<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="103">
<package pkgid="da1d7570321fe7af3e787868a6bda33e1bc7fee843250c9954468a7fc364c270f02bbee270440efafb30a60e2efe1a13fe9e8ec17d1f12f53ee14255ebfa46bc" name="chrony" arch="i586">
  <version epoch="0" ver="4.8" rel="177.2"/>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1783080000">- boo#1257934: support libnettle 4.0 (chrony-libnettle4.patch).</changelog>
</package>
<package pkgid="98850f9654e039dbc01a88a1156e1d64b8447d3bb674e9485a10b45af63a728efde9c2645155798ad711fea084741c1ae80caf0bcc7f411244916feef1ef8d15" name="chrony" arch="src">
  <version epoch="0" ver="4.8" rel="177.2"/>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1639656000">- Update to 4.2
  * Add support for NTPv4 extension field improving synchronisation
    stability and resolution of root delay and dispersion
    (experimental)
  * Add support for NTP over PTP (experimental)
  * Add support for AES-CMAC and hash functions in GnuTLS
  * Improve server interleaved mode to be more reliable and support
    multiple clients behind NAT
  * Update seccomp filter
  * Fix RTC support with 64-bit time_t on 32-bit Linux
  * Fix seccomp filter to work correctly with bind*device directives
- Obsoleted patches:
  * chrony-refid-internal-md5.patch
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch
- Update clknetsim to snapshot 470b5e9.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1641816000">- boo#1194206: Use /run instead of /var/run throughout.
- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1652356800">- Moved 20-chrony file from user specif directory
  /etc/NetworkManager/dispatcher.d to vendor specific directory
  /usr/lib/NetworkManager/dispatcher.d. So, users changes can
  still be done in /etc and will not be overwritten by an update.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1655294400">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1662033600">- Update to 4.3:
  * Add local option to refclock directive to stabilise system
    clock with more stable free-running clock (e.g. TCXO, OCXO).
  * Add maxdelayquant option to server/pool/peer directive to
    replace maxdelaydevratio filter with long-term quantile-based
    filtering.
  * Add selection option to log directive.
  * Allow external PPS in PHC refclock without configurable pin.
  * Don't accept first interleaved response to minimise error in
    delay.
  * Don't use arc4random on Linux to avoid server performance loss.
  * Improve filter option to better handle missing NTP samples.
  * Improve stability with hardware timestamping and PHC refclock.
  * Update seccomp filter
- Update clknetsim to snapshot f00531b.
- Use a more specific conditional for the /usr/etc stuff.</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1668600000">- Install chrony DHCP dispatcher script for Networkmanager
  * chrony.nm-dispatcher.dhcp.patch /var/run to /run</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1783080000">- boo#1257934: support libnettle 4.0 (chrony-libnettle4.patch).</changelog>
</package>
<package pkgid="04b9c82ecca59d7b4f6826ec5475ff895fc41910b07aa718de1a9d10ff2b81b7aa279c944f3e19f0434515951d3b5c8fc357b57978cba23c98e687a0f165910b" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.8" rel="177.2"/>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1783080000">- boo#1257934: support libnettle 4.0 (chrony-libnettle4.patch).</changelog>
</package>
<package pkgid="54d7245810d9ac57ef381f28136b73f3803682698a2490c62aa995bb931b9e24cc30c21960388abe8c4d648b7cda91a0e8ac26216b649bdd9856dc45f483772e" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="4.8" rel="177.2"/>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1783080000">- boo#1257934: support libnettle 4.0 (chrony-libnettle4.patch).</changelog>
</package>
<package pkgid="4252d5f9459bbee361af9c438093169dcd43e81affa1791cc66e26adc701c9060c157f81d82b3eb780fa41efe0e83ab999b9a99f6abb39942ff732ada76c27cc" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="4.8" rel="177.2"/>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1783080000">- boo#1257934: support libnettle 4.0 (chrony-libnettle4.patch).</changelog>
</package>
<package pkgid="99d9b5896a46c888747b336461c958eb11f99d5ba8c5fbd5148e04cd15ed812e381ae8d068fe90c1f2e28ad6c4c0522c126cb352947dcb7125ed5fc40d26f473" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.8" rel="177.2"/>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1783080000">- boo#1257934: support libnettle 4.0 (chrony-libnettle4.patch).</changelog>
</package>
<package pkgid="cf409cf1cd942c682cadc4f3a4d8328e7c8e653a63bec4329728ed1bb6707b84c9c99e3bbbdd57792317a2d71bf8a9844bd4c0fbc1ab59cbe04fe4945369d318" name="cifs-utils" arch="i586">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="e80a63818900a5a90a4d2bc54062998a187a7aa1467e02286b9dfe50f987332bae2b41c2c58d47284053006eff3e45347eaa8e2f16eb27a4af3f6c0d4e8f65df" name="cifs-utils" arch="src">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="12f4a64336f8e85f66ce0536a695b8005e8fb75ede68d47d1ecb4787e298c66e0e89241e01e11e1f35c3fe5357c4bd4cf459a1adede53f5d6531e4d5e8c63fc2" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="c3fd649def9aeed02cb58d963a79b70c1b33d30d2b85a0735c33028ba52e8c37a13553ee9d1da58c4a7e279e7e76901b884020d24efe5ce694351aa24e8b1d2e" name="cifs-utils-devel" arch="i586">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="d26e530fad027fbbf4cfb94bd5ba49f67d7f63104c1d923c71eec2b9c0d31fbfefb0179e74bf208feeb703d27a725f831c8db9553ea11220c733bb2fd30d6c27" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="8fe22a2e8dd1271d428097f3f15ee7cf472b0dc8fe5285aa6fdeff405f5439eab215d9d0b42120bd4719bf0f2d0b6c7668f549a747dc38eb28cc798d967df3e6" name="krb5" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="ed567c123c25f85107fb186cf3b22215e4b79a59bf87e58ad6474f761e2e97553ff5d1e15877eb8054e7d6c74fe520fd017efa18b831c31385b3178415a26bfe" name="krb5" arch="src">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1672142400">- Migration of PAM settings to /usr/lib/pam.d</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="a13371ca111689f59a51557ec8f09247bcf3012a01343baff742eb25db69165de4ea37f8d14e13ec3bafe1f85c0780a85ae8e2cdbd582265d0cec5e4ebdf0905" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="837a3dc348265a27e6d6a6e0ee592c8d3c0f17c19243225f5eb6bafeed5bcf7472914aa3df80a7c87a54788feb8bcaba6466cdc75ecec048d8769785121a1d67" name="krb5-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="c812db8d5e2bbb493fea044b51148a4857883b0561062cd06b74e4762a3d4e984ec456005669b6fe5af4b1c170bf32549a50833b03fc9268e604e85d70fd0963" name="krb5-client" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="91b20e71d400e6f535b6456dfbd0be51542a0a16995eba3353e5d6ed7829970c4794931ca32c5d547deb9fc425f1eb3d976f08f8016483bb095c1599d35d2713" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="d1df70c9fb44adfc39a0345ba110ccaaad69d7d5a1bde9f11f83eb6ebd075c13d01d971ac2974c5c707e91a117373294ac501364038b19d52119abd739b06d8e" name="krb5-devel" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="27c2ef697f3f6bed77428d7b9f9222c488df3a4d580185bd167d0afa68a9c2a23ee04d84cec9c1f100cd08b1e334afa95e9d3e8a97bba2d2d2d379713867c056" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="832d9d30d018f09272c860fbea61dbdeb3a049b39a2bfe7bc7f7e465a1541730a7b48db0a062be5cb6d97e5bed0bf23a4419f2f2025451fdc6ae83d3824171d8" name="krb5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="1650a40e1357df4d04713d7a702c998c99f527b09819c863cf368e7f8d9829419d9fb1681ebad720cf56285adfa65e8599f1b17d7b22ca856b30bb07b2bb8001" name="krb5-mini" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679572800">- Build mini flavor without keyutils support: breaks cycle between
  krb5-mini and keyutils.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1696334400">- Add explicit this-is-only-for-build-envs requires to krb5-mini
  and krb5-mini-devel: the mini flavors are currently excluded
  using special hacks from the FTP Tree. In order to eliminate this
  hack, we need to ensure the packages are not viable for real
  installations. We achieve this with a dep that is never provided,
  but ignored by OBS.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="a100bfa4c03f899d63797bda9f5c14b255206fa3d8d0e86b3746b7acc759b589ba6950d47ea8851419c064f730eb6814110df04669db654f32e749eb68d584eb" name="krb5-mini" arch="src">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1668600000">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1670932800">- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  already fixed in release 1.20.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679572800">- Build mini flavor without keyutils support: breaks cycle between
  krb5-mini and keyutils.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1696334400">- Add explicit this-is-only-for-build-envs requires to krb5-mini
  and krb5-mini-devel: the mini flavors are currently excluded
  using special hacks from the FTP Tree. In order to eliminate this
  hack, we need to ensure the packages are not viable for real
  installations. We achieve this with a dep that is never provided,
  but ignored by OBS.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="b6cd135ee5907ad4954d7339056ecd4b5d6431da549cc91fed318ecc3e4d44a93bc16e59ba4e1b831079a4502f2a2bab03b473a442dc474f1cafa2912db6c6bc" name="krb5-mini" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679572800">- Build mini flavor without keyutils support: breaks cycle between
  krb5-mini and keyutils.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1696334400">- Add explicit this-is-only-for-build-envs requires to krb5-mini
  and krb5-mini-devel: the mini flavors are currently excluded
  using special hacks from the FTP Tree. In order to eliminate this
  hack, we need to ensure the packages are not viable for real
  installations. We achieve this with a dep that is never provided,
  but ignored by OBS.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="050e1b96f41ac46477cb55ff5a8b614715b1e7e460cb1125f6375d1e73b9ff2e6a4cafc18acac97b4e2be20dcf7f1596c3b19cb1af7767482f554d6512f7b7ca" name="krb5-mini-devel" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679572800">- Build mini flavor without keyutils support: breaks cycle between
  krb5-mini and keyutils.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1696334400">- Add explicit this-is-only-for-build-envs requires to krb5-mini
  and krb5-mini-devel: the mini flavors are currently excluded
  using special hacks from the FTP Tree. In order to eliminate this
  hack, we need to ensure the packages are not viable for real
  installations. We achieve this with a dep that is never provided,
  but ignored by OBS.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="8a03f6f63ba67f3e23cfd97e090f8661956739744356979ac8eb1ec7ccbd4f0ecc76bdc41b3fe1edce846c9fedf22a28ecc7b618a0f945bd8f7bc2fc1c236c3a" name="krb5-mini-devel" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679572800">- Build mini flavor without keyutils support: breaks cycle between
  krb5-mini and keyutils.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1696334400">- Add explicit this-is-only-for-build-envs requires to krb5-mini
  and krb5-mini-devel: the mini flavors are currently excluded
  using special hacks from the FTP Tree. In order to eliminate this
  hack, we need to ensure the packages are not viable for real
  installations. We achieve this with a dep that is never provided,
  but ignored by OBS.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="b71cdd5cdd87f222ad882b07523e965a9c88726c650e48d33d52fc02c63f1fbf9589ad33f77689e15c3192f8d79fa0e7de1823b36983de0e70805ed1c61687f3" name="krb5-plugin-kdb-ldap" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="5964e1a31bacf315f62dc8bf4148c84ca517569cff84ab75de512e0b64d534cc1a72e292a34990d203accd3eb19e224de694a24d0bcb0ddb5dd9e3be263b2255" name="krb5-plugin-kdb-ldap" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="4c9a5dbb667740585ed796f4e253a70bbbd0a31138b8a595bde3b6ecbba4609e45b2180c9601cb1d989b9d8e06a34637e56b06df508f06ca6ecf80f61013f258" name="krb5-plugin-preauth-otp" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="07895d71c8a0d96603b672211508227a074b473bc76ec2fa40268368cd379a03d36c928e1c957486a15f970611f0bd8c4375d8c4f71314b8b27e9882f5f920c5" name="krb5-plugin-preauth-otp" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="adfd15acec2cedf26fb6ee1a9df51fdfaccb3260d028fc0e6d19cafe0c037c3b0bbaa9d85233e6e999b82da7ebf29cbcf397bc2a5bdaeff790526b17c83c7f20" name="krb5-plugin-preauth-pkinit" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="f77af60f6488d254b7b7df6b824c6a009a4a18faa461eef457aac2754fd7f2cf0fa355681f233b5b51a71416a2ebddcf170eceba1c7d7a14450fe7dfbd08e550" name="krb5-plugin-preauth-pkinit" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="a57843373bedd8d5ec0f2aa387a68ce6681c472935df03cdd25b2004997f5c660465759edfedd25bee52bb6c63b665c6d64ce15055e0045362100eda2d7bf991" name="krb5-plugin-preauth-spake" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="8d97534b2bf498dc75ebf2fad271a0a3cabdcc26ec5639d2ed77ca71dbe2bec049ab0d90bbed197153a0273e6bb69f43f0790ae02e45af4bd1c6b14eb08a3363" name="krb5-plugin-preauth-spake" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="af8f811cc8a12a1cf2c15582bead6525263f6e8e6f0c882a2e1bb3d33eaac7821d854ea8bbc4aaa56e659626d905d3f8c5b1afb26a5bfcbb555027910a9d1d04" name="krb5-server" arch="i586">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="913aa7e215f5a333aeb8b56dfc8107394d0bd56b32502b21272e8e56f1bc9da0a0ee10f0bf2c6cc9974b982ef1f076df7d30bdde1da519a10c1eb567e91db9c6" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="355.2"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1677844800">- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689422400">- update to 1.21.1 (CVE-2023-36054):
  * Fix potential uninitialized pointer free in kadm5 XDR parsing
    [CVE-2023-36054]; (bsc#1214054).
