<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="24">
<package pkgid="48b4bed55a04490117fe18df087dc6da8889b8dbd015db4f8f47c4ae633d5a66456bc80a49c12ae9e959a6444f3bf3f670f3fc1c93efe018a70e0804deedf970" name="certmonger" arch="src">
  <version epoch="0" ver="0.79.20" rel="lp161.36.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586692800">- Initial package</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467200">- Updated to version 0.79.15
- Added minimum libjansson version requirement.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467201">- Added 0001-Disable-DSA-in-the-RPM-spec.patch
- Removed 0002-certmonger-return-type.patch.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1697025600">- dbus-daemon is now split out into a separate package.</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1702468800">- Update to 0.79.19
  * getcert: add-scep-ca: fix help for --ca-cert and --ra-cert
  * Don't restrict tokens to CKM_RSA_X_509
  * Updated translations from Weblate
- Update to 0.79.18
  * Rename DBus service and conf files to match canonical name
  * Add missing .TP tags in getcert-resubmit man page
  * migrated to SPDX license
  * Include owner and perms in getcert list output
  * Don't require an NSS database in cm_certread_n_parse
  * Add new certs to internal token, try harder to remove on renewal
- Update to 0.79.17
  * Respect LDFLAGS settings defined by user
  * Switch to CA user when saving NSS certificates
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
- Update to 0.79.16
  * Add a PEM validity checker and validate SCEP CA files
  * Fix implicit declaration of function ‘PEM_read_bio_X509’
  * Don't include "NEW" in certificate signing requests
  * Verify that the AES-128 is used for encrypting the local CA
  * Replace DER-encoded test file with a base64-encoded one
  * Correct a bad date in the spec changelog
  * Switch to https URLs for Sources, etc.
  * Remove dependency on SHA-1
  * tests: Test that the CA constraint DER encoding is correct
  * Disable DSA in the RPM spec
  * Manually build the srpm for the copr CI
  * Require jansson &gt;= 2.12
  * Mark the current directory as a safe git directory
  * Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Hungarian)
- Removed 0001-Disable-DSA-in-the-RPM-spec.patch
- Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1710763200">- HMAC build requires changes (these requires are missing in SLE).</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717156800">- Add certmonger-c99-01.patch and certmonger-c99-02.patch in order to
  make the package buildable with GCC 14.  Patches originally by
  Florian Weimer and from
  https://pagure.io/certmonger/pull-request/265  [boo#1221683]</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1720699200">- Add cm_dont_restart_external.patch (a SUSE specific patch) which
  prevents the restart of the cert request for an external ca
  (bsc#1221406).</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756123200">- Update to 0.79.20
  * Fix type error in cm_tdbusm_get_vn
  * Adjust parameter type for util_EVP_PKEY_id
  * Update tests to be compatible with OpenSSL 3.2
  * Switch BR from /usr/include/popt.h to popt-devel
  * getcert: return 2 when trying to create a duplicate entry
  * getcert: add NULL check to duplicate string compare
  * Use correct object path for 'ca' property of request objects in D-Bus API
  * Move shell_escape function to util.c
  * Add more environment variables to be passed on to the notification command
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Russian)
- Remove patches merged upstream
  * 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch
  * certmonger-c99-01.patch
  * certmonger-c99-02.patch
- New patch
  * add_some_missing_tests.patch</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756900800">- Disable failing tests with NSS 3.115.1: 007-certsave-dbm
  and 007-certsave-sql 025-casave-dbm
  * patch disable_some_tests.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763035200">- Cleanup dbus dependencies: dbus-send is part of dbus-1-tools
  and the %preun does not use any dbus tool nor sed.</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1772625600">- Fix immutable mode support issues; (jsc#PED-14766).
  * patch tmpfiles_var_lib_certmonger.patch</changelog>
</package>
<package pkgid="68900a7c323fee9643329ff65a1ff0379b7c8d0e14bb8d31da8d3b4a06d2f7de1392bc8f35d23d4680fa79cecf2f697fc27ba63e71fb53d909f6f2401334cb5b" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.79.20" rel="lp161.36.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586692800">- Initial package</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467200">- Updated to version 0.79.15
- Added minimum libjansson version requirement.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467201">- Added 0001-Disable-DSA-in-the-RPM-spec.patch
- Removed 0002-certmonger-return-type.patch.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1697025600">- dbus-daemon is now split out into a separate package.</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1702468800">- Update to 0.79.19
  * getcert: add-scep-ca: fix help for --ca-cert and --ra-cert
  * Don't restrict tokens to CKM_RSA_X_509
  * Updated translations from Weblate
- Update to 0.79.18
  * Rename DBus service and conf files to match canonical name
  * Add missing .TP tags in getcert-resubmit man page
  * migrated to SPDX license
  * Include owner and perms in getcert list output
  * Don't require an NSS database in cm_certread_n_parse
  * Add new certs to internal token, try harder to remove on renewal
- Update to 0.79.17
  * Respect LDFLAGS settings defined by user
  * Switch to CA user when saving NSS certificates
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
- Update to 0.79.16
  * Add a PEM validity checker and validate SCEP CA files
  * Fix implicit declaration of function ‘PEM_read_bio_X509’
  * Don't include "NEW" in certificate signing requests
  * Verify that the AES-128 is used for encrypting the local CA
  * Replace DER-encoded test file with a base64-encoded one
  * Correct a bad date in the spec changelog
  * Switch to https URLs for Sources, etc.
