<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="291">
<package pkgid="0f828f1d88a3ae9e59e81159b9d56bdbaa829239" name="apache2-mod_php5" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="c0a44bf8802a6e528ad726b80e2c51a1061e85e3" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="59b029456182e1258d3b151a3a7b2706eff17bfa" name="apache2-mod_php53" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="1b87bda17b58d7820c8a24595ceb7b7f011c80a4" name="apache2-mod_php53" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="f69bbee1db1fcdbc7ee2e0dcd4c15ebe9fbcc00c" name="autoconf" arch="noarch">
  <version epoch="0" ver="2.69" rel="53.1"/>
  <changelog author="poletti.marco@gmail.com" date="1266408000">- Update to 2.65
  * * Autoconf is now licensed under the GPLv3+.
  * * The manual is now shipped under the terms of the GNU FDL 1.3.
  * * config.status now provides a --config option to produce the configuration.
  * * Autoconf now requires GNU M4 1.4.6 or later. GNU M4 1.4.13 or
    later is recommended.
  * * Autotest testsuites accept an option --jobs[=N] for parallel testing.
    This feature is still in testing, and may not work on every
    platform, help in improving it would be appreciated.</changelog>
  <changelog author="coolo@novell.com" date="1275048000">- split out test suite that takes 95% of the build time</changelog>
  <changelog author="coolo@novell.com" date="1275307200">- add empty install section</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="pth@suse.de" date="1282132800">- Update to 2.67:
  * New macro AC_FC_LINE_LENGTH to accept long Fortran source code
    lines.
  * AC_PREPROC_IFELSE now keeps the preprocessed output in the
    conftest.i file for inspection by the commands in the
    ACTION-IF-TRUE argument.
  * autoreconf passes warning flags to new enough versions of
    aclocal.
  * Running an Autotest testsuite in parallel mode no longer triggers
    a race condition that could cause the testsuite run to end early,
    fixing a sporadic failure in autoconf's own testsuite.  Bug
    present since introduction of parallel tests in 2.63b.
  Major changes in Autoconf 2.66 (2010-07-02) [stable]
  * AC_FUNC_MMAP works in C++ mode again.  Regression introduced in
    2.65.
  * Use of m4_divert without a named diversion now issues a syntax
    warning, since it is seldom right to change diversions behind
    autoconf's back.
  * The macros AC_TYPE_INT8_T, AC_TYPE_INT16_T, AC_TYPE_INT32_T, and
    AC_TYPE_INT64_T work again.  Regression introduced in 2.65.
  * AC_PROG_INSTALL correctly uses `shtool' again.  Regression
    introduced in 2.64.
  * Autoconf should work on EBCDIC hosts.
  * AC_CHECK_DECL and AC_CHECK_DECLS accept optional function
    argument types for overloaded C++ functions.
  * AS_SET_CATFILE accepts nonliterals in its variable name argument
    now.
  * Autotest testsuites accept an option --recheck to rerun tests
    that failed or passed unexpectedly during the last non-debug
    testsuite run.
  * AC_ARG_ENABLE and AC_ARG_WITH now also accept `+' signs in
    `--enable-*' and `--with-*' arguments, converting them to
    underscores for the variable names.
  * In configure scripts, loading CONFIG_SITE no longer searches
    PATH, and problems in loading the configuration site files are
    diagnosed.
  * Autotest testsuites may optionally provide colored test results.
  * The previously undocumented Autotest macros AT_ARG_OPTION and
    AT_ARG_OPTION_ARG have seen bug fixes and are documented now.
    AT_ARG_OPTION has been changed in that the negative of a long
    option --OPTION is now --no-OPTION rather than --noOPTION.
  * The macro AS_LITERAL_IF is slightly more conservative; text
    containing shell quotes are no longer treated as literals.
    Furthermore, a new macro, AS_LITERAL_WORD_IF, adds an additional
    level of checking that no whitespace occurs in literals.
  * The macros AS_TR_SH and AS_TR_CPP no longer expand their results.
  * The following macros are now documented:
    AS_BOX
  * New macro AC_FC_FIXEDFORM to accept fixed-form Fortran.</changelog>
  <changelog author="andrea@opensuse.org" date="1284897600">- added patch autoconf-2.67-fix_dnl.patch to fix regression in
  AC_MSG_ERROR expansion (undefined macro: AS_MESSAGE_LOG_FDdnl)</changelog>
  <changelog author="coolo@novell.com" date="1291982400">- update to 2.68 to include the patch
  * * AC_MSG_ERROR (and AS_ERROR) can once again be followed immediately by
  `dnl'.  Regression introduced in 2.66.
  * * AC_INIT again allows URLs with '?' for its BUG-REPORT argument.
  Regression introduced in 2.66.
  * * AC_REPLACE_FUNCS again allows a non-literal argument, such as a shell
  variable that expands to a list of functions to check.  Regression
  introduced in 2.66.
  * * AT_BANNER() with empty argument will cause visual separation from previous
  test category.
  * * The macros AC_PREPROC_IFELSE, AC_COMPILE_IFELSE, AC_LINK_IFELSE, and
  AC_RUN_IFELSE now warn if the first argument failed to use
  AC_LANG_SOURCE or AC_LANG_PROGRAM to generate the conftest file
  contents.  A new macro AC_LANG_DEFINES_PROVIDED exists if you have
  a compelling reason why you cannot use AC_LANG_SOURCE but must
  avoid the warning.
  * * Newly obsolete macros
  The following macros have been marked obsolete.  New programs
  should use the corresponding Gnulib modules.  Gnulib not only
  detects a larger set of portability problems with these functions,
  but also provides complete workarounds.
    AC_FUNC_ERROR_AT_LINE  AC_FUNC_LSTAT_FOLLOWS_SLASHED_SYMLINK
    AC_FUNC_MKTIME  AC_FUNC_STRTOD</changelog>
  <changelog author="pth@suse.de" date="1296475200">- Cosmetic changes to spec file</changelog>
  <changelog author="pth@suse.de" date="1296475201">- Use 2.68 everywhere in specfile.
- Use %%configure macro in spec file.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="jengelh@medozas.de" date="1316260801">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1324209600">- correct license and style (prepare_spec)
- minor build fixes, avoid deprecated macros to be more portable</changelog>
  <changelog author="pth@suse.de" date="1335441600">- Update to 2.69:
  * Noteworthy changes in release 2.69 (2012-04-24) [stable]
  * * Autoconf now requires perl 5.6 or better (but generated
    configure scripts continue to run without perl).
  * Noteworthy changes in release 2.68b (2012-03-01) [beta] Released
    by Eric Blake, based on git versions 2.68.*.
  * * Autoconf-generated configure scripts now unconditionally
    re-execute themselves with $CONFIG_SHELL, if that's set in the
    environment.
