<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="68">
<package pkgid="e68ffb3478a609136b4462451f0381748924a6f70b9ba31713c6080c7399c0700f5fd4f26b354b29bd854a10f76aefd6863af9bba1aedda57e41cdad53ac143f" name="automx" arch="noarch">
  <version epoch="0" ver="0.10.2" rel="28.71"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- allow build for RH-style distributions</changelog>
</package>
<package pkgid="7cb2564f23598502b19abea31b0b4bb3f1d677c0a2177656859fd837134a31d1c83299a6e74a480068a8febf48d55f34618116ab5910fd2ff3c7e82b5c015c02" name="automx" arch="src">
  <version epoch="0" ver="0.10.2" rel="28.71"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- allow build for RH-style distributions</changelog>
</package>
<package pkgid="cde75faba243cf0d89b311669a62a71f75a1135420d0be45f908f625af7caef6b36314bcd589618fbba41d5f5aeea7b236c40079049640c66644be763808c46f" name="automx" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="1.57"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- update to version 1.1.1
- extended spec file for RH distributions
- removed obsolete automx-test-moz-fallback.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561723200">- update to version 1.1.2
- added patch to include git HEAD fixes (automx-1.1.3pre.patch)
- removed obsolete (upstreamed) patch (automx-ox.patch)
- require WSGI for Python 3</changelog>
</package>
<package pkgid="2903b897602c9b3185c247b3df055f3b4fd032cc6c69a45081cf72d8dff44275c312aead442fbae59edd51c255b891fb56bafef5fe76f4856e34d0688bda31bb" name="automx" arch="src">
  <version epoch="0" ver="1.1.2" rel="1.57"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- update to version 1.1.1
- extended spec file for RH distributions
- removed obsolete automx-test-moz-fallback.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561723200">- update to version 1.1.2
- added patch to include git HEAD fixes (automx-1.1.3pre.patch)
- removed obsolete (upstreamed) patch (automx-ox.patch)
- require WSGI for Python 3</changelog>
</package>
<package pkgid="16362b766afb412537a0102e8208e21edf2f717873c21b65ddd316c7d1fd03457283e70f92dae2e2021cdc004f655101157e324191fbef934199a4b2e11bd630" name="automx-web" arch="noarch">
  <version epoch="0" ver="0.10.2" rel="28.71"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- allow build for RH-style distributions</changelog>
</package>
<package pkgid="25c00680789e21c2a62c3480871b1691695accd7bc8a9ec63bebd3a21a979f2977be524f95a44e09eb9744e7f0d25a48464454c333596489f7574348e1032d2f" name="automx-web" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="1.57"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- update to version 1.1.1
- extended spec file for RH distributions
- removed obsolete automx-test-moz-fallback.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561723200">- update to version 1.1.2
- added patch to include git HEAD fixes (automx-1.1.3pre.patch)
- removed obsolete (upstreamed) patch (automx-ox.patch)
- require WSGI for Python 3</changelog>
</package>
<package pkgid="3954c0dba1870df1e27e16701a51937c48068605941452c9dccd19d5380e9dfe49b9c3e8186149b4e642e4eda20f8523fa48b79f74634252840d6b6fa170c9df" name="automx2" arch="noarch">
  <version epoch="0" ver="2019.0" rel="8.9"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880000">- initial automx2 package (version 2019.0)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880001">- added systemd unit</changelog>
</package>
<package pkgid="8a07c668b3beb455d603e5bb0dd23208d06db79dbcead5d9859ed77e86d83d41a1bc698fb6a8e33e047d45a8b8008f568aeaa34f3135c710ec696d630a4bb5f7" name="automx2" arch="src">
  <version epoch="0" ver="2019.0" rel="8.9"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880000">- initial automx2 package (version 2019.0)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880001">- added systemd unit</changelog>
</package>
<package pkgid="209f471f384f235871749ba9b32b5feb381d66d8afedb990ba1ed36fbf73976cd16b8ec36be8a7331906b07a374d2e917d13e8802c48537838f2c9ca84bf6d02" name="automx2-apache2" arch="noarch">
  <version epoch="0" ver="2019.0" rel="8.9"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880000">- initial automx2 package (version 2019.0)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880001">- added systemd unit</changelog>
</package>
<package pkgid="57efa6e2ff0fc5fda35a1dadf0c2cd9282c73c1b7c3d9373ee95fb4d8276313fed5edabdabb2d8fd8a0e71cbb0cc1b1aa0838c6154270abf7633792a2c2bcea9" name="automx2-nginx" arch="noarch">
  <version epoch="0" ver="2019.0" rel="8.9"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880000">- initial automx2 package (version 2019.0)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577880001">- added systemd unit</changelog>
</package>
<package pkgid="73c43c65e568071cfb585aee8c3cbd4e36cc39345680c5defc9d38820e3575e19256a4890425ef46811b13b5f81523a8bd29733832122b0ace627507b601748c" name="getdns" arch="src">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="wr@rosenauer.org" date="1474113600">- initial package</changelog>
  <changelog author="wr@rosenauer.org" date="1501761600">- update to version 1.1.2
  * this release introduces a single new feature: the ability to
    register a callback function that will fire when certain
    subsystems have a log message of a certain severity
  1.1.1:
  * bugfix release
  1.1.0:
  * This version comes with the DNS Privacy stub resolver Stubby.
    Stubby encrypts DNS queries sent from a client machine
    (desktop or laptop) to a DNS Privacy resolver increasing end user
    privacy.
    https://getdnsapi.net/blog/dns-privacy-daemon-stubby/
    NOTE: stubby is not included in this package at this moment!
  1.0.0:
  * This release implements the "December 2015" specification of
    the API. With the exception of namespaces (i.e. mDNS), everything
    in the API specification is implemented in this release
- added stub-fixes.diff to fix a crash
  https://github.com/getdnsapi/getdns/pull/321</changelog>
  <changelog author="wr@rosenauer.org" date="1507377600">- update to version 1.2.0
  * Built-in DNSSEC trust-anchor management:
    Zero configuration DNSSEC
  * Better TLS upstream failure management, more resilient to transient
    connectivity loss and laptop "sleeps" etc.
  * An updated version of Stubby (0.1.3) with YAML configuration files.
    (not shipped in the package)
- removed obsolete stub-fixes.diff</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="e0968270987ac5b0d3d1809cb100af55346a4c3e7346695524d5bb95e2f48a7fcf2d11ad3a438e5a207494fd0768e1f76f84395864e339bb6c4f602d53812043" name="getdns-devel" arch="i586">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="893b1b0eecd96313813e41f043ad1789677b4d1416d456ea1894e18c1f8b3601860a83a5da59e8a766748ba7fe9e29a3ded1cfea7e90f0361cd3a7f8104339f2" name="getdns-devel" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="ab8bf9854a56ee9c75b83e92b6a4cf36c3905cb83c13d8632b3e344a5117ce1b15d55dcf8d906c929daf06a5e0039f7dd7d046d41928c48c842d6c4f226f4bb0" name="getdns-utils" arch="i586">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="fcf93cc154bab118049601178094b74292ad7412be5c9e7321d32b9d32f760cf6961011bff6a1f49971c201c606988feda03520244106132c344d88f6ce46554" name="getdns-utils" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="1ee91453ac62e0f9340642e9ac381998e6623275200b014da06972fdca3d2e31c3d8a7c8a9f1a3455f9df8ac938830154b4af058a68f8690472ae08c2cc6c6ee" name="hmaccalc" arch="i586">
  <version epoch="0" ver="0.9.14" rel="22.58"/>
  <changelog author="meissner@suse.com" date="1397476800">- new package, generate certifiable HMACs for FIPS usage.
  uses the Mozilla NSS library for cryptography.</changelog>
  <changelog author="coolo@suse.com" date="1399464000">- remove prelink buildrequire - completely unneeded and unnecessarily
  increases core ring</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.9.14
  * No changelog available</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1565784000">- hmac signatures were split from NSS core libs for SLE packaging
  compatibility but recommended and therefore not installed by
  the build process; now a build requirement (boo#1145414)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="92231324d0ef423d5b1e9358223dd6bd684aa8336e930c82f9eb8447116317b08a0daa8e790803e8c4215cfe66443747d6db346fb4f7b1a7c269a734f42473bf" name="hmaccalc" arch="src">
  <version epoch="0" ver="0.9.14" rel="22.58"/>
  <changelog author="meissner@suse.com" date="1397476800">- new package, generate certifiable HMACs for FIPS usage.
  uses the Mozilla NSS library for cryptography.</changelog>
  <changelog author="coolo@suse.com" date="1399464000">- remove prelink buildrequire - completely unneeded and unnecessarily
  increases core ring</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.9.14
  * No changelog available</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1565784000">- hmac signatures were split from NSS core libs for SLE packaging
  compatibility but recommended and therefore not installed by
  the build process; now a build requirement (boo#1145414)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="3bb218aafdfe05fcfe76e6f6f95c6dad786708af8a8e2e24692ac57188b183a58512173920451317167958f13630b2341a8179257cf5e3c98063b539fb975805" name="hmaccalc" arch="x86_64">
  <version epoch="0" ver="0.9.14" rel="22.58"/>
  <changelog author="meissner@suse.com" date="1397476800">- new package, generate certifiable HMACs for FIPS usage.
  uses the Mozilla NSS library for cryptography.</changelog>
  <changelog author="coolo@suse.com" date="1399464000">- remove prelink buildrequire - completely unneeded and unnecessarily
  increases core ring</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.9.14
  * No changelog available</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1565784000">- hmac signatures were split from NSS core libs for SLE packaging
  compatibility but recommended and therefore not installed by
  the build process; now a build requirement (boo#1145414)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="130995f72e4cee8351c9430240ce2671cac3a93b17e086a72e72893c09b1476ab7ff7b703e2d7900084e867440d4f99fcd05faf24cb70cc1efccf1e99f5da6ca" name="libfprint" arch="src">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1544875200">- Update to version 0.99.0:
  + Library:
  - All the internal API for device driver writers is now covered
    by the documentation and has been enhanced to make it easier
    to write drivers.
  - Update internal NBIS fingerprint data processing library to
    one that's nearly 10 years newer.
  - Re-add accessor for minutia coordinates which was used in the
    very old fprint_demo program, but also by our new GTK+ test
    program (see below).
  - Fix a crash when too many minutiae were detected in a
    capture.
  + Drivers: Support more devices in the Elan driver, stability
    improvements.
  + Tools: Add a test GTK+ application that will eventually be used
    for testing drivers without modifying the OS installed version.
    Note that this application currently requires manually changing
    permissions of USB devices, this will be fixed when the
    infrastructure exists to access those devices without
    additional permissions, as a normal user.
- Changes from version 0.8.2:
  + Drivers:
  - Add USB ID for TNP Nano USB Fingerprint Reader.
  - Fix UPEKTS enrollment never finishing on some devices.
  + Library:
  - Fix fp_get_pollfds() retval type, a small ABI change
  - Downgrade fatal errors to run-time warnings, as a number of
    drivers used to throw silent errors and we made them fatal.
    Those will now be visible warnings, hopefully helping with
    fixing them.
- Changes from version 0.8.1:
  + Brown paperbag release to install the udev rules file in the
    correct directory if the udev pkg-config file doesn't have a
    trailing slash.
- Changes from version 0.8.0:
  + Port to meson as the build system.
  + Port documentation to gtk-doc.
  + Drivers:
  - Add Elan driver
  - Increase threshold to detect encryption on URU4000 devices.
  - Remove already replaced UPEKE2 driver.
  - Fix possible crash caused by vfs5011 when no lines were
    captured.
  + Library:
  - Fix a number of memory and file descriptor leaks and
    warnings.
  - Make NSS (and URU4000) driver optional.
  - Fix assembling of frames for non-reverse and non reverse
    stripes.
  - Split internal private header to clarify drivers API.
  - Simplify logging system, now all the builds can be used to
    output debug information.
  - Mark fp_dscv_print functions as deprecated.
  + Udev rules: Add some unsupported devices to the whitelist.
- Changes from version 0.7.0:
  + Drivers:
  - Add VFS0050 driver.
  - Fix possible crash in AES3500 and AES4000.
  - Fix broken enrollment in VFS101.
  - Better verification with small sensor scanners.
  - Plenty of fixes in VFS5011.
  - Fix memory corruption in AES1610.
  - Improve calibration settings for AES1610.
  - Improve image assembling in upeksonly driver.
  - Autodetect whether image is encrypted in uru4k.
  + Library:
  - NBIS: Remove false minutia at the edge of partial image.
  - Introduce routines to assemble image from lines (used in
    VFS5011 and upeksonly).
  - Fix a bug that can cause driver state machine to enter into
    endless loop.
  + Udev rules: Add driver name to the USB properties.
  + Plenty of build fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros
  following upstreams port.
- Drop automake and libtool BuildRequires, no longer needed.
- Run spec-cleaner, modernize spec, use modern macros.
- Drop libfprint-upeke2_6stage.diff and
  libfprint-install_examples.patch: No longer needed, nor applies
  due to upstream changes.
- Drop _service file, upstream moved to gitlab, and have unique
  download urls now, so service file no longer usefull.
- Drop examples subpackage and obsolete it, follow fedoras
  packaging lead here.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1575028800">- update to 1.0:
  * Library:
  * Add guards to the public API and require GLib 2.50
  * Deprecate print storage API
  * Better documentation for fp_discover_devs()
  * Remove unused internal fpi_timeout_cancel_for_dev()
  * Remove state from fp_img_driver activate handler
  * Bug fixes related to restarting a failed verification immediately
  * Drivers:
  * The Elan driver received a lot of bug fixes including a fix for a hang when verifying prints with fprintd, quirks for some devices, a memory leak fix and support for 04f3:0c42
  * Fix a probable crash in all the AES drivers
  * Add support for Lenovo Preferred Pro Keyboard (KUF1256) to vfs5011
  * Prevent hang during enroll process in etes603 driver
  * Fix possible integer overflow in uru4000
  * Work-around SELinux AVC warnings when uru4000 driver starts
  * Remove long-unmaintained and broken fdu2000 driver
  * Tools/Examples:
  * Fix examples not working due to an overly strict check
  * Fix crash in GTK demo when there's no supported devices
  * Disable GTK demo until we have a USB Flatpak portal
  * Remove sleep() in enroll example which caused a crash in some drivers
  * Add a simple storage implementation example</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1584273600">- Update version to 1.90.1
  * Library:
  * Add early report mechanism for verify and identify (API CHANGE!)
  * Add support to run tests in gdb/valgrind
  * Allow testing on all architectures
  * Avoid image device AWAIT_FINGER_ON to deactivate state transitions
  * Fix verify/identify error propagation to library user
  * Correctly read image device information from class data
  * Continue enroll after an image driver reported a retry error
  * Change external API to allow reporting match results early
  * A lot of new unit tests and integration tests have been added
  * Drivers API:
  * Added API for early report of matching results or retry errors
  * Verify and identification completion functions have been simplified
  * Support variadic arguments in error functions
  * Various re-definitions of ownership handling
  * Add convenience API to change state after a timeout
  * Add unit tests for all the drivers API
  * Drivers:
  * elan: Ensure correct deactivation of device
  * uru4000: Fix IRQ handler registration and internal state handling
  * uru4000: Fix control transfer request type
  * synaptics:
    Ensure errors are only reported after finger removal
    Use early report mechanism
- Enable documents build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1588248000">- gobject-introspection-devel added to fix TW build error</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1601208000">- update to 1.90.3:
  * New goodixmoc driver supporting Goodix USB devices: 27C6:5840 27C6:6496 27C6:60A2
  * Newly added support for Synaptics device: 06CB:00E9 06CB:00DF
  * Fixed an issue with Synaptics devices sometimes not working at boot
  * Fix issue with aes3k driver (#306)
  * A patch for nbis required for some sensors was accidentally dropped in an earlier release
  Users of these sensors/drivers need to re-enroll</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1610020800">- Update to version 1.90.6
  * Object reference management fixes for FpPrint and identify
  * Fixed issues that caused problem on non-x86 machines (#236)
  * Fix building with older GLib versions
  * synaptics: Support PID 00e7
  * goodix: Fix issue with long USB packages
- Update to version 1.90.5
  * Remove USB hub from udev autosupend rules
  * synaptics: Add PID 0x00c9 which is used in some HP laptops
- Update to version 1.90.4
  * Work around GUsb cancellation issue
  * Redefine internal image device state machine for more robustness
  * Add public finger-status reporting to FpDevice
  * Rework device removal API to be convenient (#330)
  * Enable powersave for unsupported USB devices
  * Improvements to examples
  * synaptics: Support identify operation
  * synaptics: Fix possible crash when the interrupt transfer is
    resubmitted
  * synaptics: Add support for PIDs 0x00f9, 0x00fc and 0x00c2
  * elan: Add PID 0x0c4d to supported device list
  * aes3k: Fix driver and add CI test (#306)
  * uru4000: Fix reference counting of image transfer
  * vfs301: Fix driver and add CI test (#320)</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1610625600">- Update version to 1.90.7
  * vfs5011: Fix possible use-after-free
  * goodixmoc: Add two new PIDs (0x63AC, 0x639C)
  * goodixmoc: Support finger status API
  * synaptics: Only identify within provided prints
  * synaptics: Reject devices with old firmware during probe</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1628164800">- Update version to 1.92.1
  * Highlights:
    + elanmoc: New driver for ELAN match-on-chip devices
    + egis0570: New driver for some Egis Technology devices
    + synaptics: Fix empty identify causing enroll issues
    + elan: Support more PIDs
    + misc: Architecture related bugfixes
- Update version to 1.92.0
  * Highlights:
    + Support for SPI devices added together with the elanspi driver
    + Generate hwdb for autosuspend (which is now pulled by systemd)
    + An API was added to clear the device storage.
    + Note: Devices may not implement the "list" API anymore.
    + Device features can now be queried using a common API
  * New drivers:
    + vfs7552
    + nb1010
    + elanspi
  * For additional changes, see
    https://gitlab.freedesktop.org/libfprint/libfprint/-/releases#v1.92.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628942400">- Update descriptions, replace historic goals.</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1637064000">- Update to version 1.94.2
  * Highlights:
    + goodixmoc: Fix protocol error with certain username lengths
    + elanmoc: New PID 0x0c7d
    + goodixmoc: New PID 0x63cc
- Changes from version 1.94.1
  * Highlights:
    + Ship a simple script to create new CI tests using tshark
    + Added CI tests for elan, uru4000, aes2501
    + goodixmoc: Remove duplicate checking during enroll and let fprintd handle it
    + uru4000: Fix USB transfer type
    + synaptics: Support for new PIDs
    + goodixmoc: Support for new PIDs
- Changes from version 1.94.0
  * Highlights:
    + Implement suspend/resume handling including USB wakeup configuration.
    + This requires writing the "persist" and "wakeup" sysfs attributes.
    + Add simple temperature module to prevent devices from becoming too hot
    + Add feature for continuous scanning
    + New internal "critical section" API to simplify driver development
    + elan: new PID 0x0c58
    + elanmoc: Fixes for multi-user handling and FW changes
    + virtual-device: Do not time out for SCAN command</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="e2476718ca666c0a6ef8099480b90533fe28e6df92a41907a3860e477c17b3e413017ef614db2398253aaacfa8da104fab0728c010d4d621a1c435248de50d6e" name="libfprint-2-2" arch="i586">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="995fccd46a6c8483717021c918dbf3e0ed238ce7a283b8c6031dd409e6054b65db62eac4a374d9d1abec879beaf0c078de6dc7aa76523771629cfbc4dfdb4508" name="libfprint-2-2" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="0e237002d85d6a084fdd94196f55b35814e809ab5d62cb8fd0fb55d5b8b992869bd9f2896e0347c9388606694443cec9beccef778b639f61dbfe220ea361da0c" name="libfprint-2-2-32bit" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="67fe42271ae9e894055f0c415132e23b4d44e8d1e6f2762e891317b2d904efd002cbdb179cfcf5b497ea88bda9a5c86e83d3c02d7d237f83b5c8962cf83aad20" name="libfprint-2-tod1" arch="i586">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="724f7d26dc1c4e5ef35c107ce217a9c6f7368fc6f5450240f9197ddfe79c858e5498c5ab684240a3229ea19f63d683117012b41dd2b3bbabc348a4be679b7417" name="libfprint-2-tod1" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="2192ae9d25b48edb1a17c4a62c5f43c3a2a1acdc7c7fcadab420cb0d31c652d7cc0eaab0e1b66a1ba08c00777109d0815f64201d1c86cd9f8dadb462cb99acaa" name="libfprint-2-tod1-32bit" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="216de05d0ed9b36a7b0b92197c0045eec1569348bdea8b5d733318928fc6fabca39fdf10c66e15f57a4dca7e7f0b733233d92570298f275baea747ab425650ad" name="libfprint-devel" arch="i586">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="c3edd2ec8df633d50ece3560dbec22936bea7ca146e3c356a6645bc623f979bb3a3b2e87737aadf14fc4b47c8b5688857082128c82094a94e327423d75f4e98a" name="libfprint-devel" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="e6a398f047a7f2ad518894d0ca822e982043e16d5a00cb1dba9b3a0231f6f0d1ffc093d6dd621e336f952754a43c496feff816fc9860f1a2edb90cf34ca3748f" name="libfprint-doc" arch="noarch">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="426d7ae52e48253b3feeaf29a71cf2894d0e4f43fa0f5a819cf8139e27a55d88c1a34b3b291bfe70ece014c79d9ea99f8bc94dd89f479870716869d3ef76d4f2" name="libfprint-tod-devel" arch="i586">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="657e3daa9eb51765953c4fab3346e8b0a03eed7b78b1999c1aca95849bd078edf77906279ade3a6b565b9b9c53f51e4b6829a8e16dd0b137a5dff1cc29988c5f" name="libfprint-tod-devel" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="0df1049acca537133506cdeeecef9b861501d44bb71cccce94c6dd182d9a972d1a1b7322923d4ffa8e5ccc2cbfac5aec388f4fc03bb54c379d5babcf9fc1a890" name="libgetdns10" arch="i586">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="32d11576b31c33beb99e2c42ce6f4ffb8762ca5333044b536adf7824d0db781e8f122ca89360b6694f4c334bebaf8cffcd44949f71acfd487b7f4767ad2ff420" name="libgetdns10" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="9.2"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577600">- Package stubby service
- Added stubby.service file</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1550577601">- Update to version 1.5.1
  o getdns changelog:
  * 2019-01-11: Version 1.5.1
    x PR #414: remove TLS13 ciphers from cipher_list, but
    only when SSL_CTX_set_ciphersuites is available.
    Thanks Bruno Pagani
    x Issue #415: Filter out #defines etc. when creating
    symbols file.  Thanks Zero King
  * 2018-12-21: Version 1.5.0
    x RFE getdnsapi/stubby#121 log re-instantiating TLS
    upstreams (because they reached tls_backoff_time) at
    log level 4 (WARNING)
    x GETDNS_RESPSTATUS_NO_NAME for NODATA answers too
    x ZONEMD rr-type
    x getdns_query queries for addresses when a query name
    without a type is given.
    x RFE #408: Fetching of trust anchors will be retried
    after failure, after a certain backoff time. The time
    can be configured with
    getdns_context_set_trust_anchors_backoff_time().
    x RFE #408: A "dnssec" extension that requires DNSSEC
    verification.  When this extension is set, Indeterminate
    DNSSEC status will not be returned.
    x Issue #410: Unspecified ownership of get_api_information()
    x Fix for DNSSEC bug in finding most specific key when
    trust anchor proves non-existance of one of the labels
    along the authentication chain other than the non-
    existance of a DS record on a zonecut.
    x Enhancement getdnsapi/stubby#56 &amp; getdnsapi/stubby#130:
    Configurable minimum and maximum TLS versions with
    getdns_context_set_tls_min_version() and
    getdns_context_set_tls_max_version() functions and
    tls_min_version and tls_max_version configuration parameters
    for upstreams.
    x Configurable TLS1.3 ciphersuites with the
    getdns_context_set_tls_ciphersuites() function and
    tls_ciphersuites config parameter for upstreams.
    x Bugfix in upstream string configurations: tls_cipher_list and
    tls_curve_list
    x Bugfix finding signer for validating NSEC and NSEC3s, which
    caused trouble with the partly tracing DNSSEC from the root
    up, introduced in 1.4.2.  Thanks Philip Homburg
  o Stubby ChangeLog
  * 2019-01-11: Version 0.2.5
    x RFE getdnsapi/getdns#408: Document trust_anchors_backoff_time
    in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #148: Document tls_ciphersuites, tls_cipher_list, tls_min_version
    and tls_max_version in stubby.yml.example. Thanks Jonathan Underwood
    x RFE #149: Added Google Public DNS to stubby.yml.example.
    Thanks Bruno Pagani
  * 2018-12-21: Version 0.2.4
    x DNSSEC required with dnssec extension in example config
    x Removed the yeti servers from stubby.yml.example
    x Added the Foundation RESTENA servers in stubby.yml.example
    x Bugfix: only start Stubby when network is up
    Thanks Bruno Pagani
- Removed stubby.service file (provided by the tarball now)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555329600">- Update to version 1.5.2
  * experimental support for GnuTLS &gt;= 3.5.0 as replacement for
    OpenSSL
  * support TCP Fast Open when possible
  * bugfix for DNSSEC scheduling
  * includes stubby version 0.2.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1557489600">- Do not overwrite the stubby config file</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1627128000">- Update to version 1.7.0
  * Make TLS Handshake timeout max 4/5th of timeout for the query,
    just like connection setup timeout was, so fallback transport
    have a chance too when TCP connection setup is less well
    detectable (as with TCP_FASTOPEN on MacOS).
  * Issue #466: Memory leak with retrying queries (for examples
    with search paths). Thanks doublez13.
  * Issue #480: Handling of strptime when Cross compiling with CMake.
    A new option to FORCE_COMPAT_STRPTIME (default disabled) will
    (when disabled) make cmake assume the target platform has a POSIX
    compatible strptime when cross-compiling.
  * Setting of the number of milliseconds send data may remain
    unacknowledged by the peer in a TCP connection (when supported
    by the OS) with getdns_context_set_tcp_send_timeout()
    Thanks maciejsszmigiero.
  * Issue #497: Fix typo in CMAKE included files, so Stubby can use
    TLS v1.3 with chipersuites options ON. Thanks har-riz.
  * Basic name compression on server replied messages. Thanks amialkow!
    This alleviates (but might not completely resolve) issues #495 and
    [#320] .
  * Eventloop extensions back to the old names libgetdns_ext_event,
    libgetdns_ext_ev and libgetdns_ext_uv.
  * Compilation warning fixes. Thanks Andreas!
  + Version 1.6.0
  * Issues #457, #458, #461: New symbols with libnettle &gt;= 3.4.
    Thanks hanvinke &amp; kometchtech for testing &amp; reporting.
  * Issue #432: answer_ipv4_address and answer_ipv6_address in reply
    and response dicts.
  * Issue #430: Record and guard UDP max payload size with servers.
  * Issue #407: Run only offline-tests option with:
    src/test/tpkg/run-offline-only.sh (only with git checkouts).
  * Issue #175: Include the packet the stub resolver sent to  the
    upstream the call_reporting dict. Thanks Tom Pusateri
  * Issue #169: Build eventloop support libraries if event libraries
    are available. Thanks Tom Pusateri
- Rewrote spec file
- Removed stubby subpackage, as it is now a seperate package.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1651665600">- Dropped libeconf0 workarround as it doesn't seem to be needed
  anymore.