  * Remove dependency on SHA-1
  * tests: Test that the CA constraint DER encoding is correct
  * Disable DSA in the RPM spec
  * Manually build the srpm for the copr CI
  * Require jansson &gt;= 2.12
  * Mark the current directory as a safe git directory
  * Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Hungarian)
- Removed 0001-Disable-DSA-in-the-RPM-spec.patch
- Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1710763200">- HMAC build requires changes (these requires are missing in SLE).</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717156800">- Add certmonger-c99-01.patch and certmonger-c99-02.patch in order to
  make the package buildable with GCC 14.  Patches originally by
  Florian Weimer and from
  https://pagure.io/certmonger/pull-request/265  [boo#1221683]</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1720699200">- Add cm_dont_restart_external.patch (a SUSE specific patch) which
  prevents the restart of the cert request for an external ca
  (bsc#1221406).</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756123200">- Update to 0.79.20
  * Fix type error in cm_tdbusm_get_vn
  * Adjust parameter type for util_EVP_PKEY_id
  * Update tests to be compatible with OpenSSL 3.2
  * Switch BR from /usr/include/popt.h to popt-devel
  * getcert: return 2 when trying to create a duplicate entry
  * getcert: add NULL check to duplicate string compare
  * Use correct object path for 'ca' property of request objects in D-Bus API
  * Move shell_escape function to util.c
  * Add more environment variables to be passed on to the notification command
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Russian)
- Remove patches merged upstream
  * 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch
  * certmonger-c99-01.patch
  * certmonger-c99-02.patch
- New patch
  * add_some_missing_tests.patch</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756900800">- Disable failing tests with NSS 3.115.1: 007-certsave-dbm
  and 007-certsave-sql 025-casave-dbm
  * patch disable_some_tests.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763035200">- Cleanup dbus dependencies: dbus-send is part of dbus-1-tools
  and the %preun does not use any dbus tool nor sed.</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1772625600">- Fix immutable mode support issues; (jsc#PED-14766).
  * patch tmpfiles_var_lib_certmonger.patch</changelog>
</package>
<package pkgid="ffdecb79ef66641bfb69ebd49df390d37bbdbde3426a5d081ae391e1a053f4955b9320ab4eb162b116d09a2af189e73741f05c5041430c6ae32655614716525a" name="certmonger-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.79.20" rel="lp161.36.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586692800">- Initial package</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467200">- Updated to version 0.79.15
- Added minimum libjansson version requirement.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467201">- Added 0001-Disable-DSA-in-the-RPM-spec.patch
- Removed 0002-certmonger-return-type.patch.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1697025600">- dbus-daemon is now split out into a separate package.</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1702468800">- Update to 0.79.19
  * getcert: add-scep-ca: fix help for --ca-cert and --ra-cert
  * Don't restrict tokens to CKM_RSA_X_509
  * Updated translations from Weblate
- Update to 0.79.18
  * Rename DBus service and conf files to match canonical name
  * Add missing .TP tags in getcert-resubmit man page
  * migrated to SPDX license
  * Include owner and perms in getcert list output
  * Don't require an NSS database in cm_certread_n_parse
  * Add new certs to internal token, try harder to remove on renewal
- Update to 0.79.17
  * Respect LDFLAGS settings defined by user
  * Switch to CA user when saving NSS certificates
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
- Update to 0.79.16
  * Add a PEM validity checker and validate SCEP CA files
  * Fix implicit declaration of function ‘PEM_read_bio_X509’
  * Don't include "NEW" in certificate signing requests
  * Verify that the AES-128 is used for encrypting the local CA
  * Replace DER-encoded test file with a base64-encoded one
  * Correct a bad date in the spec changelog
  * Switch to https URLs for Sources, etc.