  * Added a credential cache type providing compatibility with
    the macOS 11 native credential cache.
  * libkadm5 will use the provided krb5_context object to read
    configuration values, instead of creating its own.
  * Added an interface to retrieve the ticket session key
    from a GSS context.
  * The KDC will no longer issue tickets with RC4 or triple-DES
    session keys unless explicitly configured with the new
    allow_rc4 or allow_des3 variables respectively.
  * The KDC will assume that all services can handle aes256-sha1
    session keys unless the service principal has a
    session_enctypes string attribute.
  * Support for PAC full KDC checksums has been added to
    mitigate an S4U2Proxy privilege escalation attack.
  * The PKINIT client will advertise a more modern set
    of supported CMS algorithms.
  * Removed unused code in libkrb5, libkrb5support,
    and the PKINIT module.
  * Modernized the KDC code for processing TGS requests,
    the code for encrypting and decrypting key data,
    the PAC handling code, and the GSS library packet
    parsing and composition code.
  * Improved the test framework's detection of memory
    errors in daemon processes when used with asan.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 1.21.2 (bsc#1218211, CVE-2023-39975):
  * Fix double-free in KDC TGS processing [CVE-2023-39975].</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1709208000">- Add crypto-policies support [bsc#1211301]
  * Update krb5.conf in vendor-files.tar.bz2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1711108800">- Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1714651200">- Remove requires for not used cron</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1715601600">- Enable the LMDB backend for KDB</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1719835200">- Update to 1.21.3
  * Fix vulnerabilities in GSS message token handling:
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187
  * Fix a potential bad pointer free in krb5_cccol_have_contents()
  * Fix a memory leak in the macOS ccache type
- Update patch 0009-Fix-three-memory-leaks.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1745236800">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on Leap 15.6</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1751457600">- Moved /etc/krb5.conf to /usr/etc/krb5.conf
  This patch (0011_usr_etc.patch) is upstream:
  https://github.com/krb5/krb5/pull/1437/</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1756468800">- Update to 1.22.1
  * Fix a vulnerability in GSS MIC verification [CVE-2025-57736]
- Changes in 1.22.0
  User experience
  * The libdefaults configuration variable "request_timeout" can be
    set to limit the total timeout for KDC requests. When making a
    KDC request, the client will now wait indefinitely (or until the
    request timeout has elapsed) on a KDC which accepts a TCP
    connection, without contacting any additional KDCs. Clients will
    make fewer DNS queries in some configurations.
  * The realm configuration variable "sitename" can be set to cause
    the client to query site-specific DNS records when making KDC
    requests.
  Administrator experience
  * Principal aliases are supported in the DB2 and LMDB KDB modules
    and in the kadmin protocol. (The LDAP KDB module has supported
    aliases since release 1.7.)
  * UNIX domain sockets are supported for the Kerberos and kpasswd
    protocols.
  * systemd socket activation is supported for krb5kdc and kadmind.
  Developer experience
  * KDB modules can be be implemented in terms of other modules using
    the new krb5_db_load_module() function.
  * The profile library supports the modification of empty profiles
    and the copying of modified profiles, making it possible to
    construct an in-memory profile and pass it to
    krb5_init_context_profile().
  * GSS-API applications can pass the GSS_C_CHANNEL_BOUND flag to
    gss_init_sec_context() to request strict enforcement of channel
    bindings by the acceptor.
  Protocol evolution
  * The PKINIT preauth module supports elliptic curve client
    certificates, ECDH key exchange, and the Microsoft paChecksum2 field.
  * The IAKERB implementation has been changed to comply with the
    most recent draft standard and to support realm discovery.
  * Message-Authenticator is supported in the RADIUS implementation
    used by the OTP kdcpreauth module.
  Code quality
  * Removed old-style function declarations, to accomodate compilers
    which have removed support for them.
  * Added OSS-Fuzz to the project's continuous integration infrastructure.
  * Rewrote the GSS per-message token parsing code for improved safety.
- Updated patches:
  * 0001-ksu-pam-integration.patch
  * 0002-krb5-1.9-manpaths.patch
  * 0003-Adjust-build-configuration.patch
  * 0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * 0005-krb5-1.6.3-ktutil-manpage.patch
  * 0006-krb5-1.12-api.patch
  * 0007-SELinux-integration.patch
  * 0008-krb5-1.9-debuginfo.patch
- Renamed patches:
  * 0011_usr_etc.patch -&gt; 0009-UsrEtc-support.patch
- Deleted patches:
  * 0009-Fix-three-memory-leaks.patch
  * 0010-CVE-2025-24528.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1763985600">- Fix memory leak; (bsc#1252989); Update patch
  0009-UsrEtc-support.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1767873600">- Immutable mode support, create /var/log/krb5 dir via
  systemd.tmpfiles; (PED-14767).
- Add krb5-log.tmpfiles</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1770033600">- Update to 1.22.2
  * Fix a SPNEGO packet parsing bug which could cause GSS mechanism
    negotiation failure.
- Fix building with glibc 2.43; (bsc#1257257); Add patch
  0010-Fix-strchr-conformance-to-C23.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1774094400">- Add compatibility with autoconf 2.73 by adding patch
  0011-autoconf-2.73-compatibility.patch from upstream pull
  request https://github.com/krb5/krb5/pull/1485</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1778068800">- Fix Fix two NegoEx parsing vulnerabilities:
  * CVE-2026-40355, bsc#1263366
  * CVE-2026-40356, bsc#1263367
- Add patch 0012-Fix-two-NegoEx-parsing-vulnerabilities.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1782734400">- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch</changelog>
</package>
<package pkgid="f252e2a4c97cc0be5468ad11fee8bbd65b3f599247d21579a5f18aa1c2ee142d2bbe072fbeed0f4e9f626f4801cea068ad982431e3f8dd3dfdba6c4a25977afb" name="libnghttp3-9" arch="i586">
  <version epoch="0" ver="1.15.0" rel="31.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- Initial package (1.0.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Bump clang to 15
  * Bump clang-format to 15
  * windows: Fix warnings
  * Use __FILE_NAME__ instead of __FILE__
  * Add nghttp3_pri_parse_priority
  * Define varint identifiers as macros
  * Fix doc</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.4.0:
  * Introduce typed nghttp3_min and nghttp3_max
  * Remove nghttp3_min and nghttp3_max
  * Added options to command find_package
  * Adjust memory pool allocation units to reduce allocation size
- update to 1.3.0:
  * Refactor stream data acknowledgement
  * Do not call acked_data with 0 length data
  * Qpack tweak
  * Avoid assigning zero after memset
  * Lower decoder stream limit
  * Workaround llvm issue on github ubuntu runner
  * cmake: add BUILD_TESTING, fix MSVC with static + shared
- update to 1.2.0:
  * Clarify the behavior when a stream is not found
  * Fix typo
  * cmake: restore `ENABLE_STATIC_CRT` and `ENABLE_ASAN` options
  * Add nghttp3_conn_update_ack_offset
  * Add include path to munit directory
  * Bump munit
  * Shrink nghttp3_stream size
  * Fix typo
  * Bump munit
  * Bump submodules</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.7.0:
  * Remove extra semicolons
  * Do not allow '@' in :authority or host field value
  * Fix compile error with NDEBUG
  * Port ngtcp2_ksl changes that introduced ngtcp2_ksl_search
- update to 1.6.0:
  * Fix cmake export
  * Fix include export
  * Fix ARM64 __popcnt intrinsics
  * Refactor qpack reserve_buf
  * Fix potential overflow
  * nghttp3_map: Port ngtcp2 changes
  * Optimize nghttp3_read_varint
  * Consistent macro comments
  * clang-format files under fuzz
  * ispow2: Better fallback implementation
  * Refactor http on header
  * Simplify http_request_on_header and http_response_on_header
  * qpack: Switch on opcode
  * Do huffman encoding only when the reduction is more than 25%
  * Optimize nghttp3_check_header_value
  * Revert "Optimize nghttp3_check_header_value"
  * cmake: Remove trailing spaces
  * Optimize nghttp3_check_header_value
- update to 1.5.0:
  * Fix format in nghttp3_macro.h
  * Bump clang format
  * cmake: Fix linker warning LNK4291 when linking static lib to
    the final binary
  * Ngtcp2 port
  * nghttp3_idtr: Remove server field
  * Port ngtcp2 changes
  * Add examples links</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.9.0
  * Explicitly deny new server-initiated bidirectional streams.
  * Reworked fuzz testing resilience.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.10.1:
  * Revert "Tighten up :path validation"
- update to 1.10.0:
  * Add tests for reading a control stream
  * fuzz: Fuzz http3 with 1 byte input
  * tests: Reset buffer before each test as part of
    initialization
  * Tighten up :path validation</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.11.0:
  * Revert "Tighten up :path validation"
  * Implement RFC 9412 ORIGIN frame
  * Clarify the life time of the object pointed
  * Update doc
  * Port ngtcp2 map changes
  * Treat malformed HTTP message as a connection error
  * Map seed
  * Add nghttp3_qpack_encoder_new2
  * Make nghttp3_rand accept uint8_t buffer
  * Origin changes
  * No need to zero-clear frent
  * Use compound literals instead of filling with zeros
  * Make macros static inline functions
  * Remove length from nghttp3_frame</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.12.0:
  - Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
  - Clang 19 by @tatsuhiro-t in #383
  - Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
  - Bump actions/github-script from 7 to 8 by @dependabot[bot] in
    [#385]
  - Delete a stream that is blocked by QPACK on QUIC stream closure
    by @tatsuhiro-t in #386
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#387]
  - Introduce time by @tatsuhiro-t in #388
  - Add glitch protection by @tatsuhiro-t in #389
  - Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
  - tests: Fix type of padding for nghttp3_settings_entry by
    @tatsuhiro-t in #391
  - Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
  - Fix macro comment by @tatsuhiro-t in #393</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.13.0:
  * Revert #395 partially
  * Replace POPCNT-based ispow2 with portable bitwise
    implementation to prevent illegal instruction crashes
  * doc: Recommend specifying rand callback
  * qpack: Optimize huffman decoding a bit
  * Remove unused enum values from nghttp3_stream_http_state
  * Qpack indexing strategy</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886401">- Update to 1.13.1:
  * Fix header name validation on a platform where char is unsigned</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.14.0:
  * Fix header name validation on a platform where char is unsigned
  * nghttp3_http: Use int8_t for the lookup tables consistently
  * More use of designated initializers
  * Rework nghttp3_frame union to avoid potential UB
  * Rewrite nghttp3_get_varint
  * Port ngtcp2_ksl changes
  * Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings
  * tnode: Remove unused num_children
  * Refactor with compound literals
  * stream: Simplify settings entry assignment
  * Port ngtcp2 changes
  * Fix ENABLE_CONNECT_PROTOCOL setting handling
  * datalen must not be zero
  * Fix missing error handling
  * Remove unused tx.hstate from nghttp3_stream
  * Clarify field size limits</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305601">- Remove the unrecogninzed configure option --with-cunit and the
  cunit build dependency</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update to 1.15.0:
  * Add nghttp3_conn_submit_request2 to set client-side scheduling
    hint
  * Make client-side scheduling incremental by default
  * Remove nghttp3_conn_submit_request2
  * Introduce nghttp3_strlen_lit
  * Move aux objects into the individual frames
  * Add const to nghttp3_frame_settings.local_settings</changelog>
</package>
<package pkgid="7bc2d319bf41832eab55083c5862d930850038554b6c239209bd0db5e5b1cda89bc43164313d50b09fe5b1e75323fcdccec58af5e36feea03ccec27bcb3a00c9" name="libnghttp3-9" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="31.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- Initial package (1.0.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Bump clang to 15
  * Bump clang-format to 15
  * windows: Fix warnings
  * Use __FILE_NAME__ instead of __FILE__
  * Add nghttp3_pri_parse_priority
  * Define varint identifiers as macros
  * Fix doc</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.4.0:
  * Introduce typed nghttp3_min and nghttp3_max
  * Remove nghttp3_min and nghttp3_max
  * Added options to command find_package
  * Adjust memory pool allocation units to reduce allocation size
- update to 1.3.0:
  * Refactor stream data acknowledgement
  * Do not call acked_data with 0 length data
  * Qpack tweak
  * Avoid assigning zero after memset
  * Lower decoder stream limit
  * Workaround llvm issue on github ubuntu runner
  * cmake: add BUILD_TESTING, fix MSVC with static + shared
- update to 1.2.0:
  * Clarify the behavior when a stream is not found
  * Fix typo
  * cmake: restore `ENABLE_STATIC_CRT` and `ENABLE_ASAN` options
  * Add nghttp3_conn_update_ack_offset
  * Add include path to munit directory
  * Bump munit
  * Shrink nghttp3_stream size
  * Fix typo
  * Bump munit
  * Bump submodules</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.7.0:
  * Remove extra semicolons
  * Do not allow '@' in :authority or host field value
  * Fix compile error with NDEBUG
  * Port ngtcp2_ksl changes that introduced ngtcp2_ksl_search
- update to 1.6.0:
  * Fix cmake export
  * Fix include export
  * Fix ARM64 __popcnt intrinsics
  * Refactor qpack reserve_buf
  * Fix potential overflow
  * nghttp3_map: Port ngtcp2 changes
  * Optimize nghttp3_read_varint
  * Consistent macro comments
  * clang-format files under fuzz
  * ispow2: Better fallback implementation
  * Refactor http on header
  * Simplify http_request_on_header and http_response_on_header
  * qpack: Switch on opcode
  * Do huffman encoding only when the reduction is more than 25%
  * Optimize nghttp3_check_header_value
  * Revert "Optimize nghttp3_check_header_value"
  * cmake: Remove trailing spaces
  * Optimize nghttp3_check_header_value
- update to 1.5.0:
  * Fix format in nghttp3_macro.h
  * Bump clang format
  * cmake: Fix linker warning LNK4291 when linking static lib to
    the final binary
  * Ngtcp2 port
  * nghttp3_idtr: Remove server field
  * Port ngtcp2 changes
  * Add examples links</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.9.0
  * Explicitly deny new server-initiated bidirectional streams.