- Ran spec-cleaner</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662552000">- Update to version 1.7.2:
  * Updated to Stubby 0.4.2 quickfix release
- Changes from version 1.7.1:
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake
    processing (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo
  and expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue #524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue #517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue #512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1671710400">- Update to version 1.7.3:
  * PR #532: Increase CMake required version 3.5 -&gt; 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue #517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1691668800">- pkgconfig(libunbound) started failing
  BuildRequire unbound-devel explicitely</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1712750400">- Fix package build on Tumbleweed and 15.6 stumbling over changed
  documentation install directories.</changelog>
</package>
<package pkgid="47096e79acf9f3d98af65ddc0d1e4effc19f9001949c688e1d0d93f6b08eb1ac17e994854a31726228571903436edc157911ef58d6dcd70feedba54aa0200e8f" name="pcsc-ccid" arch="i586">
  <version epoch="0" ver="1.7.1" rel="171.2"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630324800">- Version 1.4.36
  * Add support of
  - Lenovo Lenovo Smartcard Wired Keyboard II
  - REINER SCT tanJack USB
  - SafeNet eToken 5110+ FIPS
  - SafeNet eToken 5300 C
  - jSolutions s.r.o. Multi SIM card reader 4/8
  * parse: fix check when bNumDataRatesSupported = 0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643284800">- verson 1.5.0
  * Add support of
  - ACS ACR1281U
  - Circle CCR7125 ICC
  - Circle CIR125 ICC
  - Circle CIR125-DOT ICC
  - Circle CIR215 CL with iProduct 0x2100
  - Circle CIR315 DI
  - Circle CIR315 with idProduct: 0x0324
  - Circle CIR315 with idProduct: 0x7004
  - Circle CIR415 CL
  - Circle CIR515 ICC
  - Circle CIR615 CL
  - Circle CIR615 CL &amp; 1S
  - ELYCTIS CL reader
  - Nitrokey Nitrokey 3
  - Thales Shield M4 Reader
  * Add support of simultaneous slot access on multi slots readers
  * Use FeliCa instead of Felica on SONY request
  * Fix SafeNet eToken 5110 SC issue
  * Allow vendor control commands for Omnikey 5427 CK
  * always compute readTimeout to use a value greater than default 3 seconds
  * Check the bSeq value when receiving a CCID frame
  * Avoid logging errors when a reader is removed
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668513600">- version 1.5.1
  * Add support of
  - Access IS ATR220 with idProduct: 0x0184
  - Alcor Link AK9567
  - Alcor Link AK9572
  - BLUTRONICS TAURUS NFC
  - CHERRY SmartTerminal ST-1144
  - CREATOR CRT-603(CZ1) CCR
  - Dexon Tecnologias Digitais LTDA DXToken
  - ESMART Reader ER433x ICC
  - ESMART Reader ER773x Dual &amp; 1S
  - Flight system consulting Incredist
  - Ledger Nano S
  - Ledger Nano S Plus
  - Ledger Nano SP
  - Ledger Nano X
  - SafeNet eToken Fusion
  - Sensyl SSC-NFC Reader
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * configure.ac: add --enable-strict option
  * Fix a problem with AUTO PPS readers and ATR convention inverse cards
  * examples/scardcontrol:
  - add support of 6A xx error codes
  - check WinSCard error early
  - parse wLcdLayout &amp; bEntryValidationCondition
  * macOS: log non sensitive strings as "%{public}s"
  * Some other minor improvements</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1675339200">- version 1.5.2
  * Add support of
  - KAPELSE KAP-LINK
  - LDU LANDI
  - Sensyl SSC-HV Reader
  - TOKEN2 MFA NFC Reader
  - TOKEN2 Molto2
  - Thales RF Reader
  * Alcor Micro AU9560: Remove high speeds since they are not
    supported
  * Hack for AlcorMicro AU9560 and Acos-ID card
  * configure.ac: disable the use of --disable-usbdropdir</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1698667200">- version 1.5.4
  * fix a regression introduced in 1.5.3
- version 1.5.3
  * Add support of
  - ACS ACR1552 1S CL Reader
  - ACS ACR1552 CL Reader
  - ACS ACR1581
  - ACS ACR40T ICC Reader
  - ACS ACR40U ICC Reader
  - ACS WalletMate 1S CL Reader
  - Aktiv Rutoken SCR 3101 NFC Reader
  - CIRIGHT ONE PASS U2F
  - Dexon Tecnologias Digitais LTDA eSmartDX
  - Excelsecu Card reader
  - GHI NC001
  - Identiv uTrust Token Flex
  - SpringCard M519 with idProduct: 0x6212
  - SpringCard M519 with idProduct: 0x621A
  - WCMi SD5931
  * parse: create output.bin file
  * udev: Disable USB-persist for CCID devices
  * configure: fail if flex is not found
  * Some other minor improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1700136000">- Fix build dependency - require zlib-devel instead of zlib</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1709208000">- Update to version 1.5.5
  * Add support of
  - Alpha-Project ANGARA Token
  - Broadcom Corp 58200 (idProduct: 0x5864)
  - Broadcom Corp 58200 (idProduct: 0x5865)
  - Imprivata USB CCID
  - KAPELSE eS-KAP-Ad
  - Kapelse inSide
  - KAPELSE KAP-Care
  - KAPELSE KAP-eCV
  - KAPELSE KAP-GO
  - KAPELSE KAP-LINK2
  - Kapelse KAP-Move
  - Kapelse Ti-Kap
  - rf IDEAS USB CCID
  - SIMHUB pcsc reader
  * support Kapelse readers on macOS (composite as multislot)
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1717588800">- Version 1.6.0
  - uses meson build system now
  - Add support of
  - Aladdin R.D. JCR SecurBio
  - AvidCard CAC Smart Card Reader
  - FujitsuTechnologySolutions GmbH Dual Smartcard Reader D321
  - Ledger Stax
  - NXP Pegoda 3
  - authenton #1- CTAP2.1
  - provide files for meson build tool (replaces autoconf/automake)
  - Add possibility to set/get NAD on T=1 for MEP
  - multi-slots readers
  - Better handling of reader removal
  - Use CLOCK_MONOTONIC for timeouts
  - Some other minor improvements</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1737806400">- Version 1.6.1
  * fix 'parse' build issues on some systems (pthread &amp; strlcpy)
  * Some other minor improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1777032000">- update to 1.7.1:
  - Add support of
  - ACS APG8201-B2
  - BUDGET E-ID BUD001
  - CHERRY Smart Board 1150
  - CryptnoxCR CryptnoxCR
  - Diebold Nixdorf PN7362au CCID
  - FT BioPass FIDO2 Pro
  - Nitrokey Nitrokey Passkey
  - Add SCARD_CTL_CODE(3601): USB path of the reader
  - Some other minor improvements
  - Add support of
  - GIGA-TMS NFC CCID Reader
  - Identiv Identiv SmartOS Reader
  - SEC1210URT, single slot variant of SEC1210 serial
  - TOKEN2 FIDO2 Security Key(0013),PIN+ Mini with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0014),PIN+ Mini with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0015),PIN+ Mini with PGP
  - TOKEN2 FIDO2 Security Key(0016),PIN+ Mini with OTP + PGP + FIDO
  - TOKEN2 FIDO2 Security Key(0023),PIN+ Series with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0024),PIN+ Series with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0025),PIN+ Series with PGP
  - TOKEN2 FIDO2 Security Key(0203),Bio3 Dual with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0204),Bio3 Dual with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0205),Bio3 Dual with PGP
  - TOKEN2 FIDO2 Security Key(0206),Bio3 Dual with OTP + PGP + FIDO
  - TOKEN2 Molto2 (older version)
  - VIX TECHNOLOGY SECURE READER
  - Remove support of
  - SIMHUB pcsc reader
  - Give pcscd group permission to CCID devices in udev rule
  - Avoid a timeout issue with the Thales Fusion NFC reader
  - Provide the option to synchronize the 2 interfaces of a SEC1210
  - Some other minor improvements</changelog>
</package>
<package pkgid="30ca4950dccf639e358a4b87b8aa037ad18adcc5796710cca60857deecde9ab34cfed4384f5f03bbdf074613c4a3fdc167c5441fb28f3fa58981377a1c97aedd" name="pcsc-ccid" arch="src">
  <version epoch="0" ver="1.7.1" rel="171.2"/>
  <changelog author="wr@rosenauer.org" date="1519560000">- Updated to version 1.4.29
  * Add support of
    Access IS NFC Smart Module (With idProduct 0x0164)
    Bit4id Digital-DNA Key
    Bit4id Digital-DNA Key BT
    Bluink Ltd. Bluink CCID
    Chicony HP Skylab USB Smartcard Keyboard
    HID Global OMNIKEY 5023 Smart Card Reader
    HID Global OMNIKEY 5027CK CCID CONFIG IF
    KeyXentic Inc. KX906 Smart Card Reader
    Spyrus Inc Rosetta USB
    Spyrus Inc WorkSafe Pro
    Watchdata USB Key (idProduct: 0x0418)
  * The C3PO LTC31 v2 wrongly declares PIN support
  * Remove extra EGT patch because it has bad side effects</changelog>
  <changelog author="wr@rosenauer.org" date="1537617600">- Updated to version 1.4.30
  * The project moved to https://ccid.apdu.fr/
  * Add support of
    ACS ACR33 ICC Reader
    BIFIT ANGARA
    Broadcom Corp 58200
    Certgate GmbH AirID 2 USB
    DC.Ltd DC4 5CCID READER
    Genesys Logic CCID Card Reader
    Genesys Logic Combo Card Reader
    InfoThink IT-500U Reader
    Spyrus Inc WorkSafe Pro (ProductID 0x3117)
  * Disabled readers
    REINER SCT cyberJack RFID standard
  * Update reader names for
    Fujitsu Keyboard KB100 SCR
    Fujitsu Keyboard KB100 SCR eSIG
    FujitsuTechnologySolutions GmbH Keyboard KB SCR2
    Yubico YubiKey CCID
    Yubico YubiKey FIDO+CCID
    Yubico YubiKey OTP+CCID
    Yubico YubiKey OTP+FIDO+CCID
  * Fix libusb config descriptor leak
  * Fix leaking an allocated bundle in case no matching reader was found</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update URL.</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1565524800">- Updated to version 1.4.31
  * Add support of
    ACS ACR1252 Reader
    Aladdin R.D. JaCartaReader
    Alcor Link AK9563
    AvestUA AvestKey
    Avtor SecureToken (idProduct: 0x0020)
    Bit4id TokenME EVO v2
    Bit4id miniLector AIR EVO
    Bit4id miniLector Blue
    Broadcom Corp 58200 (idProduct: 0x5843)
    Broadcom Corp 58200 (idProduct: 0x5844)
    Broadcom Corp 58200 (idProduct: 0x5845)
    Certgate GmbH ONEKEY ID 2 USB
    HID Global Crescendo Key 0x0028
    HID Global Crescendo Key 0x0029
    HID Global Crescendo Key 0x002B
    HID Global Crescendo Key 0x002D
    Identiv SCR3500 C Contact Reader
    InfoCert WirelessKey
    NXP PN7462AU CCID
    Route1 MobiKEY Fusion3
    SPECINFOSYSTEMS DIAMOND token
  * Some minor improvements for debug</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590321600">- Version 1.4.32
  * Various bugfixes
  * added support for
    CHERRY SECURE BOARD 1.0
    SPECINFOSYSTEMS DIAMOND HSM
    SPECINFOSYSTEMS DIAMOND PLUS token
    SPECINFOSYSTEMS DIAMOND PRO token
    Access IS ATR210
    Access IS ATR220
    Sysking MII136C
    Add support of min &amp; max PIN size for the Cherry KC 1000 SC
    Ledger Nano X support
    SpringCard Puck
    Gemalto RF CR5400
    Purism, SPC Librem Key
    SpringCard SpringCore (idProduct: 0x601A)
    SpringCard E518 (idProduct: 0x611A)
    SpringCard H518 (idProduct: 0x612A)
    SpringCard Puck (dProduct: 0x613A)
    SpringCard SpringCore (idProduct: 0x6012)
    SpringCard E518 (idProduct: 0x6112)
    SpringCard H518 (idProduct: 0x6122)
    AF Care One (idProduct: 0xAFC0)
    AF Care One (idProduct: 0xAFC1)
    AF Care Two (idProduct: 0xAFC2)
    AF Care Two (idProduct: 0xAFC3)
    Doctolib SR
    F-Secure Foundry USB Armory Mk II</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1593259200">- Version 1.4.33
  * added support for
    Genesys Logic CCID Card Reader (idProduct: 0x0771)
    Swissbit Secure USB PU-50n SE/PE
    TOPPAN FORMS CO.,LTD TC63CUT021
  * Update PCSC submodule to get Unicode support
  * Some minor improvements</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Rely on _udevrulesdir as provided by the distros.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611489600">- Version 1.4.34
  * Add support for
    ACS ACR1252IMP Reader
    ACS CryptoMate EVO
    Aktiv Rutoken SCR 3001 Reader
    Avtor KP-375BLE
    Avtor SC Reader KP382
    BIT4ID mLector AIR DI V3
    BIT4ID miniLector AIR NFC v3
    Bit4id Digital-DNA Key (ProductID 0x2354)
    Canokeys Canokey
    DESKO GmbH IDenty chrom
    DESKO GmbH PENTA Scanner
    FT Biopass CCID
    FT Biopass FIDO2
    FT Biopass KB CCID
    FT Biopass KB FIDO CCID
    Feitian BLE CCID Dongle
    Feitian R805
    Feitian vR504 Contactless Reader
    GoTrust Idem Key
    Identiv uTrust 3720 Contactless Reader
    Sunrex HP USB Business Slim Smartcard CCID Keyboard
    sysmocom - s.f.m.c. GmbH sysmoOCTSIM
  * Fail if the requested protocol is not supported by reader
  * Disable USB suspend for the AlcorMicro AU9520 reader
  * Return "no smart card" if we get notified during a transmit
  * Minor improvements reported by Maksim Ivanov
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627214400">- Version 1.4.35
  * Add support of
  - ArkSigner Connect2Sign
  - Circle CCR7115 ICC
  - Circle CCR7315
  - Circle CIR215 CL
  - Circle CIR215 PICC
  - Circle CIR315
  - Circle CIR315 (idProduct: 0x3100)
  - Circle CIR315 CL
  - Circle CIR315 Dual &amp; 1S
  - Circle CIR415 CL &amp; 1S
  - Circle Idaxis SecurePIV
  - DUALi DE-ABCM6 RFRW
  - Feitian R701
  - Generic EMV Smartcard Reader (0x058C:0x9590)
  - INMAX DWR18 HC
  - INMAX DWR18 HPC
  - Identiv Identiv uTrust 4711 F CL + SAM Reader
  - Identiv uTrust 3721 Contactless Reader
  - Infocrypt HWDSSL DEVICE
  - Infocrypt Token++ lite
  - MK Technology KeyPass D1
  - SONY Felica RC-S300/P
  - SONY Felica RC-S300/S
  - SONY Felica RC-S660/U
  - SYNNIX CL-2100R
  - SoloKeys Solo 2
  - Spyrus Inc PocketVault P-3X (idProduct: 0x3203)
  * parse: use "ICCD token" for ICCD tokens
  * Support 4 card slots with Feitian R502 C9
  * ccid_usb: ask for bNumDataRatesSupported data rates
  * Solve a performance issue with T=1 and CCID_CLASS_AUTO_PPS_PROP
  * Fix a possible buffer overflow in T0ProcACK
  * IFDHSetProtocolParameters: set IFSC/IFSD only for TPDU readers
  * CCID serial: Reset buffers on failed read
  * Fix yylex missing symbol
  * Gemalto pinpad: fix incorrect bEntryValidationCondition for
    SecurePINVerify and SecurePINModify
  * Fix bit4id miniLector-EVO pinpad support
  * The Kobil TriBank reader does NOT support extended APDU</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630324800">- Version 1.4.36
  * Add support of
  - Lenovo Lenovo Smartcard Wired Keyboard II
  - REINER SCT tanJack USB
  - SafeNet eToken 5110+ FIPS
  - SafeNet eToken 5300 C
  - jSolutions s.r.o. Multi SIM card reader 4/8
  * parse: fix check when bNumDataRatesSupported = 0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643284800">- verson 1.5.0
  * Add support of
  - ACS ACR1281U
  - Circle CCR7125 ICC
  - Circle CIR125 ICC
  - Circle CIR125-DOT ICC
  - Circle CIR215 CL with iProduct 0x2100
  - Circle CIR315 DI
  - Circle CIR315 with idProduct: 0x0324
  - Circle CIR315 with idProduct: 0x7004
  - Circle CIR415 CL
  - Circle CIR515 ICC
  - Circle CIR615 CL
  - Circle CIR615 CL &amp; 1S
  - ELYCTIS CL reader
  - Nitrokey Nitrokey 3
  - Thales Shield M4 Reader
  * Add support of simultaneous slot access on multi slots readers
  * Use FeliCa instead of Felica on SONY request
  * Fix SafeNet eToken 5110 SC issue
  * Allow vendor control commands for Omnikey 5427 CK
  * always compute readTimeout to use a value greater than default 3 seconds
  * Check the bSeq value when receiving a CCID frame
  * Avoid logging errors when a reader is removed
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668513600">- version 1.5.1
  * Add support of
  - Access IS ATR220 with idProduct: 0x0184
  - Alcor Link AK9567
  - Alcor Link AK9572
  - BLUTRONICS TAURUS NFC
  - CHERRY SmartTerminal ST-1144
  - CREATOR CRT-603(CZ1) CCR
  - Dexon Tecnologias Digitais LTDA DXToken
  - ESMART Reader ER433x ICC
  - ESMART Reader ER773x Dual &amp; 1S
  - Flight system consulting Incredist
  - Ledger Nano S
  - Ledger Nano S Plus
  - Ledger Nano SP
  - Ledger Nano X
  - SafeNet eToken Fusion
  - Sensyl SSC-NFC Reader
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * configure.ac: add --enable-strict option
  * Fix a problem with AUTO PPS readers and ATR convention inverse cards
  * examples/scardcontrol:
  - add support of 6A xx error codes
  - check WinSCard error early
  - parse wLcdLayout &amp; bEntryValidationCondition
  * macOS: log non sensitive strings as "%{public}s"
  * Some other minor improvements</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1675339200">- version 1.5.2
  * Add support of
  - KAPELSE KAP-LINK
  - LDU LANDI
  - Sensyl SSC-HV Reader
  - TOKEN2 MFA NFC Reader
  - TOKEN2 Molto2
  - Thales RF Reader
  * Alcor Micro AU9560: Remove high speeds since they are not
    supported
  * Hack for AlcorMicro AU9560 and Acos-ID card
  * configure.ac: disable the use of --disable-usbdropdir</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1698667200">- version 1.5.4
  * fix a regression introduced in 1.5.3
- version 1.5.3
  * Add support of
  - ACS ACR1552 1S CL Reader
  - ACS ACR1552 CL Reader
  - ACS ACR1581
  - ACS ACR40T ICC Reader
  - ACS ACR40U ICC Reader
  - ACS WalletMate 1S CL Reader
  - Aktiv Rutoken SCR 3101 NFC Reader
  - CIRIGHT ONE PASS U2F
  - Dexon Tecnologias Digitais LTDA eSmartDX
  - Excelsecu Card reader
  - GHI NC001
  - Identiv uTrust Token Flex
  - SpringCard M519 with idProduct: 0x6212
  - SpringCard M519 with idProduct: 0x621A
  - WCMi SD5931
  * parse: create output.bin file
  * udev: Disable USB-persist for CCID devices
  * configure: fail if flex is not found
  * Some other minor improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1700136000">- Fix build dependency - require zlib-devel instead of zlib</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1709208000">- Update to version 1.5.5
  * Add support of
  - Alpha-Project ANGARA Token
  - Broadcom Corp 58200 (idProduct: 0x5864)
  - Broadcom Corp 58200 (idProduct: 0x5865)
  - Imprivata USB CCID
  - KAPELSE eS-KAP-Ad
  - Kapelse inSide
  - KAPELSE KAP-Care
  - KAPELSE KAP-eCV
  - KAPELSE KAP-GO
  - KAPELSE KAP-LINK2
  - Kapelse KAP-Move
  - Kapelse Ti-Kap
  - rf IDEAS USB CCID
  - SIMHUB pcsc reader
  * support Kapelse readers on macOS (composite as multislot)
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1717588800">- Version 1.6.0
  - uses meson build system now
  - Add support of
  - Aladdin R.D. JCR SecurBio
  - AvidCard CAC Smart Card Reader
  - FujitsuTechnologySolutions GmbH Dual Smartcard Reader D321
  - Ledger Stax
  - NXP Pegoda 3
  - authenton #1- CTAP2.1
  - provide files for meson build tool (replaces autoconf/automake)
  - Add possibility to set/get NAD on T=1 for MEP
  - multi-slots readers
  - Better handling of reader removal
  - Use CLOCK_MONOTONIC for timeouts
  - Some other minor improvements</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1737806400">- Version 1.6.1
  * fix 'parse' build issues on some systems (pthread &amp; strlcpy)
  * Some other minor improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1777032000">- update to 1.7.1:
  - Add support of
  - ACS APG8201-B2
  - BUDGET E-ID BUD001
  - CHERRY Smart Board 1150
  - CryptnoxCR CryptnoxCR
  - Diebold Nixdorf PN7362au CCID
  - FT BioPass FIDO2 Pro
  - Nitrokey Nitrokey Passkey
  - Add SCARD_CTL_CODE(3601): USB path of the reader
  - Some other minor improvements
  - Add support of
  - GIGA-TMS NFC CCID Reader
  - Identiv Identiv SmartOS Reader
  - SEC1210URT, single slot variant of SEC1210 serial
  - TOKEN2 FIDO2 Security Key(0013),PIN+ Mini with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0014),PIN+ Mini with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0015),PIN+ Mini with PGP
  - TOKEN2 FIDO2 Security Key(0016),PIN+ Mini with OTP + PGP + FIDO
  - TOKEN2 FIDO2 Security Key(0023),PIN+ Series with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0024),PIN+ Series with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0025),PIN+ Series with PGP
  - TOKEN2 FIDO2 Security Key(0203),Bio3 Dual with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0204),Bio3 Dual with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0205),Bio3 Dual with PGP
  - TOKEN2 FIDO2 Security Key(0206),Bio3 Dual with OTP + PGP + FIDO
  - TOKEN2 Molto2 (older version)
  - VIX TECHNOLOGY SECURE READER
  - Remove support of
  - SIMHUB pcsc reader
  - Give pcscd group permission to CCID devices in udev rule
  - Avoid a timeout issue with the Thales Fusion NFC reader
  - Provide the option to synchronize the 2 interfaces of a SEC1210
  - Some other minor improvements</changelog>
</package>
<package pkgid="24632b7a26b656285026ebed839fb7d44c64c09458246d19f12342345a0d60c74aeede05f072175ecc21585a176a9afb2b10e3296008eb371e8b819f9b333166" name="pcsc-ccid" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="171.2"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630324800">- Version 1.4.36
  * Add support of
  - Lenovo Lenovo Smartcard Wired Keyboard II
  - REINER SCT tanJack USB
  - SafeNet eToken 5110+ FIPS
  - SafeNet eToken 5300 C
  - jSolutions s.r.o. Multi SIM card reader 4/8
  * parse: fix check when bNumDataRatesSupported = 0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1643284800">- verson 1.5.0
  * Add support of
  - ACS ACR1281U
  - Circle CCR7125 ICC
  - Circle CIR125 ICC
  - Circle CIR125-DOT ICC
  - Circle CIR215 CL with iProduct 0x2100
  - Circle CIR315 DI
  - Circle CIR315 with idProduct: 0x0324
  - Circle CIR315 with idProduct: 0x7004
  - Circle CIR415 CL
  - Circle CIR515 ICC
  - Circle CIR615 CL
  - Circle CIR615 CL &amp; 1S
  - ELYCTIS CL reader
  - Nitrokey Nitrokey 3
  - Thales Shield M4 Reader
  * Add support of simultaneous slot access on multi slots readers
  * Use FeliCa instead of Felica on SONY request
  * Fix SafeNet eToken 5110 SC issue
  * Allow vendor control commands for Omnikey 5427 CK
  * always compute readTimeout to use a value greater than default 3 seconds
  * Check the bSeq value when receiving a CCID frame
  * Avoid logging errors when a reader is removed
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1668513600">- version 1.5.1
  * Add support of
  - Access IS ATR220 with idProduct: 0x0184
  - Alcor Link AK9567
  - Alcor Link AK9572
  - BLUTRONICS TAURUS NFC
  - CHERRY SmartTerminal ST-1144
  - CREATOR CRT-603(CZ1) CCR
  - Dexon Tecnologias Digitais LTDA DXToken
  - ESMART Reader ER433x ICC
  - ESMART Reader ER773x Dual &amp; 1S
  - Flight system consulting Incredist
  - Ledger Nano S
  - Ledger Nano S Plus
  - Ledger Nano SP
  - Ledger Nano X
  - SafeNet eToken Fusion
  - Sensyl SSC-NFC Reader
  * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
  * configure.ac: add --enable-strict option
  * Fix a problem with AUTO PPS readers and ATR convention inverse cards
  * examples/scardcontrol:
  - add support of 6A xx error codes
  - check WinSCard error early
  - parse wLcdLayout &amp; bEntryValidationCondition
  * macOS: log non sensitive strings as "%{public}s"
  * Some other minor improvements</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1675339200">- version 1.5.2
  * Add support of
  - KAPELSE KAP-LINK
  - LDU LANDI
  - Sensyl SSC-HV Reader
  - TOKEN2 MFA NFC Reader
  - TOKEN2 Molto2
  - Thales RF Reader
  * Alcor Micro AU9560: Remove high speeds since they are not
    supported
  * Hack for AlcorMicro AU9560 and Acos-ID card
  * configure.ac: disable the use of --disable-usbdropdir</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1698667200">- version 1.5.4
  * fix a regression introduced in 1.5.3
- version 1.5.3
  * Add support of
  - ACS ACR1552 1S CL Reader
  - ACS ACR1552 CL Reader
  - ACS ACR1581
  - ACS ACR40T ICC Reader
  - ACS ACR40U ICC Reader
  - ACS WalletMate 1S CL Reader
  - Aktiv Rutoken SCR 3101 NFC Reader
  - CIRIGHT ONE PASS U2F
  - Dexon Tecnologias Digitais LTDA eSmartDX
  - Excelsecu Card reader
  - GHI NC001
  - Identiv uTrust Token Flex
  - SpringCard M519 with idProduct: 0x6212
  - SpringCard M519 with idProduct: 0x621A
  - WCMi SD5931
  * parse: create output.bin file
  * udev: Disable USB-persist for CCID devices
  * configure: fail if flex is not found
  * Some other minor improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1700136000">- Fix build dependency - require zlib-devel instead of zlib</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1709208000">- Update to version 1.5.5
  * Add support of
  - Alpha-Project ANGARA Token
  - Broadcom Corp 58200 (idProduct: 0x5864)
  - Broadcom Corp 58200 (idProduct: 0x5865)
  - Imprivata USB CCID
  - KAPELSE eS-KAP-Ad
  - Kapelse inSide
  - KAPELSE KAP-Care
  - KAPELSE KAP-eCV
  - KAPELSE KAP-GO
  - KAPELSE KAP-LINK2
  - Kapelse KAP-Move
  - Kapelse Ti-Kap
  - rf IDEAS USB CCID
  - SIMHUB pcsc reader
  * support Kapelse readers on macOS (composite as multislot)
  * Some other minor improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1717588800">- Version 1.6.0
  - uses meson build system now
  - Add support of
  - Aladdin R.D. JCR SecurBio
  - AvidCard CAC Smart Card Reader
  - FujitsuTechnologySolutions GmbH Dual Smartcard Reader D321
  - Ledger Stax
  - NXP Pegoda 3
  - authenton #1- CTAP2.1
  - provide files for meson build tool (replaces autoconf/automake)
  - Add possibility to set/get NAD on T=1 for MEP
  - multi-slots readers
  - Better handling of reader removal
  - Use CLOCK_MONOTONIC for timeouts
  - Some other minor improvements</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1737806400">- Version 1.6.1
  * fix 'parse' build issues on some systems (pthread &amp; strlcpy)
  * Some other minor improvements</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1777032000">- update to 1.7.1:
  - Add support of
  - ACS APG8201-B2
  - BUDGET E-ID BUD001
  - CHERRY Smart Board 1150
  - CryptnoxCR CryptnoxCR
  - Diebold Nixdorf PN7362au CCID
  - FT BioPass FIDO2 Pro
  - Nitrokey Nitrokey Passkey
  - Add SCARD_CTL_CODE(3601): USB path of the reader
  - Some other minor improvements
  - Add support of
  - GIGA-TMS NFC CCID Reader
  - Identiv Identiv SmartOS Reader
  - SEC1210URT, single slot variant of SEC1210 serial
  - TOKEN2 FIDO2 Security Key(0013),PIN+ Mini with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0014),PIN+ Mini with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0015),PIN+ Mini with PGP
  - TOKEN2 FIDO2 Security Key(0016),PIN+ Mini with OTP + PGP + FIDO
  - TOKEN2 FIDO2 Security Key(0023),PIN+ Series with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0024),PIN+ Series with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0025),PIN+ Series with PGP
  - TOKEN2 FIDO2 Security Key(0203),Bio3 Dual with OTP + PGP
  - TOKEN2 FIDO2 Security Key(0204),Bio3 Dual with FIDO + PGP
  - TOKEN2 FIDO2 Security Key(0205),Bio3 Dual with PGP
  - TOKEN2 FIDO2 Security Key(0206),Bio3 Dual with OTP + PGP + FIDO
  - TOKEN2 Molto2 (older version)
  - VIX TECHNOLOGY SECURE READER
  - Remove support of
  - SIMHUB pcsc reader
  - Give pcscd group permission to CCID devices in udev rule
  - Avoid a timeout issue with the Thales Fusion NFC reader
  - Provide the option to synchronize the 2 interfaces of a SEC1210
  - Some other minor improvements</changelog>
</package>
<package pkgid="affbff0cb7a9f9807e9516ad98d1a7a6c0305ec2a2db76a7ead013ab089a36656008a6125490e78dffe730559dc066a7263742ebe0f5f6b7deb43797944f11a4" name="pcsc-cyberjack" arch="i586">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798400">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="a610139bce0f0b42f7d525b7dc063735c3a18d9ecef4963c9d88bd3b25c83499b9d86a24232767f23309cd0330c2ba6a5a25c765377913f2a5f9266bc2d3a1f4" name="pcsc-cyberjack" arch="src">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="wr@rosenauer.org" date="1398772800">- fixed typo in udev rule (bnc#881517)</changelog>
  <changelog author="wr@rosenauer.org" date="1399204800">- fix for changed data structure in PCSC's reader.h
  (data-structure.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1442836800">- update to 3.99.5 Service Pack 08
  * update COPYRIGHT.GPL, COPYRIGHT.LGPL and FSF address
  * Add support for cyberJack secoder TLS, CSYOReader and CBDRReader
  * Update to the Reiner-SCT repository rev cyberJack@1292
  * Add support for CyberJack cv and SoliSYSTEMS
- removed obsolete data-structure.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1458129600">- update to 3.99.5 Service Pack 09
  * Fix USB unplug problems
  * removed cyberjack diag tool</changelog>
  <changelog author="wr@rosenauer.org" date="1488110400">- update to 3.99.5 Service Pack 10
  * Add support for SHUReader and SISReader
  * Update to the Reiner-SCT repository rev cyberJack@1305</changelog>
  <changelog author="wr@rosenauer.org" date="1508068800">- update to 3.99.5 Service Pack 11
  * add support for cyberJack one
  * validated that crash on exit is fixed (boo#908092)</changelog>
  <changelog author="wr@rosenauer.org" date="1531569600">- update to 3.99.5 Service Pack 12
  * Add support for cyberJack one MF
  * man-page removed upstream</changelog>
  <changelog author="thb@documentfoundation.org" date="1531569601">- Add patch to get cyberJack RFID komfort working
  (a58a29c08b1da647e5efe08641abcb0144740b8b.patch)
  https://forum.reiner-sct.com/index.php?/topic/3728-failed_to_transmit_control_command_to_the_terminal</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1547899200">- update to 3.99.5 Service Pack 13
  * Update to the Reiner-SCT repository rev cyberJack@1374
- removed obsolete patches
  * a58a29c08b1da647e5efe08641abcb0144740b8b.patch
  * pcsc-cyberjack-fprintf.patch
- add new devices to udev rules (2000, 0551, 2002)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556798400">- removed unused code which was still built
  (no-checksuite.patch, no-libdialog.patch, and manual removal from
  source archive)
- removed obsolete patch
  ctapi-cyberjack-check.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798401">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="24db3dba4ad7147ddef5747e75008c28e31ce85d9826dd3616c55a9cec6ce7b6cb85f40cf8ba05d6076adb7d781d4889490de4f3a0f7c35b246355aaadc7a171" name="pcsc-cyberjack" arch="x86_64">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798400">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="5936d91257d7c239eb9e58922eb26eac6862b6ce56dcc91d7b9d5598a108f9f89386e34cda19acf0e5db82cd8a5609502ede518e310a64cc76f7c0484a3f1c02" name="pcsc-cyberjack-debuginfo" arch="i586">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798400">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="2e13308b394b9b447349c591d89e791bb7554e065da3e96d0dc2cd9c2a6ff6a6fc7944f2285eb530e5bf0b27a112787ac200e49197c31d7a153b8de99910f311" name="pcsc-cyberjack-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798400">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="74549b4be6d3c319ecb7ea5d6e2cb3b848b875b531c22d1315b3dd2bde4f6c4da771df8ea44edc775422d6053f12803121cbeee8ccd7d5a4aa0ac7d9f4ebd5f9" name="pcsc-cyberjack-debugsource" arch="i586">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798400">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="4d9bcd6b0d13fbcec504cc3e8865e0bb5ca6e70bdbe0b3d820f101d3963b286fb849d279c2f777ab1df8f7e6495f2372b62c2c3c73df72b0dacd72bb5776e4a4" name="pcsc-cyberjack-debugsource" arch="x86_64">
  <version epoch="0" ver="3.99.5final.SP17" rel="175.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556798400">- Remove redundant %clean section, replace old $RPM_* shell vars.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1591531200">- Add patch to enable compile with gcc10
  * pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1606910400">- make sure that the rule files are not marked as executable</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1610020800">- update to 3.99.5 Service Pack 14
- use https://en.opensuse.org/SourceUrls
- remove check for obsolete SUSE versions</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1611748800">- removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch</changelog>
  <changelog author="chris@computersalat.de" date="1655812800">- update to 3.99.5 Service Pack 15
  * add REINER SCT cyberJack wave HUN
  * add REINER SCT cyberJack RFID komfort FON
- update supplements device list</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724760000">- update to 3.99.5 Service Pack 16
  * add REINER SCT cyberJack RFID standard EN</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1773489600">- update to 3.99.5 Service Pack 17
  * Update to the Reiner-SCT repository cyberJack
    DriverPackage master f3674bb325fa3580aff1ce6e200e60a36ae38038
- update supplements device list
- update the 40-cyberjack.rules</changelog>
</package>
<package pkgid="1058f65d2a491d977135aa81606ca65b07fa1f158338da5f5abcf83c0dabdad12b90c4f480dada978f4516af22630bbf99dbd6cc56fb5280ca1ebcbd24035b1e" name="pdns" arch="src">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- Fix build for SLE12
- Remove dependency on protobuf since pdns now includes protozero
- Add bundled provides to spec file</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649764800">- Update to 4.6.2
  * New Features
  - API: fetch individual rrsets
    References: pull request 11409
  - LUA: add ifurlextup function
    References: pull request 11408
  * Improvements
  - LMDB backports:
    + each LMDB database now gets a UUID
    + lmdbbackend can now (optionally: lmdb-random-ids) use random IDs instead of incremental IDs for objects
    + LMDB map size is now configurable (lmdb-map-size)
    + one uninitialised memory issue that was fixed
    References: pull request 11406
  * Bug Fixes
  - fix proxy protocol query statistics and add more detailed latency metrics
    References: pull request 11407</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1657713600">- Update to 4.6.3
  * fix deleteDomain() in lmdb backend (Kees Monshouwer) PR#11765
  * RFC2136: match autosplit TXT correctly PR#11746</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1660132800">- Use systemd_ordering macro so we can use pdns inside containers</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1666267200">- Update to 4.7.0
  * LUA records, when queried over TCP, can now re-use a Lua state,
    giving a serious performance boost.
