<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="12">
<package pkgid="bf3e98d47874ae37fe9ecac0b17186c8ad03775b8f728aa5f91149e7707a40729770566a2696da7619d022a99dc51b092ca74a90a2880a744505faf0e62ce2b5" name="ansible-rmt-server" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="1.13"/>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1679400000">- Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc</changelog>
  <changelog author="Zuzana Petrova &lt;zpetrova@suse.com&gt;" date="1680264000">- Force rmt-client-setup-res script to use https (bsc#1209825)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Handle zypper response when data exporter raises an error (bsc#1257133)
  * Add Valkey + Sidekiq for async processing</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
</package>
<package pkgid="4b48d765954104a9ad586d559c9462297801eb64ec593a103160afc96949cf0e8ca93a760a8e189b2791a987056ef2b5c65172e82d0d2f45bca8f5bd9bf4ff6c" name="ansible-rmt-server" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="2.3"/>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Add Valkey + Sidekiq for async processing
  * Handle zypper response when data exporter raises an error (bsc#1257133)</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1775822400">- Version 2.27
  * Update rack, fix CVE-2026-34763, CVE-2026-34230, CVE-2026-26961, CVE-2026-34786, CVE-2026-34831,
    CVE-2026-34826, CVE-2026-34830, CVE-2026-34785, CVE-2026-34829, CVE-2026-26962 (bsc#1261388, bsc#1261398,
    bsc#1261406, bsc#1261417, bsc#1261426, bsc#1261436, bsc#1261447, bsc#1261458, bsc#1261466, bsc#1261471)
  * fixes ReDoS vulnerability in Addressable
  * fixes Out-of-bounds Read vulnerability in rdiscount</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1780660800">- Version 2.28
  * Set arch to unknown for Rancher based products (jsc#SCC-759)
  * Fix purge for large amount of systems (bsc#1262706)
  * Change data type to MEDIUMTEXT in profiles table (bsc#1268305)
  * Remove proxy_byos column
  * Fix race condition when no system matches (bsc#1268301)
  * Fix race condition for PAYG (bsc#1268149)
  * Fix race condition to update a system (bsc#1268303)</changelog>
</package>
<package pkgid="78c898f6b18e2e58d5e093a52bc056ad2fb57c1bb18e828cb1de4db10ec4a0b0d7007634e1fcd8db9fd65d3d087fddad93ae8a63517cc4204456a2954f26dbce" name="rmt-server" arch="src">
  <version epoch="0" ver="3.0.0" rel="1.13"/>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1679400000">- Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc</changelog>
  <changelog author="Zuzana Petrova &lt;zpetrova@suse.com&gt;" date="1680264000">- Force rmt-client-setup-res script to use https (bsc#1209825)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Handle zypper response when data exporter raises an error (bsc#1257133)
  * Add Valkey + Sidekiq for async processing</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
</package>
<package pkgid="842f9768bb61bf725935befa286491feb9503077ad81c39ed2e61e3d917ea222275a82b415218a2422d60695a7f80e902de77f935b33ca407477593bc864778d" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="1.13"/>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1679400000">- Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc</changelog>
  <changelog author="Zuzana Petrova &lt;zpetrova@suse.com&gt;" date="1680264000">- Force rmt-client-setup-res script to use https (bsc#1209825)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Handle zypper response when data exporter raises an error (bsc#1257133)
  * Add Valkey + Sidekiq for async processing</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
</package>
<package pkgid="5132957c3f0479744848974adec5e34b920e7a45d5805512253642be3fc27f325def90e9139e700b290c1be3d2346769c25c1897e18fb388988cb90653cb7f0b" name="rmt-server" arch="src">
  <version epoch="0" ver="3.1.0" rel="2.3"/>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Add Valkey + Sidekiq for async processing
  * Handle zypper response when data exporter raises an error (bsc#1257133)</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1775822400">- Version 2.27
  * Update rack, fix CVE-2026-34763, CVE-2026-34230, CVE-2026-26961, CVE-2026-34786, CVE-2026-34831,
    CVE-2026-34826, CVE-2026-34830, CVE-2026-34785, CVE-2026-34829, CVE-2026-26962 (bsc#1261388, bsc#1261398,
    bsc#1261406, bsc#1261417, bsc#1261426, bsc#1261436, bsc#1261447, bsc#1261458, bsc#1261466, bsc#1261471)
  * fixes ReDoS vulnerability in Addressable
  * fixes Out-of-bounds Read vulnerability in rdiscount</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1780660800">- Version 2.28