  * Remove dependency on SHA-1
  * tests: Test that the CA constraint DER encoding is correct
  * Disable DSA in the RPM spec
  * Manually build the srpm for the copr CI
  * Require jansson &gt;= 2.12
  * Mark the current directory as a safe git directory
  * Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Hungarian)
- Removed 0001-Disable-DSA-in-the-RPM-spec.patch
- Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1710763200">- HMAC build requires changes (these requires are missing in SLE).</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717156800">- Add certmonger-c99-01.patch and certmonger-c99-02.patch in order to
  make the package buildable with GCC 14.  Patches originally by
  Florian Weimer and from
  https://pagure.io/certmonger/pull-request/265  [boo#1221683]</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1720699200">- Add cm_dont_restart_external.patch (a SUSE specific patch) which
  prevents the restart of the cert request for an external ca
  (bsc#1221406).</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756123200">- Update to 0.79.20
  * Fix type error in cm_tdbusm_get_vn
  * Adjust parameter type for util_EVP_PKEY_id
  * Update tests to be compatible with OpenSSL 3.2
  * Switch BR from /usr/include/popt.h to popt-devel
  * getcert: return 2 when trying to create a duplicate entry
  * getcert: add NULL check to duplicate string compare
  * Use correct object path for 'ca' property of request objects in D-Bus API
  * Move shell_escape function to util.c
  * Add more environment variables to be passed on to the notification command
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Russian)
- Remove patches merged upstream
  * 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch
  * certmonger-c99-01.patch
  * certmonger-c99-02.patch
- New patch
  * add_some_missing_tests.patch</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756900800">- Disable failing tests with NSS 3.115.1: 007-certsave-dbm
  and 007-certsave-sql 025-casave-dbm
  * patch disable_some_tests.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763035200">- Cleanup dbus dependencies: dbus-send is part of dbus-1-tools
  and the %preun does not use any dbus tool nor sed.</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1772625600">- Fix immutable mode support issues; (jsc#PED-14766).
  * patch tmpfiles_var_lib_certmonger.patch</changelog>
</package>
<package pkgid="dbde59f68eab23b8c70cd665494e408611a972705d820fd0081b3b0702440280fad7a5fcd6daf005343ea5b698f0de79193a45a3a9e93ebaf94ab141c4c06487" name="certmonger-debugsource" arch="x86_64">
  <version epoch="0" ver="0.79.20" rel="lp161.36.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586692800">- Initial package</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467200">- Updated to version 0.79.15
- Added minimum libjansson version requirement.</changelog>
  <changelog author="Matthew Davis &lt;novell@virtual.drop.net&gt;" date="1655467201">- Added 0001-Disable-DSA-in-the-RPM-spec.patch
- Removed 0002-certmonger-return-type.patch.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1697025600">- dbus-daemon is now split out into a separate package.</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1702468800">- Update to 0.79.19
  * getcert: add-scep-ca: fix help for --ca-cert and --ra-cert
  * Don't restrict tokens to CKM_RSA_X_509
  * Updated translations from Weblate
- Update to 0.79.18
  * Rename DBus service and conf files to match canonical name
  * Add missing .TP tags in getcert-resubmit man page
  * migrated to SPDX license
  * Include owner and perms in getcert list output
  * Don't require an NSS database in cm_certread_n_parse
  * Add new certs to internal token, try harder to remove on renewal
- Update to 0.79.17
  * Respect LDFLAGS settings defined by user
  * Switch to CA user when saving NSS certificates
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
- Update to 0.79.16
  * Add a PEM validity checker and validate SCEP CA files
  * Fix implicit declaration of function ‘PEM_read_bio_X509’
  * Don't include "NEW" in certificate signing requests
  * Verify that the AES-128 is used for encrypting the local CA
  * Replace DER-encoded test file with a base64-encoded one
  * Correct a bad date in the spec changelog
  * Switch to https URLs for Sources, etc.