  * lmdbbackend databases now get a UUID assigned, making it easy for
    external software to spot if a database was completely replaced
  * lmdbbackend databases now optionally use random IDs for objects
  * a new LUA function called ifurlextup, and improvements in other LUA
    record functions
  * autoprimary management in pdnsutil and the HTTP API
  * in beta, a key roller daemon, currently not packaged
  * pdnsutil check-zone, skip metadata check for backends without getAllDomainMetadata() PR#12085
  * Fix compilation of the event ports multiplexer PR#12069</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1667217600">- Update to 4.7.1
  * include auth 4.7 schema upgrade files in tarballs and packages PR#12110
  * catalog zones: avoid bulk zone reset while migrating to a catalog PR#12124
  * catalog zones: stop wasting options update queries PR#12124</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1667304000">- Update to 4.7.2
  * Un-reverse xfr freshness check PR#12130</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1670587200">- Update to 4.7.3
  * Improvements
  - API: slightly clearer message when a backend cannot create domains PR#12296
  * Bug Fixes
  - lmdb: make outgoing notifications work PR#12299
  - lmdb: implement alsoNotifies PR#12266
  - API: do not create SOA and NS records for consumer zones PR#12291
  - API: fix newly created zone not rectified PR#12273
  - fix invalid catalog zone sql query for gpgsqlbackend PR#12272
  - fix pdns_control list-zones PR#12181</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="ce2997282f44b54f7e34c67a6f511313064568902aa51857bbb1df881a52a52f7432474fa9958841a7d1ee33f97e8b270d88755893499ed7e13569afbf82ede4" name="pdns" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="40a390e2de4139fa6ec3d6ab3bbbc1b21500115d2b6e5f7a81b9464623de109e644959e25ed2d24bed8d3e583b4ad8019ab9020d33b141de58882bd24a5f860c" name="pdns-backend-geoip" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="106a74e0cd209d212e225f5e9218c3d360700bb2d6fed3b74ff502a5ac712504295462017721eb9f45b3787abe6cd58dd3bd496a706058fd9d672e2e0dfd7e9e" name="pdns-backend-godbc" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="dcbdf67397729ae5a7b83b53d6ec78b6d5de2b9fed16053bae1be757e863902812634e206fae81bf93b01fcf7737e6f84a6bb68dddf1423e9a8faa4edbf2b5ee" name="pdns-backend-ldap" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="78ed567e555b0fff7926ec4612854dac117b8de512257b2caf33bc235d1e95598035992113f369e2997e362898dc9f5ea5de65ba9e26abe8ac0888799c7edf59" name="pdns-backend-lmdb" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="e971e1e43b420ff9e14ddf1d0da724c18aa25f4bd9c96912cce44e6b1c64c78da1ab74338c31830737068c9ea345f62d41a7fdcba8d7269a3c19ab2e8286c3b6" name="pdns-backend-lua" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="ba51f692a954a67a27c0b7ac28d62cbbe6a68d62950d4f0f903c9653962dbfdd7314c9a8e9abace63c5f4828700f3e600e0f0c11b479b337398a3952e3cd0f8e" name="pdns-backend-mysql" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="170aa306a0e1fbdeaf816f88de8f56abeb979be204452b2da30745812d21b2fa1bbbc8727d6f00f41d6711307a01fb2d267edb7c817b10417d78a4d37b0b8089" name="pdns-backend-postgresql" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="7603bba03f9922c9ac9808aba36cb1ae1bbb7e71b52cca689f80cb773f15f388c68dc8ddfaab7ce15361deac70f2c7cbce18cb4ad9f62ad823ffc38be260fa8e" name="pdns-backend-remote" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="2f32f610c63e708ef46bf50d294f688d2a5bbef6252e741112370fc66e455dc6b65498f92910ed03b053bd86aa73393703dbabcada649166e15f359e8757fc6f" name="pdns-backend-sqlite3" arch="x86_64">
  <version epoch="0" ver="4.9.8" rel="231.4"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679313600">- Add 12453.patch: Fix build using gcc 13.
- Refresh pdns.keyring.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 1.8.0" date="1685620800">- Update to 4.8.0
  * New features
  - ixfrdist: add a per domain max-soa-refresh option
  Improvements
  - lmdb: handle lack of support for RRset comments better
  - DNSRecord: Ensure that the content can be read or replaced, not edited
- enabled support for DNS-over-TLS or DoT
- 12453.patch: removed
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
  If you are using LMDB backend, see
  https://doc.powerdns.com/authoritative/upgrading.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 4.8.3:
  * New Feature: add default-catalog-zone setting.
  + Improvements: smysql: stop explicitly setting
    MYSQL_OPT_RECONNECT to .
  + Bug Fix: ixfrdist: set AA=1 on SOA responses.
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707739200">- Update to 4.8.4:
  * extend the systemd startup timeout during lmdb schema migrations
  * ixfrdist: Fix the validation of ‘max-soa-refresh’
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1711454400">- Update to version 4.9.0
  * New Features
    + LUA dblookup: switch qtype argument to int
    + LUA: support returning empty set in filterForward #13879
    + ixfrdist: add support for outgoing notify
    + LUA records, pickchashed function
    + Add Lua function to pick records via name hash
    + LUA records: add dblookup function
    + add a configurable delay for notifications
    + Add and document a localwho() function for LUA records
    + forward EDNS Client Subnet option during ALIAS processing
    + add loglevel-show setting to get logs formatted like
    structured logs
    + ixfrdist: add NOTIFY receive support
    + dnsscope: Add a –port option to select a custom port
    + sdig: add rudimentary EDE output
    + add default-catalog-zone setting
    + API: replace zone contents et al
    + geoipbackend: Support reading zones from directory
  * Improvements
    + on OpenBSD, try harder to send on a non-blocking socket
    + Docker: Only print config if debug flag is set
    + API: reject priority element in record
    + dnsname: Optimize parsing of uncompressed labels
    + Log port with all freshness check failure scenarios
    + DNSName: correct len and offset types
    + getAllDomains catalog: avoid useless copy
    + LUA createForward: allow non-hex word prefix
    + iputils: avoid unused warnings on !linux
    + Remove the extern`ed `StatBag from ws-auth
    + allow building in separate build directory
    + Move method checking to Router
    + Add supervisor to Auth container image
    + Remove legacy terms from the codebase
    + Wrap DIR* objects in unique pointers to prevent memory leaks
    + bindparser add primary/secondary/etc. keywords
    + Netmask: Normalize subnet masks coming from a string
    + Report auth settings deprecated in 4.5
    + Improve error message for missing GSS-TSIG feature
    + Print the list of loaded modules next to the config.h preset
    + Change the default for building with net-snmp from auto
    to no
    + harmonize *xfr log messages
    + Refactor the MultiThreadDistributor using pdns::channel
    + report which backend failed to instantiate
    + add remote to logs when tcp thread dies
    + Add missing tools to pdns-tools package description
    + pkcs11signers: If private key object has
    CKA_ALWAYS_AUTHENTICATE attribute, perform
    CKU_CONTEXT_SPECIFIC login after OperationInit to make it
    actually work
    + wait for mysql.service
    + bump sdist builders to alpine 3.18
    + new option 'ignore-errors' for setting
    'outgoing-axfr-expand-alias'
  * Bug Fixes
    + revive remotebackend tests and fix failures
    + do not disable ns records at apex in consumer zones
    + catalog: include groups in hash calculation
    + lmdb: remove mapasync mode, it was always a lie
    + debian: adjust option names in shipped configs
    + fix tinydnsbackend compilation issue
    + set catalog in gsql getAllDomains
    + improve wildcard CNAME handling
    + auth api: flush all caches when flushing
    + CAA records: handle empty value more gracefully,
    fixes #13070
    + calidns: Fix setting an ECS source of 0
    + calidns: Prevent a crash on an empty domains file
  For details, see
  https://doc.powerdns.com/authoritative/changelog/4.9.html</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1712059200">- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1716897600">- Update to version 4.9.1
  * Improvements
    + rpm: Change home directory to /var/lib/pdns
    + m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
    + Wrap backend factories in smart pointers
    + (optionally) drop whitespace on join
  * Bug Fixes
    + autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
    + ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
    + YaHTTP: Enforce max # of request fields and max request line size
    + Fix memory leaks in the bind file format parser
    + dnsproxy: fix build on s390x (Chris Hofstaedtler)
    + pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
    + Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
    + don’t crash when a catalog SOA is invalid
    + debian: adjust option name in shipped postinst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- track series file for easier patching</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- Update to version 4.9.2
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update
- refreshed pdns-4.0.3_allow_dacoverride_in_capset.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808001">- make the compiler handling for leap more readable
  and also make it work for SLE15 &lt; SP3</changelog>
  <changelog author="James Pearson &lt;jamesp@vicidial.com&gt;" date="1741089600">- Update to version 4.9.4
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- Update to version 4.9.8
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7
  https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8
- enable luajit support where possible</changelog>
</package>
<package pkgid="69cbe7582d77f7d8f2c149bc584b8a4970574521b94917cf3d220f4da18b76c35c3c7903fff54fccd8f05efa6c0dde81b0987c92b1b223b5d6c1150fdf676fec" name="pdns-recursor" arch="src">
  <version epoch="0" ver="5.2.5" rel="179.5"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1653912000">- update to 4.7.0
  * A configurable way of adding Additional records to answers sent
    to the client, so the client does not have to ask for these
    records.
  * The step sizes for Query Minimization are now computed following to
    guidelines in [2]RFC 9156.
  * The Recursor now schedules tasks to resolve IPv6 addresses of name
    servers not learned by glue records. This has the consequence that,
    if applicable, name servers will be contacted over IPv6 more often.
  * An experimental implementation of unilateral [3]DoT probing. This
    allows the Recursor to learn if a an authoritative servers supports
    DoT.
  * Recursor has gained a way to fall back to the parent NS set if
    contacting servers in the child NS set does not lead to an answer.
    This works around some broken authoritative servers configurations.
  * ZONEMD validation of the zones retrieved by the [5]Zone to Cache,
    providing integrity guarantees for the zone retrieved.
  * The table recording round trip times of authoritative server IP
    addresses is now shared between threads to make it more effective
    and to reduce its memory footprint.
  * A Lua FFI hook for post-resolve interception: [6]postresolve_ffi,
    providing a very fast way to do post-resolve Lua scripting.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1657281600">- update to 4.7.1
  * Improvements
  - Allow generic format while parsing zone files for ZoneToCache.
    References: #11724, #11726, pull request 11750
  - Force gzip compression for debian packages (Zash). #11735, PR#11740
  * Bug Fixes
  - Run tasks from housekeeping thread in the proper way, causing queued
    DoT probes to run more promptly. #11692, PR#11748</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1661256000">- update to 4.7.2
  * incomplete exception handling related to protobuf message generation.
    (CVE-2022-37428, bsc#1202664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- Bump requires to newer Boost, effectively disabling support for SLE-12</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1663675200">- update to 4.7.3
  * Improvements
  - For zones having many NS records, we are not interested in all so take a sample. #11904, PR#11936
  - Also check qperq limit if throttling happened, as it increases counters. #11848, PR#11897
  * Bug Fixes
  - Failure to retrieve DNSKEYs of an Insecure zone should not be fatal. #11890, PR#11940
  - Fix recursor not responsive after Lua config reload. #11850, PR#11879
  - Clear the caches after loading authzones. #11843, PR#11847
  - Resize answer length to actual received length in udpQueryResponse. #11773, PR#11774</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669377600">- update to 4.7.4
  * Fix compilation of the event ports multiplexer. #12046, PR#12231
  * Correct skip record condition in processRecords. #12198, PR#12230
  * Also consider recursive forward in the “forwarded DS should not end up in negCache code.” #12189, #12199, PR#12227
  * Timout handling for IXFRs as a client. #12125, PR#12190
  * Detect invalid bytes in makeBytesFromHex(). #12066, PR#12173
  * Log invalid RPZ content when obtained via IXFR. #12081, PR#12171
  * When an expired NSEC3 entry is seen, move it to the front of the expiry queue. #12038, PR#12168</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1670846400">- update to 4.8.0 with these major changes:
  * Structured Logging has been implemented for almost all
    subsystems.
  * Optional Serve Stale functionality has been implemented,
    providing resilience against connectivity problems towards
    authoritative servers.
  * Optional Record Locking has been implemented, providing an extra
    layer of protection against spoofing attempts at the price of
    reduced cache efficiency.
  * Internal tables used to track information about authoritative
    servers are now shared instead of per-thread, resulting in
    better performance and lower memory usage.
  * EDNS padding of outgoing DoT queries has been implemented,
    providing better privacy protection.
  * Metrics have been added about the protobuf and dnstap logging
    subsystems and the rcodes received from authoritative
    servers.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1674216000">- update to 4.8.1
  * Avoid unbounded recursion when retrieving DS records from some
    misconfigured domains. (bsc#1207342, CVE-2023-22617)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 4.8.3" date="1678190400">- update to 4.8.3
  * Fix serve-stale logic to not cause intermittent high CPU load by:
    + correcting the removal of a negative cache entry,
    + correcting the serve-stale main loop regarding exception handling,
    + correctly handle negcache entries with serve-state status.
- changes in version 4.8.2
  * Make cache cleaning of record an negative cache more fair
  * Do not report “not decreasing socket buf size” as an error
  * Do not use “message” as key, it has a special meaning to systemd-journal
  * Add the ‘parse packet from auth’ error message to structured logging
  * Refresh of negcache stale entry might use wrong qtype
  * Do not chain ECS enabled queries
  * Properly encode json string containing binary data</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1680609600">- update to 4.8.4
  * Deterred spoofing attempts can lead to authoritative servers
    being marked unavailable (bsc#1209897, CVE-2023-26437)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 4.9.1" date="1692964800">- update to 4.9.1
  * The setting of policy tags for packet cache hist has been fixed.
    Previously, packet cache hits would not contain policy tags set in
    the Lua gettags(-ffi) intercept functions.
  * The retrieval of RPZ zones could fail in situations where a read of
    the chunk length from the IXFR TCP stream would produce an
    incomplete result.
- enable DSN-over-TLS (DoT) via OpenSSL
  For complete list of changes, see
  https://doc.powerdns.com/recursor/changelog/4.9.html#change-4.9.1
  For upgrades since 4.8.x and earlier, see
  https://doc.powerdns.com/recursor/upgrade.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 5.0.1" date="1707480000">- update to 5.0.1
  https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.1
  For upgrade from 4.9.x, see
  https://doc.powerdns.com/recursor/upgrade.html#to-5-0-0-and-master
- cargo_build_fix.patch: add cargo_build parameters to Makefile...</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707825600">- update to 5.0.2
  * fixes crafted DNSSEC records in a zone can lead to a denial
    of service in Recursor
  https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
  (bsc#1219823, bsc#1219826, CVE-2023-50387, CVE-2023-50868)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713960000">- update to 5.0.4:
  * fixes a case when a crafted responses can lead to a denial of
    service in Recursor if recursive forwarding is configured
    (bsc#1223262, CVE-2024-25583)
- changes in 5.0.3
  * Log if a DNSSEC related limit was hit if log_bogus is set
  * Reduce RPZ memory usage by not keeping the initially loaded
    RPZs in memory
  * Fix the zoneToCache regression introduced by 5.0.2 security
    update</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716638400">- update to 5.0.5:
  * Do not count RRSIGs using unsupported algorithms toward RRSIGs
    limit
  * Correctly count NSEC3s considered when chasing the closest
    encloser.
  * Let NetmaskGroup parse dont-throttle-netmasks, allowing
    negations.
  * Fix types of two YAML settings (incoming.edns_padding_from,
    incoming.proxy_protocol_from) that should be sequences of
    subnets
  * Fix trace=fail regression and add regression test for it</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- update to 5.1.1
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.1
  https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.8
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- refreshed cargo_build_fix.patch
- track series file for easier patching
- no more conf.dist file. I think we should switch the default
  config in the package to the yaml format maybe</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- update to 5.1.2 (boo#1231292 CVE-2024-25590)
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- update to 5.1.3:
  * Implement rfc6303 special zones (mostly v6 reverse mappings)
  * Distinguish OS imposed limits from app imposed limits,
    specifically on chains.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- update to 5.2.5 (CVE-2025-30192 boo#246841)
  https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-04.html
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.4
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.6
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.7
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.0
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.1
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.2
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.3
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.4
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.5
- reenable snmp support ( we had the BR but not the configure flag)
- add missing BR for fstrm and libcurl
- enable NOD support (new BR libboost_filesystem-devel)
- enable luajit where possible</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- Boost.System is headers only since 1.69 and stub library removed in
  1.89. Change to new boost.m4 from upstream project.
  + Add boost-m4-39.patch</changelog>
</package>
<package pkgid="33600cdc55e84af30203914154fee33faf323c1e52084132714d6cd8c632d995b781c9a0df60b9b7c807e141a939880494c516880b0b50c678cdd84e096ace37" name="pdns-recursor" arch="x86_64">
  <version epoch="0" ver="5.2.5" rel="179.5"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1674216000">- update to 4.8.1
  * Avoid unbounded recursion when retrieving DS records from some
    misconfigured domains. (bsc#1207342, CVE-2023-22617)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 4.8.3" date="1678190400">- update to 4.8.3
  * Fix serve-stale logic to not cause intermittent high CPU load by:
    + correcting the removal of a negative cache entry,
    + correcting the serve-stale main loop regarding exception handling,
    + correctly handle negcache entries with serve-state status.
- changes in version 4.8.2
  * Make cache cleaning of record an negative cache more fair
  * Do not report “not decreasing socket buf size” as an error
  * Do not use “message” as key, it has a special meaning to systemd-journal
  * Add the ‘parse packet from auth’ error message to structured logging
  * Refresh of negcache stale entry might use wrong qtype
  * Do not chain ECS enabled queries
  * Properly encode json string containing binary data</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1680609600">- update to 4.8.4
  * Deterred spoofing attempts can lead to authoritative servers
    being marked unavailable (bsc#1209897, CVE-2023-26437)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 4.9.1" date="1692964800">- update to 4.9.1
  * The setting of policy tags for packet cache hist has been fixed.
    Previously, packet cache hits would not contain policy tags set in
    the Lua gettags(-ffi) intercept functions.
  * The retrieval of RPZ zones could fail in situations where a read of
    the chunk length from the IXFR TCP stream would produce an
    incomplete result.
- enable DSN-over-TLS (DoT) via OpenSSL
  For complete list of changes, see
  https://doc.powerdns.com/recursor/changelog/4.9.html#change-4.9.1
  For upgrades since 4.8.x and earlier, see
  https://doc.powerdns.com/recursor/upgrade.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; 5.0.1" date="1707480000">- update to 5.0.1
  https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.1
  For upgrade from 4.9.x, see
  https://doc.powerdns.com/recursor/upgrade.html#to-5-0-0-and-master
- cargo_build_fix.patch: add cargo_build parameters to Makefile...</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707825600">- update to 5.0.2
  * fixes crafted DNSSEC records in a zone can lead to a denial
    of service in Recursor
  https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
  (bsc#1219823, bsc#1219826, CVE-2023-50387, CVE-2023-50868)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713960000">- update to 5.0.4:
  * fixes a case when a crafted responses can lead to a denial of
    service in Recursor if recursive forwarding is configured
    (bsc#1223262, CVE-2024-25583)
- changes in 5.0.3
  * Log if a DNSSEC related limit was hit if log_bogus is set
  * Reduce RPZ memory usage by not keeping the initially loaded
    RPZs in memory
  * Fix the zoneToCache regression introduced by 5.0.2 security
    update</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716638400">- update to 5.0.5:
  * Do not count RRSIGs using unsupported algorithms toward RRSIGs
    limit
  * Correctly count NSEC3s considered when chasing the closest
    encloser.
  * Let NetmaskGroup parse dont-throttle-netmasks, allowing
    negations.
  * Fix types of two YAML settings (incoming.edns_padding_from,
    incoming.proxy_protocol_from) that should be sequences of
    subnets
  * Fix trace=fail regression and add regression test for it</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727611200">- update to 5.1.1
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.1
  https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.8
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
  linux to fix building with boost 1.86
- refreshed cargo_build_fix.patch
- track series file for easier patching
- no more conf.dist file. I think we should switch the default
  config in the package to the yaml format maybe</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730808000">- update to 5.1.2 (boo#1231292 CVE-2024-25590)
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- update to 5.1.3:
  * Implement rfc6303 special zones (mostly v6 reverse mappings)
  * Distinguish OS imposed limits from app imposed limits,
    specifically on chains.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1755172800">- update to 5.2.5 (CVE-2025-30192 boo#246841)
  https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-04.html
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.4
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.6
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.7
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.0
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.1
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.2
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.3
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.4
  https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.5
- reenable snmp support ( we had the BR but not the configure flag)
- add missing BR for fstrm and libcurl
- enable NOD support (new BR libboost_filesystem-devel)
- enable luajit where possible</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- Boost.System is headers only since 1.69 and stub library removed in
  1.89. Change to new boost.m4 from upstream project.
  + Add boost-m4-39.patch</changelog>
</package>
<package pkgid="f4e7ae146d57146f4e3276e93b249b180c4c0ab6e7e07a54177fc9da2b7583899ae46e6617bfc18cfe34fe7860945588242db45af1584aaf312c8d97db5f2ace" name="rspamd" arch="i586">
  <version epoch="0" ver="3.8.4" rel="94.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1668427200">- Move cleanup code to %pre because otherwise it doesnt trigger
  early enough</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build against libnsl, it's not used and deprecated</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1679054400">- Update to 3.5
  - [Test] Remove test case with non-deterministic result by
    @arkamar in #4323
  - [WebUI] Add legacy history version badge by @moisseev in #4326
  - [Feature] Enable Mime part filters on antivirus module by
    @jonmoesli in #4328
  - [Test] Use TMPDIR if available by @arkamar in #4327
  - metadata_exporter http pusher: Extend valid return codes by
    @yo000 in #4334
  - [Minor] debian package: disable luajit on arm64 by @fatalbanana
    in #4335
  - Support external maps in Rspamd by @vstakhov in #4324
  - [Fix] Return true from has_urls(true) if only emails are
    present by @cpragadeesh in #4365
  - [Fix] received: filtering of artificial header by @kakochang in
    [#4367]
  - [Fix] Replace broken strict_domains with phishing_exceptions by
    @dupondje in #4376
  - Fix build with gcc 13 by including by @heirecka in #4375
  - rspamc: add -R option for human readable report by @amishmm in
    [#4377]
  - rspamc: optimize indentation condition by @amishmm in #4381
  - Set required_score = reject score and minor change to the
    report by @amishmm in #4383
  - conf/modules.d/arc.conf: fix parameter name by @jendis in #4387
  - Fixes to support global lua maps in user settings by @dpetrov67
    in #4393
  - [Enhancement] Make Google URL redirection rules productive by
    @twesterhever in #4399
  - [Enhancement] Add rule to detect Google Firebase URLs by
    @twesterhever in #4401
  - [Minor] Assorted cleanup and housekeeping of configuration
    files by @twesterhever in #4397
  - addition: add Betterbird to user_agent_thunderbird by
    @georglauterbach in #4404
  - [Minor] Replace "Spamhaus XBL any" hack with a more clear
    solution by @twesterhever in #4398
  - [Enhancement] Add IPFS URL heuristic by @twesterhever in #4310
  - Checking for redirector url in mail by @korgoth1 in #4351
  - fix incorrect asn references in bimi.conf by @mta59066 in #4410
  - [Minor] Account for one more undisclosed-recipients address
    variant by @citrin in #4413
  - Fix for x-rspamd-action in Milter headers module by @nishils in
    [#4416]
  - [WebUI] Update JS libraries by @moisseev in #4414
  - [WebUI] Update bootstrap by @moisseev in #4420
  - [Minor] remove check for sys/cdefs.h in CMakelists.txt by
    @a16bitsysop in #4430
  - [Minor] Fix some compiler warnings by @a16bitsysop in #4436
- Drop 068714f9f5a96fbd94560211cec75775ee023d02.patch:
- this drops the rspamd-director binary</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1679054401">- Enable more features
  - Enable nice stacktraces for crashes. New BR: libunwind-devel
  - use system xxhash: New BR: xxhash-devel
  - enable blas/lapack support for the neural network processing
    New BR: lapack-devel, libopenblas_openmp-devel, openblas-common-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1691064000">- Update to 3.6
  - [WebUI] Migrate to Bootstrap v5.2 by @moisseev in #4444
  - fix: avoid double-dip of nrcpt when calculating ratelimit
    condition by @simbuerg in #4448
  - [WebUI] Fix "Clean history" button enabling/disabling in the
    Scan tab by @moisseev in #4453
  - [Minor] Use a scalar variable as a dir handle by @moisseev in
    [#4457]
  - Fix arc by @jendis in #4449
  - [Minor] Fix pagination control border radius by @moisseev in
    [#4461]
  - [Fix] remove obsolete rspamd-redirector files by @a16bitsysop
    in #4422
  - Add fasttext language detector to Rspamd by @vstakhov in #4473
  - [Minor] Fix rows background coloring by @moisseev in #4490
  - [WebUI] Add ability to compute fuzzy hashes by @moisseev in
    [#4499]
  - [Fix] rbl: fix dependency registration when symbols_prefixes is
    used by @fatalbanana in #4498
  - [Enhancement] Add composite rule for messages only containing a
    redirector URL by @twesterhever in #4496
  - [WebUI] Show validation feedback inside login modal by
    @moisseev in #4504
  - [Minor] Improve HACKED_WP_PHISHING coverage by @twesterhever in
    [#4506]
  - [Minor] Add additional bad extensions by @twesterhever in #4508
  - [Minor] Assorted cleanup and housekeeping of configuration
    files, take 2 by @twesterhever in #4505
  - [Rules] Add thread hijacking composite rule by @twesterhever in
    [#4507]
  - [Minor] Move HAS_ONION_URI from "experimental" to "url" group
    by @twesterhever in #4495
  - [Enhancement] Make Google Firebase rule productive by
    @twesterhever in #4494
  - Use the correct mime format for 7z by @JasonStephenson in #4517
  - [Minor] Increase score for .chm attachments by @twesterhever in
    [#4518]
  - [Enhancement] Improve detection of Google redirection URLs by
    @twesterhever in #4497
  - if elasticsearch_version &gt;= 7 we should not send the _type to
    elastic… by @mariojansen in #4520
  - [Enhancement] Treat HTML attachments as (slightly) bad by
    @twesterhever in #4519
  - Dockerfile: Switch to bookworm by @mrueg in #4532
  - [Feature] external_relay: add ip_map strategy by @moesoha in
    [#4537]
  - [Feature] Detect Apple Mail and remove scores for their known
    common behavior by @dragoangel in #4538
  - [Minor] A bit better apple_x_mailer regex by @dragoangel in
    [#4539]
  - replace ECDSA_sign_setup/ECDSA_sign_ex with ECDSA_sign by
    @sthen in #4541
  - [Fix] dmarc gramar - allow spaces before ";" by @rheoli in
    [#4547]
  - [Minor] Minor fixes for previous ratelimit changes by
    @fatalbanana in #4549
  - [Minor] Improve catch rates of FREEMAIL_AFF by @twesterhever in
    [#4556]
  - [Minor] Test &amp; fix has_only_html_part regression by
    @fatalbanana in #4559
  - [Minor] Tweak HAS_GOOGLE_REDIR to detect Google AMP URLs as
    well by @twesterhever in #4558</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1696680000">- Update to 3.7.1
  - [Fix] CMakeLists.txt remove whitespace added by linter as it
    makes te… by @a16bitsysop in #4560
  - fix: redis schema parsing by @Conni2461 in #4562
  - [Minor] Update JS libraries by @moisseev in #4567
  - [WebUI] Restore contrasting foreground color by @moisseev in
    [#4569]
  - Add new exporter to push JSON to a raw TCP socket by @lingfish
    in #4572
  - [WebUI] Tweak bootstrap colors for accessibility by @moisseev
    in #4577
  - Rewrite configuration utils in C++ by @vstakhov in #4573
  - [Minor] Slightly adjust DNSBL scores by @twesterhever in #4557
  - Added support for Redis 6 ACL (username/password) by @laodc in
    [#4578]
  - [Feature] Support feed exclusions in phishing module by
    @dragoangel in #4575
  - [Minor] Remove unwanted debug logging by @fatalbanana in #4585
  - Fix regression in invokation of rspamd-test by @ln5 in #4588
  - [Fix] Correct format pattern for RE tree tempfile name by @ln5
    in #4590
  - [Minor] Remove unused variables by @ln5 in #4591
  - [Fix] Correct format string for unw_word_t by @ln5 in #4592
  - [Fix] rbl: really fix dependency registration when
    symbols_prefixes i… by @fatalbanana in #4594
  - [Fix] rspamadm mime: arguments beginning with letter t by
    @fatalbanana in #4597
  - [Minor] API docs: lua_ip: fix function name by @fatalbanana in
    [#4598]
  - [Feature] rbl: support checking numeric URLs in isolation by
    @fatalbanana in #4596
  - [Feature] Add ICAP Content-Type and Filename from TODO List by
    @lbahtarliev in #4595
  - [Minor] Try fix CI by @fatalbanana in #4603
  - [Fix] MISSING_MIMEOLE: avoid matching messages from Android
    GMail app (#4561) by @fatalbanana in #4600
  - [WebUI] Set locale on UI load by @moisseev in #4607
  - Update configwizard.lua by @Dani778 in #4605
  - [Minor] Revisit numeric_urls by @fatalbanana in #4602
  - [Fix] Change Date: header location to conform with RFC by
    @lbahtarliev in #4608
  - Implement known senders plugin by @vstakhov in #4610
  - [Test] Rudimentary tests for known_senders plugin by
    @fatalbanana in #4612
  - [Test] Ignore encoding errors by @fatalbanana in #4616
  - Merge tests into master branch by @fatalbanana in #4615
  - Run CI on ARM by @fatalbanana in #4617
  - [Minor] Try fix test logs by @fatalbanana in #4620
  - Minor improvements for CI by @fatalbanana in #4621
  - Fix wrong copypasta &amp; mis-named file by @fatalbanana in #4624
  - [Test] Use Robot Framework native IF by @fatalbanana in #4625
  - [Fix] Prevent DNSWL sabotage by @mdierksen in #4627</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1698321600">- Update to 3.7.2
  - [Minor] Make compiling with backward-cpp optional by
    @a16bitsysop in #4639
  - [Rules] Blank spam detection by @fatalbanana in #4644
  - [Minor] Treat *.cue attachments as harmful by @twesterhever in
    [#4642]
  - Dzjaivnt patch 1 by @dzjaivnt in #4640
  - [WebUI] Add control to invert action filter by @moisseev in
    [#4645]
  - [Fix] DMARC reporting: fix reporting for subdomains by
    @fatalbanana in #4587
  - [Test] Banish luacheck from functional tests by @fatalbanana in
    [#4648]
  - [Minor] RSPAMD_SHAREDIR is called SHAREDIR in configuration by
    @fatalbanana in #4649
  - [WebUI] Fix history table vanishing by @moisseev in #4661
  - Tighten rspamd's attachment policy by @twesterhever in #4656
  - [Minor] rbl: support use of different matchers for return codes
    by @fatalbanana in #4657</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1698408000">- Update to 3.7.3
  - [Fix] Emergency fix for the hyperscan path error</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1699963200">- Update to 3.7.4
  - [Enhancement] Add composite rule for suspicious URLs in
    suspicious messages
  - [Fix] Another try to fix setproctitle
  - [Fix] Do not cleanup hyperscan files unless new ones are loaded
  - [Fix] Fix various issues with canonicalisation of the paths
  - [Fix] Properly set config field when creating tasks from Lua
  - [Fix] Set loaded variable explicitly
  - [Fix] known_senders: fix config handling
  - [Fix] rbl: fix exclude_local
  - [Minor] Add missing include for gcc 14
  - [Minor] Add rule for messages missing both X-Mailer and
    User-Agent header
  - [Minor] Bundle fasttext as linux distributives are just useless
  - [Minor] Enable fasttext on RPM based linux
  - [Minor] Forgot it in one more place
  - [Minor] Improve FREEMAIL_AFF capture rates
  - [Minor] Limit fasttext to amd64 only
  - [Minor] Properly search for fasttext include
  - [Minor] Treat *.zpaq attachments as archives and harmful
  - [Minor] force_actions: set a group for symbols
  - [WebUI] Update map editor</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1700654400">- Add upstream patch to fix build without hyperscan:
  * rspamd-d907a95.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1701864000">- fix_stack_smash.patch: upstream rework of logging doesn't allocate
  enough memory for an array (bsc#1216830)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702641600">- Update to 3.7.5
  - Test updates for rspamd-3.7 branch by @fatalbanana in #4708
  - Fix rspamadm lua logger in rspamd-3.7 (#/4727) by @fatalbanana
    in #4729
  - Some picks for rspamd-3.7 by @fatalbanana in #4731
  - rspamd-3.7: fix systemd logging by @fatalbanana in #4734
  - rspamd-3.7: [Fix] dkim_signing: siging_table: lowercase before
    lookup by @fatalbanana in #4737
- drop pwatches included in update:
  rspamd-d907a95.patch
- refreshed patches to apply cleanly again:
  fix_missing_return.patch
  rspamd-conf.patch
- While the fix for the logging bug was accepted into master. The
  3.7.5 release uses a different solution apparently. Update patch
  fix_stack_smash.patch.