  * * The texinfo documentation no longer specifies "front-cover" or
    "back-cover" texts, so that it may now be included in Debian's
    "main" section.
  * * Support for the Go programming language has been added.  The new
    macro AC_LANG_GO sets variables GOC and GOFLAGS.
  * * AS_LITERAL_IF again treats '=' as a literal.  Regression
    introduced in 2.66.
  * * The macro AS_EXECUTABLE_P, present since 2.50, is now
    documented.
  * * Macros
  - AC_PROG_LN_S and AS_LN_S now fall back on 'cp -pR' (not 'cp -p')
    if 'ln -s' does not work.  This works better for symlinks to
    directories.
  - New macro AC_HEADER_CHECK_STDBOOL.
  - New and updated macros for Fortran support:
    AC_FC_CHECK_BOUNDS to enable array bounds checking
    AC_F77_IMPLICIT_NONE and AC_FC_IMPLICIT_NONE to disable implicit integer
    AC_FC_MODULE_EXTENSION to compute the Fortran 90 module name extension
    AC_FC_MODULE_FLAG for the Fortran 90 module search path flag
    AC_FC_MODULE_OUTPUT_FLAG for the Fortran 90 module output directory flag
    AC_FC_PP_SRCEXT for preprocessed Fortran source files extensions
    AC_FC_PP_DEFINE for the Fortran preprocessor define flag</changelog>
  <changelog author="pth@suse.de" date="1335528000">- Fix .changes file.</changelog>
  <changelog author="pth@suse.de" date="1354017600">- Repackage with bzip2 so that the package can be built for older
  distributions.</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Correct info file dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add autoconf-perl-5.17-fixes.patch: autoscan: port to perl 5.17.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly buildrequire m4: there is a plan to remove it from the
  implicit buildroot configuration (just like autoconf itself is
  no longer part of a long time already).</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Also BuildRequire m4 for autoconf-el: it was wrongly assumed that
  the two spec files would be in sync (but pre_checkin only syncs
  the Version: and .changes file).</changelog>
</package>
<package pkgid="153d67b63ce5a96c1336f67da7a65a6309330d08" name="autoconf" arch="src">
  <version epoch="0" ver="2.69" rel="53.1"/>
  <changelog author="poletti.marco@gmail.com" date="1266408000">- Update to 2.65
  * * Autoconf is now licensed under the GPLv3+.
  * * The manual is now shipped under the terms of the GNU FDL 1.3.
  * * config.status now provides a --config option to produce the configuration.
  * * Autoconf now requires GNU M4 1.4.6 or later. GNU M4 1.4.13 or
    later is recommended.
  * * Autotest testsuites accept an option --jobs[=N] for parallel testing.
    This feature is still in testing, and may not work on every
    platform, help in improving it would be appreciated.</changelog>
  <changelog author="coolo@novell.com" date="1275048000">- split out test suite that takes 95% of the build time</changelog>
  <changelog author="coolo@novell.com" date="1275307200">- add empty install section</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="pth@suse.de" date="1282132800">- Update to 2.67:
  * New macro AC_FC_LINE_LENGTH to accept long Fortran source code
    lines.
  * AC_PREPROC_IFELSE now keeps the preprocessed output in the
    conftest.i file for inspection by the commands in the
    ACTION-IF-TRUE argument.
  * autoreconf passes warning flags to new enough versions of
    aclocal.
  * Running an Autotest testsuite in parallel mode no longer triggers
    a race condition that could cause the testsuite run to end early,
    fixing a sporadic failure in autoconf's own testsuite.  Bug
    present since introduction of parallel tests in 2.63b.
  Major changes in Autoconf 2.66 (2010-07-02) [stable]
  * AC_FUNC_MMAP works in C++ mode again.  Regression introduced in
    2.65.
  * Use of m4_divert without a named diversion now issues a syntax
    warning, since it is seldom right to change diversions behind
    autoconf's back.
  * The macros AC_TYPE_INT8_T, AC_TYPE_INT16_T, AC_TYPE_INT32_T, and
    AC_TYPE_INT64_T work again.  Regression introduced in 2.65.
  * AC_PROG_INSTALL correctly uses `shtool' again.  Regression
    introduced in 2.64.
  * Autoconf should work on EBCDIC hosts.
  * AC_CHECK_DECL and AC_CHECK_DECLS accept optional function
    argument types for overloaded C++ functions.
  * AS_SET_CATFILE accepts nonliterals in its variable name argument
    now.
  * Autotest testsuites accept an option --recheck to rerun tests
    that failed or passed unexpectedly during the last non-debug
    testsuite run.
  * AC_ARG_ENABLE and AC_ARG_WITH now also accept `+' signs in
    `--enable-*' and `--with-*' arguments, converting them to
    underscores for the variable names.
  * In configure scripts, loading CONFIG_SITE no longer searches
    PATH, and problems in loading the configuration site files are
    diagnosed.
  * Autotest testsuites may optionally provide colored test results.
  * The previously undocumented Autotest macros AT_ARG_OPTION and
    AT_ARG_OPTION_ARG have seen bug fixes and are documented now.
    AT_ARG_OPTION has been changed in that the negative of a long
    option --OPTION is now --no-OPTION rather than --noOPTION.
  * The macro AS_LITERAL_IF is slightly more conservative; text
    containing shell quotes are no longer treated as literals.
    Furthermore, a new macro, AS_LITERAL_WORD_IF, adds an additional
    level of checking that no whitespace occurs in literals.
  * The macros AS_TR_SH and AS_TR_CPP no longer expand their results.
  * The following macros are now documented:
    AS_BOX
  * New macro AC_FC_FIXEDFORM to accept fixed-form Fortran.</changelog>
  <changelog author="andrea@opensuse.org" date="1284897600">- added patch autoconf-2.67-fix_dnl.patch to fix regression in
  AC_MSG_ERROR expansion (undefined macro: AS_MESSAGE_LOG_FDdnl)</changelog>
  <changelog author="coolo@novell.com" date="1291982400">- update to 2.68 to include the patch
  * * AC_MSG_ERROR (and AS_ERROR) can once again be followed immediately by
  `dnl'.  Regression introduced in 2.66.
  * * AC_INIT again allows URLs with '?' for its BUG-REPORT argument.
  Regression introduced in 2.66.
  * * AC_REPLACE_FUNCS again allows a non-literal argument, such as a shell
  variable that expands to a list of functions to check.  Regression
  introduced in 2.66.
  * * AT_BANNER() with empty argument will cause visual separation from previous
  test category.
  * * The macros AC_PREPROC_IFELSE, AC_COMPILE_IFELSE, AC_LINK_IFELSE, and
  AC_RUN_IFELSE now warn if the first argument failed to use
  AC_LANG_SOURCE or AC_LANG_PROGRAM to generate the conftest file
  contents.  A new macro AC_LANG_DEFINES_PROVIDED exists if you have
  a compelling reason why you cannot use AC_LANG_SOURCE but must
  avoid the warning.
