remove Requires of drivers that now have "supplements"
    in place, later we can add more of them to the remaining
    packages and obsolete/avoid this metapackage.


author: sndirsch@suse.com
changelog:
  - change Requires for intel-gpu-tools to a Recommends, since it
    makes only sense on x86/x64 platforms


author: dmueller@suse.com
changelog:
  - only require vmware driver on those archs where it exists
  - remove buildarch: noarch as it is now arch specific


author: sndirsch@suse.com
changelog:
  - moved 'Recommends: intel-gpu-tools' to xf86-video-intel package
  - removed requires to xf86-video-ati, xf86-video-cirrus,
    xf86-video-vmware; this is now done via hw supplements
    conditional to xorg-x11-server package (bnc#810333)


author: sndirsch@suse.com
changelog:
  - removed requires to xf86-video-ast, xf86-video-chips,
    xf86-video-glint, xf86-video-i128, xf86-video-mach64,
    xf86-video-nv, xf86-video-r128, xf86-video-siliconmotion,
    xf86-video-tdfx, xf86-video-tga, xf86-video-voodoo,
    xf86-video-geode, xf86-video-qxl
  - removed requires to xf86-video-dummy, xf86-video-v4l
  - cleanup specfile


author: sndirsch@suse.com
changelog:
  - get rid of old and no longer supported drivers
    xorg-x11-driver-video-{radeonhd,unichrome} (bnc#873443, bsc#1041398)


author: sndirsch@suse.com
changelog:
  - no longer buildrequire mkfontdir package since mkfontdir program
    is now included by mkfontscale package


author: sndirsch@suse.com
changelog:
  - encodings 1.0.5
    * jisx0201.1976-0.enc: Add undefined mapping for 0x7f - 0xa0 range
    * cns11643-x encodings don't need to alias to themselves


author: alarrosa@suse.com
changelog:
  - Use multibuild to add a converted flavor subpackage that has
    Type1 and bitmap fonts converted to truetype/opentype format
    (boo#1169444)


author: alarrosa@suse.com
changelog:
  - Differentiate also Requires, BuildRequires, Obsoletes and more
    statements between the two flavors.


author: alarrosa@suse.com
changelog:
  - Add a legacy subpackage that provides the bitmap and Type1 fonts
    under /usr/share/fonts/(75dpi|100dpi|Type1) so the user can
    choose if installing the original fonts (the legacy subpackage),
    the fonts converted to TrueType format (the converted subpackage)
    or both.
  - Add some pcf fonts too from /usr/share/fonts/misc to the legacy
    subpackage and make them available as TrueType in the converted
    package (boo#1169444)


author: alarrosa@suse.com
changelog:
  - Add Recommends: xorg-x11-fonts-converted and xorg-x11-fonts-legacy
    so the packages get installed automatically (and users can remove
    any of them or both)


author: alarrosa@suse.com
changelog:
  - Use ttf-converter 1.0.6 to build an  Italic version of
    cu12.pcf.gz in the converted subpackage
  - Include the subfamily in the filename of converted fonts
  - Use ttf-converter's new bitmap font support to convert
    Schumacher Clean and Schumacher Clean Wide since it generates
    a font file that we can actually use (boo#1169444 #c41)
  - Stop using convertfont.py and just use ttf-converter for all fonts
  - Replace a couple of unicode values in cu-pua12.pcf.gz to fix them
    (others probably also need fixing).
  - Shift some unicode values in arabic24.pcf.gz and cuarabic12.pcf.gz
    to correct them so glyphs don't pretend to be latin characters
    when they're not.
  - Stop distributing Bitstream-Charter-*.otb, Cursor.ttf,
    Sun-OPEN-LOOK-*.otb, MUTT-ClearlyU-Devangari-Extra-Regular,
    MUTT-ClearlyU-Ligature-Wide-Regular and
    MUTT-ClearlyU-Devanagari-Regular as converted fonts since they
    have most probably wrong unicode values in their glyphs.
    (boo#1169444)


author: alarrosa@suse.com
changelog:
  - Convert the helv*.otb and cour*.otb files in a different way,
    generating all available font sizes as fonts files named
    * -75-dpi-converted and *-100dpi-converted and having the same
    font name for 75 and 100 dpi converted fonts (fixes boo#1174895).
  - As part of the above fix, don't remove the "Regular" suffix from
    the full name of fonts in convertfont.py


author: sndirsch@suse.com
changelog:
  - U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch
    * fixes a regresion, which can trigger a segfault in Xwayland on
      exit, introduced by
      U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch
      (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261)


author: sndirsch@suse.com
changelog:
  - U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch
    * Out-of-bounds memory write in XKB button actions (CVE-2023-6377,
      ZDI-CAN-22412, ZDI-CAN-22413, bsc#1217765)
  - U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patch
    * Out-of-bounds memory read in RRChangeOutputProperty and
      RRChangeProviderProperty (CVE-2023-6478, ZDI-CAN-22561,
      bsc#1217766)


author: joan.torres@suse.com
changelog:
  - Add missing fixes on U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch
    (bsc#1217765).