  * Reworked fuzz testing resilience.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.10.1:
  * Revert "Tighten up :path validation"
- update to 1.10.0:
  * Add tests for reading a control stream
  * fuzz: Fuzz http3 with 1 byte input
  * tests: Reset buffer before each test as part of
    initialization
  * Tighten up :path validation</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.11.0:
  * Revert "Tighten up :path validation"
  * Implement RFC 9412 ORIGIN frame
  * Clarify the life time of the object pointed
  * Update doc
  * Port ngtcp2 map changes
  * Treat malformed HTTP message as a connection error
  * Map seed
  * Add nghttp3_qpack_encoder_new2
  * Make nghttp3_rand accept uint8_t buffer
  * Origin changes
  * No need to zero-clear frent
  * Use compound literals instead of filling with zeros
  * Make macros static inline functions
  * Remove length from nghttp3_frame</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.12.0:
  - Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
  - Clang 19 by @tatsuhiro-t in #383
  - Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
  - Bump actions/github-script from 7 to 8 by @dependabot[bot] in
    [#385]
  - Delete a stream that is blocked by QPACK on QUIC stream closure
    by @tatsuhiro-t in #386
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#387]
  - Introduce time by @tatsuhiro-t in #388
  - Add glitch protection by @tatsuhiro-t in #389
  - Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
  - tests: Fix type of padding for nghttp3_settings_entry by
    @tatsuhiro-t in #391
  - Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
  - Fix macro comment by @tatsuhiro-t in #393</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.13.0:
  * Revert #395 partially
  * Replace POPCNT-based ispow2 with portable bitwise
    implementation to prevent illegal instruction crashes
  * doc: Recommend specifying rand callback
  * qpack: Optimize huffman decoding a bit
  * Remove unused enum values from nghttp3_stream_http_state
  * Qpack indexing strategy</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886401">- Update to 1.13.1:
  * Fix header name validation on a platform where char is unsigned</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.14.0:
  * Fix header name validation on a platform where char is unsigned
  * nghttp3_http: Use int8_t for the lookup tables consistently
  * More use of designated initializers
  * Rework nghttp3_frame union to avoid potential UB
  * Rewrite nghttp3_get_varint
  * Port ngtcp2_ksl changes
  * Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings
  * tnode: Remove unused num_children
  * Refactor with compound literals
  * stream: Simplify settings entry assignment
  * Port ngtcp2 changes
  * Fix ENABLE_CONNECT_PROTOCOL setting handling
  * datalen must not be zero
  * Fix missing error handling
  * Remove unused tx.hstate from nghttp3_stream
  * Clarify field size limits</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305601">- Remove the unrecogninzed configure option --with-cunit and the
  cunit build dependency</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update to 1.15.0:
  * Add nghttp3_conn_submit_request2 to set client-side scheduling
    hint
  * Make client-side scheduling incremental by default
  * Remove nghttp3_conn_submit_request2
  * Introduce nghttp3_strlen_lit
  * Move aux objects into the individual frames
  * Add const to nghttp3_frame_settings.local_settings</changelog>
</package>
<package pkgid="bc9a81130fecfc383dd697438da553e38f5694f06569c0bced858fd7c8e248d4366e59f541582562b472eb313fc645cb28246c2f1f38b40d4c28b2db2fb7a18f" name="libnghttp3-9-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="31.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- Initial package (1.0.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Bump clang to 15
  * Bump clang-format to 15
  * windows: Fix warnings
  * Use __FILE_NAME__ instead of __FILE__
  * Add nghttp3_pri_parse_priority
  * Define varint identifiers as macros
  * Fix doc</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.4.0:
  * Introduce typed nghttp3_min and nghttp3_max
  * Remove nghttp3_min and nghttp3_max
  * Added options to command find_package
  * Adjust memory pool allocation units to reduce allocation size
- update to 1.3.0:
  * Refactor stream data acknowledgement
  * Do not call acked_data with 0 length data
  * Qpack tweak
  * Avoid assigning zero after memset
  * Lower decoder stream limit
  * Workaround llvm issue on github ubuntu runner
  * cmake: add BUILD_TESTING, fix MSVC with static + shared
- update to 1.2.0:
  * Clarify the behavior when a stream is not found
  * Fix typo
  * cmake: restore `ENABLE_STATIC_CRT` and `ENABLE_ASAN` options
  * Add nghttp3_conn_update_ack_offset
  * Add include path to munit directory
  * Bump munit
  * Shrink nghttp3_stream size
  * Fix typo
  * Bump munit
  * Bump submodules</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.7.0:
  * Remove extra semicolons
  * Do not allow '@' in :authority or host field value
  * Fix compile error with NDEBUG
  * Port ngtcp2_ksl changes that introduced ngtcp2_ksl_search
- update to 1.6.0:
  * Fix cmake export
  * Fix include export
  * Fix ARM64 __popcnt intrinsics
  * Refactor qpack reserve_buf
  * Fix potential overflow
  * nghttp3_map: Port ngtcp2 changes
  * Optimize nghttp3_read_varint
  * Consistent macro comments
  * clang-format files under fuzz
  * ispow2: Better fallback implementation
  * Refactor http on header
  * Simplify http_request_on_header and http_response_on_header
  * qpack: Switch on opcode
  * Do huffman encoding only when the reduction is more than 25%
  * Optimize nghttp3_check_header_value
  * Revert "Optimize nghttp3_check_header_value"
  * cmake: Remove trailing spaces
  * Optimize nghttp3_check_header_value
- update to 1.5.0:
  * Fix format in nghttp3_macro.h
  * Bump clang format
  * cmake: Fix linker warning LNK4291 when linking static lib to
    the final binary
  * Ngtcp2 port
  * nghttp3_idtr: Remove server field
  * Port ngtcp2 changes
  * Add examples links</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.9.0
  * Explicitly deny new server-initiated bidirectional streams.
  * Reworked fuzz testing resilience.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.10.1:
  * Revert "Tighten up :path validation"
- update to 1.10.0:
  * Add tests for reading a control stream
  * fuzz: Fuzz http3 with 1 byte input
  * tests: Reset buffer before each test as part of
    initialization
  * Tighten up :path validation</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.11.0:
  * Revert "Tighten up :path validation"
  * Implement RFC 9412 ORIGIN frame
  * Clarify the life time of the object pointed
  * Update doc
  * Port ngtcp2 map changes
  * Treat malformed HTTP message as a connection error
  * Map seed
  * Add nghttp3_qpack_encoder_new2
  * Make nghttp3_rand accept uint8_t buffer
  * Origin changes
  * No need to zero-clear frent
  * Use compound literals instead of filling with zeros
  * Make macros static inline functions
  * Remove length from nghttp3_frame</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.12.0:
  - Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
  - Clang 19 by @tatsuhiro-t in #383
  - Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
  - Bump actions/github-script from 7 to 8 by @dependabot[bot] in
    [#385]
  - Delete a stream that is blocked by QPACK on QUIC stream closure
    by @tatsuhiro-t in #386
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#387]
  - Introduce time by @tatsuhiro-t in #388
  - Add glitch protection by @tatsuhiro-t in #389
  - Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
  - tests: Fix type of padding for nghttp3_settings_entry by
    @tatsuhiro-t in #391
  - Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
  - Fix macro comment by @tatsuhiro-t in #393</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.13.0:
  * Revert #395 partially
  * Replace POPCNT-based ispow2 with portable bitwise
    implementation to prevent illegal instruction crashes
  * doc: Recommend specifying rand callback
  * qpack: Optimize huffman decoding a bit
  * Remove unused enum values from nghttp3_stream_http_state
  * Qpack indexing strategy</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886401">- Update to 1.13.1:
  * Fix header name validation on a platform where char is unsigned</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.14.0:
  * Fix header name validation on a platform where char is unsigned
  * nghttp3_http: Use int8_t for the lookup tables consistently
  * More use of designated initializers
  * Rework nghttp3_frame union to avoid potential UB
  * Rewrite nghttp3_get_varint
  * Port ngtcp2_ksl changes
  * Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings
  * tnode: Remove unused num_children
  * Refactor with compound literals
  * stream: Simplify settings entry assignment
  * Port ngtcp2 changes
  * Fix ENABLE_CONNECT_PROTOCOL setting handling
  * datalen must not be zero
  * Fix missing error handling
  * Remove unused tx.hstate from nghttp3_stream
  * Clarify field size limits</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305601">- Remove the unrecogninzed configure option --with-cunit and the
  cunit build dependency</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update to 1.15.0:
  * Add nghttp3_conn_submit_request2 to set client-side scheduling
    hint
  * Make client-side scheduling incremental by default
  * Remove nghttp3_conn_submit_request2
  * Introduce nghttp3_strlen_lit
  * Move aux objects into the individual frames
  * Add const to nghttp3_frame_settings.local_settings</changelog>
</package>
<package pkgid="c7e4d0a25e4e4586923e82a987b045a811bfc7267bac6063473528e5b63f8f11b54fd4d9cb09b64d585453d7c6745533e4f1147e794f2a3591af33869d4684a4" name="libngtcp2-16" arch="i586">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="ae0e6f22c2ac514c44bff51c9905666a337a7c1e1872fa7792f9b4357d89fd46ea19fd6ba11053a12b9dc6589f536608dd16f47b9ee14b2b1323f834a3bc6e0f" name="libngtcp2-16" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="84c7ca6f66979479a9ef1720877b690d3743d145188e186402389a17de6632a712a48244e6502f184ac89933e1b71eab12633e9cd239754bd527d880e6330720" name="libngtcp2-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="4ca5a3ff2ea3434872e35e8ba6658850cd0322e9aad6f15ab0aa4cdc3503b888f934a01d330a547a4a5e8e17d71c4076a84224b45d66d506ad14e55390772fc6" name="libngtcp2_crypto_gnutls-devel" arch="i586">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="f5bbecaf7946b71b78a5c849f88316408ce5644ba3bc9d701d3f6a373d892df1f39039000f58da7e6b13e48abad121be065a6bd5690763688a92f66d5bf9bf03" name="libngtcp2_crypto_gnutls-devel" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="1a7198a7981e312124518ed9d4040514ee02a0422ebadc58badca3edd33e71e1e7014dc6785a312e13fef7b6dc71e3ba23625af9459b6e2f247123630807d5b2" name="libngtcp2_crypto_gnutls8" arch="i586">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="221badf89bd624325aeefd2bae54a5ebb438209e61f1155326aa03672d459bdda7ba36aff7e454bcf93e919749a3501bdb2ef3c817fd09f00ceb7a10f9f90416" name="libngtcp2_crypto_gnutls8" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="21928400e8bf4d46b83a428392508adff9186a0c5bc46701d839559433c1522d63f9f7a8bff5ed985f3c035ff5e95521fff7c37229246c46505e454ae8b0a141" name="libngtcp2_crypto_gnutls8-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="e590e9c7743f4fef0cf6b3cffb4980f1eb59549c36a2796278bc511689f24c9b0f9c792f14f4490ce64da0a5821233bafc12d44ca684eff1cfde93a197bc4b7c" name="libngtcp2_crypto_ossl-devel" arch="i586">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="77163d5936d50618210dc9565873f372bacb725fa2b301be6dc44796a0c680a27cf80ba95ac0ddd4c653b3ea9d3c0650bd51c116ff36b5b9d0336fd2ea3c7d02" name="libngtcp2_crypto_ossl-devel" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="b1824f477c30f6dcbcbd55b22e5baf6b160cab2d59abe3a297304b2de38e4562fbbe067d3bc69e66d4d0b2dfe7e1119b0d0de938ebef472f131c5c611b2dfbcd" name="libngtcp2_crypto_ossl0" arch="i586">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="e93e613bb426bc2eeaca37811f2cca8464b412b6e1361310245fd35efcd1f6c960193569c4c034310deb16cec0db3aae5e994b45cce68fcc0f96d32ab2146e99" name="libngtcp2_crypto_ossl0" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="c3836594c1d5e620707c74c43d216ac80f1515b1d47781de9f7f3df45aee7e22b78f8d7051547263822fac20f6aebd7cf6268831bd01ed83173c7625b2af6b9a" name="libngtcp2_crypto_ossl0-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="1040d19a6101adc5fe1448c1f4d0b083f30