<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="21">
<package pkgid="e7c718ce3f534772f685bc7af9d47e94dde4c643" name="libopenssl-devel" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="45d5bac29972dd91dd06dbfc3dccb8dd8e3e3415" name="libopenssl-devel" arch="x86_64">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="b15d5f08917bc394389e1898ff6d331c2f3dbd60" name="libopenssl-fips-devel" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.8"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- split off package openssl (0.9.8r) to build openssl-fips package.
  Dependency to openssl-fips-objectmodule, which itself needs
  the plain openssl package.</changelog>
<changelog author="draht@suse.de" date="1298635200">- spec file fixes</changelog>

</package>

<package pkgid="93922b0eb5f6587f3cc285eea88133be8f386db2" name="libopenssl-fips_0_9_8" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.8"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- split off package openssl (0.9.8r) to build openssl-fips package.
  Dependency to openssl-fips-objectmodule, which itself needs
  the plain openssl package.</changelog>
<changelog author="draht@suse.de" date="1298635200">- spec file fixes</changelog>

</package>

<package pkgid="77272af018b9f27afaafe4008b9f4f143d3c96a5" name="libopenssl0_9_8" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="c9abb4a81af68c9212438c9c78b54de4223f8f82" name="libopenssl0_9_8" arch="x86_64">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="c0130c1a783a419a7247882954458c7a9cc7a19c" name="libopenssl0_9_8-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="084ad102ee985f47bb31821b145b2284519d1a7d" name="libopenssl0_9_8-x86" arch="ia64">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="0efd32784e31a8cf4e657828d91e5386b9e924d8" name="openssh" arch="i586">
    <version epoch="0" ver="5.1p1" rel="41.8.4"/>