author: sndirsch@suse.com
changelog:
  - n_xserver-optimus-autoconfig-hack.patch
    u_randr-Do-not-crash-if-slave-screen-does-not-have-pro.patch
    u_xfree86-activate-GPU-screens-on-autobind.patch
    * check dixPrivateKeyRegistered(rrPrivKey) before calling
      rrGetScrPriv() to avoid xserver crash when Xinerama is enabled
      (boo#1218240)


author: sndirsch@suse.com
changelog:
  - u_miCloseScreen_check_for_null_pScreen_dev_private.patch
    * miCloseScreen check for null pScreen dev private (bsc#1218176);
      another regression introduced by
      U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch


author: sndirsch@suse.com
changelog:
  - bsc1218582-0001-dix-allocate-enough-space-for-logical-button-maps.patch
    * Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
      (CVE-2023-6816, bsc#1218582)
  - bsc1218583-0001-dix-Allocate-sufficient-xEvents-for-our-DeviceStateN.patch
    bsc1218583-0002-dix-fix-DeviceStateNotify-event-calculation.patch
    bsc1218583-0003-Xi-when-creating-a-new-ButtonClass-set-the-number-of.patch
    * Reattaching to different master device may lead to out-of-bounds memory
      access ((CVE-2024-0229, bsc#1218583)
  - bsc1218584-0001-Xi-flush-hierarchy-events-after-adding-removing-mast.patch
    * Heap buffer overflow in XISendDeviceHierarchyEvent
      (CVE-2024-21885, bsc#1218584)
  - bsc1218585-0001-Xi-do-not-keep-linked-list-pointer-during-recursion.patch
    bsc1218585-0002-dix-when-disabling-a-master-float-disabled-slaved-de.patch
    * Heap buffer overflow in DisableDevice (CVE-2024-21886, bsc#1218585)


author: sndirsch@suse.com
changelog:
  - U_bsc1218845-glx-Call-XACE-hooks-on-the-GLX-buffer.patch
    * SELinux unlabeled GLX PBuffer (CVE-2024-0408, bsc#1218845)
  - U_bsc1218846-ephyr-xwayland-Use-the-proper-private-key-for-cursor.patch
    * SELinux context corruption (CVE-2024-0409, bsc#1218846)


author: sndirsch@suse.com
changelog:
  - U_CVE-2024-31080-Xi-ProcXIGetSelectedEvents-needs-to-use-unswapped-le.patch
    * Xi: ProcXIGetSelectedEvents needs to use unswapped length
      (CVE-2024-31080, bsc#1222309)
  - U_CVE-2024-31081-Xi-ProcXIPassiveGrabDevice-needs-to-use-unswapped-le.patch
    * Xi: ProcXIPassiveGrabDevice needs to use unswapped length to send reply
      (CVE-2024-31081, bsc#1222310)
  - U_CVE-2024-31082-Xquartz-ProcAppleDRICreatePixmap-needs-to-use-unswap.patch
    * Xquartz: ProcAppleDRICreatePixmap needs to use unswapped length to send reply
      (CVE-2024-31082, bsc#1222311)
  - U_CVE-2024-31083-render-fix-refcounting-of-glyphs-during-ProcRenderAd.patch
    * render: fix refcounting of glyphs during ProcRenderAddGlyphs
      (CVE-2024-31083, bsc#1222312)


author: sndirsch@suse.com
changelog:
  - U_render-Avoid-possible-double-free-in-ProcRenderAddGl.patch
    * fixes regression for security fix for CVE-2024-31083 (bsc#1222312,
      boo#1222442, gitlab xserver issue #1659)


author: sndirsch@suse.com
changelog:
  - U_xkb-Fix-buffer-overflow-in-_XkbSetCompatMap.patch
    * Heap-based buffer overflow privilege escalation in _XkbSetCompatMap
      (CVE-2024-9632, bsc#1231565)