  * Remove dependency on SHA-1
  * tests: Test that the CA constraint DER encoding is correct
  * Disable DSA in the RPM spec
  * Manually build the srpm for the copr CI
  * Require jansson &gt;= 2.12
  * Mark the current directory as a safe git directory
  * Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Hungarian)
- Removed 0001-Disable-DSA-in-the-RPM-spec.patch
- Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1710763200">- HMAC build requires changes (these requires are missing in SLE).</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717156800">- Add certmonger-c99-01.patch and certmonger-c99-02.patch in order to
  make the package buildable with GCC 14.  Patches originally by
  Florian Weimer and from
  https://pagure.io/certmonger/pull-request/265  [boo#1221683]</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1720699200">- Add cm_dont_restart_external.patch (a SUSE specific patch) which
  prevents the restart of the cert request for an external ca
  (bsc#1221406).</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756123200">- Update to 0.79.20
  * Fix type error in cm_tdbusm_get_vn
  * Adjust parameter type for util_EVP_PKEY_id
  * Update tests to be compatible with OpenSSL 3.2
  * Switch BR from /usr/include/popt.h to popt-devel
  * getcert: return 2 when trying to create a duplicate entry
  * getcert: add NULL check to duplicate string compare
  * Use correct object path for 'ca' property of request objects in D-Bus API
  * Move shell_escape function to util.c
  * Add more environment variables to be passed on to the notification command
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Russian)
- Remove patches merged upstream
  * 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch
  * certmonger-c99-01.patch
  * certmonger-c99-02.patch
- New patch
  * add_some_missing_tests.patch</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1756900800">- Disable failing tests with NSS 3.115.1: 007-certsave-dbm
  and 007-certsave-sql 025-casave-dbm
  * patch disable_some_tests.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1763035200">- Cleanup dbus dependencies: dbus-send is part of dbus-1-tools
  and the %preun does not use any dbus tool nor sed.</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1772625600">- Fix immutable mode support issues; (jsc#PED-14766).
  * patch tmpfiles_var_lib_certmonger.patch</changelog>
</package>
<package pkgid="9da1ba0091a152a7ffc061f78f6c6bf1d027f226b96ad045f7a0da7ca09070eb5e6b48c5d4cdbd68bf78b29928ea39afeb17ee4496d00c7ba87813e028008104" name="lasso" arch="src">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="10fc2d024446f73824710b74be5d3eb98eb80318bd57a9faebcd7d0fb536d2543e461527ed3ca0d6c5524f6065201abcc8b74a446c0d087d90c124bb209d07d8" name="lasso-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="573d4c6b3ee240e288c411f73e09d05838913d197dd28e95da420a603488de6ec1b153bb909a1608fc735baaf8b3919ca0e7b54332dee12fbb669a94acbb11b9" name="lasso-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="b9c7d986d1b1026d5d365cfc7f3706ca2a2426ef65072768d615fa2f36181c1715be6f2eefd11c0a9c4930e794f0dceaf86a5da644f85713a38530265d061c9a" name="liblasso-devel" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="c53bf2acfd86006b11e91de05e74fbc5a9f7ae79867042a03defd5076ba08da11a94457d543bfcd6343adcb034c8303af507ae5ce6535968da45614d76504eae" name="liblasso3" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="df31a21a62f887c65013c8380ee093c21982861483748d715d9ce3da1d64d00af90300a761a7b77a176187fc318fed1cb09ed84d3a9ea4af73bdcf74d965ce57" name="liblasso3-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="780de05a3bf417576fbf9f37000d3de678a400a5a559ff2a8ce9d440ce85949dc034612f0ee8b97b049806c220c9e3d93470b1e960a3827c1ebba2fd3d89a674" name="oddjob" arch="src">
  <version epoch="0" ver="0.34.7" rel="lp161.13.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586865600">- Initial package</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1588939200">- Fix to CVE-2020-10737
- Update to 0.34.5</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649937600">- Update to 0.34.7
  * 0.34.7
  - Read HOME_MODE and UMASK from /etc/login.defs
  - Default to LC_ALL=C.UTF-8 in systemd service environment
  * 0.34.6
  - update license on src/buffer.h
  - change /var/run -&gt; /run in systemd service file</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1690200000">- Use %_pam_moduledir (boo#1191040)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Do not (Build)Require dbus-1-x11: the dependency seems unused, as
  it's abstracted throughpython-dbus. dbus-1-x11 is scheduled for
  removal after the switch to dbus-broker.</changelog>
</package>
<package pkgid="fa36d97205fa28773fc59289e7c5a594435806395196c8c496160370a66ea57c6516bafad400a8e4b8ff03fff66280a989240affd81afc5227dd83f8448fd6e4" name="oddjob" arch="x86_64">
  <version epoch="0" ver="0.34.7" rel="lp161.13.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586865600">- Initial package</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1588939200">- Fix to CVE-2020-10737
- Update to 0.34.5</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649937600">- Update to 0.34.7
  * 0.34.7
  - Read HOME_MODE and UMASK from /etc/login.defs
  - Default to LC_ALL=C.UTF-8 in systemd service environment