  https://github.com/rspamd/rspamd/pull/4732#issuecomment-1858255236</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1705752000">- Update to 3.8.0
  - [WebUI] Update map editor by @moisseev in #4668
  - [Minor] Make Robot Framework loop unfunny by @fatalbanana in
    [#4672]
  - [Project] Support of JSON logging by @vstakhov in #4674
  - [Minor] Add missing include for gcc 14 by @arkamar in #4675
  - [Minor] Add rule for messages missing both X-Mailer and
    User-Agent header by @twesterhever in #4682
  - [Minor] Treat *.zpaq attachments as archives and harmful by
    @twesterhever in #4680
  - [Enhancement] Add composite rule for suspicious URLs in
    suspicious messages by @twesterhever in #4681
  - [Minor] Improve FREEMAIL_AFF capture rates by @twesterhever in
    [#4683]
  - [Fix] rbl: unbreak exclude_local by @fatalbanana in #4678
  - [Minor] force_actions: set a group for symbols by @fatalbanana
    in #4685
  - [Minor] doxydown: fix elements containing few spaces by
    @fatalbanana in #4687
  - [Fix] known_senders: fix config handling by @fatalbanana in
    [#4693]
  - [Feature] Reiterate on gtube patterns by @vstakhov in #4691
  - [Minor] Try improve test stability by @fatalbanana in #4695
  - [Feature] Support ping command in fuzzy storage by @vstakhov in
    [#4694]
  - [Test] Set umask where it's useful by @fatalbanana in #4699
  - [Minor] Remove obsolete code by @moisseev in #4700
  - [WebUI] Load modules dynamically by @moisseev in #4705
  - Add support for loongarch by @wuruilong01 in #4704
  - [Test] Try correct settings test by @fatalbanana in #4706
  - [Minor] Get rid of 'var' declarations by @moisseev in #4707
  - [Test] Fix dummy http server on python 3.6 by @fatalbanana in
    [#4710]
  - [Test] Skip miltertest tests if it is not installed by
    @fatalbanana in #4709
  - [Test] Restore stylistic rules check by @moisseev in #4711
  - [Minor] Re-sign YAML by @fatalbanana in #4713
  - [Minor] Use consistent object key/value spacing by @moisseev in
    [#4712]
  - Fix fuzzy stat by @vstakhov in #4714
  - [Minor] Convert callbacks to arrow functions by @moisseev in
    [#4715]
  - Fix issues with the raw header on header insertion/modification
    by @vstakhov in #4716
  - [Fix] dkim_signing: siging_table: lowercase before lookup by
    @fatalbanana in #4717
  - [Minor] Replace Dockerfile with advertisement for image by
    @fatalbanana in #4721
  - [WebUI] Refine symbols score input boxes by @moisseev in #4723
  - [Test] Remove default ESLint Stylistic rule by @moisseev in
    [#4724]
  - [Test] Exercise rspamadm lua logger in functional tests by
    @fatalbanana in #4728
  - [Test] Use npm ls to show versions by @moisseev in #4725
  - [Test] Unbreak ESLint by @moisseev in #4730
  - [Test] Test systemd logging by @fatalbanana in #4733
  - [CritFix] - Fix reported length of logging structure by
    @AdamMajer in #4732
  - [Test] Remove deprecated Stylelint rule by @moisseev in #4735
  - Migrate bayes redis backend to Lua scripts by @vstakhov in
    [#4718]
  - [Minor] Have bayes use global redis settings by @fatalbanana in
    [#4739]
  - [Feature] rbl: support disabling or replacing url_whitelist per
    RBL by @fatalbanana in #4742
  - [Minor] rbl: try harder to identify lua patterns by
    @fatalbanana in #4743
  - [Minor] rbl: revisit previous change by @fatalbanana in #4747
  - [WebUI] Symbols: replace individual save buttons by @moisseev
    in #4748
  - [WebUI] Send only altered symbols in save requests by @moisseev
    in #4749
  - [Minor] docs: rspamd_html: fix some copypasta by @fatalbanana
    in #4750
  - [Minor] ratelimit: make per-bucket symbol behave like global
    symbol by @fatalbanana in #4755
  - [Minor] Log a debug message when ratelimit skipped by @moisseev
    in #4757
  - [WebUI] Show pass-through module in scan result by @moisseev in
    [#4758]
  - [Minor] debian: add missing stuff to rspamd-asan package by
    @fatalbanana in #4761
  - [Minor] Fix typo in hfilter map by @moisseev in #4759
  - [Minor] Move common stuff to separate files by @moisseev in
    [#4762]
  - Fix an overzealous s/NULL/nullptr/g by @jvoisin in #4764
  - [WebUI] Show message size in IEC (base 1024) units by @moisseev
    in #4765
  - [WebUI] Normalize IPv4 for column sorting by @moisseev in #4766
  - [Test] Some more tests for logging by @fatalbanana in #4767
  - [Feature] Support suppressing DMARC reporting for particular
    recipients by @fatalbanana in #4772
  - [Test] Fix tests on Robot Framework 7.0 by @fatalbanana in
    [#4775]
  - Rewrite redis_cache logic in statistics by @vstakhov in #4774
  - [Fix] multimap: rawtext: use decoded parts by @fatalbanana in
    [#4781]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1705752001">- drop fix_stack_smash.patch:
  solved in a better way in 3.8.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706270400">- Update to 3.8.1
  - [Fix] Replace comment types by @arkamar in #4785
  - [Test] statistics: per-user by @fatalbanana in #4789
  - [Minor] rbl: fix warning by @fatalbanana in #4790</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706270401">- Add Provides for user and group which are created in the %pre
  scriptlet.
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/HG2JKUIKDTWQQIQSA43A4VWHX7YKJQT3/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708430400">- Update to 3.8.2
  - [Feature] Add extraction type for from maps by @vstakhov in
    [#4794]
  - [Rework] Breaking: Do not report module as action by @moisseev
    in #4795
  - [Minor] Move server selection logic to common.js by @moisseev
    in #4796
  - [WebUI] Show pass-through module in History by @moisseev in
    [#4798]
  - [Feature] Allow to add templates to redis history prefix by
    @vstakhov in #4801
  - Deal with Connection and Host headers on proxying by @vstakhov
    in #4802
  - [Minor] configwizard: really use LOCAL_CONFDIR by @fatalbanana
    in #4804
  - [Fix] Resolve issue with bayes stat in rspamadm mode by
    @vstakhov in #4805
  - [Minor] rspamd_task API docs: fix broken link by @fatalbanana
    in #4807
  - [Minor] Add more returnbits to surbl configuration by
    @fatalbanana in #4803
  - [Feature] Support JSON logging when in syslog mode by @vstakhov
    in #4813
  - Fix issues with URL fragment in HTTP requests by @vstakhov in
    [#4814]
  - [Fix] Encode headers in metadata exporter by @vstakhov in #4816
  - Improve Kaspersky AS integration by @vstakhov in #4806
  - Allow dynamic keypairs loading in fuzzy storage by @vstakhov in
    [#4818]
  - Build tests with CTest in Cmake by @vstakhov in #4822</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708862400">- Update to 3.8.3
  - This release includes a fix for a regression in redis_history
    which caused history to be recorded to a misnamed key. No other
    changes were introduced in this release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708948800">- Update to 3.8.4
  - [Fix] Allow different template expansion parameters by
    @vstakhov in #4830</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716379200">- BuildRequire pkgconfig(libhs) instead of vectorscan-devel: allow
  to work with the free hyperscan variant.</changelog>
</package>
<package pkgid="228bbfb7839b6f369e38de302896b15e4ef3a447569ade2dd2b7556be691cf001a013487e31541dd1601514361e55c48aa80c9ad310dd63e154e06174da06eea" name="rspamd" arch="src">
  <version epoch="0" ver="3.8.4" rel="94.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1668427200">- Move cleanup code to %pre because otherwise it doesnt trigger
  early enough</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build against libnsl, it's not used and deprecated</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1679054400">- Update to 3.5
  - [Test] Remove test case with non-deterministic result by
    @arkamar in #4323
  - [WebUI] Add legacy history version badge by @moisseev in #4326
  - [Feature] Enable Mime part filters on antivirus module by
    @jonmoesli in #4328
  - [Test] Use TMPDIR if available by @arkamar in #4327
  - metadata_exporter http pusher: Extend valid return codes by
    @yo000 in #4334
  - [Minor] debian package: disable luajit on arm64 by @fatalbanana
    in #4335
  - Support external maps in Rspamd by @vstakhov in #4324
  - [Fix] Return true from has_urls(true) if only emails are
    present by @cpragadeesh in #4365
  - [Fix] received: filtering of artificial header by @kakochang in
    [#4367]
  - [Fix] Replace broken strict_domains with phishing_exceptions by
    @dupondje in #4376
  - Fix build with gcc 13 by including by @heirecka in #4375
  - rspamc: add -R option for human readable report by @amishmm in
    [#4377]
  - rspamc: optimize indentation condition by @amishmm in #4381
  - Set required_score = reject score and minor change to the
    report by @amishmm in #4383
  - conf/modules.d/arc.conf: fix parameter name by @jendis in #4387
  - Fixes to support global lua maps in user settings by @dpetrov67
    in #4393
  - [Enhancement] Make Google URL redirection rules productive by
    @twesterhever in #4399
  - [Enhancement] Add rule to detect Google Firebase URLs by
    @twesterhever in #4401
  - [Minor] Assorted cleanup and housekeeping of configuration
    files by @twesterhever in #4397
  - addition: add Betterbird to user_agent_thunderbird by
    @georglauterbach in #4404
  - [Minor] Replace "Spamhaus XBL any" hack with a more clear
    solution by @twesterhever in #4398
  - [Enhancement] Add IPFS URL heuristic by @twesterhever in #4310
  - Checking for redirector url in mail by @korgoth1 in #4351
  - fix incorrect asn references in bimi.conf by @mta59066 in #4410
  - [Minor] Account for one more undisclosed-recipients address
    variant by @citrin in #4413
  - Fix for x-rspamd-action in Milter headers module by @nishils in
    [#4416]
  - [WebUI] Update JS libraries by @moisseev in #4414
  - [WebUI] Update bootstrap by @moisseev in #4420
  - [Minor] remove check for sys/cdefs.h in CMakelists.txt by
    @a16bitsysop in #4430
  - [Minor] Fix some compiler warnings by @a16bitsysop in #4436
- Drop 068714f9f5a96fbd94560211cec75775ee023d02.patch:
- this drops the rspamd-director binary</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1679054401">- Enable more features
  - Enable nice stacktraces for crashes. New BR: libunwind-devel
  - use system xxhash: New BR: xxhash-devel
  - enable blas/lapack support for the neural network processing
    New BR: lapack-devel, libopenblas_openmp-devel, openblas-common-devel</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1691064000">- Update to 3.6
  - [WebUI] Migrate to Bootstrap v5.2 by @moisseev in #4444
  - fix: avoid double-dip of nrcpt when calculating ratelimit
    condition by @simbuerg in #4448
  - [WebUI] Fix "Clean history" button enabling/disabling in the
    Scan tab by @moisseev in #4453
  - [Minor] Use a scalar variable as a dir handle by @moisseev in
    [#4457]
  - Fix arc by @jendis in #4449
  - [Minor] Fix pagination control border radius by @moisseev in
    [#4461]
  - [Fix] remove obsolete rspamd-redirector files by @a16bitsysop
    in #4422
  - Add fasttext language detector to Rspamd by @vstakhov in #4473
  - [Minor] Fix rows background coloring by @moisseev in #4490
  - [WebUI] Add ability to compute fuzzy hashes by @moisseev in
    [#4499]
  - [Fix] rbl: fix dependency registration when symbols_prefixes is
    used by @fatalbanana in #4498
  - [Enhancement] Add composite rule for messages only containing a
    redirector URL by @twesterhever in #4496
  - [WebUI] Show validation feedback inside login modal by
    @moisseev in #4504
  - [Minor] Improve HACKED_WP_PHISHING coverage by @twesterhever in
    [#4506]
  - [Minor] Add additional bad extensions by @twesterhever in #4508
  - [Minor] Assorted cleanup and housekeeping of configuration
    files, take 2 by @twesterhever in #4505
  - [Rules] Add thread hijacking composite rule by @twesterhever in
    [#4507]
  - [Minor] Move HAS_ONION_URI from "experimental" to "url" group
    by @twesterhever in #4495
  - [Enhancement] Make Google Firebase rule productive by
    @twesterhever in #4494
  - Use the correct mime format for 7z by @JasonStephenson in #4517
  - [Minor] Increase score for .chm attachments by @twesterhever in
    [#4518]
  - [Enhancement] Improve detection of Google redirection URLs by
    @twesterhever in #4497
  - if elasticsearch_version &gt;= 7 we should not send the _type to
    elastic… by @mariojansen in #4520
  - [Enhancement] Treat HTML attachments as (slightly) bad by
    @twesterhever in #4519
  - Dockerfile: Switch to bookworm by @mrueg in #4532
  - [Feature] external_relay: add ip_map strategy by @moesoha in
    [#4537]
  - [Feature] Detect Apple Mail and remove scores for their known
    common behavior by @dragoangel in #4538
  - [Minor] A bit better apple_x_mailer regex by @dragoangel in
    [#4539]
  - replace ECDSA_sign_setup/ECDSA_sign_ex with ECDSA_sign by
    @sthen in #4541
  - [Fix] dmarc gramar - allow spaces before ";" by @rheoli in
    [#4547]
  - [Minor] Minor fixes for previous ratelimit changes by
    @fatalbanana in #4549
  - [Minor] Improve catch rates of FREEMAIL_AFF by @twesterhever in
    [#4556]
  - [Minor] Test &amp; fix has_only_html_part regression by
    @fatalbanana in #4559
  - [Minor] Tweak HAS_GOOGLE_REDIR to detect Google AMP URLs as
    well by @twesterhever in #4558</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1696680000">- Update to 3.7.1
  - [Fix] CMakeLists.txt remove whitespace added by linter as it
    makes te… by @a16bitsysop in #4560
  - fix: redis schema parsing by @Conni2461 in #4562
  - [Minor] Update JS libraries by @moisseev in #4567
  - [WebUI] Restore contrasting foreground color by @moisseev in
    [#4569]
  - Add new exporter to push JSON to a raw TCP socket by @lingfish
    in #4572
  - [WebUI] Tweak bootstrap colors for accessibility by @moisseev
    in #4577
  - Rewrite configuration utils in C++ by @vstakhov in #4573
  - [Minor] Slightly adjust DNSBL scores by @twesterhever in #4557
  - Added support for Redis 6 ACL (username/password) by @laodc in
    [#4578]
  - [Feature] Support feed exclusions in phishing module by
    @dragoangel in #4575
  - [Minor] Remove unwanted debug logging by @fatalbanana in #4585
  - Fix regression in invokation of rspamd-test by @ln5 in #4588
  - [Fix] Correct format pattern for RE tree tempfile name by @ln5
    in #4590
  - [Minor] Remove unused variables by @ln5 in #4591
  - [Fix] Correct format string for unw_word_t by @ln5 in #4592
  - [Fix] rbl: really fix dependency registration when
    symbols_prefixes i… by @fatalbanana in #4594
  - [Fix] rspamadm mime: arguments beginning with letter t by
    @fatalbanana in #4597
  - [Minor] API docs: lua_ip: fix function name by @fatalbanana in
    [#4598]
  - [Feature] rbl: support checking numeric URLs in isolation by
    @fatalbanana in #4596
  - [Feature] Add ICAP Content-Type and Filename from TODO List by
    @lbahtarliev in #4595
  - [Minor] Try fix CI by @fatalbanana in #4603
  - [Fix] MISSING_MIMEOLE: avoid matching messages from Android
    GMail app (#4561) by @fatalbanana in #4600
  - [WebUI] Set locale on UI load by @moisseev in #4607
  - Update configwizard.lua by @Dani778 in #4605
  - [Minor] Revisit numeric_urls by @fatalbanana in #4602
  - [Fix] Change Date: header location to conform with RFC by
    @lbahtarliev in #4608
  - Implement known senders plugin by @vstakhov in #4610
  - [Test] Rudimentary tests for known_senders plugin by
    @fatalbanana in #4612
  - [Test] Ignore encoding errors by @fatalbanana in #4616
  - Merge tests into master branch by @fatalbanana in #4615
  - Run CI on ARM by @fatalbanana in #4617
  - [Minor] Try fix test logs by @fatalbanana in #4620
  - Minor improvements for CI by @fatalbanana in #4621
  - Fix wrong copypasta &amp; mis-named file by @fatalbanana in #4624
  - [Test] Use Robot Framework native IF by @fatalbanana in #4625
  - [Fix] Prevent DNSWL sabotage by @mdierksen in #4627</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1698321600">- Update to 3.7.2
  - [Minor] Make compiling with backward-cpp optional by
    @a16bitsysop in #4639
  - [Rules] Blank spam detection by @fatalbanana in #4644
  - [Minor] Treat *.cue attachments as harmful by @twesterhever in
    [#4642]
  - Dzjaivnt patch 1 by @dzjaivnt in #4640
  - [WebUI] Add control to invert action filter by @moisseev in
    [#4645]
  - [Fix] DMARC reporting: fix reporting for subdomains by
    @fatalbanana in #4587
  - [Test] Banish luacheck from functional tests by @fatalbanana in
    [#4648]
  - [Minor] RSPAMD_SHAREDIR is called SHAREDIR in configuration by
    @fatalbanana in #4649
  - [WebUI] Fix history table vanishing by @moisseev in #4661
  - Tighten rspamd's attachment policy by @twesterhever in #4656
  - [Minor] rbl: support use of different matchers for return codes
    by @fatalbanana in #4657</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1698408000">- Update to 3.7.3
  - [Fix] Emergency fix for the hyperscan path error</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1699963200">- Update to 3.7.4
  - [Enhancement] Add composite rule for suspicious URLs in
    suspicious messages
  - [Fix] Another try to fix setproctitle
  - [Fix] Do not cleanup hyperscan files unless new ones are loaded
  - [Fix] Fix various issues with canonicalisation of the paths
  - [Fix] Properly set config field when creating tasks from Lua
  - [Fix] Set loaded variable explicitly
  - [Fix] known_senders: fix config handling
  - [Fix] rbl: fix exclude_local
  - [Minor] Add missing include for gcc 14
  - [Minor] Add rule for messages missing both X-Mailer and
    User-Agent header
  - [Minor] Bundle fasttext as linux distributives are just useless
  - [Minor] Enable fasttext on RPM based linux
  - [Minor] Forgot it in one more place
  - [Minor] Improve FREEMAIL_AFF capture rates
  - [Minor] Limit fasttext to amd64 only
  - [Minor] Properly search for fasttext include
  - [Minor] Treat *.zpaq attachments as archives and harmful
  - [Minor] force_actions: set a group for symbols
  - [WebUI] Update map editor</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1700654400">- Add upstream patch to fix build without hyperscan:
  * rspamd-d907a95.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1701864000">- fix_stack_smash.patch: upstream rework of logging doesn't allocate
  enough memory for an array (bsc#1216830)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702641600">- Update to 3.7.5
  - Test updates for rspamd-3.7 branch by @fatalbanana in #4708
  - Fix rspamadm lua logger in rspamd-3.7 (#/4727) by @fatalbanana
    in #4729
  - Some picks for rspamd-3.7 by @fatalbanana in #4731
  - rspamd-3.7: fix systemd logging by @fatalbanana in #4734
  - rspamd-3.7: [Fix] dkim_signing: siging_table: lowercase before
    lookup by @fatalbanana in #4737
- drop pwatches included in update:
  rspamd-d907a95.patch
- refreshed patches to apply cleanly again:
  fix_missing_return.patch
  rspamd-conf.patch
- While the fix for the logging bug was accepted into master. The
  3.7.5 release uses a different solution apparently. Update patch
  fix_stack_smash.patch.
  https://github.com/rspamd/rspamd/pull/4732#issuecomment-1858255236</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1705752000">- Update to 3.8.0
  - [WebUI] Update map editor by @moisseev in #4668
  - [Minor] Make Robot Framework loop unfunny by @fatalbanana in
    [#4672]
  - [Project] Support of JSON logging by @vstakhov in #4674
  - [Minor] Add missing include for gcc 14 by @arkamar in #4675
  - [Minor] Add rule for messages missing both X-Mailer and
    User-Agent header by @twesterhever in #4682
  - [Minor] Treat *.zpaq attachments as archives and harmful by
    @twesterhever in #4680
  - [Enhancement] Add composite rule for suspicious URLs in
    suspicious messages by @twesterhever in #4681
  - [Minor] Improve FREEMAIL_AFF capture rates by @twesterhever in
    [#4683]
  - [Fix] rbl: unbreak exclude_local by @fatalbanana in #4678
  - [Minor] force_actions: set a group for symbols by @fatalbanana
    in #4685
  - [Minor] doxydown: fix elements containing few spaces by
    @fatalbanana in #4687
  - [Fix] known_senders: fix config handling by @fatalbanana in
    [#4693]
  - [Feature] Reiterate on gtube patterns by @vstakhov in #4691
  - [Minor] Try improve test stability by @fatalbanana in #4695
  - [Feature] Support ping command in fuzzy storage by @vstakhov in
    [#4694]
  - [Test] Set umask where it's useful by @fatalbanana in #4699
  - [Minor] Remove obsolete code by @moisseev in #4700
  - [WebUI] Load modules dynamically by @moisseev in #4705
  - Add support for loongarch by @wuruilong01 in #4704
  - [Test] Try correct settings test by @fatalbanana in #4706
  - [Minor] Get rid of 'var' declarations by @moisseev in #4707
  - [Test] Fix dummy http server on python 3.6 by @fatalbanana in
    [#4710]
  - [Test] Skip miltertest tests if it is not installed by
    @fatalbanana in #4709
  - [Test] Restore stylistic rules check by @moisseev in #4711
  - [Minor] Re-sign YAML by @fatalbanana in #4713
  - [Minor] Use consistent object key/value spacing by @moisseev in
    [#4712]
  - Fix fuzzy stat by @vstakhov in #4714
  - [Minor] Convert callbacks to arrow functions by @moisseev in
    [#4715]
  - Fix issues with the raw header on header insertion/modification
    by @vstakhov in #4716
  - [Fix] dkim_signing: siging_table: lowercase before lookup by
    @fatalbanana in #4717
  - [Minor] Replace Dockerfile with advertisement for image by
    @fatalbanana in #4721
  - [WebUI] Refine symbols score input boxes by @moisseev in #4723
  - [Test] Remove default ESLint Stylistic rule by @moisseev in
    [#4724]
  - [Test] Exercise rspamadm lua logger in functional tests by
    @fatalbanana in #4728
  - [Test] Use npm ls to show versions by @moisseev in #4725
  - [Test] Unbreak ESLint by @moisseev in #4730
  - [Test] Test systemd logging by @fatalbanana in #4733
  - [CritFix] - Fix reported length of logging structure by
    @AdamMajer in #4732
  - [Test] Remove deprecated Stylelint rule by @moisseev in #4735
  - Migrate bayes redis backend to Lua scripts by @vstakhov in
    [#4718]
  - [Minor] Have bayes use global redis settings by @fatalbanana in
    [#4739]
  - [Feature] rbl: support disabling or replacing url_whitelist per
    RBL by @fatalbanana in #4742
  - [Minor] rbl: try harder to identify lua patterns by
    @fatalbanana in #4743
  - [Minor] rbl: revisit previous change by @fatalbanana in #4747
  - [WebUI] Symbols: replace individual save buttons by @moisseev
    in #4748
  - [WebUI] Send only altered symbols in save requests by @moisseev
    in #4749
  - [Minor] docs: rspamd_html: fix some copypasta by @fatalbanana
    in #4750
  - [Minor] ratelimit: make per-bucket symbol behave like global
    symbol by @fatalbanana in #4755
  - [Minor] Log a debug message when ratelimit skipped by @moisseev
    in #4757
  - [WebUI] Show pass-through module in scan result by @moisseev in
    [#4758]
  - [Minor] debian: add missing stuff to rspamd-asan package by
    @fatalbanana in #4761
  - [Minor] Fix typo in hfilter map by @moisseev in #4759
  - [Minor] Move common stuff to separate files by @moisseev in
    [#4762]
  - Fix an overzealous s/NULL/nullptr/g by @jvoisin in #4764
  - [WebUI] Show message size in IEC (base 1024) units by @moisseev
    in #4765
  - [WebUI] Normalize IPv4 for column sorting by @moisseev in #4766
  - [Test] Some more tests for logging by @fatalbanana in #4767
  - [Feature] Support suppressing DMARC reporting for particular
    recipients by @fatalbanana in #4772
  - [Test] Fix tests on Robot Framework 7.0 by @fatalbanana in
    [#4775]
  - Rewrite redis_cache logic in statistics by @vstakhov in #4774
  - [Fix] multimap: rawtext: use decoded parts by @fatalbanana in
    [#4781]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1705752001">- drop fix_stack_smash.patch:
  solved in a better way in 3.8.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706270400">- Update to 3.8.1
  - [Fix] Replace comment types by @arkamar in #4785
  - [Test] statistics: per-user by @fatalbanana in #4789
  - [Minor] rbl: fix warning by @fatalbanana in #4790</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706270401">- Add Provides for user and group which are created in the %pre
  scriptlet.