  * Set arch to unknown for Rancher based products (jsc#SCC-759)
  * Fix purge for large amount of systems (bsc#1262706)
  * Change data type to MEDIUMTEXT in profiles table (bsc#1268305)
  * Remove proxy_byos column
  * Fix race condition when no system matches (bsc#1268301)
  * Fix race condition for PAYG (bsc#1268149)
  * Fix race condition to update a system (bsc#1268303)</changelog>
</package>
<package pkgid="3f77164875bca206ad59007023ac72ed5b5907995bdedc7236fbf93dbf5769ddb0124039f81082fafa7cf9f829b0017742d391385aaa12811394bdda7743e3d1" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="2.3"/>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Add Valkey + Sidekiq for async processing
  * Handle zypper response when data exporter raises an error (bsc#1257133)</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1775822400">- Version 2.27
  * Update rack, fix CVE-2026-34763, CVE-2026-34230, CVE-2026-26961, CVE-2026-34786, CVE-2026-34831,
    CVE-2026-34826, CVE-2026-34830, CVE-2026-34785, CVE-2026-34829, CVE-2026-26962 (bsc#1261388, bsc#1261398,
    bsc#1261406, bsc#1261417, bsc#1261426, bsc#1261436, bsc#1261447, bsc#1261458, bsc#1261466, bsc#1261471)
  * fixes ReDoS vulnerability in Addressable
  * fixes Out-of-bounds Read vulnerability in rdiscount</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1780660800">- Version 2.28
  * Set arch to unknown for Rancher based products (jsc#SCC-759)
  * Fix purge for large amount of systems (bsc#1262706)
  * Change data type to MEDIUMTEXT in profiles table (bsc#1268305)
  * Remove proxy_byos column
  * Fix race condition when no system matches (bsc#1268301)
  * Fix race condition for PAYG (bsc#1268149)
  * Fix race condition to update a system (bsc#1268303)</changelog>
</package>
<package pkgid="f7083ad4bff75925a6d182a981f168336ff38ba9a2403020cf338ab7243c8fa0d3311d541194acb66d694fd4c67b14b56e321f7248a9a1fde1bb1b8bb007ae97" name="rmt-server-config" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="1.13"/>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1679400000">- Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc</changelog>
  <changelog author="Zuzana Petrova &lt;zpetrova@suse.com&gt;" date="1680264000">- Force rmt-client-setup-res script to use https (bsc#1209825)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Handle zypper response when data exporter raises an error (bsc#1257133)
  * Add Valkey + Sidekiq for async processing</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
</package>
<package pkgid="67c0b94a954d6674795067998fdbe620dbf0a96bd9e993d014c1bf04526fceb8f34e3f678d9b594059c9d9daf32494ae891089830c1d391abbfaabc4e7b5b883" name="rmt-server-config" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="2.3"/>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Add Valkey + Sidekiq for async processing
  * Handle zypper response when data exporter raises an error (bsc#1257133)</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1775822400">- Version 2.27
  * Update rack, fix CVE-2026-34763, CVE-2026-34230, CVE-2026-26961, CVE-2026-34786, CVE-2026-34831,
    CVE-2026-34826, CVE-2026-34830, CVE-2026-34785, CVE-2026-34829, CVE-2026-26962 (bsc#1261388, bsc#1261398,
    bsc#1261406, bsc#1261417, bsc#1261426, bsc#1261436, bsc#1261447, bsc#1261458, bsc#1261466, bsc#1261471)
  * fixes ReDoS vulnerability in Addressable
  * fixes Out-of-bounds Read vulnerability in rdiscount</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1780660800">- Version 2.28
  * Set arch to unknown for Rancher based products (jsc#SCC-759)
  * Fix purge for large amount of systems (bsc#1262706)
  * Change data type to MEDIUMTEXT in profiles table (bsc#1268305)
  * Remove proxy_byos column
  * Fix race condition when no system matches (bsc#1268301)
  * Fix race condition for PAYG (bsc#1268149)
  * Fix race condition to update a system (bsc#1268303)</changelog>
</package>
<package pkgid="bb2785cf93bd7224266cc59932cf970927ff631fd88095da1765b738f80883b287cb2deef7efb3cc9f1ac454d2a64274b585d33746066e4241e80c5aa26a997c" name="rmt-server-pubcloud" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="1.13"/>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1679400000">- Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc</changelog>
  <changelog author="Zuzana Petrova &lt;zpetrova@suse.com&gt;" date="1680264000">- Force rmt-client-setup-res script to use https (bsc#1209825)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Handle zypper response when data exporter raises an error (bsc#1257133)
  * Add Valkey + Sidekiq for async processing</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