<changelog author="anicka@suse.cz" date="1197028800">- fix race condition in xauth patch</changelog>
<changelog author="anicka@suse.cz" date="1197720000">- add patch calling pam with root privileges [#334559]
- drop pwname-home patch [#104773]</changelog>
<changelog author="anicka@suse.cz" date="1199448000">- fix privileges of a firewall definition file [#351193]</changelog>
<changelog author="anicka@suse.cz" date="1206446400">- fix CVE-2008-1483 (bnc#373527)</changelog>
<changelog author="anicka@suse.cz" date="1207137600">- update to 4.9p1
  * Disable execution of ~/.ssh/rc for sessions where a command has been
    forced by the sshd_config ForceCommand directive. Users who had
    write access to this file could use it to execute abritrary commands.
    This behaviour was documented, but was an unsafe default and an extra
    hassle for administrators.
  * Added chroot(2) support for sshd(8), controlled by a new option
    "ChrootDirectory". Please refer to sshd_config(5) for details, and
    please use this feature carefully. (bz#177 bz#1352)
  * Linked sftp-server(8) into sshd(8). The internal sftp server is
    used when the command "internal-sftp" is specified in a Subsystem
    or ForceCommand declaration. When used with ChrootDirectory, the
    internal sftp server requires no special configuration of files
    inside the chroot environment. Please refer to sshd_config(5) for
    more information.
  * Added a "no-user-rc" option for authorized_keys to disable execution
    of ~/.ssh/rc
  * Added a protocol extension method "posix-rename@openssh.com" for
    sftp-server(8) to perform POSIX atomic rename() operations.
    (bz#1400)
  * Removed the fixed limit of 100 file handles in sftp-server(8). The
    server will now dynamically allocate handles up to the number of
    available file descriptors. (bz#1397)
  * ssh(8) will now skip generation of SSH protocol 1 ephemeral server
    keys when in inetd mode and protocol 2 connections are negotiated.
    This speeds up protocol 2 connections to inetd-mode servers that
    also allow Protocol 1 (bz#440)
  * Accept the PermitRootLogin directive in a sshd_config(5) Match
    block. Allows for, e.g. permitting root only from the local
    network.
  * Reworked sftp(1) argument splitting and escaping to be more
    internally consistent (i.e. between sftp commands) and more
    consistent with sh(1). Please note that this will change the
    interpretation of some quoted strings, especially those with
    embedded backslash escape sequences. (bz#778)
  * Support "Banner=none" in sshd_config(5) to disable sending of a
    pre-login banner (e.g. in a Match block).
  * ssh(1) ProxyCommands are now executed with $SHELL rather than
    /bin/sh.
  * ssh(1)'s ConnectTimeout option is now applied to both the TCP
    connection and the SSH banner exchange (previously it just covered
    the TCP connection). This allows callers of ssh(1) to better detect
    and deal with stuck servers that accept a TCP connection but don't
    progress the protocol, and also makes ConnectTimeout useful for
    connections via a ProxyCommand.
  * Many new regression tests, including interop tests against PuTTY's
    plink.
  * Support BSM auditing on Mac OS X
  * bugfixes
- remove addrlist, pam_session_close, strict-aliasing-fix patches
  (not needed anymore)</changelog>
<changelog author="anicka@suse.cz" date="1207742400">- update to 5.0p1
  * CVE-2008-1483: Avoid possible hijacking of X11-forwarded
  connections by refusing to listen on a port unless all address
  families bind successfully.
- remove CVE-2008-1483 patch</changelog>
<changelog author="werner@suse.de" date="1208520000">- Handle pts slave lines like utemper</changelog>
<changelog author="anicka@suse.cz" date="1216728000">- update to 5.1p1
  * sshd(8): Avoid X11 man-in-the-middle attack on HP/UX (and possibly
  other platforms) when X11UseLocalhost=no
  * Introduce experimental SSH Fingerprint ASCII Visualisation to ssh(1)
  and ssh-keygen(1). Visual fingerprinnt display is controlled by a new
  ssh_config(5) option "VisualHostKey".
  * sshd_config(5) now supports CIDR address/masklen matching in "Match
  address" blocks, with a fallback to classic wildcard matching.
  * sshd(8) now supports CIDR matching in ~/.ssh/authorized_keys
  from="..." restrictions, also with a fallback to classic wildcard
  matching.
  * Added an extended test mode (-T) to sshd(8) to request that it write
  its effective configuration to stdout and exit. Extended test mode
  also supports the specification of connection parameters (username,
  source address and hostname) to test the application of
  sshd_config(5) Match rules.
  * ssh(1) now prints the number of bytes transferred and the overall
  connection throughput for SSH protocol 2 sessions when in verbose
  mode (previously these statistics were displayed for protocol 1
  connections only).
  * sftp-server(8) now supports extension methods statvfs@openssh.com and
  fstatvfs@openssh.com that implement statvfs(2)-like operations.
  * sftp(1) now has a "df" command to the sftp client that uses the
  statvfs@openssh.com to produce a df(1)-like display of filesystem
  space and inode utilisation (requires statvfs@openssh.com support on
  the server)
  * Added a MaxSessions option to sshd_config(5) to allow control of the
  number of multiplexed sessions supported over a single TCP connection.
  This allows increasing the number of allowed sessions above the
  previous default of 10, disabling connection multiplexing
  (MaxSessions=1) or disallowing login/shell/subsystem sessions
  entirely (MaxSessions=0).
  * Added a no-more-sessions@openssh.com global request extension that is
  sent from ssh(1) to sshd(8) when the client knows that it will never
  request another session (i.e. when session multiplexing is disabled).
  This allows a server to disallow further session requests and
  terminate the session in cases where the client has been hijacked.
  * ssh-keygen(1) now supports the use of the -l option in combination
  with -F to search for a host in ~/.ssh/known_hosts and display its
  fingerprint.
  * ssh-keyscan(1) now defaults to "rsa" (protocol 2) keys, instead of
  "rsa1".
  * Added an AllowAgentForwarding option to sshd_config(8) to control
  whether authentication agent forwarding is permitted. Note that this
  is a loose control, as a client may install their own unofficial
  forwarder.
  * ssh(1) and sshd(8): avoid unnecessary malloc/copy/free when receiving
  network data, resulting in a ~10% speedup
  * ssh(1) and sshd(8) will now try additional addresses when connecting
  to a port forward destination whose DNS name resolves to more than
  one address. The previous behaviour was to try the only first address
  and give up if that failed. (bz#383)
  * ssh(1) and sshd(8) now support signalling that channels are
  half-closed for writing, through a channel protocol extension
  notification "eow@openssh.com". This allows propagation of closed
  file descriptors, so that commands such as:
    "ssh -2 localhost od /bin/ls | true"
  do not send unnecessary data over the wire. (bz#85)
  * sshd(8): increased the default size of ssh protocol 1 ephemeral keys
  from 768 to 1024 bits.
  * When ssh(1) has been requested to fork after authentication
  ("ssh -f") with ExitOnForwardFailure enabled, delay the fork until
  after replies for any -R forwards have been seen. Allows for robust
  detection of -R forward failure when using -f. (bz#92)
  * "Match group" blocks in sshd_config(5) now support negation of
  groups. E.g. "Match group staff,!guests" (bz#1315)
  * sftp(1) and sftp-server(8) now allow chmod-like operations to set
  set[ug]id/sticky bits. (bz#1310)
  * The MaxAuthTries option is now permitted in sshd_config(5) match
  blocks.
  * Multiplexed ssh(1) sessions now support a subset of the ~ escapes
  that are available to a primary connection. (bz#1331)
  * ssh(1) connection multiplexing will now fall back to creating a new
  connection in most error cases. (bz#1439 bz#1329)
  * Added some basic interoperability tests against Twisted Conch.
  * Documented OpenSSH's extensions to and deviations from the published
  SSH protocols (the PROTOCOL file in the distribution)
  * Documented OpenSSH's ssh-agent protocol (PROTOCOL.agent).
  * bugfixes
- remove gssapi_krb5-fix patch</changelog>
<changelog author="prusnak@suse.cz" date="1219406400">- enabled SELinux support [Fate#303662]</changelog>
<changelog author="coolo@suse.de" date="1219579200">- fix fillup macro usage</changelog>
<changelog author="anicka@suse.cz" date="1220961600">- remove pam_resmgr from sshd.pamd (bnc#422619)</changelog>
<changelog author="anicka@suse.cz" date="1224849600">- call pam functions in the right order (bnc#438292)
- mention default forwarding of locale settings in
  README.SuSE (bnc#434799)</changelog>
<changelog author="anicka@suse.cz" date="1226318400">- fix printing banner (bnc#443380)</changelog>
<changelog author="anicka@suse.cz" date="1228132800">- respect SSH_MAX_FORWARDS_PER_DIRECTION (bnc#448775)</changelog>
<changelog author="anicka@suse.cz" date="1266926400">-  audit patch: fix bnc#545271</changelog>
<changelog author="mvyskocil@suse.cz" date="1268136000">- openSSL engine support: fate#308239, bnc#552126</changelog>
<changelog author="draht@suse.de" date="1286452800">- package from sle11-sp1 backported to sle10-sp4: remove SELinux
  compile time options, remove
  /etc/sysconfig/SuSEfirewall2.d/services/sshd</changelog>
<changelog author="pcerny@novell.com" date="1294747200">- fix for bnc#604274 (sftp client memory leak)
  * openssh-5.1p1-sftp-client-memleak.patch
- fix for bnc#660064 (enabling umask in sftp server)
  * openssh-5.1p1-internal-sftp-args.diff
  * openssh-5.1p1-sftp-umask.diff</changelog>
<changelog author="draht@suse.de" date="1298548800">- submission of package to obs security:fips for testing</changelog>
<changelog author="draht@suse.de" date="1298808000">- BuildRequires play for openssl-fips build environment</changelog>