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/HG2JKUIKDTWQQIQSA43A4VWHX7YKJQT3/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708430400">- Update to 3.8.2
  - [Feature] Add extraction type for from maps by @vstakhov in
    [#4794]
  - [Rework] Breaking: Do not report module as action by @moisseev
    in #4795
  - [Minor] Move server selection logic to common.js by @moisseev
    in #4796
  - [WebUI] Show pass-through module in History by @moisseev in
    [#4798]
  - [Feature] Allow to add templates to redis history prefix by
    @vstakhov in #4801
  - Deal with Connection and Host headers on proxying by @vstakhov
    in #4802
  - [Minor] configwizard: really use LOCAL_CONFDIR by @fatalbanana
    in #4804
  - [Fix] Resolve issue with bayes stat in rspamadm mode by
    @vstakhov in #4805
  - [Minor] rspamd_task API docs: fix broken link by @fatalbanana
    in #4807
  - [Minor] Add more returnbits to surbl configuration by
    @fatalbanana in #4803
  - [Feature] Support JSON logging when in syslog mode by @vstakhov
    in #4813
  - Fix issues with URL fragment in HTTP requests by @vstakhov in
    [#4814]
  - [Fix] Encode headers in metadata exporter by @vstakhov in #4816
  - Improve Kaspersky AS integration by @vstakhov in #4806
  - Allow dynamic keypairs loading in fuzzy storage by @vstakhov in
    [#4818]
  - Build tests with CTest in Cmake by @vstakhov in #4822</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708862400">- Update to 3.8.3
  - This release includes a fix for a regression in redis_history
    which caused history to be recorded to a misnamed key. No other
    changes were introduced in this release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708948800">- Update to 3.8.4
  - [Fix] Allow different template expansion parameters by
    @vstakhov in #4830</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716379200">- BuildRequire pkgconfig(libhs) instead of vectorscan-devel: allow
  to work with the free hyperscan variant.</changelog>
</package>
<package pkgid="83cefb1743014700d6e5a653f8fc485c83d81f2925639b6c60ef20e2a817179e39792f18a44f4a604711eea86a749a9266464539a3ad2254331020a2bbb88ac6" name="rspamd" arch="src">
  <version epoch="0" ver="4.0.1" rel="144.4"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729080000">- Update to 3.10.1
  - [Fix] Use correct type for keylen in lua_ucl_newindex by
    @arkamar in #5169
  - Update hiredis library removing all hacks by @vstakhov in #5167
  - Remove proxy from url_redirector.conf as it not the option by
    @dragoangel in #5164
  - chore(publicsuffix): update effective_tld_names.dat by @wdhdev
    in #5176
  - [Fix] Avoid null-bytes in Log-Tag header value by @smarsching
    in #5179
  - [Fix] Do not abort when OpenSSL is broken, report that to a
    user by @vstakhov in #5188
  - Some build fixes by @vstakhov in #5189
  - Some more fixes by @vstakhov in #5190</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- Update to 3.10.2
  - [CritFix] Fix ARC-Seal signing
  - [Fix] add EOF to openmetrics response in proxy and server</changelog>
  <changelog author="Jacob Tilman Sievert &lt;sievert@b1-systems.de&gt;" date="1729857600">- Update to 3.10.3
  - [Fix] move PluginDir to correct location to prevent recursive
    load of non plugins</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734350400">- Update to 3.11.0
  - Breaking Changes
  - Elasticsearch/OpenSearch Plugin: Major rework with breaking
    changes:
  - Added support for Elasticsearch 8 &amp; OpenSearch 2
  - Added index policy with logs retention
  - Updated configuration format
  - Major Features
  - Added LRU cache for last filled ratelimit buckets
  - Added utilities to manage ratelimit buckets
  - Added include/exclude logic for headers processing
  - Improved address rotation algorithm for upstream selection
  - Added rspamadm mime strip command for attachments removal
  - Added new message anonymization capabilities
  - Replaced fastutf with simdutf for better architecture support
    and performance
  - Added more ways to extend Rspamd configuration, including
    lua.local.d folder
  - Important Fixes
  - Fixed ARC-Seal signing issues
  - Fixed RFC 2047 header encoding
  - Fixed issues with dynamic keys in fuzzy storage
  - Fixed TCP connection handling with cumulative timeouts
  - Improved handling of DNS limits in SPF module
  - Fixed multiple phishing detection false positives
  - Fixed DMARC structured headers encoding
  - WebUI Improvements
  - Reworked symbol description display on hover
  - Improved keyboard accessibility
  - Enhanced symbol rendering
  - Other Changes
  - Skip extra RBL checks when Received IP matches From IP
  - Multimap now uses only distinct text parts for content
    matching
  - Improved GPT module JSON parsing
  - Various configuration and logging improvements
  - Multiple performance optimizations
  The release includes significant improvements in configuration
  flexibility, security features, and overall stability. Users
  should pay special attention to the breaking changes in the
  Elasticsearch/OpenSearch plugin when upgrading.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1735128000">- added https://github.com/rspamd/rspamd/commit/ccb45df90df60fae36b9438cfb2b0088e590306b.patch
  To fix building without hyperscan</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1735128001">- we can enable hyperscan also on newer SLE 15 service packs</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741435200">- Update to 3.11.1
  - [Minor] Fix transposed results in rspamadm fuzzy_ping by
    @fatalbanana in #5260
  - [Feature] GPT: Add ollama support by @vstakhov in #5262
  - [Feature] Allow to hash any Lua types by @vstakhov in #5266
  - [Fix] connIp is not correctly added to request by @corbosman in
    [#5268]
  - Allow to use LLM for anonymize by @vstakhov in #5267
  - [minor] log queue id with cloudmark analysis string by
    @corbosman in #5269
  - Add ability to not send response_format in gpt plugin in order
    to support gpt4all by @JQuags in #5276
  - Fix Thunderbird for Android marked with
    FORGED_MUA_THUNDERBIRD_MSGID_UNKNOWN by @towo in #5275
  - [Feature] Allow to store shingles as opaque Lua data by
    @vstakhov in #5279
  - Fix issue with synchronous Redis calls by @vstakhov in #5281
  - [Minor] Fix some broken links by @fatalbanana in #5283
  - [Feature] Add 'noop' redis backend for scripts running by
    @vstakhov in #5290
  - [Enhancement] Expand Detection of Fake Reply Subjects Across
    Multiple Languages by @D0LLYNH0 in #5288
  - [Feature] Allow multiple lua scripts for fuzzy storage by
    @vstakhov in #5293
  - [Minor] Add another acceptable mime type for icon by
    @fatalbanana in #5294
  - [Minor] Respect ipv4 and ipv6 configurations for rbl resolve_ip
    by @japc in #5292
  - remove nixspam by @crpb in #5300
  - [Minor] rbl check_types was missing images by @japc in #5305
  - RBL: fix use of content_urls and images inside checks by
    @fatalbanana in #5310
  - fix: use sub_utf8 to strip headers value to not break utf8
    strings by @dragoangel in #5313
  - [Minor] Set RBL checks to bool true by @japc in #5314
  - [Minor] Rules regexp url separated and fix no subdomain cases
    for Google urls by @japc in #5315
  - [WebUI] Reset dropdown when clearing filters by @moisseev in
    [#5317]
  - [Feature] Support LLM models consensus by @vstakhov in #5320
  - [Feature] GPT: Support reason adding by @vstakhov in #5326
  - [Minor] Pass both the multimap and the rules descriptions for
    combined multimap on create by @japc in #5319
  - [Fix] properly close multipart/related boundary when adding
    text footer by @FreddleSpl0it in #5334
  - [Minor] Some small fixes to statistics_dump by @japc in #5335
  - [Fix] Verify key type to match DKIM signature type by @vstakhov
    in #5352
  - More features to GPT plugin by @vstakhov in #5356
  - [Fix] Avoid collision hacks in mempool variables hash by
    @vstakhov in #5357
  - Allow to disable RBLs via map by @vstakhov in #5359
  - Add ability to create timers from Lua by @vstakhov in #5363
  - Prevent option duplicates in rspamd_stats.pl by @jeromelebleu
    in #5365
  - Regenerate manpages with recent Pandoc version by @jeromelebleu
    in #5366
  - Fix spelling errors in libserver by @jeromelebleu in #5367
  - [Feature] Add Redis caching framework by @vstakhov in #5369
  - [Fix] Add expiration for neural ham and spam sets by
    @dragoangel in #5373
  - Better support for maps and IP-related fixes/improvements in
    settings by @amulet1 in #5372
  - Use caching framework in gpt module by @vstakhov in #5374
  - [Test] Update JavaScript linters by @moisseev in #5375
  - [Fix] Properly expire neural ham and spam sets by @dragoangel
    in #5376
  - [Feature] Try to check maps earlier if their expires is too
    long by @vstakhov in #5377
- drop patches no longer needed:
  ccb45df90df60fae36b9438cfb2b0088e590306b.patch
  fix_missing_return.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1749643200">- Update to 3.12.0
  - [Fix] Use bundled libfmt everywhere by @vstakhov in #5380
  - [Minor] Fix and improve format string processing in
    lua_logger_log_format() by @amulet1 in #5378
  - [Fix] initialize ollama result table by @JensErat in #5385
  - Update AUTHORS.md by @ertyu in #5391
  - [Fix] Update default URL for openphish by @fatalbanana in #5389
  - Allow CDB external maps by @vstakhov in #5390
  - [WebUI] Fix map editor modal handling by @moisseev in #5388
  - [Minor] gpt.lua improvements and one fix for reason_header by
    @alex081512 in #5387
  - [Minor] Lua logging improvements by @amulet1 in #5383
  - Fix typo on "destionation" -&gt; "destination" by @williamdes in
    [#5400]
  - [Feature] Plugin to integrate with Contextal platform by
    @fatalbanana in #5360
  - Improve maps status visibility by @vstakhov in #5386
  - [WebUI] Update Maps table by @moisseev in #5408
  - Add R_HTTP_URL_IN_FROM by @dragoangel in #5406
  - [Project] Modernize cmake by @vstakhov in #5412
  - [Fix] Greylist: Improve body hash calculations by @vstakhov in
    [#5417]
  - [Feature] Allow to specify Redis version by @vstakhov in #5419
  - fix(lua_bit) : Prevent lua-bit stack buffer overflow by
    @KIMDONGYEON00 in #5422
  - [WebUI] Update Bootstrap, D3 and PrismJS libraries by @moisseev
    in #5423
  - [Minor] contextal: conditionally disable timer, minor changes
    by @fatalbanana in #5426
  - Add Sieve and cPanel forwarding symbols by @dragoangel in #5407
  - [Minor] Use module name when calling set_pre_result by
    @fatalbanana in #5434
  - Fix writing rules tutorial link by @SuperSandro2000 in #5436
  - Correct "file.conf" from dist config files by @SuperSandro2000
    in #5444
  - [Minor] RPM: fix log directory attributes by @fatalbanana in
    [#5435]
  - Allow to use different servers for fuzzy operations by
    @vstakhov in #5453
  - [WebUI] Add Delete hash button by @moisseev in #5454
  - Added exclusion list for reputation by @kevinzb56 in #5443
  - Fix librdns maxname limit by @dragoangel in #5455
  - [Fix] libmime: doctest 2.4.12 compatibilty by @xandris in #5458
  - [WebUI] Add deletion of specific fuzzy hashes by @moisseev in
    [#5457]
  - Some improvements to the proxy by @vstakhov in #5456
  - Added --non-default Option to rspamadm configdump for Local
    Configuration by @kevinzb56 in #5452
  - gpt.lua: Remove "thinking" and fix errorlog by @NameWeb in
    [#5459]
  - [Minor] Update API docs RE: multiple HTTP headers by
    @fatalbanana in #5468
  - [Minor] Fix for docs of lua_redis.redis_make_request_taskless
    by @left-try in #5470
  - [Feature] Magic: Support HEIC files by @vstakhov in #5471
  - Add FREEMAIL_REPLYTO_NEQ_FROM rule by @dragoangel in #5413
  - Modify documentation for rspamc "-P" parameter by @TwizzyDizzy
    in #5473
  - fix(lua_redis): Improve Redis script loading by @jendis in
    [#5464]
  - [Minor] Fix Debian package build by @fatalbanana in #5475
  - [Rework] Replies: consider all recipients and use smtp ones by
    @vstakhov in #5428
  - [Minor] Print error on multimap invalid type by @japc in #5477
  - [Minor] Fix fuzzy lua callback when there are no shingles by
    @fatalbanana in #5486
  - [WebUI] Add file upload to Test selectors by @moisseev in #5483
  - [Minor] Log the token usage for OpenAI (compatible) plain
    conversion by @lucasRolff in #5488
  - Reputation Plugin: Fix comment to correspond the code above by
    @heptalium in #5489
  - Fix some issues with libucl by @vstakhov in #5490
  - [Minor] Correcting the index number for is_spam by @kevinzb56
    in #5495
  - Logging improvements by @vstakhov in #5492
  - [Fix] Correct logic error in milter_headers.lua: skip_wanted()
    by @drclau in #5496</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1749643201">- as it currently always uses the bundled fmt, disable the requires</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1750161600">- Update to 3.12.1
  - Remove aweber.com from spf_dkim_whitelist.inc by @TaaviE in
    [#5500]
  - [Fix] Fix several issues with the lua_logger by @vstakhov in
    [#5503]
  - [Test] Detect libicu idna behaviour and select the appropriate
    tests by @vstakhov in #5506
  - [Fix] Fix proxy headers duplication by @vstakhov in #5507
  - [Minor] Treat *.library-ms and *.search-ms attachments as
    harmful by @twesterhever in #5509
  - Revert "[Minor] Treat *.library-ms and *.search-ms attachments
    as harmful" by @vstakhov in #5511
  - [Fix] Another fix for maps concurrent load by @vstakhov in
    [#5512]
  - [Feature] Add /bayes/classifiers HTTP endpoint by @moisseev in
    [#5517]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1758110400">- Update to 3.13.0
  - 1. Multiclass Bayes Classification ([#5547](#5547))
  - Bayesian classifiers now support multi-class
    differentiation—labels like spam, ham, transactional,
    newsletters, phishing, and more (2-20 classes supported).
  - Efficient: all classes for a message handled in a single
    Redis call.
  - Backward compatible with old config (is_spam); new config
    enables named classes and labels.
  - Autolearn and Lua API support multiclass workflows.
  - Fully class-aware Redis caching.
    Examples:
    rspamc learn_class:transactional receipt.eml or rspamc
    learn_class:newsletter newsletter.eml
  - Lua API: task:get_multiclass_result() gives class
    probabilities and confidence.
  - 2. Neural Module Overhaul ([#5579](#5579))
  - Complete rework into a provider-based architecture: combines
    symbols, LLM embeddings (OpenAI, etc.), and planned providers
    (Bayes/FastText, in the future).
  - Pluggable fusion—multiple feature types can be combined for
    richer, more accurate classification.
  - Trained normalization (unit/zscore/none), used consistently
    at training/inference.
  - Redis-backed caching for LLM embeddings to control
    cost/latency.
  - Configurable via providers, versioned for safe upgrades,
    fully backwards compatible.
  - 3. Multimap Selectors &amp; Regex Enhancements ([#5615](#5615))
  - Powerful, SA-style “selector” rules in multimap module for
    regex filtering on message fields.
  - Dedicated selector field, integrated with Hyperscan and regex
    cache.
  - Example: selector FROM_CORP from:domain =~ /corp\.example$/i
  - 4. MIME &amp; HTML Feature Extraction ([#5619](#5619),
    [#5608](#5608))
  - MIME parser detects part types automatically.
  - HTML parser project extracts more features for downstream
    modules.
  - 5. HTTP, DNS, Upstream Improvements ([#5614](#5614),
    [#5603](#5603), [#5601](#5601))
  - Flexible HTTP timeout config and handling.
  - Upstream reliability: probe mode, less need for forced
    revive.
  - DNS nameserver resolution moved to getaddrinfo.
  - 6. Modernization &amp; Maintenance ([#5592](#5592), [#5598](#5598),
    [#5580](#5580), others)
  - Standardized on C++20; builds, test, and CI improvements (ARM
    support, modern fallback maps).
  - Regular code cleaning, bugfixes, and RPM tweaks.
  - 7. WebUI &amp; UX ([#5606](#5606), [#5607](#5607))
  - E2E scan test flows in WebUI.
  - Bootstrap upgrade, Bayes class management from the web
    interface.
  - 8. GPT &amp; LLM Integrations ([#5612](#5612), [#5572](#5572))
  - Improved handling of GPT model parameters and prompts.
  - Initial support for OpenAI GPT-5 and other models.
- refresh patch rspamd-conf.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1758888000">- Fix build on aarch64 by enabling hyperscan support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1759233600">- Update to 3.13.1
  - Added
  - Archive module: Full support for encrypted ZIP archives,
    including both ZipCrypto and AES encryption; both reading and
    writing of AES-encrypted ZIP archives is supported with
    updated Lua bindings using libarchive for flexible
    compatibility with all standard ZIP encryption schemes
  - Encrypted maps: Support for encrypted maps to enable new map
    distribution scenarios
  - Redis TLS: Configurable TLS connections in Redis backend for
    improved compatibility in secure environments
  - Improved
  - MIME encoding refactoring: Major overhauls and multiple fixes
    for MIME encoding logic, including improved handling and
    decoding of UTF-8 in MIME headers, resulting in more robust
    email processing and better compatibility
  - Learning system: Numerous fixes to learn checks and autolearn
    flag handling, prevention of duplicate message learning, and
    extended multiclass learning test coverage
  - Map helpers alignment: Map helpers now enforced to be aligned
    to 64 bytes to prevent unaligned memory access errors on
    certain platforms
  - CLI enhancements: Enhanced secretbox CLI and additional
    security test coverage
  - Platform compatibility: Improved compatibility with Lua
    versions above 5.1 and better support for 32-bit platforms
  - Fixed
  - Critical fixes: Fixed bug when converting zero-length strings
    to numbers
  - XML parsing: Fixed XML prolog detection in lua_magic module
  - Build issues: Fixed build issues on 32-bit platforms
  - Empty input handling: Addressed issues with empty input
    handling in lua_magic
  - Test stability: Improved stability of automated testing with
    multiple miscellaneous test fixes
  - Compatibility: Minor compatibility improvements and bugfixes
    (buffer allocation, missing cmath include, etc.)
  This release introduces archive module extensibility with full
  encrypted archive support including AES, new map distribution
  capabilities, secure integration options with Redis TLS, robust
  email and message processing improvements, and bugfixes for
  broader platform compatibility. This is recommended as a major
  stability and feature update.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760443200">- Update to 3.13.2
  - [Feature] Add user/domain context support for LLM-based
    classification by @vstakhov in #5647
  - Implement Metadefender hash lookup module by @vstakhov in #5656
  - Add vault kv version 2 support by @vstakhov in #5654
  - Fix duplicate symbol in once_received plugin by @vstakhov in
    [#5658]
  - [Fix] Enforce server-controlled HTTP map refresh intervals by
    @vstakhov in #5660
  - [Fix] Propagate unused Redis Sentinel options by @fatalbanana
    in #5597
  - Fix rspamd dkim key loading for ed25519 by @vstakhov in #5664
  - Fix dkim relaxed bodyhash calculation for spaces by @vstakhov
    in #5662
  - Feat: Added rua address exclusion in dmarc.lua by @croessner in
    [#5653]
  - [Feature] Add separate encryption keys for read/write
    operations in fuzzy_check by @vstakhov in #5665</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1760875200">- Split AppArmor profile into subpackage
  To avoid unnecessarily pulling in AppArmor packages
- Reload AppArmor profile post-install</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1762516800">- We finally have natively built packages with for luajit-lpeg in
  Tumbleweed, we no longer need to mix with lua51 packages there
  anymore. For older distros we still need it. Guard handling for
  those distros with bcond mixed_luajit_lua and keep the version
  comparison there. Also prepare so we can handle luajit2 if
  needed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1762862400">- Update to 3.14.0
  - 🔥 Major Features
  - 🎯 HTML Fuzzy Hashing
  - Structural similarity detection for HTML content (#5661,
    [#5720])
  - Per-rule text_hashes toggle for HTML-only matching
  - 🌐 TCP Fuzzy Protocol
  - Full TCP support with auto-switch from UDP (#5669)
  - Production-ready connection management and framing
  - 🔗 Advanced URL Processing
  - New task:get_cta_urls() API for CTA detection (#5732)
  - DoS protection: hash-based deduplication with 50k URL limit
  - HTML URL rewriting infrastructure (#5676)
  - 🤖 AI &amp; WebUI
  - Web search context for LLM plugin with Redis caching
    (#5732)
  - Dark mode with auto-detection (#5725)
  - 📧 Email &amp; Integration
  - Advanced aliases with loop detection (#5655)
  - Milter ESMTP argument parsing with Lua API (#5663)
  - Postfix wizard for automated integration (#5667)
  - 🐛 Critical Fixes
  - 🌐 DNS Stability
  - Fixed UDP→TCP packet truncation on retransmits (#5739)
  - Fixed transaction ID collision and nameserver round-robin
    (#5721, #5739)
  - 🔒 Memory &amp; Stability
  - Fixed allocator crashes (jemalloc/malloc mixing) (#5721,
    [#5724])
  - Fixed memory leaks in fuzzy storage, OpenSSL, UCL (#5709)
  - Hyperscan runtime version check prevents cache corruption
    (#5724)
  - 📊 DMARC &amp; Protocol
  - Fixed Redis connection exhaustion with batching + GC
    (#5737)
  - ARC RFC 8617 compliance + ed25519 support (#5684)
  - Composites two-phase evaluation (#5681)
  - 🐧 BSD &amp; Security
  - Fixed FreeBSD/NetBSD/OpenBSD builds (#5726, #5729)
  - Fuzzy TCP race conditions and buffer overflows (#5669)
  - ⚡ Performance
  - khash migration for better fuzzy_check performance (#5720)
  - Intrusive heap implementation (#5693)
  - Configurable Bayes guards (#5701)
  https://github.com/rspamd/rspamd/blob/3.14.0/ChangeLog</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1765454400">- Update to 3.14.2
  🔥 Key Features
    📤 Metadata Exporter Enhancements
  - New formatters: multipart, msgpack, and json_with_message
  - Binary message support and efficient multipart uploads
  - Deprecated old meta_headers option in favor of new formatters
    🛡️ DMARC RUA Validation
  - New rspamadm dmarc_report --recheck-rua flag
  - Re-validate cached report addresses against exclusion maps
  - Useful for validating domains against RBLs before sending
    reports
    ✉️ Milter Headers Control
  - Selective Authentication-Results removal with remove_ar_from
  - Target specific domains for header cleanup
    📚 Documentation
  - Added comprehensive Python/aiohttp example for handling
    multipart metadata exports
  https://rspamd.com/doc/changelog.html</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1774872000">- Update to 4.0.0
  Upgrade Notes
  Action required for per-user Bayes with Redis sharding: Jump Hash
  has been replaced with Ring Hash (Ketama). Run rspamadm
  statistics_dump migrate after upgrading or accept temporary
  accuracy loss as data is re-learned. Single Redis server setups
  are not affected.
  Other breaking changes
  - Content URLs included by default — URLs from PDF and other
    computed parts are now returned by task:get_urls(). Set
    include_content_urls = false in local.d/options.inc to restore
    old behavior.
  - SSL auto-detection — ssl = true worker option removed; SSL is
    now auto-detected from bind socket flags.
  - libfasttext removed — Replaced with built-in mmap-based shim.
    ENABLE_FASTTEXT cmake option no longer exists. Existing models
    still work with massive memory savings.
  - SenderScore RBLs disabled — Requires MyValidity account
    registration; was non-functional without it.
  - Suspicious TLDs now map-based — Hardcoded list replaced with
    conf/maps.d/suspicious_tlds.inc, customizable via local.d/.
  - Neural autolearn options renamed — Now match RBL module naming
    conventions.
  - Token bucket load balancing — Enabled by default for proxy
    upstreams, replacing simple round-robin.
  - DKIM RFC conformance — Unknown and broken DKIM keys now handled
    per RFC.
  Key Features
  - /checkv3 Multipart Protocol New /checkv3 endpoint using
    multipart/form-data requests and multipart/mixed responses.
    Metadata sent as structured JSON/msgpack instead of HTTP
    headers. Per-part zstd compression, zero-copy writev responses,
    and proxy support. Client-side: rspamc --protocol-v3 / rspamc
  - -msgpack.
  - Pluggable Async Hyperscan Cache Hyperscan compilation and
    caching moved to an async Lua backend with Redis storage
    support. Shared hyperscan databases across workers and hosts.
    Self-healing cache auto-detects stale blobs and triggers
    recompile. Small databases compiled in-memory without file
    caching.
  - Multi-Flag Fuzzy Hashes Single fuzzy hash can carry up to 8
    flags simultaneously (epoch 12). Multiple rules match the same
    digest with independent flag/value pairs. Redis update path
    rewritten in Lua with EVALSHA + NOSCRIPT recovery. Fully
    backward-compatible.
  - HTML Fuzzy Phishing Detection Dual-mode fuzzy: template
    matching + domain-sensitive matching. New FUZZY_HTML_PHISHING
    symbol fires when an HTML template matches but link domains
    differ — detecting reused phishing templates with swapped
    links.
  - HTTPS Server Support Workers can now serve HTTPS natively,
    enabling secure WebUI and API without a reverse proxy. SSL
    auto-detected from bind socket configuration.
  - Built-in Fasttext Shim External C++ library replaced with
    zero-dependency mmap-based reader. Shared memory across workers
    (MAP_SHARED) eliminates per-worker heap copies (~500MB-7GB
    savings). Hot-reloadable via maps infrastructure.
  - UUID v7 Per Task Native UUID v7 generation per task, synced
    with Log-Tag header. New ClickHouse UUID v7 column support for
    correlation across systems.
  - Neural / LLM Embeddings External pretrained neural model
    support. Multi-layer funnel architecture with language-based
    model/URL selection. Multi-model fasttext embedding with SIF
    word weighting. Expression-based autolearn for LLM providers.
  - Multi-Class Bayes Classifiers support arbitrary classes beyond
    binary spam/ham. WebUI learning UI, /stat and
    /bayes/classifiers endpoints updated. Shard migration tool for
    the Jump Hash to Ring Hash transition.
  - Legacy Protocol Enhancements Milter add/remove headers and
    extended symbol info now exposed in RSPAMC/SPAMC text protocol.
    Enables Exim and other legacy clients to access milter headers.