  * * Newly obsolete macros
  The following macros have been marked obsolete.  New programs
  should use the corresponding Gnulib modules.  Gnulib not only
  detects a larger set of portability problems with these functions,
  but also provides complete workarounds.
    AC_FUNC_ERROR_AT_LINE  AC_FUNC_LSTAT_FOLLOWS_SLASHED_SYMLINK
    AC_FUNC_MKTIME  AC_FUNC_STRTOD</changelog>
  <changelog author="pth@suse.de" date="1296475200">- Cosmetic changes to spec file</changelog>
  <changelog author="pth@suse.de" date="1296475201">- Use 2.68 everywhere in specfile.
- Use %%configure macro in spec file.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="jengelh@medozas.de" date="1316260801">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1324209600">- correct license and style (prepare_spec)
- minor build fixes, avoid deprecated macros to be more portable</changelog>
  <changelog author="pth@suse.de" date="1335441600">- Update to 2.69:
  * Noteworthy changes in release 2.69 (2012-04-24) [stable]
  * * Autoconf now requires perl 5.6 or better (but generated
    configure scripts continue to run without perl).
  * Noteworthy changes in release 2.68b (2012-03-01) [beta] Released
    by Eric Blake, based on git versions 2.68.*.
  * * Autoconf-generated configure scripts now unconditionally
    re-execute themselves with $CONFIG_SHELL, if that's set in the
    environment.
  * * The texinfo documentation no longer specifies "front-cover" or
    "back-cover" texts, so that it may now be included in Debian's
    "main" section.
  * * Support for the Go programming language has been added.  The new
    macro AC_LANG_GO sets variables GOC and GOFLAGS.
  * * AS_LITERAL_IF again treats '=' as a literal.  Regression
    introduced in 2.66.
  * * The macro AS_EXECUTABLE_P, present since 2.50, is now
    documented.
  * * Macros
  - AC_PROG_LN_S and AS_LN_S now fall back on 'cp -pR' (not 'cp -p')
    if 'ln -s' does not work.  This works better for symlinks to
    directories.
  - New macro AC_HEADER_CHECK_STDBOOL.
  - New and updated macros for Fortran support:
    AC_FC_CHECK_BOUNDS to enable array bounds checking
    AC_F77_IMPLICIT_NONE and AC_FC_IMPLICIT_NONE to disable implicit integer
    AC_FC_MODULE_EXTENSION to compute the Fortran 90 module name extension
    AC_FC_MODULE_FLAG for the Fortran 90 module search path flag
    AC_FC_MODULE_OUTPUT_FLAG for the Fortran 90 module output directory flag
    AC_FC_PP_SRCEXT for preprocessed Fortran source files extensions
    AC_FC_PP_DEFINE for the Fortran preprocessor define flag</changelog>
  <changelog author="pth@suse.de" date="1335528000">- Fix .changes file.</changelog>
  <changelog author="pth@suse.de" date="1354017600">- Repackage with bzip2 so that the package can be built for older
  distributions.</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Correct info file dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add autoconf-perl-5.17-fixes.patch: autoscan: port to perl 5.17.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly buildrequire m4: there is a plan to remove it from the
  implicit buildroot configuration (just like autoconf itself is
  no longer part of a long time already).</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Also BuildRequire m4 for autoconf-el: it was wrongly assumed that
  the two spec files would be in sync (but pre_checkin only syncs
  the Version: and .changes file).</changelog>
</package>
<package pkgid="542b397c3b05f3692bcdbb70c68dab55d952908b" name="autoconf-testsuite" arch="src">
  <version epoch="0" ver="2.69" rel="53.1"/>
  <changelog author="poletti.marco@gmail.com" date="1266408000">- Update to 2.65
  * * Autoconf is now licensed under the GPLv3+.
  * * The manual is now shipped under the terms of the GNU FDL 1.3.
  * * config.status now provides a --config option to produce the configuration.
  * * Autoconf now requires GNU M4 1.4.6 or later. GNU M4 1.4.13 or
    later is recommended.
  * * Autotest testsuites accept an option --jobs[=N] for parallel testing.
    This feature is still in testing, and may not work on every
    platform, help in improving it would be appreciated.</changelog>
  <changelog author="coolo@novell.com" date="1275048000">- split out test suite that takes 95% of the build time</changelog>
  <changelog author="coolo@novell.com" date="1275307200">- add empty install section</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="pth@suse.de" date="1282132800">- Update to 2.67:
  * New macro AC_FC_LINE_LENGTH to accept long Fortran source code
    lines.
  * AC_PREPROC_IFELSE now keeps the preprocessed output in the
    conftest.i file for inspection by the commands in the
    ACTION-IF-TRUE argument.
  * autoreconf passes warning flags to new enough versions of
    aclocal.
  * Running an Autotest testsuite in parallel mode no longer triggers
    a race condition that could cause the testsuite run to end early,
    fixing a sporadic failure in autoconf's own testsuite.  Bug
    present since introduction of parallel tests in 2.63b.
  Major changes in Autoconf 2.66 (2010-07-02) [stable]
  * AC_FUNC_MMAP works in C++ mode again.  Regression introduced in
    2.65.
  * Use of m4_divert without a named diversion now issues a syntax
    warning, since it is seldom right to change diversions behind
    autoconf's back.
  * The macros AC_TYPE_INT8_T, AC_TYPE_INT16_T, AC_TYPE_INT32_T, and
    AC_TYPE_INT64_T work again.  Regression introduced in 2.65.
  * AC_PROG_INSTALL correctly uses `shtool' again.  Regression
    introduced in 2.64.
  * Autoconf should work on EBCDIC hosts.
  * AC_CHECK_DECL and AC_CHECK_DECLS accept optional function
    argument types for overloaded C++ functions.
  * AS_SET_CATFILE accepts nonliterals in its variable name argument
    now.
  * Autotest testsuites accept an option --recheck to rerun tests
    that failed or passed unexpectedly during the last non-debug
    testsuite run.
  * AC_ARG_ENABLE and AC_ARG_WITH now also accept `+' signs in
    `--enable-*' and `--with-*' arguments, converting them to
    underscores for the variable names.
  * In configure scripts, loading CONFIG_SITE no longer searches
    PATH, and problems in loading the configuration site files are
    diagnosed.
  * Autotest testsuites may optionally provide colored test results.
  * The previously undocumented Autotest macros AT_ARG_OPTION and
    AT_ARG_OPTION_ARG have seen bug fixes and are documented now.
    AT_ARG_OPTION has been changed in that the negative of a long
    option --OPTION is now --no-OPTION rather than --noOPTION.
  * The macro AS_LITERAL_IF is slightly more conservative; text
    containing shell quotes are no longer treated as literals.