</package>

<package pkgid="716a3e118a9dacd2b46cfd833a8392620fd346e7" name="openssh" arch="src">
    <version epoch="0" ver="5.1p1" rel="41.8.4"/>

<changelog author="anicka@suse.cz" date="1197028800">- fix race condition in xauth patch</changelog>
<changelog author="anicka@suse.cz" date="1197720000">- add patch calling pam with root privileges [#334559]
- drop pwname-home patch [#104773]</changelog>
<changelog author="anicka@suse.cz" date="1199448000">- fix privileges of a firewall definition file [#351193]</changelog>
<changelog author="anicka@suse.cz" date="1206446400">- fix CVE-2008-1483 (bnc#373527)</changelog>
<changelog author="anicka@suse.cz" date="1207137600">- update to 4.9p1
  * Disable execution of ~/.ssh/rc for sessions where a command has been
    forced by the sshd_config ForceCommand directive. Users who had
    write access to this file could use it to execute abritrary commands.
    This behaviour was documented, but was an unsafe default and an extra
    hassle for administrators.
  * Added chroot(2) support for sshd(8), controlled by a new option
    "ChrootDirectory". Please refer to sshd_config(5) for details, and
    please use this feature carefully. (bz#177 bz#1352)
  * Linked sftp-server(8) into sshd(8). The internal sftp server is
    used when the command "internal-sftp" is specified in a Subsystem
    or ForceCommand declaration. When used with ChrootDirectory, the
    internal sftp server requires no special configuration of files
    inside the chroot environment. Please refer to sshd_config(5) for
    more information.
  * Added a "no-user-rc" option for authorized_keys to disable execution
    of ~/.ssh/rc
  * Added a protocol extension method "posix-rename@openssh.com" for
    sftp-server(8) to perform POSIX atomic rename() operations.
    (bz#1400)
  * Removed the fixed limit of 100 file handles in sftp-server(8). The
    server will now dynamically allocate handles up to the number of
    available file descriptors. (bz#1397)
  * ssh(8) will now skip generation of SSH protocol 1 ephemeral server
    keys when in inetd mode and protocol 2 connections are negotiated.
    This speeds up protocol 2 connections to inetd-mode servers that
    also allow Protocol 1 (bz#440)
  * Accept the PermitRootLogin directive in a sshd_config(5) Match
    block. Allows for, e.g. permitting root only from the local
    network.
  * Reworked sftp(1) argument splitting and escaping to be more
    internally consistent (i.e. between sftp commands) and more
    consistent with sh(1). Please note that this will change the
    interpretation of some quoted strings, especially those with
    embedded backslash escape sequences. (bz#778)
  * Support "Banner=none" in sshd_config(5) to disable sending of a
    pre-login banner (e.g. in a Match block).
  * ssh(1) ProxyCommands are now executed with $SHELL rather than
    /bin/sh.
  * ssh(1)'s ConnectTimeout option is now applied to both the TCP
    connection and the SSH banner exchange (previously it just covered
    the TCP connection). This allows callers of ssh(1) to better detect
    and deal with stuck servers that accept a TCP connection but don't
    progress the protocol, and also makes ConnectTimeout useful for
    connections via a ProxyCommand.
  * Many new regression tests, including interop tests against PuTTY's
    plink.
  * Support BSM auditing on Mac OS X
  * bugfixes
- remove addrlist, pam_session_close, strict-aliasing-fix patches
  (not needed anymore)</changelog>
<changelog author="anicka@suse.cz" date="1207742400">- update to 5.0p1
  * CVE-2008-1483: Avoid possible hijacking of X11-forwarded
  connections by refusing to listen on a port unless all address
  families bind successfully.
- remove CVE-2008-1483 patch</changelog>
<changelog author="werner@suse.de" date="1208520000">- Handle pts slave lines like utemper</changelog>
<changelog author="anicka@suse.cz" date="1216728000">- update to 5.1p1
  * sshd(8): Avoid X11 man-in-the-middle attack on HP/UX (and possibly
  other platforms) when X11UseLocalhost=no
  * Introduce experimental SSH Fingerprint ASCII Visualisation to ssh(1)
  and ssh-keygen(1). Visual fingerprinnt display is controlled by a new
  ssh_config(5) option "VisualHostKey".
  * sshd_config(5) now supports CIDR address/masklen matching in "Match
  address" blocks, with a fallback to classic wildcard matching.
  * sshd(8) now supports CIDR matching in ~/.ssh/authorized_keys
  from="..." restrictions, also with a fallback to classic wildcard
  matching.
  * Added an extended test mode (-T) to sshd(8) to request that it write
  its effective configuration to stdout and exit. Extended test mode
  also supports the specification of connection parameters (username,
  source address and hostname) to test the application of
  sshd_config(5) Match rules.
  * ssh(1) now prints the number of bytes transferred and the overall
  connection throughput for SSH protocol 2 sessions when in verbose
  mode (previously these statistics were displayed for protocol 1
  connections only).
  * sftp-server(8) now supports extension methods statvfs@openssh.com and