  * 0.34.6
  - update license on src/buffer.h
  - change /var/run -&gt; /run in systemd service file</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1690200000">- Use %_pam_moduledir (boo#1191040)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Do not (Build)Require dbus-1-x11: the dependency seems unused, as
  it's abstracted throughpython-dbus. dbus-1-x11 is scheduled for
  removal after the switch to dbus-broker.</changelog>
</package>
<package pkgid="056ce4c0c2a5ccd1b5ba775e501894d84cecf75c626017b9a84df578e75afeb1c0aee69707947cc6dc58da5c4ee1e8c4f42e9c758e6d41c4b6e41b2bffc343e9" name="oddjob-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.34.7" rel="lp161.13.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586865600">- Initial package</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1588939200">- Fix to CVE-2020-10737
- Update to 0.34.5</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649937600">- Update to 0.34.7
  * 0.34.7
  - Read HOME_MODE and UMASK from /etc/login.defs
  - Default to LC_ALL=C.UTF-8 in systemd service environment
  * 0.34.6
  - update license on src/buffer.h
  - change /var/run -&gt; /run in systemd service file</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1690200000">- Use %_pam_moduledir (boo#1191040)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Do not (Build)Require dbus-1-x11: the dependency seems unused, as
  it's abstracted throughpython-dbus. dbus-1-x11 is scheduled for
  removal after the switch to dbus-broker.</changelog>
</package>
<package pkgid="68ec23657f07d5d10a5ce556e49821742dffab52b5aee5f3375de52f3b7f31b4cc19a27984bd002669b586298c50b3c42d1d8f15de56e15954cab961749c1996" name="oddjob-debugsource" arch="x86_64">
  <version epoch="0" ver="0.34.7" rel="lp161.13.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586865600">- Initial package</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1588939200">- Fix to CVE-2020-10737
- Update to 0.34.5</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649937600">- Update to 0.34.7
  * 0.34.7
  - Read HOME_MODE and UMASK from /etc/login.defs
  - Default to LC_ALL=C.UTF-8 in systemd service environment
  * 0.34.6
  - update license on src/buffer.h
  - change /var/run -&gt; /run in systemd service file</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1690200000">- Use %_pam_moduledir (boo#1191040)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Do not (Build)Require dbus-1-x11: the dependency seems unused, as
  it's abstracted throughpython-dbus. dbus-1-x11 is scheduled for
  removal after the switch to dbus-broker.</changelog>
</package>
<package pkgid="8584523506c8a84a4e7a1f74ecbb2f62ef9c76f92b949f2d092c04f865a1aeabd1410fdc3832775c2c00bc073c342905a070e9694188321f0515979e86c510f5" name="oddjob-gpupdate" arch="src">
  <version epoch="0" ver="0.2.0+git.5.ed70836" rel="lp161.6.1"/>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1574510400">- Initial build for Sisyphus</changelog>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1580385600">- Add support gpupdate_computer method</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1625140800">- Modify oddjob-gpupdate to use samba-gpupdate; (jsc#SLE-18457).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1627992000">- Hardening to protect against malicous usernames; (bsc#1188680).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1646222400">- oddjob-gpupdate: use %_pam_moduledir; (bsc#1191041).
- execl requires the exe as the first arg.</changelog>
</package>
<package pkgid="d7fc2991415640e905e48cfdff0b25ab2a4235c8265a241d4faa6bacb6ddbde7bf0b2486fb35d49d950c88aa6351c2b8645c7287c95c2c8f33fb66b4a7b317a5" name="oddjob-gpupdate" arch="x86_64">
  <version epoch="0" ver="0.2.0+git.5.ed70836" rel="lp161.6.1"/>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1574510400">- Initial build for Sisyphus</changelog>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1580385600">- Add support gpupdate_computer method</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1625140800">- Modify oddjob-gpupdate to use samba-gpupdate; (jsc#SLE-18457).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1627992000">- Hardening to protect against malicous usernames; (bsc#1188680).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1646222400">- oddjob-gpupdate: use %_pam_moduledir; (bsc#1191041).
- execl requires the exe as the first arg.</changelog>
</package>
<package pkgid="096262d7117cf2d3193616e9d533045851f0c535ce20985b47e933522ce058f3d85e2b1399bf5c08eaaaee5aa2ba6acd7184d9ba9f26139e4cd7002565a37667" name="oddjob-gpupdate-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.2.0+git.5.ed70836" rel="lp161.6.1"/>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1574510400">- Initial build for Sisyphus</changelog>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1580385600">- Add support gpupdate_computer method</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1625140800">- Modify oddjob-gpupdate to use samba-gpupdate; (jsc#SLE-18457).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1627992000">- Hardening to protect against malicous usernames; (bsc#1188680).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1646222400">- oddjob-gpupdate: use %_pam_moduledir; (bsc#1191041).