</package>
<package pkgid="30f71a877f70637bcd52864dcfdba3418050ad97ef34e5a11a6cbdf553422ee4797261db1648e196868dd8abb564098b63ac16827807da44b479d25793a9daf3" name="rmt-server-pubcloud" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="2.3"/>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1681300800">- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1684497600">- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1686052800">- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1696420800">- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
  * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
  * Include byos parameter when checking subscription validity for BYOS systems with SCC</changelog>
  <changelog author="Felix Schnizlein &lt;fschnizlein@suse.com&gt;" date="1712836800">- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1713441600">- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1719835200">- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1720440000">- Include new script to fix yum-utils issue (jsc#SLL-369)</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="Parag Jain &lt;parag.jain@suse.com&gt;" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="Lu&#xED;s Caparroz &lt;lcaparroz@suse.com&gt;" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Add Valkey + Sidekiq for async processing
  * Handle zypper response when data exporter raises an error (bsc#1257133)</changelog>
  <changelog author="Fergal Mc Carthy &lt;fmccarthy@suse.com&gt;" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1775822400">- Version 2.27
  * Update rack, fix CVE-2026-34763, CVE-2026-34230, CVE-2026-26961, CVE-2026-34786, CVE-2026-34831,
    CVE-2026-34826, CVE-2026-34830, CVE-2026-34785, CVE-2026-34829, CVE-2026-26962 (bsc#1261388, bsc#1261398,
    bsc#1261406, bsc#1261417, bsc#1261426, bsc#1261436, bsc#1261447, bsc#1261458, bsc#1261466, bsc#1261471)
  * fixes ReDoS vulnerability in Addressable
  * fixes Out-of-bounds Read vulnerability in rdiscount</changelog>
  <changelog author="Adnilson Delgado &lt;adnilson.delgado@suse.com&gt;" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1780660800">- Version 2.28
  * Set arch to unknown for Rancher based products (jsc#SCC-759)
  * Fix purge for large amount of systems (bsc#1262706)
  * Change data type to MEDIUMTEXT in profiles table (bsc#1268305)
  * Remove proxy_byos column
  * Fix race condition when no system matches (bsc#1268301)
  * Fix race condition for PAYG (bsc#1268149)
  * Fix race condition to update a system (bsc#1268303)</changelog>
</package>
<package pkgid="02ed1a5744e8de4b3293a79d545874ebb926c5e58ab5db32ea107624d33dd00a4414976563a18a35ec7c92d4de2c020cb1e7a74aa034ba7bd2686a0b1d6a75e8" name="yast2-rmt" arch="src">
  <version epoch="0" ver="1.3.7" rel="69.2"/>
  <changelog author="wstephenson@suse.com" date="1530792000">- version 1.0.2
- Translation fixes</changelog>
  <changelog author="fschnizlein@suse.com" date="1534248000">- version 1.0.3
- Change configuration file path to new location (rmt-server &gt;= 1.0.6)
- Hide database password in summary (bsc#1102053)
- Fix visual issues with text alignment</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1538568000">- version 1.0.4
- Adapt to the new YaST2 systemd API (bsc#1107253)</changelog>
  <changelog author="thutterer@suse.com" date="1540814400">- version 1.1.0
- Add setup step to open firewall ports for HTTP and HTTPS (fate#326634)</changelog>
  <changelog author="thutterer@suse.com" date="1540814401">- version 1.1.1
- Translation fixes
- Follow YaST text style guide
- Remove broken back-buttons</changelog>
  <changelog author="skotov@suse.com" date="1544097600">- version 1.1.2
- [CVE-2018-17957] Secure MySQL credentials (bsc#1117602)</changelog>
  <changelog author="vzepedamas@suse.com" date="1545307200">- Allow user to skip registration (bsc#1119386)</changelog>
  <changelog author="hschmidt@suse.com" date="1546603200">- Release version 1.2.0</changelog>
  <changelog author="thutterer@suse.com" date="1547467200">- Remove broken hyperlink from help (bsc#1120672)</changelog>
  <changelog author="fschueller@suse.com" date="1549022400">- Release version 1.2.1
- Launch as root from gnome-shell menu (bsc#1123562)</changelog>
  <changelog author="skotov@suse.com" date="1549972800">- Release version 1.2.2
- Pass SSL password to Cheetah CLI interface securely (CVE-2018-20105: bsc#1119835)</changelog>
  <changelog author="schubi@suse.de" date="1566475200">- Using rb_default_ruby_abi tag in the spec file in order to
  handle several ruby versions (bsc#1146403).