  fstatvfs@openssh.com that implement statvfs(2)-like operations.
  * sftp(1) now has a "df" command to the sftp client that uses the
  statvfs@openssh.com to produce a df(1)-like display of filesystem
  space and inode utilisation (requires statvfs@openssh.com support on
  the server)
  * Added a MaxSessions option to sshd_config(5) to allow control of the
  number of multiplexed sessions supported over a single TCP connection.
  This allows increasing the number of allowed sessions above the
  previous default of 10, disabling connection multiplexing
  (MaxSessions=1) or disallowing login/shell/subsystem sessions
  entirely (MaxSessions=0).
  * Added a no-more-sessions@openssh.com global request extension that is
  sent from ssh(1) to sshd(8) when the client knows that it will never
  request another session (i.e. when session multiplexing is disabled).
  This allows a server to disallow further session requests and
  terminate the session in cases where the client has been hijacked.
  * ssh-keygen(1) now supports the use of the -l option in combination
  with -F to search for a host in ~/.ssh/known_hosts and display its
  fingerprint.
  * ssh-keyscan(1) now defaults to "rsa" (protocol 2) keys, instead of
  "rsa1".
  * Added an AllowAgentForwarding option to sshd_config(8) to control
  whether authentication agent forwarding is permitted. Note that this
  is a loose control, as a client may install their own unofficial
  forwarder.
  * ssh(1) and sshd(8): avoid unnecessary malloc/copy/free when receiving
  network data, resulting in a ~10% speedup
  * ssh(1) and sshd(8) will now try additional addresses when connecting
  to a port forward destination whose DNS name resolves to more than
  one address. The previous behaviour was to try the only first address
  and give up if that failed. (bz#383)
  * ssh(1) and sshd(8) now support signalling that channels are
  half-closed for writing, through a channel protocol extension
  notification "eow@openssh.com". This allows propagation of closed
  file descriptors, so that commands such as:
    "ssh -2 localhost od /bin/ls | true"
  do not send unnecessary data over the wire. (bz#85)
  * sshd(8): increased the default size of ssh protocol 1 ephemeral keys
  from 768 to 1024 bits.
  * When ssh(1) has been requested to fork after authentication
  ("ssh -f") with ExitOnForwardFailure enabled, delay the fork until
  after replies for any -R forwards have been seen. Allows for robust
  detection of -R forward failure when using -f. (bz#92)
  * "Match group" blocks in sshd_config(5) now support negation of
  groups. E.g. "Match group staff,!guests" (bz#1315)
  * sftp(1) and sftp-server(8) now allow chmod-like operations to set
  set[ug]id/sticky bits. (bz#1310)
  * The MaxAuthTries option is now permitted in sshd_config(5) match
  blocks.
  * Multiplexed ssh(1) sessions now support a subset of the ~ escapes
  that are available to a primary connection. (bz#1331)
  * ssh(1) connection multiplexing will now fall back to creating a new
  connection in most error cases. (bz#1439 bz#1329)
  * Added some basic interoperability tests against Twisted Conch.
  * Documented OpenSSH's extensions to and deviations from the published
  SSH protocols (the PROTOCOL file in the distribution)
  * Documented OpenSSH's ssh-agent protocol (PROTOCOL.agent).
  * bugfixes
- remove gssapi_krb5-fix patch</changelog>
<changelog author="prusnak@suse.cz" date="1219406400">- enabled SELinux support [Fate#303662]</changelog>
<changelog author="coolo@suse.de" date="1219579200">- fix fillup macro usage</changelog>
<changelog author="anicka@suse.cz" date="1220961600">- remove pam_resmgr from sshd.pamd (bnc#422619)</changelog>
<changelog author="anicka@suse.cz" date="1224849600">- call pam functions in the right order (bnc#438292)
- mention default forwarding of locale settings in
  README.SuSE (bnc#434799)</changelog>
<changelog author="anicka@suse.cz" date="1226318400">- fix printing banner (bnc#443380)</changelog>
<changelog author="anicka@suse.cz" date="1228132800">- respect SSH_MAX_FORWARDS_PER_DIRECTION (bnc#448775)</changelog>
<changelog author="anicka@suse.cz" date="1266926400">-  audit patch: fix bnc#545271</changelog>
<changelog author="mvyskocil@suse.cz" date="1268136000">- openSSL engine support: fate#308239, bnc#552126</changelog>
<changelog author="draht@suse.de" date="1286452800">- package from sle11-sp1 backported to sle10-sp4: remove SELinux
  compile time options, remove
  /etc/sysconfig/SuSEfirewall2.d/services/sshd</changelog>
<changelog author="pcerny@novell.com" date="1294747200">- fix for bnc#604274 (sftp client memory leak)
  * openssh-5.1p1-sftp-client-memleak.patch
- fix for bnc#660064 (enabling umask in sftp server)
  * openssh-5.1p1-internal-sftp-args.diff
  * openssh-5.1p1-sftp-umask.diff</changelog>
<changelog author="draht@suse.de" date="1298548800">- submission of package to obs security:fips for testing</changelog>
<changelog author="draht@suse.de" date="1298808000">- BuildRequires play for openssl-fips build environment</changelog>