author: shundhammer@suse.com
changelog:
  - When the user clicks on "Run Software Manager", check for the
    "pkg" UI extension and prompt user to install it if not present
    (jsc#SLE-20346, jsc#SLE-20462)
  - 4.4.3


author: lslezak@suse.cz
changelog:
  - Drop support for subscription-tools, that package is not present
    in SLE15 anymore (bsc#1193339)
  - 4.4.5


author: lslezak@suse.cz
changelog:
  - Enable RSpec verifying doubles in unit tests to ensure that
    the mocked methods really exist (bsc#1194784)
  - 4.4.6


author: dgonzalez@suse.com
changelog:
  - Restore the repo unexpanded URL to get it properly saved in
    the /etc/zypp/repos.d file (bsc#972046, bsc#1194851).
  - 4.4.7


author: lslezak@suse.com
changelog:
  - Fixed failure with the "media_url" element in AutoYaST profile
    containing CDATA block with spaces (bsc#1205928)
  - 4.5.3


author: kanderssen@suse.com
changelog:
  - Discover and connect to all NVMe-over-Fabrics subsystems in case
    that linuxrc sets UseNBFT (jsc#PED-967).
  - 4.5.14


author: lslezak@suse.com
changelog:
  - Refresh repositories with changed URL and reload them again
    to activate the changes (related to bsc#1215884)
  - 4.5.18


author: igonzalezsosa@suse.com
changelog:
  - Enclose IPv6 addresses within square brackets when calling
    the mount command (bsc#1217637).
  - 4.5.19


author: kanderssen@suse.com
changelog:
  - Fixed a random build failure (introduced by the previous fix for
    bsc#1207221) (bsc#1208796).
  - 4.5.17


author: kanderssen@suse.com
changelog:
  - Display information about firmware configured interfaces and
    forbid editing them (bsc#1209589)
  - 4.5.18


author: kanderssen@suse.com
changelog:
  - Do not write the EAP auth attribute when writing a wireless
    wicked configuration using the EAP mode as TLS (bsc#1211026)
  - 4.5.20


author: kanderssen@suse.com
changelog:
  - Read all the driver modules from hwinfo instead of just the first
    driver ones (bsc#1217652).
  - 4.5.22


author: kanderssen@suse.com
changelog:
  - Try to assign default global routes to an specific connection
    when  possible (bsc#1232531).
  - 4.5.25


author: lslezak@suse.cz
changelog:
  - Added "BuildRequires: update-desktop-files"
  - Related to the previous desktop file changes (fate#319035)
  - 4.2.1


author: schubi@suse.de
changelog:
  - Using rb_default_ruby_abi tag in the spec file in order to
    handle several ruby versions (bsc#1146403).
  - 4.2.2


author: lslezak@suse.cz
changelog:
  - Improved openSUSE/SLE detection (bsc#1184243)
  - Improved detecting the update repositories, check the "is_update_repo"
    repository flag
  - 4.4.1


author: schubi@suse.de
changelog:
  - Added recommends to yast2-online-update-frontend in order to
    install *.desktop file (bsc#1177997).
  - 4.4.2


author: shundhammer@suse.com
changelog:
  - Check for pkg UI extension (in interactive mode) and offer to
    install it if not present (jsc#SLE-20346, jsc#SLE-20462)
  - 4.4.3


author: mfilka@suse.com
changelog:
  - bsc#1204907
    - Dropped old workaround from 2.13.15 with unconditional refresh
      of all repositories.
  - 4.5.2


author: igonzalezsosa@suse.com
changelog:
  - Add a ServiceSelectionDialog to be used by others YaST2 modules
    (related to fate#319716)
  - 3.1.9


author: lslezak@suse.cz
changelog:
  - Align left the labels in the SLP service popup, unify it with the
    other popup dialogs in YaST (bsc#996846)
  - 3.1.10


author: schubi@suse.de
changelog:
  - Using rb_default_ruby_abi tag in the spec file in order to
    handle several ruby versions (bsc#1146403).
  - 4.1.1


author: lslezak@suse.cz
changelog:
  - Fixed crash during system upgrade (synchronize the YaST and
    libzypp repositories to avoid deleting caches for used
    repositories) (bsc#1189590)
  - 4.4.3