    Furthermore, a new macro, AS_LITERAL_WORD_IF, adds an additional
    level of checking that no whitespace occurs in literals.
  * The macros AS_TR_SH and AS_TR_CPP no longer expand their results.
  * The following macros are now documented:
    AS_BOX
  * New macro AC_FC_FIXEDFORM to accept fixed-form Fortran.</changelog>
  <changelog author="andrea@opensuse.org" date="1284897600">- added patch autoconf-2.67-fix_dnl.patch to fix regression in
  AC_MSG_ERROR expansion (undefined macro: AS_MESSAGE_LOG_FDdnl)</changelog>
  <changelog author="coolo@novell.com" date="1291982400">- update to 2.68 to include the patch
  * * AC_MSG_ERROR (and AS_ERROR) can once again be followed immediately by
  `dnl'.  Regression introduced in 2.66.
  * * AC_INIT again allows URLs with '?' for its BUG-REPORT argument.
  Regression introduced in 2.66.
  * * AC_REPLACE_FUNCS again allows a non-literal argument, such as a shell
  variable that expands to a list of functions to check.  Regression
  introduced in 2.66.
  * * AT_BANNER() with empty argument will cause visual separation from previous
  test category.
  * * The macros AC_PREPROC_IFELSE, AC_COMPILE_IFELSE, AC_LINK_IFELSE, and
  AC_RUN_IFELSE now warn if the first argument failed to use
  AC_LANG_SOURCE or AC_LANG_PROGRAM to generate the conftest file
  contents.  A new macro AC_LANG_DEFINES_PROVIDED exists if you have
  a compelling reason why you cannot use AC_LANG_SOURCE but must
  avoid the warning.
  * * Newly obsolete macros
  The following macros have been marked obsolete.  New programs
  should use the corresponding Gnulib modules.  Gnulib not only
  detects a larger set of portability problems with these functions,
  but also provides complete workarounds.
    AC_FUNC_ERROR_AT_LINE  AC_FUNC_LSTAT_FOLLOWS_SLASHED_SYMLINK
    AC_FUNC_MKTIME  AC_FUNC_STRTOD</changelog>
  <changelog author="pth@suse.de" date="1296475200">- Cosmetic changes to spec file</changelog>
  <changelog author="pth@suse.de" date="1296475201">- Use 2.68 everywhere in specfile.
- Use %%configure macro in spec file.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="jengelh@medozas.de" date="1316260801">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1324209600">- correct license and style (prepare_spec)
- minor build fixes, avoid deprecated macros to be more portable</changelog>
  <changelog author="pth@suse.de" date="1335441600">- Update to 2.69:
  * Noteworthy changes in release 2.69 (2012-04-24) [stable]
  * * Autoconf now requires perl 5.6 or better (but generated
    configure scripts continue to run without perl).
  * Noteworthy changes in release 2.68b (2012-03-01) [beta] Released
    by Eric Blake, based on git versions 2.68.*.
  * * Autoconf-generated configure scripts now unconditionally
    re-execute themselves with $CONFIG_SHELL, if that's set in the
    environment.
  * * The texinfo documentation no longer specifies "front-cover" or
    "back-cover" texts, so that it may now be included in Debian's
    "main" section.
  * * Support for the Go programming language has been added.  The new
    macro AC_LANG_GO sets variables GOC and GOFLAGS.
  * * AS_LITERAL_IF again treats '=' as a literal.  Regression
    introduced in 2.66.
  * * The macro AS_EXECUTABLE_P, present since 2.50, is now
    documented.
  * * Macros
  - AC_PROG_LN_S and AS_LN_S now fall back on 'cp -pR' (not 'cp -p')
    if 'ln -s' does not work.  This works better for symlinks to
    directories.
  - New macro AC_HEADER_CHECK_STDBOOL.
  - New and updated macros for Fortran support:
    AC_FC_CHECK_BOUNDS to enable array bounds checking
    AC_F77_IMPLICIT_NONE and AC_FC_IMPLICIT_NONE to disable implicit integer
    AC_FC_MODULE_EXTENSION to compute the Fortran 90 module name extension
    AC_FC_MODULE_FLAG for the Fortran 90 module search path flag
    AC_FC_MODULE_OUTPUT_FLAG for the Fortran 90 module output directory flag
    AC_FC_PP_SRCEXT for preprocessed Fortran source files extensions
    AC_FC_PP_DEFINE for the Fortran preprocessor define flag</changelog>
  <changelog author="pth@suse.de" date="1335528000">- Fix .changes file.</changelog>
  <changelog author="pth@suse.de" date="1354017600">- Repackage with bzip2 so that the package can be built for older
  distributions.</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Correct info file dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add autoconf-perl-5.17-fixes.patch: autoscan: port to perl 5.17.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly buildrequire m4: there is a plan to remove it from the
  implicit buildroot configuration (just like autoconf itself is
  no longer part of a long time already).</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Also BuildRequire m4 for autoconf-el: it was wrongly assumed that
  the two spec files would be in sync (but pre_checkin only syncs
  the Version: and .changes file).</changelog>
</package>
<package pkgid="35534786d7c92740d553c8adc0107679dea55792" name="automake" arch="noarch">
  <version epoch="0" ver="1.15" rel="71.1"/>
  <changelog author="pth@suse.de" date="1347537600">- Run pre_checkin.sh to sync automake-testsuite pec and .changes.</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- update config.guess/sub to the latest state</changelog>
  <changelog author="p.drouand@gmail.com" date="1361275200">- Update to version 1.13.1:
  * Bugs fixed:
  - Use of the obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC now
    causes a clear and helpful error message, instead of obscure ones
    (issue introduced in Automake 1.13).
- Remove config-guess-sub-update.diff; config.guess and config.sub are
  not included anymore in /lib
- Remove
- Clean the specfile; remove useless conditionnal macros
- Automake now provide manfiles by default and help2man is not required
  anymore</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mmeister@suse.com" date="1367236800">- add a script to replace obsolete macros in configure.*
- call it from aclocal to avoid having to patch hundreds of packages</changelog>
  <changelog author="pth@suse.de" date="1369656000">- Update to 1.13.2 (for the full change log please see the file NEWS
  in the package documentation):
  * Obsolescent features:
  - Use of suffix-less info files (that can be specified through the
    '@setfilename' macro in Texinfo input files) is discouraged, and
    its use will raise warnings in the 'obsolete' category.
  - Use of Texinfo input files with '.txi' or '.texinfo' extensions
    is discouraged, and its use will raise warnings in the 'obsolete'
    category.  You are advised to simply use the '.texi' extension
    instead.
  * Documentation fixes:
  - The long-deprecated but still supported two-arguments invocation form
    of AM_INIT_AUTOMAKE is documented once again.