</package>

<package pkgid="b4774f4d8cf453842a5b49535bc3d96e72ef4fcc" name="openssh-askpass" arch="i586">
    <version epoch="0" ver="5.1p1" rel="41.8.4"/>

<changelog author="anicka@suse.cz" date="1197028800">- fix race condition in xauth patch</changelog>
<changelog author="anicka@suse.cz" date="1197720000">- add patch calling pam with root privileges [#334559]
- drop pwname-home patch [#104773]</changelog>
<changelog author="anicka@suse.cz" date="1199448000">- fix privileges of a firewall definition file [#351193]</changelog>
<changelog author="anicka@suse.cz" date="1206446400">- fix CVE-2008-1483 (bnc#373527)</changelog>
<changelog author="anicka@suse.cz" date="1207137600">- update to 4.9p1
  * Disable execution of ~/.ssh/rc for sessions where a command has been
    forced by the sshd_config ForceCommand directive. Users who had
    write access to this file could use it to execute abritrary commands.
    This behaviour was documented, but was an unsafe default and an extra
    hassle for administrators.
  * Added chroot(2) support for sshd(8), controlled by a new option
    "ChrootDirectory". Please refer to sshd_config(5) for details, and
    please use this feature carefully. (bz#177 bz#1352)
  * Linked sftp-server(8) into sshd(8). The internal sftp server is
    used when the command "internal-sftp" is specified in a Subsystem
    or ForceCommand declaration. When used with ChrootDirectory, the
    internal sftp server requires no special configuration of files
    inside the chroot environment. Please refer to sshd_config(5) for
    more information.
  * Added a "no-user-rc" option for authorized_keys to disable execution
    of ~/.ssh/rc
  * Added a protocol extension method "posix-rename@openssh.com" for
    sftp-server(8) to perform POSIX atomic rename() operations.
    (bz#1400)
  * Removed the fixed limit of 100 file handles in sftp-server(8). The
    server will now dynamically allocate handles up to the number of
    available file descriptors. (bz#1397)
  * ssh(8) will now skip generation of SSH protocol 1 ephemeral server
    keys when in inetd mode and protocol 2 connections are negotiated.
    This speeds up protocol 2 connections to inetd-mode servers that
    also allow Protocol 1 (bz#440)
  * Accept the PermitRootLogin directive in a sshd_config(5) Match
    block. Allows for, e.g. permitting root only from the local
    network.
  * Reworked sftp(1) argument splitting and escaping to be more
    internally consistent (i.e. between sftp commands) and more
    consistent with sh(1). Please note that this will change the
    interpretation of some quoted strings, especially those with
    embedded backslash escape sequences. (bz#778)
  * Support "Banner=none" in sshd_config(5) to disable sending of a
    pre-login banner (e.g. in a Match block).
  * ssh(1) ProxyCommands are now executed with $SHELL rather than
    /bin/sh.
  * ssh(1)'s ConnectTimeout option is now applied to both the TCP
    connection and the SSH banner exchange (previously it just covered
    the TCP connection). This allows callers of ssh(1) to better detect
    and deal with stuck servers that accept a TCP connection but don't
    progress the protocol, and also makes ConnectTimeout useful for
    connections via a ProxyCommand.
  * Many new regression tests, including interop tests against PuTTY's
    plink.
  * Support BSM auditing on Mac OS X
  * bugfixes
- remove addrlist, pam_session_close, strict-aliasing-fix patches
  (not needed anymore)</changelog>
<changelog author="anicka@suse.cz" date="1207742400">- update to 5.0p1
  * CVE-2008-1483: Avoid possible hijacking of X11-forwarded
  connections by refusing to listen on a port unless all address
  families bind successfully.
- remove CVE-2008-1483 patch</changelog>
<changelog author="werner@suse.de" date="1208520000">- Handle pts slave lines like utemper</changelog>
<changelog author="anicka@suse.cz" date="1216728000">- update to 5.1p1
  * sshd(8): Avoid X11 man-in-the-middle attack on HP/UX (and possibly
  other platforms) when X11UseLocalhost=no
  * Introduce experimental SSH Fingerprint ASCII Visualisation to ssh(1)
  and ssh-keygen(1). Visual fingerprinnt display is controlled by a new
  ssh_config(5) option "VisualHostKey".
  * sshd_config(5) now supports CIDR address/masklen matching in "Match
  address" blocks, with a fallback to classic wildcard matching.
  * sshd(8) now supports CIDR matching in ~/.ssh/authorized_keys
  from="..." restrictions, also with a fallback to classic wildcard
  matching.
  * Added an extended test mode (-T) to sshd(8) to request that it write
  its effective configuration to stdout and exit. Extended test mode
  also supports the specification of connection parameters (username,
  source address and hostname) to test the application of
  sshd_config(5) Match rules.
  * ssh(1) now prints the number of bytes transferred and the overall
  connection throughput for SSH protocol 2 sessions when in verbose
  mode (previously these statistics were displayed for protocol 1
  connections only).
  * sftp-server(8) now supports extension methods statvfs@openssh.com and