- execl requires the exe as the first arg.</changelog>
</package>
<package pkgid="273863f5f3b10df7448cfcdb7a92fb0b740812cb94b0121e8b8d610656426d7328753945654e4884d5de3e27690255b98d89e4060b4d782d8793e38e825f4489" name="oddjob-gpupdate-debugsource" arch="x86_64">
  <version epoch="0" ver="0.2.0+git.5.ed70836" rel="lp161.6.1"/>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1574510400">- Initial build for Sisyphus</changelog>
  <changelog author="Evgeny Sinelnikov &lt;sin@altlinux.org&gt;" date="1580385600">- Add support gpupdate_computer method</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1625140800">- Modify oddjob-gpupdate to use samba-gpupdate; (jsc#SLE-18457).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1627992000">- Hardening to protect against malicous usernames; (bsc#1188680).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1646222400">- oddjob-gpupdate: use %_pam_moduledir; (bsc#1191041).
- execl requires the exe as the first arg.</changelog>
</package>
<package pkgid="39a7c34072e724937f9ab183770a1c09506221ab15b7bc0d4137e9b044efcb736a395707f5c5891648045d602cc2f465d61dab7f0345a6a16283a013ced751da" name="oddjob-mkhomedir" arch="x86_64">
  <version epoch="0" ver="0.34.7" rel="lp161.13.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586865600">- Initial package</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1588939200">- Fix to CVE-2020-10737
- Update to 0.34.5</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649937600">- Update to 0.34.7
  * 0.34.7
  - Read HOME_MODE and UMASK from /etc/login.defs
  - Default to LC_ALL=C.UTF-8 in systemd service environment
  * 0.34.6
  - update license on src/buffer.h
  - change /var/run -&gt; /run in systemd service file</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1690200000">- Use %_pam_moduledir (boo#1191040)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Do not (Build)Require dbus-1-x11: the dependency seems unused, as
  it's abstracted throughpython-dbus. dbus-1-x11 is scheduled for
  removal after the switch to dbus-broker.</changelog>
</package>
<package pkgid="8561b1ef9866492c68f312607805a1887b9a6a076fc113a61b3c2e8d2db9b567b42f6e3be7fcd4fff2139c9fe00907a5eb4946648b6a71fb0e04cea37267bdfb" name="oddjob-mkhomedir-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.34.7" rel="lp161.13.1"/>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1586865600">- Initial package</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1588939200">- Fix to CVE-2020-10737
- Update to 0.34.5</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1649937600">- Update to 0.34.7
  * 0.34.7
  - Read HOME_MODE and UMASK from /etc/login.defs
  - Default to LC_ALL=C.UTF-8 in systemd service environment
  * 0.34.6
  - update license on src/buffer.h
  - change /var/run -&gt; /run in systemd service file</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1690200000">- Use %_pam_moduledir (boo#1191040)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Do not (Build)Require dbus-1-x11: the dependency seems unused, as
  it's abstracted throughpython-dbus. dbus-1-x11 is scheduled for
  removal after the switch to dbus-broker.</changelog>
</package>
<package pkgid="2d10c5e45b36cd88522fdadb01cb358b26d8f1b977f7ce6280d29b89aaf4dca5e6e4e1c1d2c5531a93cdf956fc7ca7b8a0ee80db71fd3a81eba3b7d7652f9154" name="python-freeipa" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp161.10.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1586865600">- Initial packaging</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1589371200">- Update to version 1.0.5
  + Fix URL to point to docs and declare Python 3 support in metadata
  + Detect hostname when changing password too</changelog>
  <changelog author="pgajdos@suse.com" date="1621252800">- version update to 1.0.6
  * no upstream changelog found
- use %pytest macro</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1749556800">- Use pyproject macros to build and install.</changelog>
</package>
<package pkgid="3eed685a1cf1a4039a91f3e714ec5bc2a10b6f72c85bf605c97fecbd2800ab76b48f37ff62ad6ceb748812ce9a76cc6c6562144ee9a859abed295e51c2ec7969" name="python3-lasso" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="974007b1887142e8e49ecea0049899760211829bebc15c12fb13903477335f9239db4a59227d026b7b15aa8ad5ff5e0c181c463a146ee13bcd14ab8baf8c89ae" name="python3-lasso-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="lp161.29.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561896000">- Initial packaging based on Fedora spec</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1563710400">- Simplify the packaging and drop all unused sections and subpackages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1581249600">- Sync more patches from Fedora
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582632000">- remove automake-version.patch that is not needed
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1582718400">- remove .la and .a files in a consistent way</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1588075200">- Update to 2.6.1
  * Keep order of SessionIndexes