  * Bugs fixed:
  - When the 'ustar' option is used, the generated configure script no
    longer risks hanging during the tests for the availability of the
    'pax' utility, even if the user running configure has a UID or GID
    that requires more than 21 bits to be represented.
  - The obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC work once
    again, as they did in Automake 1.12.x (albeit printing runtime
    warnings in the 'obsolete' category).
  - aclocal will no longer error out if the first local m4 directory
    (as specified by the '-I' option or the 'AC_CONFIG_MACRO_DIRS' or
    'AC_CONFIG_MACRO_DIR' macros) doesn't exist; it will merely report
    a warning in the 'unsupported' category.
  - aclocal will no longer consider directories for extra m4 files more
    than once, even if they are specified multiple times.
  - Analysis of make flags in Automake-generated rules has been made more
    robust, and more future-proof.
- Adapt automake-SUSE.patch to the changed sources.</changelog>
  <changelog author="pth@suse.de" date="1369742400">- Remove aclocal-am_ac.patch and aclocal-am_ac.sh as they aren't
  needed anymore and instead cause havok.</changelog>
  <changelog author="pth@suse.de" date="1371038400">- Update to 1.13.3:
  * Documentation fixes:
  - The documentation no longer mistakenly reports that the
    obsolete 'AM_MKDIR_PROG_P' macro and '$(mkdir_p)' make variable
    are going to be removed in Automake 2.0.
  * Bugs fixed:
  - Byte-compilation of Emacs lisp files could fail spuriously on
    Solaris, when /bin/ksh or /usr/xpg4/bin/sh were used as shell.
  - If the same user-defined suffixes were transformed into
    different Automake-known suffixes in different Makefile.am
    files in the same project, automake could get confused and
    generate inconsistent Makefiles (automake bug#14441).
    For example, if 'Makefile.am' contained a ".ext.cc:" suffix
    rule, and 'sub/Makefile.am' contained a ".ext.c:" suffix rule,
    automake would have mistakenly placed into 'Makefile.in' rules
    to compile "*.c" files into object files, and into
    'sub/Makefile.in' rules to compile "*.cc" files into object
    files --- rather than the other way around.  This is now fixed.
  - Several spurious failures have been fixed (they hit especially
    MinGW/MSYS builds).  See automake bugs #14493, #14494, #14495,
    [#14498], #14499, #14500, #14501, #14517 and #14528.
  - Some other minor miscellaneous changes and fixlets.
  - Patches updated to they apply cleanly and with no offset.</changelog>
  <changelog author="pth@suse.de" date="1371470400">- Update to 1.13.4:
  - Fix a minor regression introduced in Automake 1.13.3: when two or more
    user-defined suffix rules were present in a single Makefile.am,
    automake would needlessly include definition of some make variables
    related to C compilation in the generated Makefile.in (bug#14560).
- Adapt automake-SuSE.patch to changed config.guess.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- fix tests on factory
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1383048000">- Add expect as BuildRequires/Requires for automake-testsuite.</changelog>
  <changelog author="jengelh@inai.de" date="1391601600">- Update to new upstream release 1.14.1
  * The 'compile' script is now unconditionally required for all
  packages that perform C compilation
  * The AM_PROG_CC_C_O macro can still be called, albeit that
  should no longer be necessary.
  * The special Automake-time substitutions '%reldir%' and
  '%canon_reldir%' (and their short versions, '%D%' and '%C%'
  respectively) can now be used in an included Makefile fragment.
  The former is substituted with the relative directory of the
  included fragment (compared to the top-level including
  Makefile), and the latter with the canonicalized version of the
  same relative directory.
  * The 'shar' and 'compress' distribution formats are deprecated</changelog>
  <changelog author="pth@suse.de" date="1408968000">- Explicitely pass the directory name to setup so that the testsuite
  can run.</changelog>
  <changelog author="gber@opensuse.org" date="1412596800">- Add automake-fix-ac_aux_dir-used-before-initialized.patch in
  to fix the use of $ac_aux_dir before being initialized</changelog>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
</package>
<package pkgid="02263655713b9aba9660da02a5868eda55c293f9" name="automake" arch="src">
  <version epoch="0" ver="1.15" rel="71.1"/>
  <changelog author="pth@suse.de" date="1347537600">- Run pre_checkin.sh to sync automake-testsuite pec and .changes.</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- update config.guess/sub to the latest state</changelog>
  <changelog author="p.drouand@gmail.com" date="1361275200">- Update to version 1.13.1:
  * Bugs fixed:
  - Use of the obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC now
    causes a clear and helpful error message, instead of obscure ones
    (issue introduced in Automake 1.13).
- Remove config-guess-sub-update.diff; config.guess and config.sub are
  not included anymore in /lib
- Remove
- Clean the specfile; remove useless conditionnal macros
- Automake now provide manfiles by default and help2man is not required
  anymore</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mmeister@suse.com" date="1367236800">- add a script to replace obsolete macros in configure.*
- call it from aclocal to avoid having to patch hundreds of packages</changelog>
  <changelog author="pth@suse.de" date="1369656000">- Update to 1.13.2 (for the full change log please see the file NEWS
  in the package documentation):
  * Obsolescent features:
  - Use of suffix-less info files (that can be specified through the
    '@setfilename' macro in Texinfo input files) is discouraged, and
    its use will raise warnings in the 'obsolete' category.
  - Use of Texinfo input files with '.txi' or '.texinfo' extensions
    is discouraged, and its use will raise warnings in the 'obsolete'
    category.  You are advised to simply use the '.texi' extension
    instead.
  * Documentation fixes:
  - The long-deprecated but still supported two-arguments invocation form
    of AM_INIT_AUTOMAKE is documented once again.
  * Bugs fixed:
  - When the 'ustar' option is used, the generated configure script no
    longer risks hanging during the tests for the availability of the
    'pax' utility, even if the user running configure has a UID or GID
    that requires more than 21 bits to be represented.
  - The obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC work once
    again, as they did in Automake 1.12.x (albeit printing runtime
    warnings in the 'obsolete' category).
  - aclocal will no longer error out if the first local m4 directory
    (as specified by the '-I' option or the 'AC_CONFIG_MACRO_DIRS' or
    'AC_CONFIG_MACRO_DIR' macros) doesn't exist; it will merely report
    a warning in the 'unsupported' category.
  - aclocal will no longer consider directories for extra m4 files more
    than once, even if they are specified multiple times.
  - Analysis of make flags in Automake-generated rules has been made more
    robust, and more future-proof.
- Adapt automake-SUSE.patch to the changed sources.</changelog>
  <changelog author="pth@suse.de" date="1369742400">- Remove aclocal-am_ac.patch and aclocal-am_ac.sh as they aren't
  needed anymore and instead cause havok.</changelog>
  <changelog author="pth@suse.de" date="1371038400">- Update to 1.13.3:
  * Documentation fixes:
  - The documentation no longer mistakenly reports that the
    obsolete 'AM_MKDIR_PROG_P' macro and '$(mkdir_p)' make variable
    are going to be removed in Automake 2.0.