  fstatvfs@openssh.com that implement statvfs(2)-like operations.
  * sftp(1) now has a "df" command to the sftp client that uses the
  statvfs@openssh.com to produce a df(1)-like display of filesystem
  space and inode utilisation (requires statvfs@openssh.com support on
  the server)
  * Added a MaxSessions option to sshd_config(5) to allow control of the
  number of multiplexed sessions supported over a single TCP connection.
  This allows increasing the number of allowed sessions above the
  previous default of 10, disabling connection multiplexing
  (MaxSessions=1) or disallowing login/shell/subsystem sessions
  entirely (MaxSessions=0).
  * Added a no-more-sessions@openssh.com global request extension that is
  sent from ssh(1) to sshd(8) when the client knows that it will never
  request another session (i.e. when session multiplexing is disabled).
  This allows a server to disallow further session requests and
  terminate the session in cases where the client has been hijacked.
  * ssh-keygen(1) now supports the use of the -l option in combination
  with -F to search for a host in ~/.ssh/known_hosts and display its
  fingerprint.
  * ssh-keyscan(1) now defaults to "rsa" (protocol 2) keys, instead of
  "rsa1".
  * Added an AllowAgentForwarding option to sshd_config(8) to control
  whether authentication agent forwarding is permitted. Note that this
  is a loose control, as a client may install their own unofficial
  forwarder.
  * ssh(1) and sshd(8): avoid unnecessary malloc/copy/free when receiving
  network data, resulting in a ~10% speedup
  * ssh(1) and sshd(8) will now try additional addresses when connecting
  to a port forward destination whose DNS name resolves to more than
  one address. The previous behaviour was to try the only first address
  and give up if that failed. (bz#383)
  * ssh(1) and sshd(8) now support signalling that channels are
  half-closed for writing, through a channel protocol extension
  notification "eow@openssh.com". This allows propagation of closed
  file descriptors, so that commands such as:
    "ssh -2 localhost od /bin/ls | true"
  do not send unnecessary data over the wire. (bz#85)
  * sshd(8): increased the default size of ssh protocol 1 ephemeral keys
  from 768 to 1024 bits.
  * When ssh(1) has been requested to fork after authentication
  ("ssh -f") with ExitOnForwardFailure enabled, delay the fork until
  after replies for any -R forwards have been seen. Allows for robust
  detection of -R forward failure when using -f. (bz#92)
  * "Match group" blocks in sshd_config(5) now support negation of
  groups. E.g. "Match group staff,!guests" (bz#1315)
  * sftp(1) and sftp-server(8) now allow chmod-like operations to set
  set[ug]id/sticky bits. (bz#1310)
  * The MaxAuthTries option is now permitted in sshd_config(5) match
  blocks.
  * Multiplexed ssh(1) sessions now support a subset of the ~ escapes
  that are available to a primary connection. (bz#1331)
  * ssh(1) connection multiplexing will now fall back to creating a new
  connection in most error cases. (bz#1439 bz#1329)
  * Added some basic interoperability tests against Twisted Conch.
  * Documented OpenSSH's extensions to and deviations from the published
  SSH protocols (the PROTOCOL file in the distribution)
  * Documented OpenSSH's ssh-agent protocol (PROTOCOL.agent).
  * bugfixes
- remove gssapi_krb5-fix patch</changelog>
<changelog author="prusnak@suse.cz" date="1219406400">- enabled SELinux support [Fate#303662]</changelog>
<changelog author="coolo@suse.de" date="1219579200">- fix fillup macro usage</changelog>
<changelog author="anicka@suse.cz" date="1220961600">- remove pam_resmgr from sshd.pamd (bnc#422619)</changelog>
<changelog author="anicka@suse.cz" date="1224849600">- call pam functions in the right order (bnc#438292)
- mention default forwarding of locale settings in
  README.SuSE (bnc#434799)</changelog>
<changelog author="anicka@suse.cz" date="1226318400">- fix printing banner (bnc#443380)</changelog>
<changelog author="anicka@suse.cz" date="1228132800">- respect SSH_MAX_FORWARDS_PER_DIRECTION (bnc#448775)</changelog>
<changelog author="anicka@suse.cz" date="1266926400">-  audit patch: fix bnc#545271</changelog>
<changelog author="mvyskocil@suse.cz" date="1268136000">- openSSL engine support: fate#308239, bnc#552126</changelog>
<changelog author="draht@suse.de" date="1286452800">- package from sle11-sp1 backported to sle10-sp4: remove SELinux
  compile time options, remove
  /etc/sysconfig/SuSEfirewall2.d/services/sshd</changelog>
<changelog author="pcerny@novell.com" date="1294747200">- fix for bnc#604274 (sftp client memory leak)
  * openssh-5.1p1-sftp-client-memleak.patch
- fix for bnc#660064 (enabling umask in sftp server)
  * openssh-5.1p1-internal-sftp-args.diff
  * openssh-5.1p1-sftp-umask.diff</changelog>
<changelog author="draht@suse.de" date="1298548800">- submission of package to obs security:fips for testing</changelog>
<changelog author="draht@suse.de" date="1298808000">- BuildRequires play for openssl-fips build environment</changelog>