  * Clear SessionIndex when private SessionIndexes is empty
  * misc: clear warnings about class_init signature using coccinelle
  * tests: fix compilation with check&gt;0.12
  * Sort input file lists to make build deterministic
  * Modify .gitignore for PHP 7 binding
  * Add PHP 7 binding
  * Fix tests broken by new DEBUG logs
  * Improve error logging during node parsing
  * Improve configure compatibility
  * Improve compatibility with Solaris
  * Fix reference count in lasso_server_add_provider2
  * Fix python multi-version builds on jessie and stretch
  * docs: do not use Internet to fetch DTDs, entities or documents
  * fix missing include &lt;strings.h&gt; for index()
  * PAOS: Do not populate "Destination" attribute
  * export symbol lasso_log
  * Do not ignore WantAuthnRequestSigned value with hint MAYBE
  * Use io.open(encoding=utf8) in extract_symbols/sections.py
  * xml: adapt schema in saml2:AuthnContext
  * Fix ECP signature not found error when only assertion is signed
  * autoconf: search python interpreters by versions
  * python: make tools compatible with Py3
  * python: run tests and tools with same interpreter as binding target
  * improve resiliency of lasso_inflate
  * fix segfault in lasso_get_saml_message
  * python: add classmethod Profile.getIssuer
  * website: add news about 2.6.0 release
  * faq: fix references to lasso.profileGetIssuer
  * python: add a classmethod for lasso.profileGetIssuer
  * tools: fix segfault in lasso_get_saml_message
  * jenkins.sh: add a make clean to prevent previous build to break new ones
  * tools: set output buffer size in lasso_inflate to 20 times the input size
  * Use python interpreter specified configure script
  * Make Python scripts compatible with both Py2 and Py3
  * fix duplicate definition of LogoutTestCase and logoutSuite
  * Downcase UTF-8 file encoding name
  * Make more Python scripts compatible with both Py2 and Py3
  * Configure should search for versioned Python interpreter.
  * Clean python cache when building python3 binding
  * Move AC_SUBST declaration for AM_CFLAGS with alike
  * Remove -Werror from --enable-debugging
  * xml: fix parsing of saml:AuthnContext
- Remove upstreamed patches:
  * use-specified-python-interpreter.patch
  * duplicate-python-LogoutTestCase.patch
  * versioned-python-configure.patch
  * build-scripts-py3-compatible.patch
  * 0005-tests-use-self-generated-certificate-to-sign-federat.patch
  * 0006-Fix-ECP-signature-not-found-error-when-only-assertio.patch
  * 0007-PAOS-Do-not-populate-Destination-attribute.patch
  * 0008-Explicitly-define-tests-cases-and-add-them-to-tests.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1624017600">- Update to 2.7.0
  * CVE-2021-28091 (boo#1186768):
    Fix signature checking on unsigned response with multiple assertions
  * Jenkinsfile: update name of main branch
  * Python: improve display of warnings in the binding generator
  * replace deprecated index() by strchr() (#51385)
  * Fix: new provider reference count is incremented one time too many (#51420)
  * docs: update gtk-doc-tools integration (#50441)
  * Using reference documentation on https://developer.gnome.org/gtk-doc-manual/stable/index.html.en
  * bindings: disable java tests when java is disabled
  * Fix: RecursionError in python3 bindings (#51249)
  * configure.ac: disable java bindings
  * build: update to use origin/main
  * debian: add packaging for debian-buster
  * jenkins.sh: build against all available python versions (#44287)
  * python: do not leak out_pyvalue if method call protocol is not respected (#44287)
  * python: do not raise in valid_seq() (#44287)
  * python: return NULL if get_list_of_strings() fails (#44287)
  * python: return NULL if get_list_of_pygobject fails (#44287)
  * python: return NULL if get_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_pygobject fails (#44287)
  * python: return NULL if set_list_of_xml_nodes fails (#44287)
  * python: return NULL if set_list_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_strings fails (#44287)
  * python: return NULL if set_hashtable_of_pygobject fails (#44287)
  * python: free internal string buffer if needed in set_list_of_strings (#44287)
  * python: check if hashtable is NULL before deallocatio (#44287)n
  * python: add a failure label to method wrappers (#44287)
  * python: add macro for early return (#44287)
  * python: remove newline before method call (#44287)
  * python: simplify get_logger_object (#44287)
  * python: fix warning about discarded const modifier (#44287)
  * python: replace exception by warning on logging path (#44287)
  * python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
  * python: remove deprecated PyErr_Warn (#44287)
  * python: remove unused PyString_Size (#44287)
  * python: Exception.message was removed in python3 (#45995)
  * tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
  * configure.ac: support php7 interpreter on CentOS 8 (#42299)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1631707200">- the required of xmlsec1 (which only has the commandline binariy)
  in the library package seems unnecessary.