  Other Notable Features
  - Token bucket load balancing for proxy upstreams with
    configurable burst parameters
  - Ring Hash (Ketama) consistent hashing with true minimal
    disruption and recovery
  - Structured metadata exporter with zstd compression and detected
    MIME types
  - ARC trusted_authserv_id for reusing upstream
    Authentication-Results headers
  - Reply-To validity checks in headers_checks
  - Fuzzy hashes in Redis history for matched hash tracking
  - HTTP content negotiation framework with zstd compression for
    /stat endpoint
  - Attachment filename sub-tokens for improved Bayes classifier
    accuracy
  - GPT module — configurable consensus thresholds and
    context_augment hook
  - New rspamadm subcommands — autolearnstats, logstats, mapstats
  - ASCII85 decode and PDF object padding evasion fixes for PDF
    extraction
  Critical Fixes
  - Stop ev_io watcher in fuzzy UDP session destroy
    (use-after-free)
  - Fix CPU busy-loop in fuzzy TCP client
  - RHEL/CentOS 10+ SHA-1 DKIM crypto-policy bypass
  - DKIM RSA signing memory leak fix
  - Self-healing hyperscan cache for stale blobs
  - Multiple use-after-free fixes on config reload (regexp maps,
    multipatterns)
  - PCRE2 complexity checks before JIT compilation
  - Rework alternative parts detection (R_PARTS_DIFFER)
  - SPF address family flag inheritance fix
  - Ratelimit compatibility with old records
  - Default map URL path to "/" when no path component (crash fix)
  https://docs.rspamd.com/changelog/4.0.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1775390400">- Update to 4.0.1
  - Features
  - Settings merge: Layered collect-then-merge flow for settings,
    weak dependencies and disabled status in symcache,
    force-enable override for settings conflicts
  - Fuzzy dynamic blocks: Dynamic block API for fuzzy storage
    worker, custom response codes (403 for ratelimits vs 503 for
    bans), ratelimit_whitelist check exposed to Lua
  - Bug fixes
  - Proxy milter fd leak: Original fd was not closed after milter
    dup(), leaking one fd per milter connection — caused
    unbounded CLOSE_WAIT accumulation in production (regression
    in 4.0.0)
  - Proxy self-scan task timeout: Used upstream wire timeout
    (e.g. 120s) instead of task_timeout (8s default) for
    self-scan tasks
  - ARC AAR parsing (#5963): Replace naive semicolon split with
    LPeg grammar respecting RFC 8601 comments and quoted strings
    — fixes cv=fail on multi-hop ARC chains where i=N appeared
    inside comments
  - Fix ev_now() usage for dynamic ban expiry
  - Fix deps in pre/postfilters and settings flow
  - Fix missing #include &lt;memory&gt; in redis_backend.cxx</changelog>
</package>
<package pkgid="9872e034d8c8f48a6f1ebeb7a7b4af25b6dfd28f0d920da9702e02b1ee869ee864eceb782cdc1bae00526fd1a307bf40f1f75f0202798a15375e005cbb90d4be" name="rspamd" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="144.4"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729080000">- Update to 3.10.1
  - [Fix] Use correct type for keylen in lua_ucl_newindex by
    @arkamar in #5169
  - Update hiredis library removing all hacks by @vstakhov in #5167
  - Remove proxy from url_redirector.conf as it not the option by
    @dragoangel in #5164
  - chore(publicsuffix): update effective_tld_names.dat by @wdhdev
    in #5176
  - [Fix] Avoid null-bytes in Log-Tag header value by @smarsching
    in #5179
  - [Fix] Do not abort when OpenSSL is broken, report that to a
    user by @vstakhov in #5188
  - Some build fixes by @vstakhov in #5189
  - Some more fixes by @vstakhov in #5190</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- Update to 3.10.2
  - [CritFix] Fix ARC-Seal signing
  - [Fix] add EOF to openmetrics response in proxy and server</changelog>
  <changelog author="Jacob Tilman Sievert &lt;sievert@b1-systems.de&gt;" date="1729857600">- Update to 3.10.3
  - [Fix] move PluginDir to correct location to prevent recursive
    load of non plugins</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734350400">- Update to 3.11.0
  - Breaking Changes
  - Elasticsearch/OpenSearch Plugin: Major rework with breaking
    changes:
  - Added support for Elasticsearch 8 &amp; OpenSearch 2
  - Added index policy with logs retention
  - Updated configuration format
  - Major Features
  - Added LRU cache for last filled ratelimit buckets
  - Added utilities to manage ratelimit buckets
  - Added include/exclude logic for headers processing
  - Improved address rotation algorithm for upstream selection
  - Added rspamadm mime strip command for attachments removal
  - Added new message anonymization capabilities
  - Replaced fastutf with simdutf for better architecture support
    and performance
  - Added more ways to extend Rspamd configuration, including
    lua.local.d folder
  - Important Fixes
  - Fixed ARC-Seal signing issues
  - Fixed RFC 2047 header encoding
  - Fixed issues with dynamic keys in fuzzy storage
  - Fixed TCP connection handling with cumulative timeouts
  - Improved handling of DNS limits in SPF module
  - Fixed multiple phishing detection false positives
  - Fixed DMARC structured headers encoding
  - WebUI Improvements
  - Reworked symbol description display on hover
  - Improved keyboard accessibility
  - Enhanced symbol rendering
  - Other Changes
  - Skip extra RBL checks when Received IP matches From IP
  - Multimap now uses only distinct text parts for content
    matching
  - Improved GPT module JSON parsing
  - Various configuration and logging improvements
  - Multiple performance optimizations
  The release includes significant improvements in configuration
  flexibility, security features, and overall stability. Users
  should pay special attention to the breaking changes in the
  Elasticsearch/OpenSearch plugin when upgrading.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1735128000">- added https://github.com/rspamd/rspamd/commit/ccb45df90df60fae36b9438cfb2b0088e590306b.patch
  To fix building without hyperscan</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1735128001">- we can enable hyperscan also on newer SLE 15 service packs</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741435200">- Update to 3.11.1
  - [Minor] Fix transposed results in rspamadm fuzzy_ping by
    @fatalbanana in #5260
  - [Feature] GPT: Add ollama support by @vstakhov in #5262
  - [Feature] Allow to hash any Lua types by @vstakhov in #5266
  - [Fix] connIp is not correctly added to request by @corbosman in
    [#5268]
  - Allow to use LLM for anonymize by @vstakhov in #5267
  - [minor] log queue id with cloudmark analysis string by
    @corbosman in #5269
  - Add ability to not send response_format in gpt plugin in order
    to support gpt4all by @JQuags in #5276
  - Fix Thunderbird for Android marked with
    FORGED_MUA_THUNDERBIRD_MSGID_UNKNOWN by @towo in #5275
  - [Feature] Allow to store shingles as opaque Lua data by
    @vstakhov in #5279
  - Fix issue with synchronous Redis calls by @vstakhov in #5281
  - [Minor] Fix some broken links by @fatalbanana in #5283
  - [Feature] Add 'noop' redis backend for scripts running by
    @vstakhov in #5290
  - [Enhancement] Expand Detection of Fake Reply Subjects Across
    Multiple Languages by @D0LLYNH0 in #5288
  - [Feature] Allow multiple lua scripts for fuzzy storage by
    @vstakhov in #5293
  - [Minor] Add another acceptable mime type for icon by
    @fatalbanana in #5294
  - [Minor] Respect ipv4 and ipv6 configurations for rbl resolve_ip
    by @japc in #5292
  - remove nixspam by @crpb in #5300
  - [Minor] rbl check_types was missing images by @japc in #5305
  - RBL: fix use of content_urls and images inside checks by
    @fatalbanana in #5310
  - fix: use sub_utf8 to strip headers value to not break utf8
    strings by @dragoangel in #5313
  - [Minor] Set RBL checks to bool true by @japc in #5314
  - [Minor] Rules regexp url separated and fix no subdomain cases
    for Google urls by @japc in #5315
  - [WebUI] Reset dropdown when clearing filters by @moisseev in
    [#5317]
  - [Feature] Support LLM models consensus by @vstakhov in #5320
  - [Feature] GPT: Support reason adding by @vstakhov in #5326
  - [Minor] Pass both the multimap and the rules descriptions for
    combined multimap on create by @japc in #5319
  - [Fix] properly close multipart/related boundary when adding
    text footer by @FreddleSpl0it in #5334
  - [Minor] Some small fixes to statistics_dump by @japc in #5335
  - [Fix] Verify key type to match DKIM signature type by @vstakhov
    in #5352
  - More features to GPT plugin by @vstakhov in #5356
  - [Fix] Avoid collision hacks in mempool variables hash by
    @vstakhov in #5357
  - Allow to disable RBLs via map by @vstakhov in #5359
  - Add ability to create timers from Lua by @vstakhov in #5363
  - Prevent option duplicates in rspamd_stats.pl by @jeromelebleu
    in #5365
  - Regenerate manpages with recent Pandoc version by @jeromelebleu
    in #5366
  - Fix spelling errors in libserver by @jeromelebleu in #5367
  - [Feature] Add Redis caching framework by @vstakhov in #5369
  - [Fix] Add expiration for neural ham and spam sets by
    @dragoangel in #5373
  - Better support for maps and IP-related fixes/improvements in
    settings by @amulet1 in #5372
  - Use caching framework in gpt module by @vstakhov in #5374
  - [Test] Update JavaScript linters by @moisseev in #5375
  - [Fix] Properly expire neural ham and spam sets by @dragoangel
    in #5376
  - [Feature] Try to check maps earlier if their expires is too
    long by @vstakhov in #5377
- drop patches no longer needed:
  ccb45df90df60fae36b9438cfb2b0088e590306b.patch
  fix_missing_return.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1749643200">- Update to 3.12.0
  - [Fix] Use bundled libfmt everywhere by @vstakhov in #5380
  - [Minor] Fix and improve format string processing in
    lua_logger_log_format() by @amulet1 in #5378
  - [Fix] initialize ollama result table by @JensErat in #5385
  - Update AUTHORS.md by @ertyu in #5391
  - [Fix] Update default URL for openphish by @fatalbanana in #5389
  - Allow CDB external maps by @vstakhov in #5390
  - [WebUI] Fix map editor modal handling by @moisseev in #5388
  - [Minor] gpt.lua improvements and one fix for reason_header by
    @alex081512 in #5387
  - [Minor] Lua logging improvements by @amulet1 in #5383
  - Fix typo on "destionation" -&gt; "destination" by @williamdes in
    [#5400]
  - [Feature] Plugin to integrate with Contextal platform by
    @fatalbanana in #5360
  - Improve maps status visibility by @vstakhov in #5386
  - [WebUI] Update Maps table by @moisseev in #5408
  - Add R_HTTP_URL_IN_FROM by @dragoangel in #5406
  - [Project] Modernize cmake by @vstakhov in #5412
  - [Fix] Greylist: Improve body hash calculations by @vstakhov in
    [#5417]
  - [Feature] Allow to specify Redis version by @vstakhov in #5419
  - fix(lua_bit) : Prevent lua-bit stack buffer overflow by
    @KIMDONGYEON00 in #5422
  - [WebUI] Update Bootstrap, D3 and PrismJS libraries by @moisseev
    in #5423
  - [Minor] contextal: conditionally disable timer, minor changes
    by @fatalbanana in #5426
  - Add Sieve and cPanel forwarding symbols by @dragoangel in #5407
  - [Minor] Use module name when calling set_pre_result by
    @fatalbanana in #5434
  - Fix writing rules tutorial link by @SuperSandro2000 in #5436
  - Correct "file.conf" from dist config files by @SuperSandro2000
    in #5444
  - [Minor] RPM: fix log directory attributes by @fatalbanana in
    [#5435]
  - Allow to use different servers for fuzzy operations by
    @vstakhov in #5453
  - [WebUI] Add Delete hash button by @moisseev in #5454
  - Added exclusion list for reputation by @kevinzb56 in #5443
  - Fix librdns maxname limit by @dragoangel in #5455
  - [Fix] libmime: doctest 2.4.12 compatibilty by @xandris in #5458
  - [WebUI] Add deletion of specific fuzzy hashes by @moisseev in
    [#5457]
  - Some improvements to the proxy by @vstakhov in #5456
  - Added --non-default Option to rspamadm configdump for Local
    Configuration by @kevinzb56 in #5452
  - gpt.lua: Remove "thinking" and fix errorlog by @NameWeb in
    [#5459]
  - [Minor] Update API docs RE: multiple HTTP headers by
    @fatalbanana in #5468
  - [Minor] Fix for docs of lua_redis.redis_make_request_taskless
    by @left-try in #5470
  - [Feature] Magic: Support HEIC files by @vstakhov in #5471
  - Add FREEMAIL_REPLYTO_NEQ_FROM rule by @dragoangel in #5413
  - Modify documentation for rspamc "-P" parameter by @TwizzyDizzy
    in #5473
  - fix(lua_redis): Improve Redis script loading by @jendis in
    [#5464]
  - [Minor] Fix Debian package build by @fatalbanana in #5475
  - [Rework] Replies: consider all recipients and use smtp ones by
    @vstakhov in #5428
  - [Minor] Print error on multimap invalid type by @japc in #5477
  - [Minor] Fix fuzzy lua callback when there are no shingles by
    @fatalbanana in #5486
  - [WebUI] Add file upload to Test selectors by @moisseev in #5483
  - [Minor] Log the token usage for OpenAI (compatible) plain
    conversion by @lucasRolff in #5488
  - Reputation Plugin: Fix comment to correspond the code above by
    @heptalium in #5489
  - Fix some issues with libucl by @vstakhov in #5490
  - [Minor] Correcting the index number for is_spam by @kevinzb56
    in #5495
  - Logging improvements by @vstakhov in #5492
  - [Fix] Correct logic error in milter_headers.lua: skip_wanted()
    by @drclau in #5496</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1749643201">- as it currently always uses the bundled fmt, disable the requires</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1750161600">- Update to 3.12.1
  - Remove aweber.com from spf_dkim_whitelist.inc by @TaaviE in
    [#5500]
  - [Fix] Fix several issues with the lua_logger by @vstakhov in
    [#5503]
  - [Test] Detect libicu idna behaviour and select the appropriate
    tests by @vstakhov in #5506
  - [Fix] Fix proxy headers duplication by @vstakhov in #5507
  - [Minor] Treat *.library-ms and *.search-ms attachments as
    harmful by @twesterhever in #5509
  - Revert "[Minor] Treat *.library-ms and *.search-ms attachments
    as harmful" by @vstakhov in #5511
  - [Fix] Another fix for maps concurrent load by @vstakhov in
    [#5512]
  - [Feature] Add /bayes/classifiers HTTP endpoint by @moisseev in
    [#5517]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1758110400">- Update to 3.13.0
  - 1. Multiclass Bayes Classification ([#5547](#5547))
  - Bayesian classifiers now support multi-class
    differentiation—labels like spam, ham, transactional,
    newsletters, phishing, and more (2-20 classes supported).
  - Efficient: all classes for a message handled in a single
    Redis call.
  - Backward compatible with old config (is_spam); new config
    enables named classes and labels.
  - Autolearn and Lua API support multiclass workflows.
  - Fully class-aware Redis caching.
    Examples:
    rspamc learn_class:transactional receipt.eml or rspamc
    learn_class:newsletter newsletter.eml
  - Lua API: task:get_multiclass_result() gives class
    probabilities and confidence.
  - 2. Neural Module Overhaul ([#5579](#5579))
  - Complete rework into a provider-based architecture: combines
    symbols, LLM embeddings (OpenAI, etc.), and planned providers
    (Bayes/FastText, in the future).
  - Pluggable fusion—multiple feature types can be combined for
    richer, more accurate classification.
  - Trained normalization (unit/zscore/none), used consistently
    at training/inference.
  - Redis-backed caching for LLM embeddings to control
    cost/latency.
  - Configurable via providers, versioned for safe upgrades,
    fully backwards compatible.
  - 3. Multimap Selectors &amp; Regex Enhancements ([#5615](#5615))
  - Powerful, SA-style “selector” rules in multimap module for
    regex filtering on message fields.
  - Dedicated selector field, integrated with Hyperscan and regex
    cache.
  - Example: selector FROM_CORP from:domain =~ /corp\.example$/i
  - 4. MIME &amp; HTML Feature Extraction ([#5619](#5619),
    [#5608](#5608))
  - MIME parser detects part types automatically.
  - HTML parser project extracts more features for downstream
    modules.
  - 5. HTTP, DNS, Upstream Improvements ([#5614](#5614),
    [#5603](#5603), [#5601](#5601))
  - Flexible HTTP timeout config and handling.
  - Upstream reliability: probe mode, less need for forced
    revive.
  - DNS nameserver resolution moved to getaddrinfo.
  - 6. Modernization &amp; Maintenance ([#5592](#5592), [#5598](#5598),
    [#5580](#5580), others)
  - Standardized on C++20; builds, test, and CI improvements (ARM
    support, modern fallback maps).
  - Regular code cleaning, bugfixes, and RPM tweaks.
  - 7. WebUI &amp; UX ([#5606](#5606), [#5607](#5607))
  - E2E scan test flows in WebUI.
  - Bootstrap upgrade, Bayes class management from the web
    interface.
  - 8. GPT &amp; LLM Integrations ([#5612](#5612), [#5572](#5572))
  - Improved handling of GPT model parameters and prompts.
  - Initial support for OpenAI GPT-5 and other models.
- refresh patch rspamd-conf.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1758888000">- Fix build on aarch64 by enabling hyperscan support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1759233600">- Update to 3.13.1
  - Added
  - Archive module: Full support for encrypted ZIP archives,
    including both ZipCrypto and AES encryption; both reading and
    writing of AES-encrypted ZIP archives is supported with
    updated Lua bindings using libarchive for flexible
    compatibility with all standard ZIP encryption schemes
  - Encrypted maps: Support for encrypted maps to enable new map
    distribution scenarios
  - Redis TLS: Configurable TLS connections in Redis backend for
    improved compatibility in secure environments
  - Improved
  - MIME encoding refactoring: Major overhauls and multiple fixes
    for MIME encoding logic, including improved handling and
    decoding of UTF-8 in MIME headers, resulting in more robust
    email processing and better compatibility
  - Learning system: Numerous fixes to learn checks and autolearn
    flag handling, prevention of duplicate message learning, and
    extended multiclass learning test coverage
  - Map helpers alignment: Map helpers now enforced to be aligned
    to 64 bytes to prevent unaligned memory access errors on
    certain platforms
  - CLI enhancements: Enhanced secretbox CLI and additional
    security test coverage
  - Platform compatibility: Improved compatibility with Lua
    versions above 5.1 and better support for 32-bit platforms
  - Fixed
  - Critical fixes: Fixed bug when converting zero-length strings
    to numbers
  - XML parsing: Fixed XML prolog detection in lua_magic module
  - Build issues: Fixed build issues on 32-bit platforms
  - Empty input handling: Addressed issues with empty input
    handling in lua_magic
  - Test stability: Improved stability of automated testing with
    multiple miscellaneous test fixes
  - Compatibility: Minor compatibility improvements and bugfixes
    (buffer allocation, missing cmath include, etc.)
  This release introduces archive module extensibility with full
  encrypted archive support including AES, new map distribution
  capabilities, secure integration options with Redis TLS, robust
  email and message processing improvements, and bugfixes for
  broader platform compatibility. This is recommended as a major
  stability and feature update.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760443200">- Update to 3.13.2
  - [Feature] Add user/domain context support for LLM-based
    classification by @vstakhov in #5647
  - Implement Metadefender hash lookup module by @vstakhov in #5656
  - Add vault kv version 2 support by @vstakhov in #5654
  - Fix duplicate symbol in once_received plugin by @vstakhov in
    [#5658]
  - [Fix] Enforce server-controlled HTTP map refresh intervals by
    @vstakhov in #5660
  - [Fix] Propagate unused Redis Sentinel options by @fatalbanana
    in #5597
  - Fix rspamd dkim key loading for ed25519 by @vstakhov in #5664
  - Fix dkim relaxed bodyhash calculation for spaces by @vstakhov
    in #5662
  - Feat: Added rua address exclusion in dmarc.lua by @croessner in
    [#5653]
  - [Feature] Add separate encryption keys for read/write
    operations in fuzzy_check by @vstakhov in #5665</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1760875200">- Split AppArmor profile into subpackage
  To avoid unnecessarily pulling in AppArmor packages
- Reload AppArmor profile post-install</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1762516800">- We finally have natively built packages with for luajit-lpeg in
  Tumbleweed, we no longer need to mix with lua51 packages there
  anymore. For older distros we still need it. Guard handling for
  those distros with bcond mixed_luajit_lua and keep the version
  comparison there. Also prepare so we can handle luajit2 if
  needed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1762862400">- Update to 3.14.0
  - 🔥 Major Features
  - 🎯 HTML Fuzzy Hashing
  - Structural similarity detection for HTML content (#5661,
    [#5720])
  - Per-rule text_hashes toggle for HTML-only matching
  - 🌐 TCP Fuzzy Protocol
  - Full TCP support with auto-switch from UDP (#5669)
  - Production-ready connection management and framing
  - 🔗 Advanced URL Processing
  - New task:get_cta_urls() API for CTA detection (#5732)
  - DoS protection: hash-based deduplication with 50k URL limit
  - HTML URL rewriting infrastructure (#5676)
  - 🤖 AI &amp; WebUI
  - Web search context for LLM plugin with Redis caching
    (#5732)
  - Dark mode with auto-detection (#5725)
  - 📧 Email &amp; Integration
  - Advanced aliases with loop detection (#5655)
  - Milter ESMTP argument parsing with Lua API (#5663)
  - Postfix wizard for automated integration (#5667)
  - 🐛 Critical Fixes
  - 🌐 DNS Stability
  - Fixed UDP→TCP packet truncation on retransmits (#5739)
  - Fixed transaction ID collision and nameserver round-robin
    (#5721, #5739)
  - 🔒 Memory &amp; Stability
  - Fixed allocator crashes (jemalloc/malloc mixing) (#5721,
    [#5724])
  - Fixed memory leaks in fuzzy storage, OpenSSL, UCL (#5709)
  - Hyperscan runtime version check prevents cache corruption
    (#5724)
  - 📊 DMARC &amp; Protocol
  - Fixed Redis connection exhaustion with batching + GC
    (#5737)
  - ARC RFC 8617 compliance + ed25519 support (#5684)
  - Composites two-phase evaluation (#5681)
  - 🐧 BSD &amp; Security
  - Fixed FreeBSD/NetBSD/OpenBSD builds (#5726, #5729)
  - Fuzzy TCP race conditions and buffer overflows (#5669)
  - ⚡ Performance
  - khash migration for better fuzzy_check performance (#5720)
  - Intrusive heap implementation (#5693)
  - Configurable Bayes guards (#5701)
  https://github.com/rspamd/rspamd/blob/3.14.0/ChangeLog</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1765454400">- Update to 3.14.2
  🔥 Key Features
    📤 Metadata Exporter Enhancements
  - New formatters: multipart, msgpack, and json_with_message
  - Binary message support and efficient multipart uploads
  - Deprecated old meta_headers option in favor of new formatters
    🛡️ DMARC RUA Validation
  - New rspamadm dmarc_report --recheck-rua flag
  - Re-validate cached report addresses against exclusion maps
  - Useful for validating domains against RBLs before sending
    reports
    ✉️ Milter Headers Control
  - Selective Authentication-Results removal with remove_ar_from
  - Target specific domains for header cleanup
    📚 Documentation
  - Added comprehensive Python/aiohttp example for handling
    multipart metadata exports
  https://rspamd.com/doc/changelog.html</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1774872000">- Update to 4.0.0
  Upgrade Notes
  Action required for per-user Bayes with Redis sharding: Jump Hash
  has been replaced with Ring Hash (Ketama). Run rspamadm
  statistics_dump migrate after upgrading or accept temporary
  accuracy loss as data is re-learned. Single Redis server setups
  are not affected.
  Other breaking changes
  - Content URLs included by default — URLs from PDF and other
    computed parts are now returned by task:get_urls(). Set
    include_content_urls = false in local.d/options.inc to restore
    old behavior.
  - SSL auto-detection — ssl = true worker option removed; SSL is
    now auto-detected from bind socket flags.
  - libfasttext removed — Replaced with built-in mmap-based shim.
    ENABLE_FASTTEXT cmake option no longer exists. Existing models
    still work with massive memory savings.
  - SenderScore RBLs disabled — Requires MyValidity account
    registration; was non-functional without it.
  - Suspicious TLDs now map-based — Hardcoded list replaced with
    conf/maps.d/suspicious_tlds.inc, customizable via local.d/.
  - Neural autolearn options renamed — Now match RBL module naming
    conventions.
  - Token bucket load balancing — Enabled by default for proxy
    upstreams, replacing simple round-robin.
  - DKIM RFC conformance — Unknown and broken DKIM keys now handled
    per RFC.
  Key Features
  - /checkv3 Multipart Protocol New /checkv3 endpoint using
    multipart/form-data requests and multipart/mixed responses.
    Metadata sent as structured JSON/msgpack instead of HTTP
    headers. Per-part zstd compression, zero-copy writev responses,
    and proxy support. Client-side: rspamc --protocol-v3 / rspamc
  - -msgpack.
  - Pluggable Async Hyperscan Cache Hyperscan compilation and
    caching moved to an async Lua backend with Redis storage
    support. Shared hyperscan databases across workers and hosts.
    Self-healing cache auto-detects stale blobs and triggers
    recompile. Small databases compiled in-memory without file
    caching.
  - Multi-Flag Fuzzy Hashes Single fuzzy hash can carry up to 8
    flags simultaneously (epoch 12). Multiple rules match the same
    digest with independent flag/value pairs. Redis update path
    rewritten in Lua with EVALSHA + NOSCRIPT recovery. Fully
    backward-compatible.
  - HTML Fuzzy Phishing Detection Dual-mode fuzzy: template
    matching + domain-sensitive matching. New FUZZY_HTML_PHISHING
    symbol fires when an HTML template matches but link domains
    differ — detecting reused phishing templates with swapped
    links.
  - HTTPS Server Support Workers can now serve HTTPS natively,
    enabling secure WebUI and API without a reverse proxy. SSL
    auto-detected from bind socket configuration.
  - Built-in Fasttext Shim External C++ library replaced with
    zero-dependency mmap-based reader. Shared memory across workers
    (MAP_SHARED) eliminates per-worker heap copies (~500MB-7GB
    savings). Hot-reloadable via maps infrastructure.
  - UUID v7 Per Task Native UUID v7 generation per task, synced
    with Log-Tag header. New ClickHouse UUID v7 column support for
    correlation across systems.
  - Neural / LLM Embeddings External pretrained neural model
    support. Multi-layer funnel architecture with language-based
    model/URL selection. Multi-model fasttext embedding with SIF
    word weighting. Expression-based autolearn for LLM providers.
  - Multi-Class Bayes Classifiers support arbitrary classes beyond
    binary spam/ham. WebUI learning UI, /stat and
    /bayes/classifiers endpoints updated. Shard migration tool for
    the Jump Hash to Ring Hash transition.
  - Legacy Protocol Enhancements Milter add/remove headers and
    extended symbol info now exposed in RSPAMC/SPAMC text protocol.
    Enables Exim and other legacy clients to access milter headers.