  * Bugs fixed:
  - Byte-compilation of Emacs lisp files could fail spuriously on
    Solaris, when /bin/ksh or /usr/xpg4/bin/sh were used as shell.
  - If the same user-defined suffixes were transformed into
    different Automake-known suffixes in different Makefile.am
    files in the same project, automake could get confused and
    generate inconsistent Makefiles (automake bug#14441).
    For example, if 'Makefile.am' contained a ".ext.cc:" suffix
    rule, and 'sub/Makefile.am' contained a ".ext.c:" suffix rule,
    automake would have mistakenly placed into 'Makefile.in' rules
    to compile "*.c" files into object files, and into
    'sub/Makefile.in' rules to compile "*.cc" files into object
    files --- rather than the other way around.  This is now fixed.
  - Several spurious failures have been fixed (they hit especially
    MinGW/MSYS builds).  See automake bugs #14493, #14494, #14495,
    [#14498], #14499, #14500, #14501, #14517 and #14528.
  - Some other minor miscellaneous changes and fixlets.
  - Patches updated to they apply cleanly and with no offset.</changelog>
  <changelog author="pth@suse.de" date="1371470400">- Update to 1.13.4:
  - Fix a minor regression introduced in Automake 1.13.3: when two or more
    user-defined suffix rules were present in a single Makefile.am,
    automake would needlessly include definition of some make variables
    related to C compilation in the generated Makefile.in (bug#14560).
- Adapt automake-SuSE.patch to changed config.guess.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- fix tests on factory
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1383048000">- Add expect as BuildRequires/Requires for automake-testsuite.</changelog>
  <changelog author="jengelh@inai.de" date="1391601600">- Update to new upstream release 1.14.1
  * The 'compile' script is now unconditionally required for all
  packages that perform C compilation
  * The AM_PROG_CC_C_O macro can still be called, albeit that
  should no longer be necessary.
  * The special Automake-time substitutions '%reldir%' and
  '%canon_reldir%' (and their short versions, '%D%' and '%C%'
  respectively) can now be used in an included Makefile fragment.
  The former is substituted with the relative directory of the
  included fragment (compared to the top-level including
  Makefile), and the latter with the canonicalized version of the
  same relative directory.
  * The 'shar' and 'compress' distribution formats are deprecated</changelog>
  <changelog author="pth@suse.de" date="1408968000">- Explicitely pass the directory name to setup so that the testsuite
  can run.</changelog>
  <changelog author="gber@opensuse.org" date="1412596800">- Add automake-fix-ac_aux_dir-used-before-initialized.patch in
  to fix the use of $ac_aux_dir before being initialized</changelog>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
</package>
<package pkgid="9cba08640908e5fc5044a3a215cd97f1849c0777" name="automake-testsuite" arch="src">
  <version epoch="0" ver="1.15" rel="71.1"/>
  <changelog author="p.drouand@gmail.com" date="1347364800">- Update to 1.12.3:
  - reworks and reshuffles the Automake testsuite a bit; fixing some
    weaknesses and spurious failures in the process, but also, likely,
    introducing new ones;
  - introduces initial support for automatic dependency tracking with
    the Portland Group C/C++ compilers (thanks to Dave Goodell and
    Jeff A. Daily);
  - fixes several long-standing bugs and limitations in the 'ylwrap'
    script (thanks to Akim Demaille); among the other things, the
    long-standing PR/491 and automake bug#7648 are now fixed.
- Remove automake-add-mkdir_p-temporarly.patch:
  * Only temporary hack for openSUSE 12.2, now it is time to remove it</changelog>
  <changelog author="pth@suse.de" date="1347537600">- Run pre_checkin.sh to sync automake-testsuite pec and .changes.</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- update config.guess/sub to the latest state</changelog>
  <changelog author="p.drouand@gmail.com" date="1361275200">- Update to version 1.13.1:
  * Bugs fixed:
  - Use of the obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC now
    causes a clear and helpful error message, instead of obscure ones
    (issue introduced in Automake 1.13).
- Remove config-guess-sub-update.diff; config.guess and config.sub are
  not included anymore in /lib
- Remove
- Clean the specfile; remove useless conditionnal macros
- Automake now provide manfiles by default and help2man is not required
  anymore</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mmeister@suse.com" date="1367236800">- add a script to replace obsolete macros in configure.*
- call it from aclocal to avoid having to patch hundreds of packages</changelog>
  <changelog author="pth@suse.de" date="1369656000">- Update to 1.13.2 (for the full change log please see the file NEWS
  in the package documentation):
  * Obsolescent features:
  - Use of suffix-less info files (that can be specified through the
    '@setfilename' macro in Texinfo input files) is discouraged, and
    its use will raise warnings in the 'obsolete' category.
  - Use of Texinfo input files with '.txi' or '.texinfo' extensions
    is discouraged, and its use will raise warnings in the 'obsolete'
    category.  You are advised to simply use the '.texi' extension
    instead.
  * Documentation fixes:
  - The long-deprecated but still supported two-arguments invocation form
    of AM_INIT_AUTOMAKE is documented once again.
  * Bugs fixed:
  - When the 'ustar' option is used, the generated configure script no
    longer risks hanging during the tests for the availability of the
    'pax' utility, even if the user running configure has a UID or GID
    that requires more than 21 bits to be represented.
  - The obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC work once
    again, as they did in Automake 1.12.x (albeit printing runtime
    warnings in the 'obsolete' category).
  - aclocal will no longer error out if the first local m4 directory
    (as specified by the '-I' option or the 'AC_CONFIG_MACRO_DIRS' or
    'AC_CONFIG_MACRO_DIR' macros) doesn't exist; it will merely report
    a warning in the 'unsupported' category.
  - aclocal will no longer consider directories for extra m4 files more
    than once, even if they are specified multiple times.
  - Analysis of make flags in Automake-generated rules has been made more
    robust, and more future-proof.
- Adapt automake-SUSE.patch to the changed sources.</changelog>
  <changelog author="pth@suse.de" date="1369742400">- Remove aclocal-am_ac.patch and aclocal-am_ac.sh as they aren't
  needed anymore and instead cause havok.</changelog>
  <changelog author="pth@suse.de" date="1371038400">- Update to 1.13.3:
  * Documentation fixes:
  - The documentation no longer mistakenly reports that the
    obsolete 'AM_MKDIR_PROG_P' macro and '$(mkdir_p)' make variable
    are going to be removed in Automake 2.0.
  * Bugs fixed:
  - Byte-compilation of Emacs lisp files could fail spuriously on
    Solaris, when /bin/ksh or /usr/xpg4/bin/sh were used as shell.