657a88985918f9024b433502e16bbd89cf3c7e50fdf7e4b51c2fa9aafb3242dbd4bb56ba47d07fcd05d75f1a52af6" name="libtalloc-devel" arch="i586">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="2d9b4a89f29d48dca500aa9e358a859235809d868c815a34c3a11e8eb2c1f055bad1e5f80cbce43794d93ab9007a71cc5df5fd4350ad3333c76863792d5247a5" name="libtalloc-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="85249fbc4f8236268f177158d25ae62adf00d99b9bdf62a38e64d24f2ad35b55152763e9768a0eabfbd8676de95b57780bf347ac7faee7b3a8b3ee491d853696" name="libtalloc2" arch="i586">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="5a68b10c4308f4fabbef8c74022e2928a42de361104300c0d9970ec2eb3a0b8552ceac72f82ed6f43422a4b1575d43328084fc56b1b465d32c81c69055781c33" name="libtalloc2" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="15577eb0c0aa24b9c54e08f93feace6401abcbbdb4737dd966adf7782a2e161da935f821c934b18f8b9b9b52235a054837f7af8b6a4aedb2d41509902d60ed8d" name="libtalloc2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="da148aec242b20c7a9aa91d29dc16aa7f7be534185b589991cbb35e5c7bcdc8eba5700415bc75af87a9859d29294f1c77a50f27049d24e0ab90873f0806c3e93" name="libtalloc2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="31861237f3d8138d2cb310e2da9c8734e10e296b7ef2fc6448f9b36c3dd1a1d4782eb4eb78be53d81160b9844270119c1a38cd8a78058b5b297cd051ec0db327" name="libtalloc2-x86-64-v3" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="64ca05b57de5a46aa97c69a3a84c27915cf0dbe94bced37bb3c6e99cc54fcd896e2f02093616d13916208eb73f6a281e226677767d590335dc35bbe7fcd00e31" name="libtalloc2-x86-64-v3-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="c6bd9ef0e0b4e35cc3b8c083cc993070ab29d96628f4235fc6639922d8735f8bbadfb90d4b5a2118b7951b603ec76aad84046a6ee36a90d32c12aa877e627d21" name="libtdb-devel" arch="i586">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="409d4ed5d9e1d5c9bbc576aeb6bc08a608bdcea005743156a4b23244cecd7e96be28491bf8dd3fe83ac2b323c39204427489e10be9320c48d3d203bcd03f274f" name="libtdb-devel" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="7416d3bb1e096980da6fcac78d0b0faf1a79608e654521f28cbc1602b98ab3524ec882be5a58187997f96349ebbf4b98785213cb1d50459df205e4855ba14f5c" name="libtdb1" arch="i586">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="b498c72396b7da87fb9893636b78c356a7ed438210284d214feaa9c8e1164a4566677460958b97a9e87c540f08b6d63c8f9ca3bca08ff897ae1a3599e52f4615" name="libtdb1" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="e50e34075b04a8c02c42aec96b396aeb9ccd79b07e03e909b91fb7d65a24c5c41160835d87358dc67f42b4aaf0b32516ddeb7328c41a233464ca032a36e27386" name="libtdb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="63e64a99c88a767a3f720d14305b4aa79f4ebf3545de27e3b7648ed88870b43f6b66031e72b2284776fac6e67bb0a3bcf6f5d2f9cb74d4e3d545232cdc3e4053" name="libtevent-devel" arch="i586">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="019f4d4a9f96b214529fda16066dca63f17dfa23981725c69f0880620184fc83b50e241a82e418e29ccef975c6df45a5ea5ee90fc629c23175dcd72abdd2c7ca" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="671d2af65be63f61cca1ca1a27ac051dc27102f3906e1927a4dca7e1b87d2bfea41f37c45490296b997593c3a37d4c81d1da68a240ffa0b9e19b7988612952a1" name="libtevent0" arch="i586">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="c6d2d31f1b2dad90b37630a60433e5a9c30093f74136f7d6ab08df6c002a3db9e61147817dca50c92474dc3b1755f57012eef2c93f48ab7631bc3582d341c74c" name="libtevent0" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="e9ef419af4b10e11518eeb733e968a7ecb9af3fe4a3c55bf4615cbd23f770861ebb8cc69432fe10f8f7546f749b85a4b36ea6b7f3b274d6985ebe6d041340a24" name="libtevent0-32bit" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="7138b7dc3e6924b80c29c626888f43ba24e0d08d451436f3c21b0d3c5c5dabd4eac44cebf66ff13376b0e948fc659d106d87943d83af95d80c3964d293a15537" name="nghttp3" arch="src">
  <version epoch="0" ver="1.15.0" rel="31.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- Initial package (1.0.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Bump clang to 15
  * Bump clang-format to 15
  * windows: Fix warnings
  * Use __FILE_NAME__ instead of __FILE__
  * Add nghttp3_pri_parse_priority
  * Define varint identifiers as macros
  * Fix doc</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.4.0:
  * Introduce typed nghttp3_min and nghttp3_max
  * Remove nghttp3_min and nghttp3_max
  * Added options to command find_package
  * Adjust memory pool allocation units to reduce allocation size
- update to 1.3.0:
  * Refactor stream data acknowledgement
  * Do not call acked_data with 0 length data
  * Qpack tweak
  * Avoid assigning zero after memset
  * Lower decoder stream limit
  * Workaround llvm issue on github ubuntu runner
  * cmake: add BUILD_TESTING, fix MSVC with static + shared
- update to 1.2.0:
  * Clarify the behavior when a stream is not found
  * Fix typo
  * cmake: restore `ENABLE_STATIC_CRT` and `ENABLE_ASAN` options
  * Add nghttp3_conn_update_ack_offset
  * Add include path to munit directory
  * Bump munit
  * Shrink nghttp3_stream size
  * Fix typo
  * Bump munit
  * Bump submodules</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.7.0:
  * Remove extra semicolons
  * Do not allow '@' in :authority or host field value
  * Fix compile error with NDEBUG
  * Port ngtcp2_ksl changes that introduced ngtcp2_ksl_search
- update to 1.6.0:
  * Fix cmake export
  * Fix include export
  * Fix ARM64 __popcnt intrinsics
  * Refactor qpack reserve_buf
  * Fix potential overflow
  * nghttp3_map: Port ngtcp2 changes
  * Optimize nghttp3_read_varint
  * Consistent macro comments
  * clang-format files under fuzz
  * ispow2: Better fallback implementation
  * Refactor http on header
  * Simplify http_request_on_header and http_response_on_header
  * qpack: Switch on opcode
  * Do huffman encoding only when the reduction is more than 25%
  * Optimize nghttp3_check_header_value
  * Revert "Optimize nghttp3_check_header_value"
  * cmake: Remove trailing spaces
  * Optimize nghttp3_check_header_value
- update to 1.5.0:
  * Fix format in nghttp3_macro.h
  * Bump clang format
  * cmake: Fix linker warning LNK4291 when linking static lib to
    the final binary
  * Ngtcp2 port
  * nghttp3_idtr: Remove server field
  * Port ngtcp2 changes
  * Add examples links</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.9.0
  * Explicitly deny new server-initiated bidirectional streams.
  * Reworked fuzz testing resilience.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.10.1:
  * Revert "Tighten up :path validation"
- update to 1.10.0:
  * Add tests for reading a control stream
  * fuzz: Fuzz http3 with 1 byte input
  * tests: Reset buffer before each test as part of
    initialization
  * Tighten up :path validation</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.11.0:
  * Revert "Tighten up :path validation"
  * Implement RFC 9412 ORIGIN frame
  * Clarify the life time of the object pointed
  * Update doc
  * Port ngtcp2 map changes
  * Treat malformed HTTP message as a connection error
  * Map seed
  * Add nghttp3_qpack_encoder_new2
  * Make nghttp3_rand accept uint8_t buffer
  * Origin changes
  * No need to zero-clear frent
  * Use compound literals instead of filling with zeros
  * Make macros static inline functions
  * Remove length from nghttp3_frame</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.12.0:
  - Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
  - Clang 19 by @tatsuhiro-t in #383
  - Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
  - Bump actions/github-script from 7 to 8 by @dependabot[bot] in
    [#385]
  - Delete a stream that is blocked by QPACK on QUIC stream closure
    by @tatsuhiro-t in #386
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#387]
  - Introduce time by @tatsuhiro-t in #388
  - Add glitch protection by @tatsuhiro-t in #389
  - Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
  - tests: Fix type of padding for nghttp3_settings_entry by
    @tatsuhiro-t in #391
  - Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
  - Fix macro comment by @tatsuhiro-t in #393</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.13.0:
  * Revert #395 partially
  * Replace POPCNT-based ispow2 with portable bitwise
    implementation to prevent illegal instruction crashes
  * doc: Recommend specifying rand callback
  * qpack: Optimize huffman decoding a bit
  * Remove unused enum values from nghttp3_stream_http_state
  * Qpack indexing strategy</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886401">- Update to 1.13.1:
  * Fix header name validation on a platform where char is unsigned</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.14.0:
  * Fix header name validation on a platform where char is unsigned
  * nghttp3_http: Use int8_t for the lookup tables consistently
  * More use of designated initializers
  * Rework nghttp3_frame union to avoid potential UB
  * Rewrite nghttp3_get_varint
  * Port ngtcp2_ksl changes
  * Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings
  * tnode: Remove unused num_children
  * Refactor with compound literals
  * stream: Simplify settings entry assignment
  * Port ngtcp2 changes
  * Fix ENABLE_CONNECT_PROTOCOL setting handling
  * datalen must not be zero
  * Fix missing error handling
  * Remove unused tx.hstate from nghttp3_stream
  * Clarify field size limits</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305601">- Remove the unrecogninzed configure option --with-cunit and the
  cunit build dependency</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update to 1.15.0:
  * Add nghttp3_conn_submit_request2 to set client-side scheduling
    hint
  * Make client-side scheduling incremental by default
  * Remove nghttp3_conn_submit_request2
  * Introduce nghttp3_strlen_lit
  * Move aux objects into the individual frames
  * Add const to nghttp3_frame_settings.local_settings</changelog>
</package>
<package pkgid="90979b92bacdc87dc13298ead6cabfd305912fa32d20f0c25595ab672bcfa626ccdf5f36c09fd81f23de58add0ee3a5c8d813c9b1c46d173418d237ca9e922fb" name="nghttp3-devel" arch="i586">
  <version epoch="0" ver="1.15.0" rel="31.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- Initial package (1.0.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Bump clang to 15
  * Bump clang-format to 15
  * windows: Fix warnings
  * Use __FILE_NAME__ instead of __FILE__
  * Add nghttp3_pri_parse_priority
  * Define varint identifiers as macros
  * Fix doc</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.4.0:
  * Introduce typed nghttp3_min and nghttp3_max
  * Remove nghttp3_min and nghttp3_max
  * Added options to command find_package
  * Adjust memory pool allocation units to reduce allocation size
- update to 1.3.0:
  * Refactor stream data acknowledgement
  * Do not call acked_data with 0 length data
  * Qpack tweak
  * Avoid assigning zero after memset
  * Lower decoder stream limit
  * Workaround llvm issue on github ubuntu runner
  * cmake: add BUILD_TESTING, fix MSVC with static + shared
- update to 1.2.0:
  * Clarify the behavior when a stream is not found
  * Fix typo
  * cmake: restore `ENABLE_STATIC_CRT` and `ENABLE_ASAN` options
  * Add nghttp3_conn_update_ack_offset
  * Add include path to munit directory
  * Bump munit
  * Shrink nghttp3_stream size
  * Fix typo
  * Bump munit
  * Bump submodules</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.7.0:
  * Remove extra semicolons
  * Do not allow '@' in :authority or host field value
  * Fix compile error with NDEBUG
  * Port ngtcp2_ksl changes that introduced ngtcp2_ksl_search
- update to 1.6.0:
  * Fix cmake export
  * Fix include export
  * Fix ARM64 __popcnt intrinsics
  * Refactor qpack reserve_buf
  * Fix potential overflow
  * nghttp3_map: Port ngtcp2 changes
  * Optimize nghttp3_read_varint
  * Consistent macro comments
  * clang-format files under fuzz
  * ispow2: Better fallback implementation
  * Refactor http on header
  * Simplify http_request_on_header and http_response_on_header
  * qpack: Switch on opcode
  * Do huffman encoding only when the reduction is more than 25%
  * Optimize nghttp3_check_header_value
  * Revert "Optimize nghttp3_check_header_value"
  * cmake: Remove trailing spaces
  * Optimize nghttp3_check_header_value
- update to 1.5.0:
  * Fix format in nghttp3_macro.h
  * Bump clang format
  * cmake: Fix linker warning LNK4291 when linking static lib to
    the final binary
  * Ngtcp2 port
  * nghttp3_idtr: Remove server field
  * Port ngtcp2 changes
  * Add examples links</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.9.0
  * Explicitly deny new server-initiated bidirectional streams.