  Other Notable Features
  - Token bucket load balancing for proxy upstreams with
    configurable burst parameters
  - Ring Hash (Ketama) consistent hashing with true minimal
    disruption and recovery
  - Structured metadata exporter with zstd compression and detected
    MIME types
  - ARC trusted_authserv_id for reusing upstream
    Authentication-Results headers
  - Reply-To validity checks in headers_checks
  - Fuzzy hashes in Redis history for matched hash tracking
  - HTTP content negotiation framework with zstd compression for
    /stat endpoint
  - Attachment filename sub-tokens for improved Bayes classifier
    accuracy
  - GPT module — configurable consensus thresholds and
    context_augment hook
  - New rspamadm subcommands — autolearnstats, logstats, mapstats
  - ASCII85 decode and PDF object padding evasion fixes for PDF
    extraction
  Critical Fixes
  - Stop ev_io watcher in fuzzy UDP session destroy
    (use-after-free)
  - Fix CPU busy-loop in fuzzy TCP client
  - RHEL/CentOS 10+ SHA-1 DKIM crypto-policy bypass
  - DKIM RSA signing memory leak fix
  - Self-healing hyperscan cache for stale blobs
  - Multiple use-after-free fixes on config reload (regexp maps,
    multipatterns)
  - PCRE2 complexity checks before JIT compilation
  - Rework alternative parts detection (R_PARTS_DIFFER)
  - SPF address family flag inheritance fix
  - Ratelimit compatibility with old records
  - Default map URL path to "/" when no path component (crash fix)
  https://docs.rspamd.com/changelog/4.0.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1775390400">- Update to 4.0.1
  - Features
  - Settings merge: Layered collect-then-merge flow for settings,
    weak dependencies and disabled status in symcache,
    force-enable override for settings conflicts
  - Fuzzy dynamic blocks: Dynamic block API for fuzzy storage
    worker, custom response codes (403 for ratelimits vs 503 for
    bans), ratelimit_whitelist check exposed to Lua
  - Bug fixes
  - Proxy milter fd leak: Original fd was not closed after milter
    dup(), leaking one fd per milter connection — caused
    unbounded CLOSE_WAIT accumulation in production (regression
    in 4.0.0)
  - Proxy self-scan task timeout: Used upstream wire timeout
    (e.g. 120s) instead of task_timeout (8s default) for
    self-scan tasks
  - ARC AAR parsing (#5963): Replace naive semicolon split with
    LPeg grammar respecting RFC 8601 comments and quoted strings
    — fixes cv=fail on multi-hop ARC chains where i=N appeared
    inside comments
  - Fix ev_now() usage for dynamic ban expiry
  - Fix deps in pre/postfilters and settings flow
  - Fix missing #include &lt;memory&gt; in redis_backend.cxx</changelog>
</package>
<package pkgid="0d3c2061df154ec4b1655b9b29d5a0d096c3f16b99c19762a4cfb7b8bfff14ad3fd243ceb47eac1500aacfd6df1becbce71394f4c405ffc3cd62b2ce04a06a5f" name="rspamd-apparmor" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="144.4"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729080000">- Update to 3.10.1
  - [Fix] Use correct type for keylen in lua_ucl_newindex by
    @arkamar in #5169
  - Update hiredis library removing all hacks by @vstakhov in #5167
  - Remove proxy from url_redirector.conf as it not the option by
    @dragoangel in #5164
  - chore(publicsuffix): update effective_tld_names.dat by @wdhdev
    in #5176
  - [Fix] Avoid null-bytes in Log-Tag header value by @smarsching
    in #5179
  - [Fix] Do not abort when OpenSSL is broken, report that to a
    user by @vstakhov in #5188
  - Some build fixes by @vstakhov in #5189
  - Some more fixes by @vstakhov in #5190</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- Update to 3.10.2
  - [CritFix] Fix ARC-Seal signing
  - [Fix] add EOF to openmetrics response in proxy and server</changelog>
  <changelog author="Jacob Tilman Sievert &lt;sievert@b1-systems.de&gt;" date="1729857600">- Update to 3.10.3
  - [Fix] move PluginDir to correct location to prevent recursive
    load of non plugins</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734350400">- Update to 3.11.0
  - Breaking Changes
  - Elasticsearch/OpenSearch Plugin: Major rework with breaking
    changes:
  - Added support for Elasticsearch 8 &amp; OpenSearch 2
  - Added index policy with logs retention
  - Updated configuration format
  - Major Features
  - Added LRU cache for last filled ratelimit buckets
  - Added utilities to manage ratelimit buckets
  - Added include/exclude logic for headers processing
  - Improved address rotation algorithm for upstream selection
  - Added rspamadm mime strip command for attachments removal
  - Added new message anonymization capabilities
  - Replaced fastutf with simdutf for better architecture support
    and performance
  - Added more ways to extend Rspamd configuration, including
    lua.local.d folder
  - Important Fixes
  - Fixed ARC-Seal signing issues
  - Fixed RFC 2047 header encoding
  - Fixed issues with dynamic keys in fuzzy storage
  - Fixed TCP connection handling with cumulative timeouts
  - Improved handling of DNS limits in SPF module
  - Fixed multiple phishing detection false positives
  - Fixed DMARC structured headers encoding
  - WebUI Improvements
  - Reworked symbol description display on hover
  - Improved keyboard accessibility
  - Enhanced symbol rendering
  - Other Changes
  - Skip extra RBL checks when Received IP matches From IP
  - Multimap now uses only distinct text parts for content
    matching
  - Improved GPT module JSON parsing
  - Various configuration and logging improvements
  - Multiple performance optimizations
  The release includes significant improvements in configuration
  flexibility, security features, and overall stability. Users
  should pay special attention to the breaking changes in the
  Elasticsearch/OpenSearch plugin when upgrading.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1735128000">- added https://github.com/rspamd/rspamd/commit/ccb45df90df60fae36b9438cfb2b0088e590306b.patch
  To fix building without hyperscan</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1735128001">- we can enable hyperscan also on newer SLE 15 service packs</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741435200">- Update to 3.11.1
  - [Minor] Fix transposed results in rspamadm fuzzy_ping by
    @fatalbanana in #5260
  - [Feature] GPT: Add ollama support by @vstakhov in #5262
  - [Feature] Allow to hash any Lua types by @vstakhov in #5266
  - [Fix] connIp is not correctly added to request by @corbosman in
    [#5268]
  - Allow to use LLM for anonymize by @vstakhov in #5267
  - [minor] log queue id with cloudmark analysis string by
    @corbosman in #5269
  - Add ability to not send response_format in gpt plugin in order
    to support gpt4all by @JQuags in #5276
  - Fix Thunderbird for Android marked with
    FORGED_MUA_THUNDERBIRD_MSGID_UNKNOWN by @towo in #5275
  - [Feature] Allow to store shingles as opaque Lua data by
    @vstakhov in #5279
  - Fix issue with synchronous Redis calls by @vstakhov in #5281
  - [Minor] Fix some broken links by @fatalbanana in #5283
  - [Feature] Add 'noop' redis backend for scripts running by
    @vstakhov in #5290
  - [Enhancement] Expand Detection of Fake Reply Subjects Across
    Multiple Languages by @D0LLYNH0 in #5288
  - [Feature] Allow multiple lua scripts for fuzzy storage by
    @vstakhov in #5293
  - [Minor] Add another acceptable mime type for icon by
    @fatalbanana in #5294
  - [Minor] Respect ipv4 and ipv6 configurations for rbl resolve_ip
    by @japc in #5292
  - remove nixspam by @crpb in #5300
  - [Minor] rbl check_types was missing images by @japc in #5305
  - RBL: fix use of content_urls and images inside checks by
    @fatalbanana in #5310
  - fix: use sub_utf8 to strip headers value to not break utf8
    strings by @dragoangel in #5313
  - [Minor] Set RBL checks to bool true by @japc in #5314
  - [Minor] Rules regexp url separated and fix no subdomain cases
    for Google urls by @japc in #5315
  - [WebUI] Reset dropdown when clearing filters by @moisseev in
    [#5317]
  - [Feature] Support LLM models consensus by @vstakhov in #5320
  - [Feature] GPT: Support reason adding by @vstakhov in #5326
  - [Minor] Pass both the multimap and the rules descriptions for
    combined multimap on create by @japc in #5319
  - [Fix] properly close multipart/related boundary when adding
    text footer by @FreddleSpl0it in #5334
  - [Minor] Some small fixes to statistics_dump by @japc in #5335
  - [Fix] Verify key type to match DKIM signature type by @vstakhov
    in #5352
  - More features to GPT plugin by @vstakhov in #5356
  - [Fix] Avoid collision hacks in mempool variables hash by
    @vstakhov in #5357
  - Allow to disable RBLs via map by @vstakhov in #5359
  - Add ability to create timers from Lua by @vstakhov in #5363
  - Prevent option duplicates in rspamd_stats.pl by @jeromelebleu
    in #5365
  - Regenerate manpages with recent Pandoc version by @jeromelebleu
    in #5366
  - Fix spelling errors in libserver by @jeromelebleu in #5367
  - [Feature] Add Redis caching framework by @vstakhov in #5369
  - [Fix] Add expiration for neural ham and spam sets by
    @dragoangel in #5373
  - Better support for maps and IP-related fixes/improvements in
    settings by @amulet1 in #5372
  - Use caching framework in gpt module by @vstakhov in #5374
  - [Test] Update JavaScript linters by @moisseev in #5375
  - [Fix] Properly expire neural ham and spam sets by @dragoangel
    in #5376
  - [Feature] Try to check maps earlier if their expires is too
    long by @vstakhov in #5377
- drop patches no longer needed:
  ccb45df90df60fae36b9438cfb2b0088e590306b.patch
  fix_missing_return.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1749643200">- Update to 3.12.0
  - [Fix] Use bundled libfmt everywhere by @vstakhov in #5380
  - [Minor] Fix and improve format string processing in
    lua_logger_log_format() by @amulet1 in #5378
  - [Fix] initialize ollama result table by @JensErat in #5385
  - Update AUTHORS.md by @ertyu in #5391
  - [Fix] Update default URL for openphish by @fatalbanana in #5389
  - Allow CDB external maps by @vstakhov in #5390
  - [WebUI] Fix map editor modal handling by @moisseev in #5388
  - [Minor] gpt.lua improvements and one fix for reason_header by
    @alex081512 in #5387
  - [Minor] Lua logging improvements by @amulet1 in #5383
  - Fix typo on "destionation" -&gt; "destination" by @williamdes in
    [#5400]
  - [Feature] Plugin to integrate with Contextal platform by
    @fatalbanana in #5360
  - Improve maps status visibility by @vstakhov in #5386
  - [WebUI] Update Maps table by @moisseev in #5408
  - Add R_HTTP_URL_IN_FROM by @dragoangel in #5406
  - [Project] Modernize cmake by @vstakhov in #5412
  - [Fix] Greylist: Improve body hash calculations by @vstakhov in
    [#5417]
  - [Feature] Allow to specify Redis version by @vstakhov in #5419
  - fix(lua_bit) : Prevent lua-bit stack buffer overflow by
    @KIMDONGYEON00 in #5422
  - [WebUI] Update Bootstrap, D3 and PrismJS libraries by @moisseev
    in #5423
  - [Minor] contextal: conditionally disable timer, minor changes
    by @fatalbanana in #5426
  - Add Sieve and cPanel forwarding symbols by @dragoangel in #5407
  - [Minor] Use module name when calling set_pre_result by
    @fatalbanana in #5434
  - Fix writing rules tutorial link by @SuperSandro2000 in #5436
  - Correct "file.conf" from dist config files by @SuperSandro2000
    in #5444
  - [Minor] RPM: fix log directory attributes by @fatalbanana in
    [#5435]
  - Allow to use different servers for fuzzy operations by
    @vstakhov in #5453
  - [WebUI] Add Delete hash button by @moisseev in #5454
  - Added exclusion list for reputation by @kevinzb56 in #5443
  - Fix librdns maxname limit by @dragoangel in #5455
  - [Fix] libmime: doctest 2.4.12 compatibilty by @xandris in #5458
  - [WebUI] Add deletion of specific fuzzy hashes by @moisseev in
    [#5457]
  - Some improvements to the proxy by @vstakhov in #5456
  - Added --non-default Option to rspamadm configdump for Local
    Configuration by @kevinzb56 in #5452
  - gpt.lua: Remove "thinking" and fix errorlog by @NameWeb in
    [#5459]
  - [Minor] Update API docs RE: multiple HTTP headers by
    @fatalbanana in #5468
  - [Minor] Fix for docs of lua_redis.redis_make_request_taskless
    by @left-try in #5470
  - [Feature] Magic: Support HEIC files by @vstakhov in #5471
  - Add FREEMAIL_REPLYTO_NEQ_FROM rule by @dragoangel in #5413
  - Modify documentation for rspamc "-P" parameter by @TwizzyDizzy
    in #5473
  - fix(lua_redis): Improve Redis script loading by @jendis in
    [#5464]
  - [Minor] Fix Debian package build by @fatalbanana in #5475
  - [Rework] Replies: consider all recipients and use smtp ones by
    @vstakhov in #5428
  - [Minor] Print error on multimap invalid type by @japc in #5477
  - [Minor] Fix fuzzy lua callback when there are no shingles by
    @fatalbanana in #5486
  - [WebUI] Add file upload to Test selectors by @moisseev in #5483
  - [Minor] Log the token usage for OpenAI (compatible) plain
    conversion by @lucasRolff in #5488
  - Reputation Plugin: Fix comment to correspond the code above by
    @heptalium in #5489
  - Fix some issues with libucl by @vstakhov in #5490
  - [Minor] Correcting the index number for is_spam by @kevinzb56
    in #5495
  - Logging improvements by @vstakhov in #5492
  - [Fix] Correct logic error in milter_headers.lua: skip_wanted()
    by @drclau in #5496</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1749643201">- as it currently always uses the bundled fmt, disable the requires</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1750161600">- Update to 3.12.1
  - Remove aweber.com from spf_dkim_whitelist.inc by @TaaviE in
    [#5500]
  - [Fix] Fix several issues with the lua_logger by @vstakhov in
    [#5503]
  - [Test] Detect libicu idna behaviour and select the appropriate
    tests by @vstakhov in #5506
  - [Fix] Fix proxy headers duplication by @vstakhov in #5507
  - [Minor] Treat *.library-ms and *.search-ms attachments as
    harmful by @twesterhever in #5509
  - Revert "[Minor] Treat *.library-ms and *.search-ms attachments
    as harmful" by @vstakhov in #5511
  - [Fix] Another fix for maps concurrent load by @vstakhov in
    [#5512]
  - [Feature] Add /bayes/classifiers HTTP endpoint by @moisseev in
    [#5517]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1758110400">- Update to 3.13.0
  - 1. Multiclass Bayes Classification ([#5547](#5547))
  - Bayesian classifiers now support multi-class
    differentiation—labels like spam, ham, transactional,
    newsletters, phishing, and more (2-20 classes supported).
  - Efficient: all classes for a message handled in a single
    Redis call.
  - Backward compatible with old config (is_spam); new config
    enables named classes and labels.
  - Autolearn and Lua API support multiclass workflows.
  - Fully class-aware Redis caching.
    Examples:
    rspamc learn_class:transactional receipt.eml or rspamc
    learn_class:newsletter newsletter.eml
  - Lua API: task:get_multiclass_result() gives class
    probabilities and confidence.
  - 2. Neural Module Overhaul ([#5579](#5579))
  - Complete rework into a provider-based architecture: combines
    symbols, LLM embeddings (OpenAI, etc.), and planned providers
    (Bayes/FastText, in the future).
  - Pluggable fusion—multiple feature types can be combined for
    richer, more accurate classification.
  - Trained normalization (unit/zscore/none), used consistently
    at training/inference.
  - Redis-backed caching for LLM embeddings to control
    cost/latency.
  - Configurable via providers, versioned for safe upgrades,
    fully backwards compatible.
  - 3. Multimap Selectors &amp; Regex Enhancements ([#5615](#5615))
  - Powerful, SA-style “selector” rules in multimap module for
    regex filtering on message fields.
  - Dedicated selector field, integrated with Hyperscan and regex
    cache.
  - Example: selector FROM_CORP from:domain =~ /corp\.example$/i
  - 4. MIME &amp; HTML Feature Extraction ([#5619](#5619),
    [#5608](#5608))
  - MIME parser detects part types automatically.
  - HTML parser project extracts more features for downstream
    modules.
  - 5. HTTP, DNS, Upstream Improvements ([#5614](#5614),
    [#5603](#5603), [#5601](#5601))
  - Flexible HTTP timeout config and handling.
  - Upstream reliability: probe mode, less need for forced
    revive.
  - DNS nameserver resolution moved to getaddrinfo.
  - 6. Modernization &amp; Maintenance ([#5592](#5592), [#5598](#5598),
    [#5580](#5580), others)
  - Standardized on C++20; builds, test, and CI improvements (ARM
    support, modern fallback maps).
  - Regular code cleaning, bugfixes, and RPM tweaks.
  - 7. WebUI &amp; UX ([#5606](#5606), [#5607](#5607))
  - E2E scan test flows in WebUI.
  - Bootstrap upgrade, Bayes class management from the web
    interface.
  - 8. GPT &amp; LLM Integrations ([#5612](#5612), [#5572](#5572))
  - Improved handling of GPT model parameters and prompts.
  - Initial support for OpenAI GPT-5 and other models.
- refresh patch rspamd-conf.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1758888000">- Fix build on aarch64 by enabling hyperscan support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1759233600">- Update to 3.13.1
  - Added
  - Archive module: Full support for encrypted ZIP archives,
    including both ZipCrypto and AES encryption; both reading and
    writing of AES-encrypted ZIP archives is supported with
    updated Lua bindings using libarchive for flexible
    compatibility with all standard ZIP encryption schemes
  - Encrypted maps: Support for encrypted maps to enable new map
    distribution scenarios
  - Redis TLS: Configurable TLS connections in Redis backend for
    improved compatibility in secure environments
  - Improved
  - MIME encoding refactoring: Major overhauls and multiple fixes
    for MIME encoding logic, including improved handling and
    decoding of UTF-8 in MIME headers, resulting in more robust
    email processing and better compatibility
  - Learning system: Numerous fixes to learn checks and autolearn
    flag handling, prevention of duplicate message learning, and
    extended multiclass learning test coverage
  - Map helpers alignment: Map helpers now enforced to be aligned
    to 64 bytes to prevent unaligned memory access errors on
    certain platforms
  - CLI enhancements: Enhanced secretbox CLI and additional
    security test coverage
  - Platform compatibility: Improved compatibility with Lua
    versions above 5.1 and better support for 32-bit platforms
  - Fixed
  - Critical fixes: Fixed bug when converting zero-length strings
    to numbers
  - XML parsing: Fixed XML prolog detection in lua_magic module
  - Build issues: Fixed build issues on 32-bit platforms
  - Empty input handling: Addressed issues with empty input
    handling in lua_magic
  - Test stability: Improved stability of automated testing with
    multiple miscellaneous test fixes
  - Compatibility: Minor compatibility improvements and bugfixes
    (buffer allocation, missing cmath include, etc.)
  This release introduces archive module extensibility with full
  encrypted archive support including AES, new map distribution
  capabilities, secure integration options with Redis TLS, robust
  email and message processing improvements, and bugfixes for
  broader platform compatibility. This is recommended as a major
  stability and feature update.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1760443200">- Update to 3.13.2
  - [Feature] Add user/domain context support for LLM-based
    classification by @vstakhov in #5647
  - Implement Metadefender hash lookup module by @vstakhov in #5656
  - Add vault kv version 2 support by @vstakhov in #5654
  - Fix duplicate symbol in once_received plugin by @vstakhov in
    [#5658]
  - [Fix] Enforce server-controlled HTTP map refresh intervals by
    @vstakhov in #5660
  - [Fix] Propagate unused Redis Sentinel options by @fatalbanana
    in #5597
  - Fix rspamd dkim key loading for ed25519 by @vstakhov in #5664
  - Fix dkim relaxed bodyhash calculation for spaces by @vstakhov
    in #5662
  - Feat: Added rua address exclusion in dmarc.lua by @croessner in
    [#5653]
  - [Feature] Add separate encryption keys for read/write
    operations in fuzzy_check by @vstakhov in #5665</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1760875200">- Split AppArmor profile into subpackage
  To avoid unnecessarily pulling in AppArmor packages
- Reload AppArmor profile post-install</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1762516800">- We finally have natively built packages with for luajit-lpeg in
  Tumbleweed, we no longer need to mix with lua51 packages there
  anymore. For older distros we still need it. Guard handling for
  those distros with bcond mixed_luajit_lua and keep the version
  comparison there. Also prepare so we can handle luajit2 if
  needed.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1762862400">- Update to 3.14.0
  - 🔥 Major Features
  - 🎯 HTML Fuzzy Hashing
  - Structural similarity detection for HTML content (#5661,
    [#5720])
  - Per-rule text_hashes toggle for HTML-only matching
  - 🌐 TCP Fuzzy Protocol
  - Full TCP support with auto-switch from UDP (#5669)
  - Production-ready connection management and framing
  - 🔗 Advanced URL Processing
  - New task:get_cta_urls() API for CTA detection (#5732)
  - DoS protection: hash-based deduplication with 50k URL limit
  - HTML URL rewriting infrastructure (#5676)
  - 🤖 AI &amp; WebUI
  - Web search context for LLM plugin with Redis caching
    (#5732)
  - Dark mode with auto-detection (#5725)
  - 📧 Email &amp; Integration
  - Advanced aliases with loop detection (#5655)
  - Milter ESMTP argument parsing with Lua API (#5663)
  - Postfix wizard for automated integration (#5667)
  - 🐛 Critical Fixes
  - 🌐 DNS Stability
  - Fixed UDP→TCP packet truncation on retransmits (#5739)
  - Fixed transaction ID collision and nameserver round-robin
    (#5721, #5739)
  - 🔒 Memory &amp; Stability
  - Fixed allocator crashes (jemalloc/malloc mixing) (#5721,
    [#5724])
  - Fixed memory leaks in fuzzy storage, OpenSSL, UCL (#5709)
  - Hyperscan runtime version check prevents cache corruption
    (#5724)
  - 📊 DMARC &amp; Protocol
  - Fixed Redis connection exhaustion with batching + GC
    (#5737)
  - ARC RFC 8617 compliance + ed25519 support (#5684)
  - Composites two-phase evaluation (#5681)
  - 🐧 BSD &amp; Security
  - Fixed FreeBSD/NetBSD/OpenBSD builds (#5726, #5729)
  - Fuzzy TCP race conditions and buffer overflows (#5669)
  - ⚡ Performance
  - khash migration for better fuzzy_check performance (#5720)
  - Intrusive heap implementation (#5693)
  - Configurable Bayes guards (#5701)
  https://github.com/rspamd/rspamd/blob/3.14.0/ChangeLog</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1765454400">- Update to 3.14.2
  🔥 Key Features
    📤 Metadata Exporter Enhancements
  - New formatters: multipart, msgpack, and json_with_message
  - Binary message support and efficient multipart uploads
  - Deprecated old meta_headers option in favor of new formatters
    🛡️ DMARC RUA Validation
  - New rspamadm dmarc_report --recheck-rua flag
  - Re-validate cached report addresses against exclusion maps
  - Useful for validating domains against RBLs before sending
    reports
    ✉️ Milter Headers Control
  - Selective Authentication-Results removal with remove_ar_from
  - Target specific domains for header cleanup
    📚 Documentation
  - Added comprehensive Python/aiohttp example for handling
    multipart metadata exports
  https://rspamd.com/doc/changelog.html</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1774872000">- Update to 4.0.0
  Upgrade Notes
  Action required for per-user Bayes with Redis sharding: Jump Hash
  has been replaced with Ring Hash (Ketama). Run rspamadm
  statistics_dump migrate after upgrading or accept temporary
  accuracy loss as data is re-learned. Single Redis server setups
  are not affected.
  Other breaking changes
  - Content URLs included by default — URLs from PDF and other
    computed parts are now returned by task:get_urls(). Set
    include_content_urls = false in local.d/options.inc to restore
    old behavior.
  - SSL auto-detection — ssl = true worker option removed; SSL is
    now auto-detected from bind socket flags.
  - libfasttext removed — Replaced with built-in mmap-based shim.
    ENABLE_FASTTEXT cmake option no longer exists. Existing models
    still work with massive memory savings.
  - SenderScore RBLs disabled — Requires MyValidity account
    registration; was non-functional without it.
  - Suspicious TLDs now map-based — Hardcoded list replaced with
    conf/maps.d/suspicious_tlds.inc, customizable via local.d/.
  - Neural autolearn options renamed — Now match RBL module naming
    conventions.
  - Token bucket load balancing — Enabled by default for proxy
    upstreams, replacing simple round-robin.
  - DKIM RFC conformance — Unknown and broken DKIM keys now handled
    per RFC.
  Key Features
  - /checkv3 Multipart Protocol New /checkv3 endpoint using
    multipart/form-data requests and multipart/mixed responses.
    Metadata sent as structured JSON/msgpack instead of HTTP
    headers. Per-part zstd compression, zero-copy writev responses,
    and proxy support. Client-side: rspamc --protocol-v3 / rspamc
  - -msgpack.
  - Pluggable Async Hyperscan Cache Hyperscan compilation and
    caching moved to an async Lua backend with Redis storage
    support. Shared hyperscan databases across workers and hosts.
    Self-healing cache auto-detects stale blobs and triggers
    recompile. Small databases compiled in-memory without file
    caching.
  - Multi-Flag Fuzzy Hashes Single fuzzy hash can carry up to 8
    flags simultaneously (epoch 12). Multiple rules match the same
    digest with independent flag/value pairs. Redis update path
    rewritten in Lua with EVALSHA + NOSCRIPT recovery. Fully
    backward-compatible.
  - HTML Fuzzy Phishing Detection Dual-mode fuzzy: template
    matching + domain-sensitive matching. New FUZZY_HTML_PHISHING
    symbol fires when an HTML template matches but link domains
    differ — detecting reused phishing templates with swapped
    links.
  - HTTPS Server Support Workers can now serve HTTPS natively,
    enabling secure WebUI and API without a reverse proxy. SSL
    auto-detected from bind socket configuration.
  - Built-in Fasttext Shim External C++ library replaced with
    zero-dependency mmap-based reader. Shared memory across workers
    (MAP_SHARED) eliminates per-worker heap copies (~500MB-7GB
    savings). Hot-reloadable via maps infrastructure.
  - UUID v7 Per Task Native UUID v7 generation per task, synced
    with Log-Tag header. New ClickHouse UUID v7 column support for
    correlation across systems.
  - Neural / LLM Embeddings External pretrained neural model
    support. Multi-layer funnel architecture with language-based
    model/URL selection. Multi-model fasttext embedding with SIF
    word weighting. Expression-based autolearn for LLM providers.
  - Multi-Class Bayes Classifiers support arbitrary classes beyond
    binary spam/ham. WebUI learning UI, /stat and
    /bayes/classifiers endpoints updated. Shard migration tool for
    the Jump Hash to Ring Hash transition.
  - Legacy Protocol Enhancements Milter add/remove headers and
    extended symbol info now exposed in RSPAMC/SPAMC text protocol.
    Enables Exim and other legacy clients to access milter headers.
  Other Notable Features
  - Token bucket load balancing for proxy upstreams with
    configurable burst parameters
  - Ring Hash (Ketama) consistent hashing with true minimal
    disruption and recovery
  - Structured metadata exporter with zstd compression and detected
    MIME types
  - ARC trusted_authserv_id for reusing upstream
    Authentication-Results headers
  - Reply-To validity checks in headers_checks
  - Fuzzy hashes in Redis history for matched hash tracking
  - HTTP content negotiation framework with zstd compression for
    /stat endpoint
  - Attachment filename sub-tokens for improved Bayes classifier
    accuracy
  - GPT module — configurable consensus thresholds and
    context_augment hook
  - New rspamadm subcommands — autolearnstats, logstats, mapstats
  - ASCII85 decode and PDF object padding evasion fixes for PDF
    extraction
  Critical Fixes
  - Stop ev_io watcher in fuzzy UDP session destroy
    (use-after-free)
  - Fix CPU busy-loop in fuzzy TCP client
  - RHEL/CentOS 10+ SHA-1 DKIM crypto-policy bypass
  - DKIM RSA signing memory leak fix
  - Self-healing hyperscan cache for stale blobs
  - Multiple use-after-free fixes on config reload (regexp maps,
    multipatterns)
  - PCRE2 complexity checks before JIT compilation
  - Rework alternative parts detection (R_PARTS_DIFFER)
  - SPF address family flag inheritance fix
  - Ratelimit compatibility with old records
  - Default map URL path to "/" when no path component (crash fix)
  https://docs.rspamd.com/changelog/4.0.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1775390400">- Update to 4.0.1
  - Features
  - Settings merge: Layered collect-then-merge flow for settings,
    weak dependencies and disabled status in symcache,
    force-enable override for settings conflicts
  - Fuzzy dynamic blocks: Dynamic block API for fuzzy storage
    worker, custom response codes (403 for ratelimits vs 503 for
    bans), ratelimit_whitelist check exposed to Lua
  - Bug fixes
  - Proxy milter fd leak: Original fd was not closed after milter
    dup(), leaking one fd per milter connection — caused
    unbounded CLOSE_WAIT accumulation in production (regression
    in 4.0.0)
  - Proxy self-scan task timeout: Used upstream wire timeout
    (e.g. 120s) instead of task_timeout (8s default) for
    self-scan tasks
  - ARC AAR parsing (#5963): Replace naive semicolon split with
    LPeg grammar respecting RFC 8601 comments and quoted strings
    — fixes cv=fail on multi-hop ARC chains where i=N appeared
    inside comments
  - Fix ev_now() usage for dynamic ban expiry
  - Fix deps in pre/postfilters and settings flow
  - Fix missing #include &lt;memory&gt; in redis_backend.cxx</changelog>
</package>
<package pkgid="2f9e02d4cb39f931b5a2b4c701c37813fc7240f9224db627a4df7e43757441f9ee894d404696a21f75503f4a83a497466609f27bafb114db97b2dc96faf49862" name="typelib-1_0-FPrint-2_0" arch="i586">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="615d32bab1059ad909547d1fa2d978e0814e060d5135aff58a5e350b704c7f0ad833e039d364d2576501b17fd8820ee07e2c37a4d21f41e618dd4726e05a974e" name="typelib-1_0-FPrint-2_0" arch="x86_64">
  <version epoch="0" ver="1.94.10+tod1" rel="94.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650801600">- update to 1.94.3:
  * Ensure idle mainloop before completing enumeration (fprintd#119)
  * It is now possible to extend already enrolled prints
  * elanspi: Fix timeout error with some hardware (#438)
  * elanspi: Fix cancellation issues
  * goodixmoc: Return matching device print; fixes duplicate checking (#444)
  * goodixmoc: Support clearing the storage (usually unused)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 1.94.4:
  * synaptics: New PIDs 0x0168, 0x015f
  * elan: New PID 0x0c4b
  * elanspi: New PID 0x241f
  * synaptics: Minor fix to interrupt transfer resubmission
  * Avoid sysfs writes if value is already expected
  * Improvements to the testing setup
  * Fixes to the internal critical section API</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1667044800">- update to 1.94.5:
  * New driver: fpcmoc, supporting various FPC MOC Fingerprint Sensors
  * goodixmoc: New PIDs 0x6014, 0x6094, 0x631C, 0x634C, 0x6384, 0x659A.
  * goodixmoc: Support resetting device on firmware failure due to corrupted DB.
  * elanmoc: New PIDs 0x0c88, 0x0c8c, 0x0c8d.
  * synaptics: New PID 0x0104.
  * upektc: New PID 0x2017.
  * Fixed various memory leaks
  * More tests</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1667736000">- Move to libfprint-tod fork:
  This fork allows loading of external modules (typically non-free)
  located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for
  fingerprint sensors that do on-device verifaction.
  These non-free modules shall be included in Packman repositories.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1692532800">- update to 1.94.6+tod1:
  * goodixmoc: New PIDs 0x60A4, 0x60BC, 0x6092, 0x633C and 0x6304.
  * goodixmoc: Fix missing "enroll create" state.
  * elanmoc: New PID 0x0C99.
  * upektc: Improve compatibility with sensors 147e:2016.
  * aes4000: Actually support 08FF:5501 devices.
  * virtual-device-listener: Fix failing tests with GLib 2.76
  * tests: Add installed tests
  * Added installed TOD tests
  * #526 libfprint: fpcmoc: use after free if enrollment or
    identification is cancelled (Vasily Khoruzhick)
- New installed-tests is set to disabled</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1710763200">- update to 1.94.7+tod1
  * synaptics: fix enroll identify problem after user reset database.
  * synaptics: New PIDs 0x0173, 0x0106, 0x0124.
  * goodixmoc: New PID 0x6582.
  * build: Do not require bash to build, only posix sh.
  * fp-image: Simplify minutiae detection tasks.
  * GLib 2.68 is now required to build libfprint.
  * realtek (PID 0x5813).
  * focaltech_moc (PIDs 0x9E48, 0xD979, 0xA959).
  * egismoc (PIDs 0x0582, 0x05a1).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1729425600">- update to 1.94.8+tod1
  * build: Support building in non-linux unix environments (tested in FreeBSD)
  * egismoc: New PIDs 0x0583, 0x0586, 0x0587.
  * elanmoc: New PID 0x0C9F.
  * fpcmoc: New PIDs 0x9524, 0x9544.
  * goodixmoc: New PIDs 0x609A, 0x650A, 0x650C, 0x6512.
  * realtek: New PID 0x5816.
  * synaptics: New PIDs 0x00C4, 0x019D, 0x00C6.
  * fpcmoc: fix incorrect immobile handling during enrollment.
  * fpcmoc: fixed jumping to wrong state at end of custom enroll.
  * egismoc: various code cleanups.
- fix compilation error
  + label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1740139200">- update to 1.94.9+tod1
  * uru4000: Use OpenSSL to perform AES-ECB encryption, as per this
    libfprint does not support on NSS, but on openssl (&gt;= 3.0).
  * goodixmoc: New PIDs 0x60C2, 0x689A
  * synaptics: New PIDs 0x016C, 0x0174, 0x0107, 0x0108, 0x00C2, 0x00F0
  * fpcmoc: New PID 0xC844
  * focaltech_moc: New PIDs 0xA99A, 0xA57A, 0xA78A
  * elanmoc: New PIDs 0x0C98, 0x0C9D, 0x0CA3
  * elanspi: New PIDs 0x3128, 0x2766
  * fp-device: Add FP_DEVICE_RETRY_TOO_FAST retry error
  * data: AppStream meta info listing supported USB devices.
  * fixed various memory issues in multiple devices
- rebase patch
  % label-can-only-be-part-of-a-statement.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1770724800">- update to 1.94.10+tod1
  * synaptics: Add USB reset in probe to recover stall condition
  * synaptics: New PIDs 0x0169, 0x019F, 0x00E9, 0x01A0, 0x0109, 0x010A
  * goodixmoc: New PID 0x66A9
  * goodixmoc: Fix crash in exit callback handler
  * fpcmoc: New PID 0xA306
  * fpcmoc: Fix interrupt cancellable leak
  * elanmoc: New PIDs 0x0CA7, 0x0CA8, 0x0CB0
  * egismoc: New PIDs 0x0584, 0x0588
  * focaltech_moc: New PIDs 0xA27A, 0x1579
  * realtek: New PID 0xFA03
  * fp-device: Clarify getter for open property
  * libfprint: Use fatal-warnings on g-i-scanner</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1770811200">- Fix compilation error with meson &lt; 14
  + libfprint-old-meson.patch
- Enclose the spurious code after case statement in curly braces
  instead of extracting the declarations into outer scope and fix
  similar problem in one more source file
  % label-can-only-be-part-of-a-statement.patch</changelog>
</package>
<package pkgid="3ae4306f512b59760b916fcb2180a5285b2d17a1eed7a283309960872db64f004d130eb6d8804557536eaed356667be87fda7c86c37ea59621508c0fd7cee9f8" name="weakforced" arch="i586">
  <version epoch="0" ver="2.4.0" rel="36.11"/>
  <changelog author="wr@rosenauer.org" date="1518177600">- update to version 1.4.2
  * fixed memory leak when StatsDB reaches the max size and entries
    are expired
- update to version 1.4.1
  * fix for mapped IPv4 addresses inside IPv6 addresses
- fix BuildRequires for split boost devel packages</changelog>
  <changelog author="wr@rosenauer.org" date="1528459200">- update to version 1.4.3
  * fix for verbose logging of allow commands to allow configuration
    via Lua
- changed license to GPLv3 as upstream did</changelog>
  <changelog author="wr@rosenauer.org" date="1531742400">- update to version 1.4.4
  * Fixed a memory leak in the GeoIP lookupCity() Lua function.