  - If the same user-defined suffixes were transformed into
    different Automake-known suffixes in different Makefile.am
    files in the same project, automake could get confused and
    generate inconsistent Makefiles (automake bug#14441).
    For example, if 'Makefile.am' contained a ".ext.cc:" suffix
    rule, and 'sub/Makefile.am' contained a ".ext.c:" suffix rule,
    automake would have mistakenly placed into 'Makefile.in' rules
    to compile "*.c" files into object files, and into
    'sub/Makefile.in' rules to compile "*.cc" files into object
    files --- rather than the other way around.  This is now fixed.
  - Several spurious failures have been fixed (they hit especially
    MinGW/MSYS builds).  See automake bugs #14493, #14494, #14495,
    [#14498], #14499, #14500, #14501, #14517 and #14528.
  - Some other minor miscellaneous changes and fixlets.
  - Patches updated to they apply cleanly and with no offset.</changelog>
  <changelog author="pth@suse.de" date="1371470400">- Update to 1.13.4:
  - Fix a minor regression introduced in Automake 1.13.3: when two or more
    user-defined suffix rules were present in a single Makefile.am,
    automake would needlessly include definition of some make variables
    related to C compilation in the generated Makefile.in (bug#14560).
- Adapt automake-SuSE.patch to changed config.guess.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- fix tests on factory
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1383048000">- Add expect as BuildRequires/Requires for automake-testsuite.</changelog>
  <changelog author="jengelh@inai.de" date="1391601600">- Update to new upstream release 1.14.1
  * The 'compile' script is now unconditionally required for all
  packages that perform C compilation
  * The AM_PROG_CC_C_O macro can still be called, albeit that
  should no longer be necessary.
  * The special Automake-time substitutions '%reldir%' and
  '%canon_reldir%' (and their short versions, '%D%' and '%C%'
  respectively) can now be used in an included Makefile fragment.
  The former is substituted with the relative directory of the
  included fragment (compared to the top-level including
  Makefile), and the latter with the canonicalized version of the
  same relative directory.
  * The 'shar' and 'compress' distribution formats are deprecated</changelog>
  <changelog author="pth@suse.de" date="1408968000">- Explicitely pass the directory name to setup so that the testsuite
  can run.</changelog>
  <changelog author="gber@opensuse.org" date="1412596800">- Add automake-fix-ac_aux_dir-used-before-initialized.patch in
  to fix the use of $ac_aux_dir before being initialized</changelog>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
</package>
<package pkgid="69ac25ddc0b3968eae974689d3f3b8860bccaafc" name="bind" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="7c3d696af557daf6429d7052b2d9cb8d0e4d7762" name="bind" arch="src">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="0ee29acacd32a4e95110d8de1f7bb701de356ea4" name="bind" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="24d7414189ac75cf91098a5f4ceb0bf6db8637ad" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="2a79fb3d442296b0025a6897a5e3b7b3d24a5e43" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="b73a1f0951fe35c19b245ca0a8f42b53a4c39790" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="055664b32dfc071468036f46f214005a756f5746" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="d7e749ec9564c2c5e6caf9fb7c264dbc4f3c34e5" name="bind-doc" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="35a05aefc7f3b8517869214f92265bfafe61ccfc" name="bind-doc" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="7c1ea8eab34e26341f1daa2a012294429c29edbe" name="bind-libs-32bit" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="ea6265268480ab073c7953860cf68b547f6f3931" name="bind-libs" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="abcb717ba6f3a7ba90abddac4744149499208531" name="bind-libs" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="84b0d96a2fe72a36ab3eb444e162311e0ed38703" name="bind-libs-x86" arch="ia64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="c3c8da2fc8e80d97a2d5d9080777cdff97494762" name="bind-lwresd" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="c55400a2cd74e496cacb12788e8c1349b93af76b" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="cb371471828f89b0a17115f35df86fb74a39228a" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="952d1c14f23cd1a6440fed60a3b9f1ffc7440ff6" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.9.3P2" rel="143.1"/>
  <changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
  <changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
  <changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
  <changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
  <changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
  <changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
  <changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
  <changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
  <changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
  <changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
  <changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
  <changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
  <changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
  <changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
  <changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
  <changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
  <changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
  <changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
  <changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
  <changelog author="max@suse.com" date="1386590400">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
</package>
<package pkgid="fc65a7d5aa74de8d3de88dc4da98b98ebaccb348" name="freetds" arch="src">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="64345006257a54e8a38809b899fbe1e19a434f9a" name="freetds-config" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="ac459c8b17005b40dad8e6648d58763d52dee675" name="freetds-config" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="5afa434c5b204c6f9dc7e8df9df298206db09b7b" name="freetds-devel" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="0cd966d7141d733fa8319bbba75714bd7783565e" name="freetds-devel" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="baa3289e8440aa56b0cb6e46cd47b40a5d6ebd0c" name="freetds-doc" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="74339536feafe5633e03b9d1899629005295b127" name="freetds-doc" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="3832b88bff48c11f13b3cf24584c17bfdba7356f" name="freetds-tools" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="e9c7ce43c506386cb72982720967ab6b6f6a1832" name="freetds-tools" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="57f443117dc2bd519714358745f0e5a13a975d93" name="htop" arch="i586">
  <version epoch="0" ver="1.0.3" rel="38.3"/>
  <changelog author="thoenig@suse.de" date="1180785600">- Update to htop 0.6.6
- Changes:
  * Add support of NLWP field
  * BUGFIX: Fix use of configurable /proc location
  * Fix memory percentage calculation and make it saner
  * Added display of DRS, DT, LRS and TRS
  * BUGFIX: LRS and DRS memory values were flipped
  * BUGFIX: Don't crash on very high UIDs</changelog>
  <changelog author="thoenig@suse.de" date="1196078400">- Update to htop 0.7
- Changes:
  * CPU affinity configuration ('a' key)
  * Improve display of tree view, properly nesting
  threads of the same app based on TGID.
  * IO-wait time now counts as idle time, which is a more
  accurate description. It is still available in
  split time, now called detailed CPU time.
  (thanks to Samuel Thibault for the report)
  * BUGFIX: Correct display of TPGID field
  * Add TGID field
  * BUGFIX: Don't crash with invalid command-line flags
  (thanks to Nico Golde for the report)
  * Fix GCC 4.3 compilation issues
  (thanks to Martin Michlmayr for the report)
  * OpenVZ support, enabled at compile-time with
  the --enable-openvz flag.
  (thanks to Sergey Lychko)</changelog>
  <changelog author="bwalle@suse.de" date="1215777600">- update to htop 0.8
  * Ability to change sort column with the mouse by clicking
    column titles (click again to invert order)
  * Add support for Linux per-process IO statistics, enabled with
    the --enable-taskstats flag, which requires a kernel compiled
    with taskstats support.