</package>

<package pkgid="b268188e55a59ed3a1e0fb3b356a5173a1148bfa" name="openssl" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="97e842ce108dc572e8e5cabe43dfebe9f2e20adf" name="openssl" arch="src">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="d4b283522f9ec7f7e9e580e2ad6f48241c7496fa" name="openssl" arch="x86_64">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="e0543c58fc9659c3090d21a13521a5727245ba5b" name="openssl-doc" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="8bcd9d0c0e8ed4e6a48a94f2e40cac5aa2657939" name="openssl-doc" arch="x86_64">
    <version epoch="0" ver="0.9.8r" rel="1.4"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- update to 0.9.8r, also some spec simplifications. This package
  is needed to create package openssl-fips-objectmodule, which
  is needed to create package openssl-fips.</changelog>
<changelog author="draht@suse.de" date="1298635200">- adjust provides and obsoletes tags in spec.</changelog>

</package>

<package pkgid="c46a67b8b00b15d06fe24c75062384b835da5daa" name="openssl-fips" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.8"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- split off package openssl (0.9.8r) to build openssl-fips package.
  Dependency to openssl-fips-objectmodule, which itself needs
  the plain openssl package.</changelog>
<changelog author="draht@suse.de" date="1298635200">- spec file fixes</changelog>