- 1.2.3</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1579089600">- Version 1.3.0
- Add support for forwarding registration data from RMT to SCC</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1589371200">- Changed placeholders in translatable strings (%&lt;&gt; -&gt; %{})
  to better support gettext language format tags (bsc#1171555)
- 1.3.1</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1591617600">- Version 1.3.2
- Handle Common Name length (bsc#1172674)</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1617796800">- Adapted unit test to recent changes in Yast::Report (related to
  bsc#1179893).
- 1.3.3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1654776000">- Sync ExcludeArch with rmt-server: whenever rmt-server is not
  available, the yast2-rmt module can't be usable neither.
- No longer build as noarch: as the package is not installable on
  all architectures, it is by definition not 'architecture
  independent'.
- Add rpmlintrc, filtering out "E: no-binary": the package is
  intentionally not marked noarch.
- 1.3.4</changelog>
  <changelog author="Luis Caparroz &lt;luis.caparroz@suse.com&gt;" date="1707393600">- Adds UI dialog to allow the user to retry the SCC credential validation when
  the request times out (bsc#1218084).
- Adds HTTP User-Agent to requests to the SCC API and changes the enpoint for
  credential validation.
- Version 1.3.5</changelog>
  <changelog author="Luis Caparroz &lt;luis.caparroz@suse.com&gt;" date="1741003200">- Mark strings on UI dialogs for tranlation (bsc#1127676).
- Version 1.3.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1756728000">- Fix OpenSSL genpkey parameter formatting for SSL certificate generation (bsc#1266671)
- Ensure compatibility with FIPS mode (bsc#1235462)
- Remove 'Forward systems to SCC' checkbox (scc-262)
- Fix ERB initialization for older Ruby versions (bsc#1146403)
- Version 1.3.7</changelog>
</package>
<package pkgid="5dd215c1d79eaf75e8e8c54d4e766592ecff2023733773375a7742d937077f33724642f31ad42504b870b08112627e35ee89e95e675e90bbd7dc0195c0adcdd7" name="yast2-rmt" arch="x86_64">
  <version epoch="0" ver="1.3.7" rel="69.2"/>
  <changelog author="skotov@suse.com" date="1549972800">- Release version 1.2.2
- Pass SSL password to Cheetah CLI interface securely (CVE-2018-20105: bsc#1119835)</changelog>
  <changelog author="schubi@suse.de" date="1566475200">- Using rb_default_ruby_abi tag in the spec file in order to
  handle several ruby versions (bsc#1146403).
- 1.2.3</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1579089600">- Version 1.3.0
- Add support for forwarding registration data from RMT to SCC</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1589371200">- Changed placeholders in translatable strings (%&lt;&gt; -&gt; %{})
  to better support gettext language format tags (bsc#1171555)
- 1.3.1</changelog>
  <changelog author="Jes&#xFA;s Berm&#xFA;dez Vel&#xE1;zquez &lt;jesus.bv@suse.com&gt;" date="1591617600">- Version 1.3.2
- Handle Common Name length (bsc#1172674)</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1617796800">- Adapted unit test to recent changes in Yast::Report (related to
  bsc#1179893).
- 1.3.3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1654776000">- Sync ExcludeArch with rmt-server: whenever rmt-server is not
  available, the yast2-rmt module can't be usable neither.
- No longer build as noarch: as the package is not installable on
  all architectures, it is by definition not 'architecture
  independent'.
- Add rpmlintrc, filtering out "E: no-binary": the package is
  intentionally not marked noarch.
- 1.3.4</changelog>
  <changelog author="Luis Caparroz &lt;luis.caparroz@suse.com&gt;" date="1707393600">- Adds UI dialog to allow the user to retry the SCC credential validation when
  the request times out (bsc#1218084).
- Adds HTTP User-Agent to requests to the SCC API and changes the enpoint for
  credential validation.
- Version 1.3.5</changelog>
  <changelog author="Luis Caparroz &lt;luis.caparroz@suse.com&gt;" date="1741003200">- Mark strings on UI dialogs for tranlation (bsc#1127676).
- Version 1.3.6</changelog>
  <changelog author="Natnael Getahun &lt;natnael.getahun@suse.com&gt;" date="1756728000">- Fix OpenSSL genpkey parameter formatting for SSL certificate generation (bsc#1266671)
- Ensure compatibility with FIPS mode (bsc#1235462)
- Remove 'Forward systems to SCC' checkbox (scc-262)
- Fix ERB initialization for older Ruby versions (bsc#1146403)
- Version 1.3.7</changelog>
</package>
</otherdata>