author: dgonzalez@suse.com
changelog:
  - Remove obsolete code for treating /var differently when mounting
    partitions, avoiding calling old storage code and crashing
    (related to bsc#1186268).
  - 4.4.5


author: igonzalezsosa@suse.com
changelog:
  - Do not crash after selecting the system to upgrade when using
    the full medium (bsc#1193212).
  - 4.4.6


author: lslezak@suse.cz
changelog:
  - Display a warning in the upgrade summary when removing orphaned
    3rd party packages (bsc#1202007)
  - 4.5.2


author: lslezak@suse.com
changelog:
  - Drop the previously used repositories when going back to the
    partition selection at upgrade, this ensures the repositories
    are correctly reinitialized later (bsc#1215884)
  - 4.5.4


author: ma@suse.de
changelog:
  - Do not try to refresh repo metadata as non-root user
    (bsc#1222086)
    Instead show refresh stats and hint how to update them.
  - man: Explain how to protect orphaned packages by collecting
    them in a plaindir repo.
  - packages: Add --autoinstalled and --userinstalled options to
    list them.
  - Don't print 'reboot required' message if download-only or
    dry-run (fixes #529)
    Instead point out that a reboot would be required if the option
    was not used.
  - Resepect zypper.conf option `showAlias` search commands
    (bsc#1221963)
    Repository::asUserString (or Repository::label) respects the
    zypper.conf option, while name/alias return the property.
  - version 1.14.71


author: dmueller@suse.com
changelog:
  - switch cmake build type to RelWithDebInfo
  - modernize spec file (remove Authors section, use proper macros,
    remove redundant clean section, don't mark man pages as doc)
  - switch to -O2 -fvisibility=hidden -fpie:
    * PIC is not needed as no shared lib is built
    * fstack-protector-strong is default on modern dists and would
      be downgraded by fstack-protector
    * default visibility hidden allows better optimisation
    * O2 is reducing inlining bloat
    - > 18% reduced binary size


author: ma@suse.de
changelog:
  - Fixed check for outdated repo metadata as non-root user
    (bsc#1222086)
  - BuildRequires:  libzypp-devel >= 17.33.0.
  - Delay zypp lock until command options are parsed (bsc#1223766)
  - version 1.14.73


author: ma@suse.de
changelog:
  - Let_readline_abort_on_Ctrl-C (bsc#1226493)
  - packages: add '--system' to show @System packages (bsc#222971)
  - version 1.14.74


author: ma@suse.de
changelog:
  - Show rpm install size before installing (bsc#1224771)
    If filesystem snapshots are taken before the installation (e.g.
    by snapper) no disk space is freed by removing old packages. In
    this case the install size of all packages is a hint how much
    additional disk space is needed by the new packages static
    content.
  - version 1.14.76


author: ma@suse.de
changelog:
  - API refactoring. Prevent zypper from using now private libzypp
    symbols (bsc#1230267)
  - BuildRequires:  libzypp-devel >= 17.35.10.
  - Fix wrong numbers used in CommitSummary skipped/failed messages.
  - version 1.14.77


author: ma@suse.de
changelog:
  - Don't try to download missing raw metadata if cache is not
    writable (bsc#1225451)
  - man: Update 'search' command description.
    Hint to "se -v" showing the matches within the packages metadata.
    Explain that search strings starting with a "/" will implicitly
    look into the filelist as well. Otherfise an explicit "-f" is
    needed.
  - version 1.14.78


author: nadvornik@suse.com
changelog:
  - version 0.2
  - fixed return value (bsc#979322)
  - do not ignore errors on parsing of lifecycle data (bsc#979431)


author: nadvornik@suse.com
changelog:
  - version 0.5
  - consider also codestream in date/days argument (bsc#999537)
  - handle missing codestream name (bsc#1000595)


author: nadvornik@suse.com
changelog:
  - version 0.6
  - save state and report changes since saved state (fate#322059)
  - added systemd timer for periodical reports (fate#322059)
  - look for lifecycle data also in /usr (bsc#1014622)
  - support also openSUSE vendor (bsc#1014620)


author: nadvornik@suse.com
changelog:
  - Version 0.6.1596796104.87bdab7
  - Handle zypper errors (bsc#1174369)
  - Fix ruby warning (bsc#1173714)
  - Handle all times in UTC (bsc#1143453)


author: nadvornik@suse.com
changelog:
  - Version 0.6.1601367426.843fe7a
  - Allow wildcard matching (jsc#SLE-14168)
  - Implement successor handling (jsc#SLE-16251)