    Each invocation of the function was leaking up to 200 bytes in
    the return information from the function, which could cause memory
    exhaustion over time, leading to a process restart.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1550923200">- update to 2.0.0
  This is a major update, Please read the whole release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.0.0
  The highlights are:
  - Fix extra : at the end of custom log lines when kv table is
    empty
  - Return additional info about blacklist in allow and getDBStats
  - RESTAPI functions
  - New Lua functions to remove blacklist entries
  - Add configuration setting "setNumWebHookConnsPerThread"
  - Add configuration setting "setWebHookTimeoutSecs"
  - Add support for querying replication status in
  - showStringStatsDB()
  - Add sibling received success/fail stats to siblings() command
  - New custom stats framework
  - New stats for all commands, including custom commands
  - GeoIP2 support (MMDB-style DBs)
  - New twResetField() function for statsDBs
  - Configurable accuracy for HLL and CountMin types
  - DB Synchronization for newly started wforce instances
  - Support for replication over TCP
  - Customizable log facility via a command line option
  - New trackalert daemon
  - Logstash Configuration and Elasticsearch Templates
  - Kibana Reports and Dashboards
  - Report API
- switch to luajit for speed
- enable maxminddb support additionally to GeoIP support
- drop patch which we no longer need optional-docker.patch
- replace build.patch with weakforced-2.0.0-no-termcap.patch
- replace wforce-no-download.patch with
  weakforced-2.0.0-no-download.patch
- update https://raw.githubusercontent.com/ua-parser/uap-core/master/regexes.yaml</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555416000">- separated trackalert daemon into subpackage
- removed non-systemd from spec (which was not fully supported anyway)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555588800">- update to 2.0.1
  * Fix issue where blacklisted is always true in getDBStats output
  * Fix issue where threadnames were not displayed correctly
  * Fix issue where siblings defined as tcp were connected to on startup
  * Fix issue where non-UTF-8 login names would cause protobuf erros
- adding report_api to the package</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1573214400">- update to 2.2.0
  (full release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.2.0-beta1)
  * Lookup individual GeoIP2 values (Unsigned Integer, String,
    Double/Float and Boolean)
  * Add session_id to wforce LoginTuple
  * Custom GET Endpoints supporting non-JSON return values
  * New Kibana Reports and Dashboard to view effectiveness of wforce
    policy
  * New "type" field added to built-in webhooks
  * Built-in whitelists added in addition to built-in blacklists
  * New checkBlacklist and checkWhitelist functions in Lua
  * Built-in black/whitelisting can be disabled and checked from
    Lua instead
  * Thread names support
  * Built-In Blacklist and Whitelist return messages are configurable
  * Support TCP Keepalive
  * Updated logstash.conf file for ELK integration
- updated regexes.yml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214401">- update shebang patch to use python3
- fix build with LTO: missing-libs.patch
- cleanup config related file sections</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214402">- disable report-api building until all parts are there:
  osc build --with=report-api for easy testing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577793600">- update to 2.2.1
  * Fix wforce crash in Sibling send thread triggered by
    syncDB operation</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1585396800">- update to 2.2.2
  * Fix control socket leak when client closes connection immediately
  * Support building debian buster packages
  * StatsDBs can now be sharded for better performance (man wforce.conf
    for more info)
  * StatsDB expiry thread now runs more often by default
  * StatsDB expiry thread sleep time is now configurable (man
    wforce.conf for more info)
  * Support for Kafka REST Proxy in webhooks (man wforce_webhook for
    more info)
- added XML for firewalld
- updated regexes.yaml to current version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1597320000">- update to 2.4.0
  https://github.com/PowerDNS/weakforced/blob/v2.4.0/docs/release_notes/ReleaseNotes-2.4.0.md
  New features:
  * New wf_dump_entries tool to dump stats DBs to file
  * Support for new "forwarding" type in replication messages
  * Support for Prometheus via the new /metrics REST endpoint
  * Add Date, Last-Modified and Cache-Control headers to all
    responses
  * Session-ID now logged for allow/report commands
  * Improved logging to show line numbers for Lua errors
  * Enable TCP keepalive for redis connections
  * Configurable timeout for R/W on redis connections
  Bugfixes
  * Fix duplicate command stats under some circumstances
- updated regexes.yaml</changelog>
</package>
<package pkgid="3f0d286a9cd4f6c3eb3b84038f3a9b279241ff7c8cd94986ab5a6e6fe4815ee2134baa0939aca487ace33f6ab113f3dc8141f450c306c7ed813a769cbee3b697" name="weakforced" arch="src">
  <version epoch="0" ver="2.4.0" rel="36.11"/>
  <changelog author="wr@rosenauer.org" date="1471176000">- update to 1.0.0rc5
  * changed user/group to wforce as upstream is using that
- removed obsolete noroot.patch
- renamed all paths to wforce to reflect upstrean name change
  (package name kept with weakforced for the moment)
- added systemd-PrivateDevices-logging.patch as workaround for
  systemd versions prior to 214 to fix syslogging</changelog>
  <changelog author="wr@rosenauer.org" date="1471262400">- update to 1.0.0rc6
- removed upstreamed systemd-PrivateDevices-logging.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1473163200">- update to 1.0.0</changelog>
  <changelog author="wr@rosenauer.org" date="1484568000">- update to version 1.2.0
  * support persistent replicated blacklists via redis
  * webhooks can be configured to send events to configured webhook
    endpoints, such as analytics solutions through HTTP(S); the
    following events can be sent: report, allow, add blacklist entry,
    delete blacklist entry and expire blacklist entry
- add GeoIP and getdns dependencies for respective support</changelog>
  <changelog author="wr@rosenauer.org" date="1487419200">- update to version 1.2.1
  * Custom REST Endpoints can be created from Lua
  * Custom Webhooks can be called from Lua</changelog>
  <changelog author="mrueckert@suse.de" date="1488283200">- fix paths in apparmor profile for the config files</changelog>
  <changelog author="wr@rosenauer.org" date="1501761600">- update to version 1.2.3
  * fix potential deadlock
  * Make request time shared ptr to enable custom timeouts to actually work</changelog>
  <changelog author="wr@rosenauer.org" date="1507377600">- update to version 1.4.0
  * support for GeoIP based on city and ISP databases
  * support for reloading GeoIP databases without restart
  * support blacklisting based on CIDR ranges not just individual
    IP addresses
- do not download regexes.yaml during build (wforce-no-download.patch)
  but add it to the sources
- add optional-docker.patch to make docker-compose optional at build
  time as we don't build docker images
- new service trackalert
- require g++ &gt;= 5</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- update to version 1.4.2
  * fixed memory leak when StatsDB reaches the max size and entries
    are expired
- update to version 1.4.1
  * fix for mapped IPv4 addresses inside IPv6 addresses
- fix BuildRequires for split boost devel packages</changelog>
  <changelog author="wr@rosenauer.org" date="1528459200">- update to version 1.4.3
  * fix for verbose logging of allow commands to allow configuration
    via Lua
- changed license to GPLv3 as upstream did</changelog>
  <changelog author="wr@rosenauer.org" date="1531742400">- update to version 1.4.4
  * Fixed a memory leak in the GeoIP lookupCity() Lua function.
    Each invocation of the function was leaking up to 200 bytes in
    the return information from the function, which could cause memory
    exhaustion over time, leading to a process restart.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1550923200">- update to 2.0.0
  This is a major update, Please read the whole release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.0.0
  The highlights are:
  - Fix extra : at the end of custom log lines when kv table is
    empty
  - Return additional info about blacklist in allow and getDBStats
  - RESTAPI functions
  - New Lua functions to remove blacklist entries
  - Add configuration setting "setNumWebHookConnsPerThread"
  - Add configuration setting "setWebHookTimeoutSecs"
  - Add support for querying replication status in
  - showStringStatsDB()
  - Add sibling received success/fail stats to siblings() command
  - New custom stats framework
  - New stats for all commands, including custom commands
  - GeoIP2 support (MMDB-style DBs)
  - New twResetField() function for statsDBs
  - Configurable accuracy for HLL and CountMin types
  - DB Synchronization for newly started wforce instances
  - Support for replication over TCP
  - Customizable log facility via a command line option
  - New trackalert daemon
  - Logstash Configuration and Elasticsearch Templates
  - Kibana Reports and Dashboards
  - Report API
- switch to luajit for speed
- enable maxminddb support additionally to GeoIP support
- drop patch which we no longer need optional-docker.patch
- replace build.patch with weakforced-2.0.0-no-termcap.patch
- replace wforce-no-download.patch with
  weakforced-2.0.0-no-download.patch
- update https://raw.githubusercontent.com/ua-parser/uap-core/master/regexes.yaml</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555416000">- separated trackalert daemon into subpackage
- removed non-systemd from spec (which was not fully supported anyway)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555588800">- update to 2.0.1
  * Fix issue where blacklisted is always true in getDBStats output
  * Fix issue where threadnames were not displayed correctly
  * Fix issue where siblings defined as tcp were connected to on startup
  * Fix issue where non-UTF-8 login names would cause protobuf erros
- adding report_api to the package</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1573214400">- update to 2.2.0
  (full release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.2.0-beta1)
  * Lookup individual GeoIP2 values (Unsigned Integer, String,
    Double/Float and Boolean)
  * Add session_id to wforce LoginTuple
  * Custom GET Endpoints supporting non-JSON return values
  * New Kibana Reports and Dashboard to view effectiveness of wforce
    policy
  * New "type" field added to built-in webhooks
  * Built-in whitelists added in addition to built-in blacklists
  * New checkBlacklist and checkWhitelist functions in Lua
  * Built-in black/whitelisting can be disabled and checked from
    Lua instead
  * Thread names support
  * Built-In Blacklist and Whitelist return messages are configurable
  * Support TCP Keepalive
  * Updated logstash.conf file for ELK integration
- updated regexes.yml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214401">- update shebang patch to use python3
- fix build with LTO: missing-libs.patch
- cleanup config related file sections</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214402">- disable report-api building until all parts are there:
  osc build --with=report-api for easy testing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577793600">- update to 2.2.1
  * Fix wforce crash in Sibling send thread triggered by
    syncDB operation</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1585396800">- update to 2.2.2
  * Fix control socket leak when client closes connection immediately
  * Support building debian buster packages
  * StatsDBs can now be sharded for better performance (man wforce.conf
    for more info)
  * StatsDB expiry thread now runs more often by default
  * StatsDB expiry thread sleep time is now configurable (man
    wforce.conf for more info)
  * Support for Kafka REST Proxy in webhooks (man wforce_webhook for
    more info)
- added XML for firewalld
- updated regexes.yaml to current version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1597320000">- update to 2.4.0
  https://github.com/PowerDNS/weakforced/blob/v2.4.0/docs/release_notes/ReleaseNotes-2.4.0.md
  New features:
  * New wf_dump_entries tool to dump stats DBs to file
  * Support for new "forwarding" type in replication messages
  * Support for Prometheus via the new /metrics REST endpoint
  * Add Date, Last-Modified and Cache-Control headers to all
    responses
  * Session-ID now logged for allow/report commands
  * Improved logging to show line numbers for Lua errors
  * Enable TCP keepalive for redis connections
  * Configurable timeout for R/W on redis connections
  Bugfixes
  * Fix duplicate command stats under some circumstances
- updated regexes.yaml</changelog>
</package>
<package pkgid="f10bd5f1c33f41a29c9886ac87b839e18a893b324944f0d5f39d25e94e740c60461899109a3c9983b82745ba954551a13f2d57ca92cf775ef8ac4994b1b04ed4" name="weakforced" arch="src">
  <version epoch="0" ver="2.8.0" rel="41.1"/>
  <changelog author="mrueckert@suse.de" date="1488283200">- fix paths in apparmor profile for the config files</changelog>
  <changelog author="wr@rosenauer.org" date="1501761600">- update to version 1.2.3
  * fix potential deadlock
  * Make request time shared ptr to enable custom timeouts to actually work</changelog>
  <changelog author="wr@rosenauer.org" date="1507377600">- update to version 1.4.0
  * support for GeoIP based on city and ISP databases
  * support for reloading GeoIP databases without restart
  * support blacklisting based on CIDR ranges not just individual
    IP addresses
- do not download regexes.yaml during build (wforce-no-download.patch)
  but add it to the sources
- add optional-docker.patch to make docker-compose optional at build
  time as we don't build docker images
- new service trackalert
- require g++ &gt;= 5</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- update to version 1.4.2
  * fixed memory leak when StatsDB reaches the max size and entries
    are expired
- update to version 1.4.1
  * fix for mapped IPv4 addresses inside IPv6 addresses
- fix BuildRequires for split boost devel packages</changelog>
  <changelog author="wr@rosenauer.org" date="1528459200">- update to version 1.4.3
  * fix for verbose logging of allow commands to allow configuration
    via Lua
- changed license to GPLv3 as upstream did</changelog>
  <changelog author="wr@rosenauer.org" date="1531742400">- update to version 1.4.4
  * Fixed a memory leak in the GeoIP lookupCity() Lua function.
    Each invocation of the function was leaking up to 200 bytes in
    the return information from the function, which could cause memory
    exhaustion over time, leading to a process restart.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1550923200">- update to 2.0.0
  This is a major update, Please read the whole release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.0.0
  The highlights are:
  - Fix extra : at the end of custom log lines when kv table is
    empty
  - Return additional info about blacklist in allow and getDBStats
  - RESTAPI functions
  - New Lua functions to remove blacklist entries
  - Add configuration setting "setNumWebHookConnsPerThread"
  - Add configuration setting "setWebHookTimeoutSecs"
  - Add support for querying replication status in
  - showStringStatsDB()
  - Add sibling received success/fail stats to siblings() command
  - New custom stats framework
  - New stats for all commands, including custom commands
  - GeoIP2 support (MMDB-style DBs)
  - New twResetField() function for statsDBs
  - Configurable accuracy for HLL and CountMin types
  - DB Synchronization for newly started wforce instances
  - Support for replication over TCP
  - Customizable log facility via a command line option
  - New trackalert daemon
  - Logstash Configuration and Elasticsearch Templates
  - Kibana Reports and Dashboards
  - Report API
- switch to luajit for speed
- enable maxminddb support additionally to GeoIP support
- drop patch which we no longer need optional-docker.patch
- replace build.patch with weakforced-2.0.0-no-termcap.patch
- replace wforce-no-download.patch with
  weakforced-2.0.0-no-download.patch
- update https://raw.githubusercontent.com/ua-parser/uap-core/master/regexes.yaml</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555416000">- separated trackalert daemon into subpackage
- removed non-systemd from spec (which was not fully supported anyway)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555588800">- update to 2.0.1
  * Fix issue where blacklisted is always true in getDBStats output
  * Fix issue where threadnames were not displayed correctly
  * Fix issue where siblings defined as tcp were connected to on startup
  * Fix issue where non-UTF-8 login names would cause protobuf erros
- adding report_api to the package</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1573214400">- update to 2.2.0
  (full release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.2.0-beta1)
  * Lookup individual GeoIP2 values (Unsigned Integer, String,
    Double/Float and Boolean)
  * Add session_id to wforce LoginTuple
  * Custom GET Endpoints supporting non-JSON return values
  * New Kibana Reports and Dashboard to view effectiveness of wforce
    policy
  * New "type" field added to built-in webhooks
  * Built-in whitelists added in addition to built-in blacklists
  * New checkBlacklist and checkWhitelist functions in Lua
  * Built-in black/whitelisting can be disabled and checked from
    Lua instead
  * Thread names support
  * Built-In Blacklist and Whitelist return messages are configurable
  * Support TCP Keepalive
  * Updated logstash.conf file for ELK integration
- updated regexes.yml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214401">- update shebang patch to use python3
- fix build with LTO: missing-libs.patch
- cleanup config related file sections</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214402">- disable report-api building until all parts are there:
  osc build --with=report-api for easy testing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577793600">- update to 2.2.1
  * Fix wforce crash in Sibling send thread triggered by
    syncDB operation</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1585396800">- update to 2.2.2
  * Fix control socket leak when client closes connection immediately
  * Support building debian buster packages
  * StatsDBs can now be sharded for better performance (man wforce.conf
    for more info)
  * StatsDB expiry thread now runs more often by default
  * StatsDB expiry thread sleep time is now configurable (man
    wforce.conf for more info)
  * Support for Kafka REST Proxy in webhooks (man wforce_webhook for
    more info)
- added XML for firewalld
- updated regexes.yaml to current version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1597320000">- update to 2.4.0
  https://github.com/PowerDNS/weakforced/blob/v2.4.0/docs/release_notes/ReleaseNotes-2.4.0.md
  New features:
  * New wf_dump_entries tool to dump stats DBs to file
  * Support for new "forwarding" type in replication messages
  * Support for Prometheus via the new /metrics REST endpoint
  * Add Date, Last-Modified and Cache-Control headers to all
    responses
  * Session-ID now logged for allow/report commands
  * Improved logging to show line numbers for Lua errors
  * Enable TCP keepalive for redis connections
  * Configurable timeout for R/W on redis connections
  Bugfixes
  * Fix duplicate command stats under some circumstances
- updated regexes.yaml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626523200">- update to 2.4.1
  https://github.com/PowerDNS/weakforced/blob/v2.4.1/docs/release_notes/ReleaseNotes-2.4.1.md
- updated regexes.yaml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638964800">- update to 2.6.0
  https://github.com/PowerDNS/weakforced/blob/v2.6.0/docs/release_notes/ReleaseNotes-2.6.0.md
- updated regexes.yaml
- removed missing-libs.patch
- refreshed patches
  weakforced-2.0.0-no-download.patch
  weakforced-2.0.0-no-termcap.patch
  weakforced-2.0.1-shebang.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1642593600">- update to 2.6.1
  https://github.com/PowerDNS/weakforced/blob/v2.6.1/docs/release_notes/ReleaseNotes-2.6.1.md</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1664884800">- update to 2.6.2
  https://github.com/PowerDNS/weakforced/releases/tag/v2.6.2
- updated regexes.yaml to latest version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1670328000">- update to 2.8.0
  https://github.com/PowerDNS/weakforced/releases/tag/v2.8.0
- updated regexes.yaml to latest version
- added weakforced-2.8.0-cstdint.patch</changelog>
</package>
<package pkgid="3f69019de6602b477ac0b1127c4302cb7e07fbf5bdbad09ecb3f4305849b26efd919fd3b6295ba3d31c6a10db6c0983ab13327f40116761096cf939d138afa26" name="weakforced" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="41.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214400">- update shebang patch to use python3
- fix build with LTO: missing-libs.patch
- cleanup config related file sections</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214401">- disable report-api building until all parts are there:
  osc build --with=report-api for easy testing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577793600">- update to 2.2.1
  * Fix wforce crash in Sibling send thread triggered by
    syncDB operation</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1585396800">- update to 2.2.2
  * Fix control socket leak when client closes connection immediately
  * Support building debian buster packages
  * StatsDBs can now be sharded for better performance (man wforce.conf
    for more info)
  * StatsDB expiry thread now runs more often by default
  * StatsDB expiry thread sleep time is now configurable (man
    wforce.conf for more info)
  * Support for Kafka REST Proxy in webhooks (man wforce_webhook for
    more info)
- added XML for firewalld
- updated regexes.yaml to current version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1597320000">- update to 2.4.0
  https://github.com/PowerDNS/weakforced/blob/v2.4.0/docs/release_notes/ReleaseNotes-2.4.0.md
  New features:
  * New wf_dump_entries tool to dump stats DBs to file
  * Support for new "forwarding" type in replication messages
  * Support for Prometheus via the new /metrics REST endpoint
  * Add Date, Last-Modified and Cache-Control headers to all
    responses
  * Session-ID now logged for allow/report commands
  * Improved logging to show line numbers for Lua errors
  * Enable TCP keepalive for redis connections
  * Configurable timeout for R/W on redis connections
  Bugfixes
  * Fix duplicate command stats under some circumstances
- updated regexes.yaml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626523200">- update to 2.4.1
  https://github.com/PowerDNS/weakforced/blob/v2.4.1/docs/release_notes/ReleaseNotes-2.4.1.md
- updated regexes.yaml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638964800">- update to 2.6.0
  https://github.com/PowerDNS/weakforced/blob/v2.6.0/docs/release_notes/ReleaseNotes-2.6.0.md
- updated regexes.yaml
- removed missing-libs.patch
- refreshed patches
  weakforced-2.0.0-no-download.patch
  weakforced-2.0.0-no-termcap.patch
  weakforced-2.0.1-shebang.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1642593600">- update to 2.6.1
  https://github.com/PowerDNS/weakforced/blob/v2.6.1/docs/release_notes/ReleaseNotes-2.6.1.md</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1664884800">- update to 2.6.2
  https://github.com/PowerDNS/weakforced/releases/tag/v2.6.2
- updated regexes.yaml to latest version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1670328000">- update to 2.8.0
  https://github.com/PowerDNS/weakforced/releases/tag/v2.8.0
- updated regexes.yaml to latest version
- added weakforced-2.8.0-cstdint.patch</changelog>
</package>
<package pkgid="743cdccf58afd54ee83d5e8e63ba6bd90346c32513d174741cbe3cfe274c33a19aca3c322b3d2012c4e9776b84d56db56a55f25caf301986fdca03f9138921da" name="weakforced-trackalert" arch="i586">
  <version epoch="0" ver="2.4.0" rel="36.11"/>
  <changelog author="wr@rosenauer.org" date="1471176000">- update to 1.0.0rc5
  * changed user/group to wforce as upstream is using that
- removed obsolete noroot.patch
- renamed all paths to wforce to reflect upstrean name change
  (package name kept with weakforced for the moment)
- added systemd-PrivateDevices-logging.patch as workaround for
  systemd versions prior to 214 to fix syslogging</changelog>
  <changelog author="wr@rosenauer.org" date="1471262400">- update to 1.0.0rc6
- removed upstreamed systemd-PrivateDevices-logging.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1473163200">- update to 1.0.0</changelog>
  <changelog author="wr@rosenauer.org" date="1484568000">- update to version 1.2.0
  * support persistent replicated blacklists via redis
  * webhooks can be configured to send events to configured webhook
    endpoints, such as analytics solutions through HTTP(S); the
    following events can be sent: report, allow, add blacklist entry,
    delete blacklist entry and expire blacklist entry
- add GeoIP and getdns dependencies for respective support</changelog>
  <changelog author="wr@rosenauer.org" date="1487419200">- update to version 1.2.1
  * Custom REST Endpoints can be created from Lua
  * Custom Webhooks can be called from Lua</changelog>
  <changelog author="mrueckert@suse.de" date="1488283200">- fix paths in apparmor profile for the config files</changelog>
  <changelog author="wr@rosenauer.org" date="1501761600">- update to version 1.2.3
  * fix potential deadlock
  * Make request time shared ptr to enable custom timeouts to actually work</changelog>
  <changelog author="wr@rosenauer.org" date="1507377600">- update to version 1.4.0
  * support for GeoIP based on city and ISP databases
  * support for reloading GeoIP databases without restart
  * support blacklisting based on CIDR ranges not just individual
    IP addresses
- do not download regexes.yaml during build (wforce-no-download.patch)
  but add it to the sources
- add optional-docker.patch to make docker-compose optional at build
  time as we don't build docker images
- new service trackalert
- require g++ &gt;= 5</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- update to version 1.4.2
  * fixed memory leak when StatsDB reaches the max size and entries
    are expired
- update to version 1.4.1
  * fix for mapped IPv4 addresses inside IPv6 addresses
- fix BuildRequires for split boost devel packages</changelog>
  <changelog author="wr@rosenauer.org" date="1528459200">- update to version 1.4.3
  * fix for verbose logging of allow commands to allow configuration
    via Lua
- changed license to GPLv3 as upstream did</changelog>
  <changelog author="wr@rosenauer.org" date="1531742400">- update to version 1.4.4
  * Fixed a memory leak in the GeoIP lookupCity() Lua function.
    Each invocation of the function was leaking up to 200 bytes in
    the return information from the function, which could cause memory
    exhaustion over time, leading to a process restart.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1550923200">- update to 2.0.0
  This is a major update, Please read the whole release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.0.0
  The highlights are:
  - Fix extra : at the end of custom log lines when kv table is
    empty
  - Return additional info about blacklist in allow and getDBStats
  - RESTAPI functions
  - New Lua functions to remove blacklist entries
  - Add configuration setting "setNumWebHookConnsPerThread"
  - Add configuration setting "setWebHookTimeoutSecs"
  - Add support for querying replication status in
  - showStringStatsDB()
  - Add sibling received success/fail stats to siblings() command
  - New custom stats framework
  - New stats for all commands, including custom commands
  - GeoIP2 support (MMDB-style DBs)
  - New twResetField() function for statsDBs
  - Configurable accuracy for HLL and CountMin types
  - DB Synchronization for newly started wforce instances
  - Support for replication over TCP
  - Customizable log facility via a command line option
  - New trackalert daemon
  - Logstash Configuration and Elasticsearch Templates
  - Kibana Reports and Dashboards
  - Report API
- switch to luajit for speed
- enable maxminddb support additionally to GeoIP support
- drop patch which we no longer need optional-docker.patch
- replace build.patch with weakforced-2.0.0-no-termcap.patch
- replace wforce-no-download.patch with
  weakforced-2.0.0-no-download.patch
- update https://raw.githubusercontent.com/ua-parser/uap-core/master/regexes.yaml</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555416000">- separated trackalert daemon into subpackage
- removed non-systemd from spec (which was not fully supported anyway)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1555588800">- update to 2.0.1
  * Fix issue where blacklisted is always true in getDBStats output
  * Fix issue where threadnames were not displayed correctly
  * Fix issue where siblings defined as tcp were connected to on startup
  * Fix issue where non-UTF-8 login names would cause protobuf erros
- adding report_api to the package</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1573214400">- update to 2.2.0
  (full release notes
  https://github.com/PowerDNS/weakforced/releases/tag/v2.2.0-beta1)
  * Lookup individual GeoIP2 values (Unsigned Integer, String,
    Double/Float and Boolean)
  * Add session_id to wforce LoginTuple
  * Custom GET Endpoints supporting non-JSON return values
  * New Kibana Reports and Dashboard to view effectiveness of wforce
    policy
  * New "type" field added to built-in webhooks
  * Built-in whitelists added in addition to built-in blacklists
  * New checkBlacklist and checkWhitelist functions in Lua
  * Built-in black/whitelisting can be disabled and checked from
    Lua instead
  * Thread names support
  * Built-In Blacklist and Whitelist return messages are configurable
  * Support TCP Keepalive
  * Updated logstash.conf file for ELK integration
- updated regexes.yml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214401">- update shebang patch to use python3
- fix build with LTO: missing-libs.patch
- cleanup config related file sections</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214402">- disable report-api building until all parts are there:
  osc build --with=report-api for easy testing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577793600">- update to 2.2.1
  * Fix wforce crash in Sibling send thread triggered by
    syncDB operation</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1585396800">- update to 2.2.2
  * Fix control socket leak when client closes connection immediately
  * Support building debian buster packages
  * StatsDBs can now be sharded for better performance (man wforce.conf
    for more info)
  * StatsDB expiry thread now runs more often by default
  * StatsDB expiry thread sleep time is now configurable (man
    wforce.conf for more info)
  * Support for Kafka REST Proxy in webhooks (man wforce_webhook for
    more info)
- added XML for firewalld
- updated regexes.yaml to current version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1597320000">- update to 2.4.0
  https://github.com/PowerDNS/weakforced/blob/v2.4.0/docs/release_notes/ReleaseNotes-2.4.0.md
  New features:
  * New wf_dump_entries tool to dump stats DBs to file
  * Support for new "forwarding" type in replication messages
  * Support for Prometheus via the new /metrics REST endpoint
  * Add Date, Last-Modified and Cache-Control headers to all
    responses
  * Session-ID now logged for allow/report commands
  * Improved logging to show line numbers for Lua errors
  * Enable TCP keepalive for redis connections
  * Configurable timeout for R/W on redis connections
  Bugfixes
  * Fix duplicate command stats under some circumstances
- updated regexes.yaml</changelog>
</package>
<package pkgid="8a39700bbe4a9f0f57957d339c5e408bbac6b7e4707b46c18b10c0b409824e767e47a75e90b3ed7bd77249995c83e50e7caae911d12c98eef515e8f8d52c4365" name="weakforced-trackalert" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="41.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214400">- update shebang patch to use python3
- fix build with LTO: missing-libs.patch
- cleanup config related file sections</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1573214401">- disable report-api building until all parts are there:
  osc build --with=report-api for easy testing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1577793600">- update to 2.2.1
  * Fix wforce crash in Sibling send thread triggered by
    syncDB operation</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1585396800">- update to 2.2.2
  * Fix control socket leak when client closes connection immediately
  * Support building debian buster packages
  * StatsDBs can now be sharded for better performance (man wforce.conf
    for more info)
  * StatsDB expiry thread now runs more often by default
  * StatsDB expiry thread sleep time is now configurable (man
    wforce.conf for more info)
  * Support for Kafka REST Proxy in webhooks (man wforce_webhook for
    more info)
- added XML for firewalld
- updated regexes.yaml to current version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1597320000">- update to 2.4.0
  https://github.com/PowerDNS/weakforced/blob/v2.4.0/docs/release_notes/ReleaseNotes-2.4.0.md
  New features:
  * New wf_dump_entries tool to dump stats DBs to file
  * Support for new "forwarding" type in replication messages
  * Support for Prometheus via the new /metrics REST endpoint
  * Add Date, Last-Modified and Cache-Control headers to all
    responses
  * Session-ID now logged for allow/report commands
  * Improved logging to show line numbers for Lua errors
  * Enable TCP keepalive for redis connections
  * Configurable timeout for R/W on redis connections
  Bugfixes
  * Fix duplicate command stats under some circumstances
- updated regexes.yaml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626523200">- update to 2.4.1
  https://github.com/PowerDNS/weakforced/blob/v2.4.1/docs/release_notes/ReleaseNotes-2.4.1.md
- updated regexes.yaml</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638964800">- update to 2.6.0
  https://github.com/PowerDNS/weakforced/blob/v2.6.0/docs/release_notes/ReleaseNotes-2.6.0.md
- updated regexes.yaml
- removed missing-libs.patch
- refreshed patches
  weakforced-2.0.0-no-download.patch
  weakforced-2.0.0-no-termcap.patch
  weakforced-2.0.1-shebang.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1642593600">- update to 2.6.1
  https://github.com/PowerDNS/weakforced/blob/v2.6.1/docs/release_notes/ReleaseNotes-2.6.1.md</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1664884800">- update to 2.6.2
  https://github.com/PowerDNS/weakforced/releases/tag/v2.6.2
- updated regexes.yaml to latest version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1670328000">- update to 2.8.0
  https://github.com/PowerDNS/weakforced/releases/tag/v2.8.0
- updated regexes.yaml to latest version
- added weakforced-2.8.0-cstdint.patch</changelog>
</package>
</otherdata>