  * Reworked fuzz testing resilience.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.10.1:
  * Revert "Tighten up :path validation"
- update to 1.10.0:
  * Add tests for reading a control stream
  * fuzz: Fuzz http3 with 1 byte input
  * tests: Reset buffer before each test as part of
    initialization
  * Tighten up :path validation</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.11.0:
  * Revert "Tighten up :path validation"
  * Implement RFC 9412 ORIGIN frame
  * Clarify the life time of the object pointed
  * Update doc
  * Port ngtcp2 map changes
  * Treat malformed HTTP message as a connection error
  * Map seed
  * Add nghttp3_qpack_encoder_new2
  * Make nghttp3_rand accept uint8_t buffer
  * Origin changes
  * No need to zero-clear frent
  * Use compound literals instead of filling with zeros
  * Make macros static inline functions
  * Remove length from nghttp3_frame</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.12.0:
  - Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
  - Clang 19 by @tatsuhiro-t in #383
  - Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
  - Bump actions/github-script from 7 to 8 by @dependabot[bot] in
    [#385]
  - Delete a stream that is blocked by QPACK on QUIC stream closure
    by @tatsuhiro-t in #386
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#387]
  - Introduce time by @tatsuhiro-t in #388
  - Add glitch protection by @tatsuhiro-t in #389
  - Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
  - tests: Fix type of padding for nghttp3_settings_entry by
    @tatsuhiro-t in #391
  - Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
  - Fix macro comment by @tatsuhiro-t in #393</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.13.0:
  * Revert #395 partially
  * Replace POPCNT-based ispow2 with portable bitwise
    implementation to prevent illegal instruction crashes
  * doc: Recommend specifying rand callback
  * qpack: Optimize huffman decoding a bit
  * Remove unused enum values from nghttp3_stream_http_state
  * Qpack indexing strategy</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886401">- Update to 1.13.1:
  * Fix header name validation on a platform where char is unsigned</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.14.0:
  * Fix header name validation on a platform where char is unsigned
  * nghttp3_http: Use int8_t for the lookup tables consistently
  * More use of designated initializers
  * Rework nghttp3_frame union to avoid potential UB
  * Rewrite nghttp3_get_varint
  * Port ngtcp2_ksl changes
  * Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings
  * tnode: Remove unused num_children
  * Refactor with compound literals
  * stream: Simplify settings entry assignment
  * Port ngtcp2 changes
  * Fix ENABLE_CONNECT_PROTOCOL setting handling
  * datalen must not be zero
  * Fix missing error handling
  * Remove unused tx.hstate from nghttp3_stream
  * Clarify field size limits</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305601">- Remove the unrecogninzed configure option --with-cunit and the
  cunit build dependency</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update to 1.15.0:
  * Add nghttp3_conn_submit_request2 to set client-side scheduling
    hint
  * Make client-side scheduling incremental by default
  * Remove nghttp3_conn_submit_request2
  * Introduce nghttp3_strlen_lit
  * Move aux objects into the individual frames
  * Add const to nghttp3_frame_settings.local_settings</changelog>
</package>
<package pkgid="c9501817a38854661bd20d9a06d0b8fa1597ff7c38b75dc10f75df6726ec633aea0564efa917554f72b02d7b7d41e634002898213708e92ecc1524880ef8c5e8" name="nghttp3-devel" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="31.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- Initial package (1.0.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Bump clang to 15
  * Bump clang-format to 15
  * windows: Fix warnings
  * Use __FILE_NAME__ instead of __FILE__
  * Add nghttp3_pri_parse_priority
  * Define varint identifiers as macros
  * Fix doc</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.4.0:
  * Introduce typed nghttp3_min and nghttp3_max
  * Remove nghttp3_min and nghttp3_max
  * Added options to command find_package
  * Adjust memory pool allocation units to reduce allocation size
- update to 1.3.0:
  * Refactor stream data acknowledgement
  * Do not call acked_data with 0 length data
  * Qpack tweak
  * Avoid assigning zero after memset
  * Lower decoder stream limit
  * Workaround llvm issue on github ubuntu runner
  * cmake: add BUILD_TESTING, fix MSVC with static + shared
- update to 1.2.0:
  * Clarify the behavior when a stream is not found
  * Fix typo
  * cmake: restore `ENABLE_STATIC_CRT` and `ENABLE_ASAN` options
  * Add nghttp3_conn_update_ack_offset
  * Add include path to munit directory
  * Bump munit
  * Shrink nghttp3_stream size
  * Fix typo
  * Bump munit
  * Bump submodules</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.7.0:
  * Remove extra semicolons
  * Do not allow '@' in :authority or host field value
  * Fix compile error with NDEBUG
  * Port ngtcp2_ksl changes that introduced ngtcp2_ksl_search
- update to 1.6.0:
  * Fix cmake export
  * Fix include export
  * Fix ARM64 __popcnt intrinsics
  * Refactor qpack reserve_buf
  * Fix potential overflow
  * nghttp3_map: Port ngtcp2 changes
  * Optimize nghttp3_read_varint
  * Consistent macro comments
  * clang-format files under fuzz
  * ispow2: Better fallback implementation
  * Refactor http on header
  * Simplify http_request_on_header and http_response_on_header
  * qpack: Switch on opcode
  * Do huffman encoding only when the reduction is more than 25%
  * Optimize nghttp3_check_header_value
  * Revert "Optimize nghttp3_check_header_value"
  * cmake: Remove trailing spaces
  * Optimize nghttp3_check_header_value
- update to 1.5.0:
  * Fix format in nghttp3_macro.h
  * Bump clang format
  * cmake: Fix linker warning LNK4291 when linking static lib to
    the final binary
  * Ngtcp2 port
  * nghttp3_idtr: Remove server field
  * Port ngtcp2 changes
  * Add examples links</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.9.0
  * Explicitly deny new server-initiated bidirectional streams.
  * Reworked fuzz testing resilience.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.10.1:
  * Revert "Tighten up :path validation"
- update to 1.10.0:
  * Add tests for reading a control stream
  * fuzz: Fuzz http3 with 1 byte input
  * tests: Reset buffer before each test as part of
    initialization
  * Tighten up :path validation</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.11.0:
  * Revert "Tighten up :path validation"
  * Implement RFC 9412 ORIGIN frame
  * Clarify the life time of the object pointed
  * Update doc
  * Port ngtcp2 map changes
  * Treat malformed HTTP message as a connection error
  * Map seed
  * Add nghttp3_qpack_encoder_new2
  * Make nghttp3_rand accept uint8_t buffer
  * Origin changes
  * No need to zero-clear frent
  * Use compound literals instead of filling with zeros
  * Make macros static inline functions
  * Remove length from nghttp3_frame</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.12.0:
  - Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
  - Clang 19 by @tatsuhiro-t in #383
  - Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
  - Bump actions/github-script from 7 to 8 by @dependabot[bot] in
    [#385]
  - Delete a stream that is blocked by QPACK on QUIC stream closure
    by @tatsuhiro-t in #386
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#387]
  - Introduce time by @tatsuhiro-t in #388
  - Add glitch protection by @tatsuhiro-t in #389
  - Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
  - tests: Fix type of padding for nghttp3_settings_entry by
    @tatsuhiro-t in #391
  - Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
  - Fix macro comment by @tatsuhiro-t in #393</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.13.0:
  * Revert #395 partially
  * Replace POPCNT-based ispow2 with portable bitwise
    implementation to prevent illegal instruction crashes
  * doc: Recommend specifying rand callback
  * qpack: Optimize huffman decoding a bit
  * Remove unused enum values from nghttp3_stream_http_state
  * Qpack indexing strategy</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886401">- Update to 1.13.1:
  * Fix header name validation on a platform where char is unsigned</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.14.0:
  * Fix header name validation on a platform where char is unsigned
  * nghttp3_http: Use int8_t for the lookup tables consistently
  * More use of designated initializers
  * Rework nghttp3_frame union to avoid potential UB
  * Rewrite nghttp3_get_varint
  * Port ngtcp2_ksl changes
  * Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings
  * tnode: Remove unused num_children
  * Refactor with compound literals
  * stream: Simplify settings entry assignment
  * Port ngtcp2 changes
  * Fix ENABLE_CONNECT_PROTOCOL setting handling
  * datalen must not be zero
  * Fix missing error handling
  * Remove unused tx.hstate from nghttp3_stream
  * Clarify field size limits</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305601">- Remove the unrecogninzed configure option --with-cunit and the
  cunit build dependency</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update to 1.15.0:
  * Add nghttp3_conn_submit_request2 to set client-side scheduling
    hint
  * Make client-side scheduling incremental by default
  * Remove nghttp3_conn_submit_request2
  * Introduce nghttp3_strlen_lit
  * Move aux objects into the individual frames
  * Add const to nghttp3_frame_settings.local_settings</changelog>
</package>
<package pkgid="c2976c3d0b0a47e8bfafec4feaa31a6ba74d48db5c8cfd3ccf71473e80f8a93c0e28a376a1dff428adc423c291b05b161cec4aad29c3f189a06735336efddd14" name="ngtcp2" arch="src">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="9c05cf44412f71cba6256e52a0f549f09c9ac37835895812ad21cd30dbc651dd0ce762ad48e1c500517caaa89a47b890bcbb9212cacd49ad74564ef21162fb89" name="ngtcp2-devel" arch="i586">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="d95704142d7328b9636a5ee7c0792efc9fa26e82f2deed8098bd94cc246c2597908342ea3ed2b49776c6888c891a8196e581380d2e6496ae5c3e0ea78070c9e4" name="ngtcp2-devel" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="52.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.1.0:
  * Extract ngtcp2_frame_chain to its own file
  * Refactor ringbuf
  * Fix typo
  * Rename reset stream flags
  * Remove unused ngtcp2_conn_resched_frames
  * crypto: Fix bug that retry token AAD does not include QUIC version
  * cmake: re-add two missing includes
  * Bump clang to 15
  * quictls: Prefetch objects to workaround 3.x perf regression
  * Bump clang-format to 15
  * Bump quictls to 3.1.4+quic
  * Deprecate NGTCP2_PROTO_VER_MIN and NGTCP2_PROTO_VER_MAX
  * ngtcp2_conn_write_datagram conveniently accepts single buffer
  * windows: Fix warnings
  * ptlsclient, ptlsserver: Support hq
  * h09client: Use util::write_token
  * Cpp ext
  * Use __FILE_NAME__ instead of __FILE__
  * examples: Rename extend_max_streams_bidi to extend_max_local_streams_bidi
  * Define varint identifiers as macros
  * Limit the number of NEW_CONNECTION_ID frames that are in-flight
  * Make frame type of type uint64_t
  * Fix doc
  * Fix assertion failure
  * Eliminate floating point computations
  * Bump actions/github-script from 6 to 7
  * client: Optimize a bit
  * Revert ignoring loss signal during startup
  * Rework app_limited
  * Remove unused strmq_nretrans
  * autotools: Check wolfSSL_is_quic is available
  * wolfSSL: Add more build options
  * h09client: Fix uninitialized variable</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706443200">- update to 1.2.0:
  * Remove sample_offset field from ngtcp2_ppe
  * wolfssl: Just use QUIC v1 transport parameter codepoint
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Return early when STOP_SENDING is received more than once
  * Do not send STOP_SENDING if RESET_STREAM has been
    received
  * Fix persistent congestion
  * ngtcp2_pkt_adjust_pkt_num: Take bytes rather than bits
  * Remove use of SSL_set_quic_transport_version
  * Switch interop client/server to wolfssl because OpenSSL
    1.1.1 has been EOLed and OpenSSL 3.x has the various
    performance issues due to its design decision.