</package>

<package pkgid="a41f775a5fd50d80f2b8100bdccde7dd5bd0d7a3" name="openssl-fips" arch="src">
    <version epoch="0" ver="0.9.8r" rel="1.8"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- split off package openssl (0.9.8r) to build openssl-fips package.
  Dependency to openssl-fips-objectmodule, which itself needs
  the plain openssl package.</changelog>
<changelog author="draht@suse.de" date="1298635200">- spec file fixes</changelog>

</package>

<package pkgid="fbe201cd7b033b3f2c24793a3a3726eedf760ffd" name="openssl-fips-doc" arch="i586">
    <version epoch="0" ver="0.9.8r" rel="1.8"/>

<changelog author="mkoenig@suse.de" date="1215604800">- remove the certs subpackage from the openssl package
  and move the CA root certificates into a package of its own</changelog>
<changelog author="mkoenig@suse.de" date="1216209600">- do not require openssl-certs, but rather recommend it
  to avoid dependency cycle [bnc#408865]</changelog>
<changelog author="xwhu@suse.de" date="1223985600">- Passing string as struct cause openssl segment-fault [bnc#430141]</changelog>
<changelog author="xwhu@suse.de" date="1226318400">- Disable optimization of ripemd [bnc#442740]</changelog>
<changelog author="xwhu@suse.de" date="1228737600">- Disable optimization of md4</changelog>
<changelog author="xwhu@suse.de" date="1228824000">- Disable optimization for s390x</changelog>
<changelog author="jshi@suse.de" date="1229601600">- fix security bug [bnc#459468]
  CVE-2008-5077</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="gjhe@suse.de" date="1239796800">- fix security bug [bnc#489641]
  CVE-2009-0590
  CVE-2009-0591
  CVE-2009-0789</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#504687]
  CVE-2009-1377
  CVE-2009-1378
  CVE-2009-1379</changelog>
<changelog author="gjhe@novell.com" date="1246363200">- fix security bug [bnc#509031]
  CVE-2009-1386
  CVE-2009-1387</changelog>
<changelog author="gjhe@novell.com" date="1246622400">- update to version 0.9.8k
- patches merged upstream:
  openssl-CVE-2008-5077.patch
  openssl-CVE-2009-0590.patch
  openssl-CVE-2009-0591.patch
  openssl-CVE-2009-0789.patch
  openssl-CVE-2009-1377.patch
  openssl-CVE-2009-1378.patch
  openssl-CVE-2009-1379.patch
  openssl-CVE-2009-1386.patch
  openssl-CVE-2009-1387.patch</changelog>
<changelog author="coolo@novell.com" date="1251288000">- use %patch0 for Patch0</changelog>
<changelog author="gjhe@novell.com" date="1251806400">- fix Bug [bnc#526319]</changelog>
<changelog author="draht@suse.de" date="1292414400">- update to 0.9.8q for testing purposes with FIPS-140 openssl
  object module</changelog>
<changelog author="draht@suse.de" date="1292414400">- specfile changes for %_lib (/usr/lib64).</changelog>
<changelog author="draht@suse.de" date="1292500800">- re-diff for fuzz=0</changelog>
<changelog author="draht@suse.de" date="1298548800">- all compile time options removed, except for fips.
  %prep cleaned up. It was necessary. patches still enabled.</changelog>
<changelog author="draht@suse.de" date="1298635200">- split off package openssl (0.9.8r) to build openssl-fips package.
  Dependency to openssl-fips-objectmodule, which itself needs
  the plain openssl package.</changelog>
<changelog author="draht@suse.de" date="1298635200">- spec file fixes</changelog>

</package>

<package pkgid="e77fc089458b0a27ffe88bf6b09b897cb9c0b19e" name="openssl-fips-objectmodule" arch="i586">
    <version epoch="0" ver="1.2.2" rel="1.8"/>

<changelog author="draht@suse.de" date="1298635200">- explicit require &gt;= 0.9.8r</changelog>
<changelog author="draht@suse.de" date="1298635200">- build requires new version set</changelog>
<changelog author="draht@suse.de" date="1298721600">- again</changelog>

</package>

<package pkgid="6da960b56d41caef8a99727624dd817ea52cce7a" name="openssl-fips-objectmodule" arch="src">
    <version epoch="0" ver="1.2.2" rel="1.8"/>

<changelog author="draht@suse.de" date="1298635200">- explicit require &gt;= 0.9.8r</changelog>
<changelog author="draht@suse.de" date="1298635200">- build requires new version set</changelog>
<changelog author="draht@suse.de" date="1298721600">- again</changelog>

</package>

</otherdata>