- some pkgconfig buildrequires conversion</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1647432000">- Updaet to 2.8.0:
  * Improve choice of signature method and of allowed signature method (by Jakub
    Hrozek &lt;jhrozek@redhat.com&gt;), it's now possible to completely forbid SHA1 for
    example
  * Change default RSA encryption padding to OAEP
  * Fix: HMAC signature other than SHA1 (jhrozek@redhat.com)
  * Fix: prevent multiple OneTimeUse elements</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Update to 2.8.2:
  * Compatibility with EVP API of openssl 1.x
- Changes from 2.8.1:
  * Major overhaul of OpenSSL API usage by using only the EVP API
    as the low level API (RSA*, HMAC*) is deprecated.
  * Fix wrong parsing of Count attribute on saml:ProxyRestriction.
  * Perl: pass LDFLAGS to Makefile.PL
  * Replace use of deprecated xmlSecBase64Decode by
    xmlSecBase64Decode_ex.
  * Fix overwrite of profile.signature_status in
    lasso_saml20_login_process_response_status_and_assertion.
  * Fix lot of GCC warnings</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1731672000">- Fix build issues
  * lasso-automake-1.17-support.patch
  * lasso-fix-implicit-declarations.patch
  * lasso-libxml2-2.12-support.patch</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1741176000">- Add lasso-2.8.2-python_313.patch upstream patch to make it
  compatible with python 3.13
  https://dev.entrouvert.org/issues/92106</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1750248000">- Merge the upstream PR
  (https://git.entrouvert.org/entrouvert/lasso/pulls/19) as the
  patch remove-six.patch removing the dependency on six.
- Add fix_shebangs.patch to fix shebangs (better manageable than
  sed commands).</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1752062400">- Fix builds with automake &gt;= 1.17
  * lasso-automake-1.17-support.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757419200">- version update to 2.9.0
  * Fix symbol deprecation of XMLSEC_CRYPTO macro in libxmlsec 1.3.0 (Patch
    provided by Simo Sorce of RedHat) (#78280)
  * Fix implicit function declaration errors, patch provided by Rob Crittenden
    from RedHat (#85340)
  * Fix proper selection of SHA512 in lasso_xmlnode_add_saml2_signature_template (#93018)
  * Perl: fix leak of char* in return of functions (#55510)
  * Perl: fix leak of xmlBuffer in xmlnode_to_tpv (#55510)
  * xml: do not ignore unexpected text content (#105693)
  * tests: check assignement of any_attribute is prevented (#105693)
  * xml: do not terminate on an unknown XML node type (#105693)
  * misc: check xmlSecGetNodeNsHref for possible NULL result (#105693)
  * xml: prevent assignment of attribute value inside any attribute
  * misc: never return CDATA nodes, include them in text value (#105693)
  * tests: test that inserted comment do not change node value and still validate signature (#105693)
  * autogen.sh: add support for automake up to 1.18 (#107955)
  * autotools: use sysconfig module when distutils not available (#105650)
  * tests: fix python bindings tests for Python 3.14 (#105622)
  * xml: fix SAML 1.1 AttributeValue snippet flag (#102374)
  * registry: fix lasso_registry_destroy private declaration (#101250)
  * bindings: fix lasso_provider_get_key_encryption_method export (#101250)
  * Improve differentiation of Redirect from POST messages (#97575)
  * Annotate lasso_*_signature_method functions with LASSO_EXPORT (#86076)
  * Adjust to structured error callback argument change in libxml2 2.12, patch
    provided by Florian Wiemer of RedHat (#86080)
  * all private_data public fields have been depreciated (but not removed to keep
    ABI compatibilityy) and new GLib API for private data is used (#42073)
  * python-six is no more used in the python bindings (#94580)
  * new public function lasso_provider_verify_saml_signature (#92412)
- modified patches
  % fix_shebangs.patch (refreshed)
- deleted patches
  - lasso-2.8.2-python_313.patch (upstreamed)
  - lasso-automake-1.17-support.patch (upstreamed)
  - lasso-fix-implicit-declarations.patch (upstreamed)
  - lasso-libxml2-2.12-support.patch (upstreamed)
  - remove-six.patch (upstreamed)</changelog>
</package>
<package pkgid="e5efaea96014d0e03a8fcbd5d98d155de2f9a433ea6e08476c12414a389a3d14b82eb152e9b7aa9d633f4fc652ce0604f2ada43e889203f1d19cb1e20024166b" name="python313-freeipa" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp161.10.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1586865600">- Initial packaging</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1589371200">- Update to version 1.0.5
  + Fix URL to point to docs and declare Python 3 support in metadata
  + Detect hostname when changing password too</changelog>
  <changelog author="pgajdos@suse.com" date="1621252800">- version update to 1.0.6
  * no upstream changelog found
- use %pytest macro</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1749556800">- Use pyproject macros to build and install.</changelog>
</package>
</otherdata>