    wolfssl has been chosen because it has the ability
    to specify chacha cipher suite and it is also relatively
    easy to build compared to GnuTLS.
  * Avoid detecting OpenSSL 3.2 as quictls
  * cmake: Require nghttp3 &gt;= v1.0.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718625600">- update to 1.6.0:
  * examples: Print negotiated group if TLS stack gives that
    information
  * Remove ngtcp2_min and ngtcp2_max
  * Keep-alive packet should trigger PTO
  * Fix ngtcp2_conn_stat.max_tx_udp_payload_size update
  * Adjust memory pool allocation units to reduce allocation size
  * Adjust NGTCP2_ACKTR_MAX_ENT to match NGTCP2_MAX_ACK_RANGES +
    1
  * Allocate ngtcp2_acktr_entry at once not to waste memory
  * Fix memory leak when stream datacnt gets below allocation
    threshold
  * Refactor ngtcp2_frame_chain allocation for ngtcp2_stream
- update to 1.5.0:
  * Pack more QUIC packets on large PMTUD probes
  * Drop UDP datagram if it comes from a well-known port
  * Rework transmitting empty STREAM frame
  * Take into account SCID length when computing minimum packet
    size
  * More prohibited ports
  * client: Handle error from feed_data
  * server: Send stateless reset
  * crypto: Adjust token stack buffer sizes
  * crypto: Reduce NGTCP2_CRYPTO_TOKEN_RAND_DATALEN to 16
  * Adopt std::to_array
  * server: Use std::span for sized binary data
  * client: Use std::span for sized binary data
  * examples: More std::span
  * std::unordered_map lookup by std::string_view
  * Refactor format_hex
- update to 1.4.0:
  * Erase sensitive data before freeing memory
  * Fix compile error with libstdc++6-14
  * Make congestion controller use the current path MTU
  * Reduce malloc call in conn_new
  * Add missing FindJemalloc.cmake to EXTRA_DIST
  * Automate release process
  * Make Path MTU Discovery probes configurable
  * examples: Add --pmtud-probes option
  * Accept zero length UDP datagram payload and just return 0
  * Deal with the case that send_quantum &lt; max_udp_payload_size
  * Adjust simpleclient buffer to have default
    max_tx_udp_payload_size
  * Cleanup free functions called from conn_new
  * Make functions that discard pkns callable from the other
    source files
  * Add typed ngtcp2_min and ngtcp2_max functions
  * Avoid setting 0 after memset
  * Move ngtcp2_transport_params functions to its own file
  * Remove unused ngtcp2_conversion_test.c
  * Move struct version to the last argument
  * git clone recursive
  * Update README.rst
  * ngtcp2_conn_write_connection_close: Fix assertion failure
  * Fix assertion failure because of failing dup Connection ID
    check
- update to 1.3.0:
  * Do not run docker-build on tag
  * Speed up git clone
  * Use cmake -B consistently
  * Bump actions/cache from 3 to 4
  * Optimize STOP_SENDING
  * Fix retransmit frames on stream
  * Set NGTCP2_STRM_FLAG_RESET_STREAM when RESET_STREAM is sent
  * Add helper functions to encode/decode zero length transport
    parameter
  * Verify decoding truncated frames
  * Use typed frame type rather than ngtcp2_frame
  * Verify decoding truncated packet headers
  * Open a remote stream if RESET_STREAM is received
  * nghttp3 now requires git submodule
  * Migrate to munit from cunit
  * Rewrite ngtcp2_cbrt
  * Add missing munit header file to HFILES
  * Bump munit
  * Fix typo
  * hexdump: Add an extra whitespace after address
  * hexdump: Fix the last address is not shown
  * examples: Add include in GnuTLS example
  * Use assert_stdsv_equal and print title
  * examples: Minor fixup
  * Bump aws-lc to v1.21.0
  * Add security policy
  * Bump boringssl
  * Bump openssl
  * examples: Fix operator precedence error
  * Bump munit
- drop cunit
- update keyring</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- make devel package require also gnutls variant of the library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1739016000">- update to 1.10.0:
  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
    NGTCP2_INITIAL_HASHBITS
  * Do not extend app-limited period
  * Fuzz sequences of different received packets
  * Fuzz timestamp in read_write_pkt fuzzer
  * Exercise all CC algorithms in read_write_pkt fuzzer
  * Exercise client in read_write_pkt fuzzer
  * Fix assertion error when retransmitting 0 length STREAM
  * Fuzz remote transport params in read_write_pkt fuzzer
  * Update ksl fuzzer with FuzzedDataProvider
  * Remove outdated PMTUD probe packet handling when it is lost
  * Add ngtcp2_rob fuzzer
- update to 1.9.1:
  * Fixes CVE-2024-52811
- update to 1.9.0:
  * ringbuf: silence superfluous unused function warning on
    NDEBUG builds
  * Use REQUIRED when finding a package
  * Remove extra semicolons
  * examples: GRO buffer size should be 64KiB
  * Limit the number of ACK frames per packet
  * Nothing to acknowledge in a 0RTT packet
  * Introduce ngtcp2_ksl_search
  * Update doc
  * Loosen app-limited condition
  * Tweak threshold for max_stream_data and max_data transmission
  * Add note for window auto-tuning
  * examples/client: Disable window auto-tuning by default
  * ngtcp2_ksl: Use proper type
  * Retry token validation with more detailed error reporting
  * examples: Call getnameinfo only when logging is required
  * Replace http_parser_parse_url with urlparse
- update to 1.8.1:
  * Fix connection stall due to cwnd limited
- update to 1.8.0:
  * ngtcp2_cid: Update doc and style
  * Add const qualifier
  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
  * Change clang-format options
  * Fixing cmake export
  * Rtb on pkt lost
  * Rtb refactor
  * Crypto refactor
  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
  * ngtcp2_ppe: Update style
  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
  * ngtcp2_map: Fix hash computation
  * ngtcp2_map: Rename tablelenbits to hashbits
  * Map refactor
  * CUBIC RFC 9438
  * Amend CUBIC
  * Hystart++ RFC 9406
- update to 1.7.0:
  * Cleanup end of macro comments and clang-format
  * GHA: Remove EXTRA_LDFLAGS
  * Bump docker/build-push-action from 5 to 6
  * Add ngtcp2_tpe, testing packet encoder
  * Refactor packet writer functions for testing
  * ngtcp2_gaptr: Cleanup doc and style
  * ngtcp2_idtr: Clean doc and fix wrong assertions
  * Added options to command find_package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744891200">- Update to release 1.12.0
  * Avoid limiting CWND during path validation.
  * Avoid PMTUD if it is disabled by configuration.
- Use SRPM name as a base for -devel subpackage.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1750593600">- Additionally build OpenSSL backend and ship it in optional subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750593601">- Trim idempotent if..endif guards
- Delete metadata for unproduced ngtcp2-doc subpackage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1750680000">- update to 1.13.0:
  * Update CMakeLists.txt to fix the error of
    check_symbol_exists() when static-link openssl.
  * Fix path response padding
  * Make a packet containing PATH_RESPONSE to active path non-
    probing
  * Make pacing less bursty
  * Add extra precision to pacing_interval
  * Refactor cubic
  * cubic: Bound time_delta
  * Make as_uint8_span consteval
  * Avoid slower std::ranges::mismatch
  * putting important libdir and incdir first</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753790400">- Update to 1.14.0:
  * Add util::system_clock_now
  * Make read_pem return std::vector&lt;uint8_t&gt;
  * Refactor cubic
  * Add ngtcp2_begin_path_validation callback
  * ngtcp2_map: Hash key
  * Update BBR to the current draft and simplify code
  * Map seed
  * ngtcp2_map: Change load factor to 7/8
  * Fix pc files for static linkage
  * Build with the latest nghttp3
  * Assert that fin is set or datalen &gt; 0
  * Return error if too many STREAM frames are accumulated for resend
  * Set minimum STREAM data size when serializing into a packet
  * Avoid memset for 1-RTT ngtcp2_pktns
  * lib: Compound Literals
  * Bump OpenSSL to v3.5.1
  * Run quic-interop-runner
  * quic-interop-runner: Enhance log reduction
  * quic-interop-runner: Add workflow_dispatch inputs
  * Require nghttp3 &gt;= v1.11.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Split the devel package into the gnutls and openssl parts.
  These packages are now called libngtcp2_crypto_gnutls-devel
  and libngtcp2_crypto_ossl-devel.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760097600">- Update to 1.16.0:
  - build: install crypto header for libressl by @vszakats in #1752
  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
    [#1753]
  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
    in #1754
  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
  - build(deps): bump actions/checkout from 4 to 5 by
    @dependabot[bot] in #1756
  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
    [#1757]
  - Add stats for sent, received, and lost QUIC packets and bytes
    by @tatsuhiro-t in #1758
  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
    [#1759]
  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
  - Fix format specifier by @tatsuhiro-t in #1761
  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
  - More use of designated initializers and compound literals by
    @tatsuhiro-t in #1765
  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
  - examples: constexpr fixup by @tatsuhiro-t in #1767
  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
  - build(deps): bump actions/setup-python from 5 to 6 by
    @dependabot[bot] in #1771
  - build(deps): bump actions/stale from 9 to 10 by
    @dependabot[bot] in #1772
  - build(deps): bump actions/github-script from 7 to 8 by
    @dependabot[bot] in #1773
  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
    [#1777]
  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
  - cmake: do not require C++ for lib-only builds by @vszakats in
    [#1779]
  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
    [#1783]
  - examples: Add --no-gso option by @tatsuhiro-t in #1784
  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
    @tatsuhiro-t in #1785
  - Examples add show stat by @tatsuhiro-t in #1786
  - examples: Fix help doc by @tatsuhiro-t in #1787
  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
  - Bump boringssl by @tatsuhiro-t in #1791
  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
  - Bump picotls by @tatsuhiro-t in #1793
  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
  - Fix macro comment by @tatsuhiro-t in #1795
- changes from 1.15.1
  - build: install crypto header for libressl by @vszakats in #1752
- changes from 1.15.0
  - Use Requires.private because it is needed for static linking by
    @tatsuhiro-t in #1721
  - Use fallback_path consistently by @tatsuhiro-t in #1722
  - examples: Share get_string for urlparse_url.field_data by
    @tatsuhiro-t in #1723
  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
  - build: use distinct crypto library name for LibreSSL by
    @vszakats in #1716
  - Fix libressl doc and clarify its include file by @tatsuhiro-t
    in #1726
  - Aggregate pkts for gso by @tatsuhiro-t in #1727
  - GHA: Exclude macos-15 cmake due to the include path issue by
    @tatsuhiro-t in #1729
  - Pcg by @tatsuhiro-t in #1730
  - Chaos protection by @tatsuhiro-t in #1728
  - Rename ngtcp2_conn_aggregate_pkts to
    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
    by @tatsuhiro-t in #1733
  - build(deps): bump actions/download-artifact from 4 to 5 by
    @dependabot[bot] in #1734
  - Glitch by @tatsuhiro-t in #1735
  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
    MAX_STREAM_DATA by @tatsuhiro-t in #1736
  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
  - doc: Fix field markup by @tatsuhiro-t in #1738
  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
  - Bump boringssl by @tatsuhiro-t in #1741
  - Bump clang to 19 by @tatsuhiro-t in #1742
  - Fix skipping packet number by @tatsuhiro-t in #1743
  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
    [#1744]
  - doc: Clarify that dest, destlen, and ts should be passed too by
    @tatsuhiro-t in #1745
  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
  - Break when buffer size is smaller than path max MTU by
    @tatsuhiro-t in #1747
  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
    @tatsuhiro-t in #1748
  - Bump clang-format to 19 by @tatsuhiro-t</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760184000">- configure looks for a std=20 compiler on 15.6. Force a newer GCC
  to satisfy that requirement.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1761220800">- Update to 1.17.0:
  * Remove redundant casts by @tatsuhiro-t in #1798
  * Revert #1798 partially by @tatsuhiro-t in #1799
  * examples: Use std::ranges::begin and std::ranges::end
    consistently by @tatsuhiro-t in #1800
  * Initial packets padding with no_tx_udp_payload_size_shaping by
    @tatsuhiro-t in #1801
  * Remove redundant semicolon by @tatsuhiro-t in #1802
  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
  * Fix typos in documentation and comments by @Copilot in #1804
  * Update bbr by @tatsuhiro-t in #1807
  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
  * cubic: Compute remainder of "acked_bytes" without modulo by
    @tatsuhiro-t in #1813
  * Replace POPCNT-based ispow2 with portable bitwise implementation to
    prevent illegal instruction crashes by @mk185147 in #1811
  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
    @tatsuhiro-t in #1821
  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
  * examples: Add gso-burst option by @tatsuhiro-t in #1825
  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
  * Server optimize write by @tatsuhiro-t in #1838
  * Relax the timer handling by @tatsuhiro-t in #1840
  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
  * Bump boringssl by @tatsuhiro-t in #1841
  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
  * Relax the timer handling further by @tatsuhiro-t in #1843</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1765886400">- Update to 1.18.0:
  * Assume payload is not empty when decoding a QUIC frame
  * Fix a memory leak on Retry
  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
  * Fix a potential double free
  * Delete unusable initial rx key on if tx key installation fails
  * crypto: Allow an application to store opaque data for a regular
    token
  * crypto: Fix memcpy runtime error: null pointer passed as
    argument 1
  * Raise glitch counter initial limits
  * Set ngtcp2_conn to NULL if its initialization fails
  * Fix the bug that Initial packet is not padded
  * Try padding even if the current packet size &gt;= 1200
  * Increase stream data fragmentation limit</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1768305600">- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static)</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1773230400">- Update tto 1.21.0:
  * Fix Initial/Handshake packet construction
  * bbr: Rework spurious loss handling based on the latest draft
  * Assert that nwrite is not larger than the provided buffer length
  * log: Remove unused ngtcp2_log_tx_cancel
  * Remove ngtcp2_datagram.rdata
  * Rename in6_addr to s6_addr
  * bbr: Add const qualifier</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1775736000">- update to 1.22.0:
  * Consistent hex literals and integer suffixes
  * Deprecate quictls
  * Introduce struct ngtcp2_stateless_reset_token
  * Fix assertion failure without get_new_connection_id
  * Add ngtcp2_pkt_write_stateless_reset2
  * Add missing callbacks to callbacks test
  * Add ngtcp2_conn_get_active_dcid2 and ngtcp2_cid_token2
  * Prefer sizeof token instead of integer constant
  * Introduce struct ngtcp2_path_challenge_data
  * Store cid and token directly into frame
  * tests: Remove xcid_init in favor of make_xcid
  * tests: Inline initialization for transport parameters tests
  * tests: Make shared crypto objects static const
  * build(deps): bump actions/upload-artifact from 6 to 7
  * tests: More static const variables
  * build(deps): bump actions/download-artifact from 7 to 8
  * Avoid memset for struct initialization
  * Hp ecb
  * crypto: Encrypt full chacha block
  * crypto/wolfssl: Use aes-ecb for header protection cipher
  * Upcase hex char in string literals
  * crypto: No need to disable padding for aes-ecb
  * More use of designated initializers
  * docker: Switch to aws-lc
  * GHA: Build with macos-26
  * Fix assertion error when seq=0 Connection ID is required on
    0.5RTT
  * Add function to continue TLS handshake
  * Refine handshake continuation
  * doc: Add documentation about TLS handshake interruptions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776254400">- enable openssl support on factory only (jsc#PED-15770)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1776686400">- update to 1.22.1 (bsc#1262273, CVE-2026-40170):
  * Fixes CVE-2026-40170</changelog>
</package>
<package pkgid="51fa443c56a15ce25c1dcd9feefb76c84b47e1cadc95afd3ade1603914ddc598bf2fbd03f5233e36bd72eb197dd613988232c8ba9bce6b103601d9970122fab4" name="pam_cifscreds" arch="i586">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="860ca4df403de83534fdb8eca734cdd45c61a4349335e96341ab4d06ff229fdb8c7abdab35fd9fbfc454e6e8063bc8eab8e91e31e1f383312d258a094b46a723" name="pam_cifscreds" arch="x86_64">
  <version epoch="0" ver="7.4" rel="2.16"/>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.de&gt;" date="1642420800">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1739620800">- A new update, version 7.2, of cifs-utils has been released today,
  bringing various security enhancements, including support for password
  rotation, and better support for credential management and namespaces
  and various improvements to documentation.
  Links:
  webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils
  tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/
  git: git://git.samba.org/cifs-utils.git
  gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary
  Detailed list of changes since version 7.1 was released:
  Bharath SM (1):
    cifs-utils: Skip TGT check if valid service ticket is already available
  Henrique Carvalho (3):
    docs: update actimeo description
    docs: add max_cached_dirs description
    docs: add esize description
  Meetakshi Setiya (4):
    cifs-utils: support and document password2 mount option
    use enums to check password or password2 in set_password,
  get_password_from_file and minor documentation additions
    Fix compiler warnings in mount.cifs
    Do not pass passwords with sec=none and sec=krb5
  Pavel Filipenský (1):
    smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.2
  Ritvik Budhiraja (2):
    CIFS.upcall to accomodate new namespace mount opt
    cifs-utils: add documentation for upcall_target
  Steve French (2):
    cifs-utils: avoid using mktemp when updating mtab
    getcifsacl: fix return code check for getting full ACL
  Thiago Becker (2):
    cifscreds: use continue instead of break when matching commands
    cifscreds: allow user to set the key's timeout
  Thomas Petazzoni (2):
    configure.ac: libtalloc is now mandatory
    cldap_ping.c: add missing &lt;sys/types.h&gt; include</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1742558400">A new update, version 7.3, of cifs-utils has been released today.
- Meetakshi Setiya (1):
    Fix regression in mount.cifs with guest mount option
  Pavel Filipenský (2):
    cldap_ping: Fix socket fd leak
    resolve_host.c: Initialize site_name
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.3</changelog>
  <changelog author="macke d &lt;mdbuild@use.startmail.com&gt;" date="1749643200">- A new update, version 7.4, of cifs-utils has been released today.
  Users of cifs-utils version 7.3 on older kernels are encouraged to
  update to 7.4 since it includes a fix for a mount problem with version
  7.3 of cifs-utils on older kernels when using namespaces.
  Detailed list of changes since version 7.3 was released
  Enzo Matsumiya (1):
    mount.cifs: retry mount on -EINPROGRESS
  Henrique Carvalho (1):
    cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  Paulo Alcantara (1):
    cifs.upcall: fix memory leaks in check_service_ticket_exits()
  Pavel Shilovsky (1):
    cifs-utils: bump version to 7.4
  Z. Liu (2):
    getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
    cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="f98b4c9c3d17d43be0488497f54f7900fc22b123d0f26993343681548dbc24806e81fa79b73968b374ad62e08afeec449e6502f9c5d418ca4e0630ff4ef37176" name="python3-talloc" arch="i586">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="6404358fe9ddce79b0a25af50a94b2455bd8e4e37cdca8e5b94edaf1dcdf581e3a91ed4295d3e47390c99bc95de28c77c83526166a47e0fde6404f0e8354bc62" name="python3-talloc" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="a24c734eea69e6ca5dea29750e0dfc9c2fa8c13369740c939a4401cbe23065b47df475a6307c7ea7f8ac337b8174de30f74e12b62beb7e2eec018775d63af0ec" name="python3-talloc-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="4e58b1daf0808c9f1db0314bc15764220e371a5340db2398addde6a0a3eb68df6369d5f847755656bd9e2b39797542d7b02ca18a75e43a1481c041bcd671ff8b" name="python3-talloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="7ef5f01bbb86edfa09652bcaaf1fc61d6d28c6a3ddcdf3cbbf873e996bc142731c293cb76e5f0548218f1c9daf8852502f30c907630f22394dcce0c3b27a5f0b" name="python3-talloc-devel" arch="i586">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="1c7da9b89d738f72e561424d3a924ecbcb858accbcc7c5aef2c21254abb9e488dcec8cc45f0869b56c7db0ed5de09019738c408d530d868ad584b3b778cb982e" name="python3-talloc-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="b9d560ceda8d5552a87731e13c742aae55d4fa080ca9685cf4e2b1d5cefe5aebf8bc0a3137343930c03562ce7d5e4ba572dc8b5f5e5c2bb0d956c617b03db56d" name="python3-talloc-x86-64-v3" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="77e69b8227e33d2af4751d9f1f0588699d619c911bd48036137f5d670e7e6fd450e6d400a40f0152b50fd09d67516a9eaffeb677fdb7ec7b4bbe4404826ddb0e" name="python3-talloc-x86-64-v3-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="29fe9bb77c3f5466409d7d2e0b9eb051d6ee73baf49d8935f11ad345af9d6e0336fa2242a93f44975ab617c909ab9546f7cf193453033b5eb89b6e95ebd3cdd9" name="python3-tdb" arch="i586">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="a24e7cfaf363620f1803b7cfd7c7a968736bf8135e800ec088350c692c03d14bb7ce846c4fef3bf57c795e8ed5e9f648d23b33750d0989140abea0365dd283e0" name="python3-tdb" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="d9ba73aa84407b463df70b7855482fbc54463af5e22322d4f2757f589eb301c6b971fe3bd1a4e5d6f77510148d1561b2c7eaefe2bd89aac4fbe516cba6dc4ccb" name="python3-tdb-32bit" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="44d198b8554f2b1b60810440937f27813d34b65c2f2e8cd16c3da146bef869c73cdd9916aec14efe94835296492ea8f82df7e40f3f8e5fdfb5637b7e6555ef90" name="python3-tevent" arch="i586">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="eb0e2bd73e6afc3bb3f6df3f4f9e30631ad89fa8326ec43f75f0801134d19fa355271b5cee3c76034140aebd0a143682ec96eb73b1519af834cd47d8e1567df9" name="python3-tevent" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="5c600c29d77a0e3e67b5c6a92dd53075a199b55b4bb9f69d97933e9cc310a514d846b440edb37c138ca5b09d45a997d04f86095d28df60e163b54b0d6ff92094" name="python3-tevent-32bit" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="33407aff94990cb5e98bdc497e056dc95041cbcb129dd80870f3414d978279fc318d8cfc17d324073cf6191e191eb74bfe964d3a5b704579d46f1c50af8d7607" name="talloc" arch="src">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Eliminate usage of %__cp and %__mkdir_p.</changelog>
  <changelog author="jmcdonough@suse.com" date="1522929600">- Update to version 2.1.13
  + Use atexit() again instead of a library destructor; (bso#13366);
    (bso#7587).
  + Prevent assert in sssd (bso#7587).</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to version 2.1.14
  + Fix some typos in the comments
  + Remove extra 0x prefix for the "%p" format specifiers,
    avoiding 0x0x0 strings in the output.
  + make sure we link extra-python versions of libraries</changelog>
  <changelog author="dmulder@suse.com" date="1549454400">- Update to version 2.1.15
  + Deprecate talloc_set_memlimit() and talloc_autofree_context()
  + Fix undefined behavior in talloc_memdup
  + The build uses python3 by default:
  + --extra-python would take python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to version 2.1.16
  + Fix standalone build of talloc.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.2.0
  + Remove pytalloc_CObject_FromTallocPtr()
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a talloc if
    required from that branch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571659200">- Add two patches making build compatible with Python 3.8.0:
  - waf_upgrade.patch
  - waf_use_native_waf_timer.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1574769600">- Upgrade to 2.3.0.
- Patches waf_upgrade.patch and waf_use_native_waf_timer.patch
  are no needed anymore. They are subsumed by the upstream
  tarball.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="1be3654e8c00d2b22565b66c5c061776648cbc5df90375cc9438732561c6caf1000fe07df7d90f28c4109dab6285b6e347a86354b3c900024fe4acb6115491fb" name="talloc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.9"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1680782400">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="1d2df4a960d7320e09d0a75424aab965b2491e8007dce5e812b71bbfebd68b7be7655a0cd4a056d050fff45fe8c484c24c1ada277b13179d59abc272cd31a24a" name="talloc-man" arch="i586">
  <version epoch="0" ver="2.4.3" rel="2.10"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1574769600">- Upgrade to 2.3.0.
- Patches waf_upgrade.patch and waf_use_native_waf_timer.patch
  are no needed anymore. They are subsumed by the upstream
  tarball.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="7e304d4b01c70a186e3e6a927e2b4697a9ecd3cf2ffbe846811ecf5cd3ebec650ea60d13b428c44fe2259fc5f5ce586e2d22a467ac1a0e8f77c04f1da8b8dfab" name="talloc-man" arch="src">
  <version epoch="0" ver="2.4.3" rel="2.10"/>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Eliminate usage of %__cp and %__mkdir_p.</changelog>
  <changelog author="jmcdonough@suse.com" date="1522929600">- Update to version 2.1.13
  + Use atexit() again instead of a library destructor; (bso#13366);
    (bso#7587).
  + Prevent assert in sssd (bso#7587).</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to version 2.1.14
  + Fix some typos in the comments
  + Remove extra 0x prefix for the "%p" format specifiers,
    avoiding 0x0x0 strings in the output.
  + make sure we link extra-python versions of libraries</changelog>
  <changelog author="dmulder@suse.com" date="1549454400">- Update to version 2.1.15
  + Deprecate talloc_set_memlimit() and talloc_autofree_context()
  + Fix undefined behavior in talloc_memdup
  + The build uses python3 by default:
  + --extra-python would take python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to version 2.1.16
  + Fix standalone build of talloc.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.2.0
  + Remove pytalloc_CObject_FromTallocPtr()
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a talloc if
    required from that branch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571659200">- Add two patches making build compatible with Python 3.8.0:
  - waf_upgrade.patch
  - waf_use_native_waf_timer.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1574769600">- Upgrade to 2.3.0.
- Patches waf_upgrade.patch and waf_use_native_waf_timer.patch
  are no needed anymore. They are subsumed by the upstream
  tarball.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="5c4e09bbb692924c40415a5e584999bd9acff6973f244170966f2d4177c87f7cc38a1f04afaa06fb10364114d780cfb7fc0e850e869f29075201c941d6617810" name="talloc-man" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.10"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1574769600">- Upgrade to 2.3.0.
- Patches waf_upgrade.patch and waf_use_native_waf_timer.patch
  are no needed anymore. They are subsumed by the upstream
  tarball.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to 2.3.3
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to 2.3.4
  + configure/Makefile: export PYTHONHASHSEED=1 in all
    'configure/Makefile' scripts
  + lib:replace: Reformat shell script
  + nsswitch: reduce dependecies to private libraries and link
    static/builtin if possible</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 2.4.0
  * Add talloc_asprintf_addbuf()
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 2.4.1
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * Remove unneeded va_copy()</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 2.4.2
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * Update patch talloc-python3.5-fix-soabi_name.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741608000">- Update to 2.4.3
  * Testsuite and documenation fixes
  * Add LGPLv3 LICENSE file</changelog>
</package>
<package pkgid="06db9d8e57fdb217af0d8af4ea409684fa3f4da75d66a86380985c58d269fd94a2342f0dfecc5236ca84417190f20728b7e93a1a3e0245fa7fd579000aeb468d" name="tdb" arch="src">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 1.3.13.
  + documentation for the tdbbackup -n option
  + correctly upgrade F_RDLCK to F_WRLCK locks
  + tdbtool: Add "storehex" command
  + fix robust mutex detection in threaded applications
    (bug #12593)
  + improve debugging of transaction lock failures</changelog>
  <changelog author="scabrero@suse.com" date="1499256000">- Update to version 1.3.14.
  + allow tdb_traverse_read before tdb_transaction[_prepare]_commit()
  + Improve documentation for tdb_transaction_start()
  + Add new function tdb_transaction_active()</changelog>
  <changelog author="scabrero@suse.com" date="1506340800">- Update to 1.3.15.
  + Add protection against EINTR.
  + Truncate the file after expand failure, ENOSPC
  + Use posix_fallocate() to expand the file
  + Fix GCC compiler warnings</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Ensure neutrality of descriptions.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs. Remove some useless ldconfig calls.</changelog>
  <changelog author="david.mulder@suse.com" date="1524830400">- Remove the conflicts between python3-tdb and python-tdb. These
  packages don't actually conflict, and need to be installed
  together in order to build samba with python3.</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to 1.3.16.
  + Fix build on AIX
  + Python3 compatibility fixes
  + Use tdb_wipe_all in "erase" command
  + Harden allocating the tdb recovery area
  + Make sure the hash size fits
  + Harden tdb_check_used_record against overflow
  + Harden tdb_rec_read
  + Handle TDB_NEXT_LOCK_ERR in tdb_traverse_internal
  + Fix build warnings</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="dmulder@suse.com" date="1548244800">- Update to 1.3.17</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to 1.3.18
  + Fix build problems with older python versions.
  + C99 build fixes.
  + Fix standalone build of tdb.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 1.4.2
  + Build fixes
  + Improve the performance by inlining the tdb_oob() checks
  + Do not propogate any errors from tdb_repack() to
    tdb_transaction_commit();  (bso#13952)
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tdb if
    required from that branch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="f51fcd005670d31ed1985d1b0ca12a4e8bd5a2db9fb97bc65b4bba3579fa32aa75ba9d196b96e8c2d21818e3662bf52437b593ffb9ace7bfcf5a69e7a8ec23c2" name="tdb-tools" arch="i586">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="23cf94c1ba8bc24a2785bf5a657d84aa61d0052be02389ba5864bfac76e73beb8cb1b3271ec9732c9fa12a85fd5ee565bf443aabd6f526d3d5e9f3ab0a9ea12d" name="tdb-tools" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="14.16"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 1.4.4
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647432000">- Update to 1.4.6
  + Drop obsolete patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch
  + Fix Python docstrings
  + Use atomic operations for tdb_[increment|get]_seqnum
  + Raw performance torture to beat tdb_increment_seqnum</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663416000">- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to 1.4.8:
  * Support python 3.12</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to 1.4.9
  * Remove remaining, but broken python2 support
  * Spelling fixes
  * python: Safely clear structure members</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to 1.4.10
  * build with Python 3.12 (bso#15513)
  * documentation fixes
  * minor build fixes</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1725969600">- Update to 1.4.12
  * Regression fix for ABI problem
    TDB_1_4_11 vs. TDB_1.4.11
- Update to 1.4.11
  * Add tdbdump -x option to output all data as hex values
  * Add missing overflow check for num_values in pytdb.c
  * Remove Py2 related tests
  * Update times in tdb_transaction_commit per fd, not per name
  * Fix compilation with TDB_TRACE=1
  * Allow tracing of internal tdb</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741780800">- Update to 1.4.13
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 1.4.14
  * let tdbtool return error on failure; (bso#15890).</changelog>
</package>
<package pkgid="ee44e80ead4381136536b96a0c3fed3abff66366c6a9999e3a5406cf23fbc025eaaea891864137a3d634c74fd8f2041d1dd3f6f4a4080a67a2d8c65f6750c93b" name="tevent" arch="src">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to version 0.9.37
  + simplify "poll" and "poll_mt" backends
  + make tevent_abort() reachable for backends
  + add tevent_common_invoke_*_handler() functions
  + add tevent_context_same_loop() function
  + add tevent_context_wrapper_create() infrastructure
  + add tevent_req_profile infrastructure</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="dmulder@suse.com" date="1549454400">- Update to version 0.9.38
  + Deprecate tevent wrapper api again
  + Build fixes
  + The build uses python3 by default:
  + --extra-python would take python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to version 0.9.39
  + py_tevent: add_timer takes float argument
  + C99 build fixes.
  + Fix standalone build of tevent.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 0.10.0
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tevent if
    required from that branch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1574769600">- Update to 0.10.1 ... make build with Python 3.8 working again
  (new waf).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1682337600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
  * add tevent_set_max_debug_level() only and don't
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Add config-sitearch.patch
- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()
  * add tevent_reset_immediate()</changelog>
</package>
<package pkgid="d74c10ac3bcfc635562d87cbd5f7e8fa00d8a3f9851ceaaf7b3bf346b3cf55418763e9a8544f4895487c764cb977cda0d6c4d06d0cabc73ff86cb3aa5c6f0b8e" name="tevent-man" arch="i586">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()</changelog>
</package>
<package pkgid="c331dc7c63a84062385bbb462f770513073812c22c724b1c49ad5a0276c4421ee64fc0967fcc679e2803d781072875673882a429eb696cd467912199f91efd2e" name="tevent-man" arch="src">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to version 0.9.37
  + simplify "poll" and "poll_mt" backends
  + make tevent_abort() reachable for backends
  + add tevent_common_invoke_*_handler() functions
  + add tevent_context_same_loop() function
  + add tevent_context_wrapper_create() infrastructure
  + add tevent_req_profile infrastructure</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="dmulder@suse.com" date="1549454400">- Update to version 0.9.38
  + Deprecate tevent wrapper api again
  + Build fixes
  + The build uses python3 by default:
  + --extra-python would take python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to version 0.9.39
  + py_tevent: add_timer takes float argument
  + C99 build fixes.
  + Fix standalone build of tevent.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 0.10.0
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tevent if
    required from that branch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1574769600">- Update to 0.10.1 ... make build with Python 3.8 working again
  (new waf).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()</changelog>
</package>
<package pkgid="27de7e8f323ff8d75bce02ccc46cf3851ad33aac9ea5f0c08e730927228f72e918f0b0441571ac7a8c8e601086a5ba214b9d5dff2d0763937c2458fa6ebc3489" name="tevent-man" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="22.10"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1643803200">- Fix build on 15.3 (for the heimdal addc build), by bundling cmocka.</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1663848000">- Update to version 0.13.0
  + tevent: add tevent_cached_getpid() helper
- Update to version 0.12.0
  + tevent: Add tevent queue tracing support
  + tevent: Use internally an empty trigger function for
    blocker requests</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1679054400">- Update to version 0.14.1
  * Build fix for GNU/Hurd
  * Build fix for Solaris, after removal of ports backend (bso#15298)
- Changes from version 0.14.0
  * Support python 3.12
  * Remove solaris port backend
  * Make tevent_find_ops_byname() available for callers
  * Allow the "standard" backend to be overloaded
  * Add interface for request/subrequest call depth tracking</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1695729600">-  Update to version 0.15.0
  * remove py2 ifdefs
  * python: Safely clear structure members
  * the tevent_thread_call_depth API is updated
    in order to allow better tracing.
    pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default.
  * Spelling fixes
  * Make use of epoll_create1() for epoll backend
  * Optimize overhead in the epoll backend</changelog>
  <changelog author="Jun Wang &lt;jgwang@suse.com&gt;" date="1705924800">- Update to version 0.16.0
  * the epoll backend is no longer limited to 2 event handlers
    per low level fd.
  * finally add support for TEVENT_FD_ERROR</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1715860800">- Update to version 0.16.1
  * build with Python 3.12 (bso#15513)
  * documentation fixes</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1741694400">- Update to version 0.16.2
  * Documentation fixes
  * Add LGPLv3 LICENSE file</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1760616000">- Update to 0.17.1
  * Fix 1649525 Use of 32-bit time_t
  * Fix Coverity ID 1649524 Dereference before null check
  * Fix Coverity ID 1649526 Dereference before null check
- Update to 0.17.0
  * add tevent_context_set_wait_timeout()</changelog>
</package>
</otherdata>