  * Add Unicode support, enabled with the --enable-unicode flag,
    which requires libncursesw.  (thanks to Sergej Pupykin)
  * BUGFIX: Fix display of CPU count for threaded processes.  When
    user threads are hidden, process now shows the sum of
    processor usage for all processors. When user threads are
    displayed, each thread shows its own processor usage,
    including the root thread.
  * BUGFIX: avoid crashing when using many meters
- change source tarball format to bzip2</changelog>
  <changelog author="puzel@suse.cz" date="1217505600">- configure with --enable-taskstats to enable
  per-processes IO statistics
- use %configure and %makeinstall macros</changelog>
  <changelog author="thoenig@suse.de" date="1222171200">- Linux-VServer support
- battery meter
- fix collection of IO stats in multithreaded processes
- remove assertion that fails on hardened kernels</changelog>
  <changelog author="thoenig@suse.de" date="1227268800">- add patch htop-non-printable-characters.patch: Don't try to show
  non-printable charcaters (bnc#440951)</changelog>
  <changelog author="thoenig@suse.de" date="1227268801">- add python to build requires</changelog>
  <changelog author="puzel@suse.cz" date="1243944000">- update to 0.8.2
  * Integrated lsof (press 'l')
  * Fix display of gigabyte-sized values
  * Option to display hostname in the meters area
  * Rename VEID to CTID in OpenVZ systems
  * Corrections to the desktop entry file
  * BUGFIX: Correct page size calculation for FreeBSD systems
  * Allow compilation without PLPA on systems that don't support it
  * BUGFIX: Fix missing tree view when userland threads are hidden
  * BUGFIX: Fix for VPID on OpenVZ systems
- Recommends strace and lsof
- use suse_update_desktop_file macro</changelog>
  <changelog author="puzel@novell.com" date="1245844800">- update to htop-0.8.3
  * BUGFIX: Fix crash on F6 key (thanks to Rainer Suhm)
  * BUGFIX: Fix a minor bug which affected the build process.</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="puzel@novell.com" date="1291032000">- update to htop-0.9
  * Add support for "steal"/guest CPU time measurement
    in virtualization environments
  * Expand and collapse subtrees using '+' and '-' when in tree-view
  * Support for cgroups
  * Show custom thread names
  * Add support for STARTTIME field
  * Upgrade PLPA to version 1.3.2
  * Fix license terms with regard to PLPA
  * getopt-based long options and --no-color
  * BUGFIX: Fix display of nan% in CPU meters
  * BUGFIX: Fix memory leak
  * Add Bash/emacs style navigation keys
  * Improve battery meter support
  * BUGFIX: Fix IO-wait color in "Black on White" scheme
  * BUGFIX: Fix search by process name when list is filtered by
    user.
  * BUGFIX: Fix alignment for display of memory values above 100G
- drop htop-non-printable-characters.patch (in upstream)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312027200">- Use --enable-unicode and switch to ncurses ABI v6</changelog>
  <changelog author="puzel@suse.com" date="1322136000">- update to htop-1.0
  * Performance improvements
  * Support for splitting CPU meters into two or four columns
  * Switch from PLPA, which is now deprecated, to HWLOC.
  * Bring back support for native Linux sched_setaffinity,
    so we don't have to use HWLOC where we don't need to.
  * Support for typing in user names and column fields in selection
    panels.
  * Support for UTF-8 tree drawing
  * Option for counting CPUs from zero
  * Meters update in every screen (no longer halting while on
    Setup, etc.)
  * Stricter checks for command-line options
  * Incremental filtering
  * Try harder to find the ncurses header
  * Man page updates
  * BUGFIX: Support larger numbers for process times.
  * BUGFIX: Segfault in BarMeterMode_draw() for small terminal
    widths</changelog>
  <changelog author="puzel@suse.com" date="1329480000">- update to htop-1.0.1 (bugfix release)
  * respecting $XDG_CONFIG_HOME
    (thanks to Hadzhimurad Ustarkhan for the suggestion.)
  * Safer behavior on the kill screen, to make it harder to kill
    the wrong process.
  * BUGFIX: behavior of 'F' (follow) key was broken, also affecting
    the persistence of mouse selections.
  * BUGFIX: keep main panel up-to-date when running the screen
    manager, to fix crash when processes die while on the F9/Kill
    screen.</changelog>
  <changelog author="puzel@suse.com" date="1352721600">- update to htop-1.0.2
  * Add IO priority support ('i' key)
  * Avoid deleting .htoprc if it is a symlink
  * Fail gracefully when /proc is not mounted
    (thanks to Philipp Hagemeister)
  * Option to update process names on every refresh
    (thanks to Rob Hoelz)
  * BUGFIX: Fix crashes when process list is empty</changelog>
  <changelog author="jengelh@inai.de" date="1385467200">- Better make install, remove %clean</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1388059200">- improve autools build, we do not want packages
  using, for example std=c99, instead determine the
  latest C standard with gnu extensions using autoconf macros.
  (htop-stdgnu.patch)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1400500800">- Update to version 1.0.3
  * Tag all children ('c' key)
  * Fixes in accounting of guest time when using virtualization
  * Performance improvements
  * Further performance improvements due to conditional parsing
    of IO data depending on selected fields.
  * Better consistency in coloring.
  * Increase limit of buffer when tracing a deep nested process tree.
  * Display pagefault stats.
  * BUGFIX: Fix crash when adding meters and toggling detailed CPU time.
  * Add column to track the OOM-killer score of processes
  * Rebase htop-stdgnu.patch</changelog>
  <changelog author="jhura@suse.com" date="1424433600">- Cleanup of spec file with spec-cleaner.
- Enable oom score watching and native-affinity</changelog>
</package>
<package pkgid="07bfdfe54510f83f8b0c5db919b23ee48fa0353c" name="htop" arch="src">
  <version epoch="0" ver="1.0.3" rel="38.3"/>
  <changelog author="thoenig@suse.de" date="1180785600">- Update to htop 0.6.6
- Changes:
  * Add support of NLWP field
  * BUGFIX: Fix use of configurable /proc location
  * Fix memory percentage calculation and make it saner
  * Added display of DRS, DT, LRS and TRS
  * BUGFIX: LRS and DRS memory values were flipped
  * BUGFIX: Don't crash on very high UIDs</changelog>
  <changelog author="thoenig@suse.de" date="1196078400">- Update to htop 0.7
- Changes:
  * CPU affinity configuration ('a' key)
  * Improve display of tree view, properly nesting
  threads of the same app based on TGID.
  * IO-wait time now counts as idle time, which is a more
  accurate description. It is still available in
  split time, now called detailed CPU time.
  (thanks to Samuel Thibault for the report)
  * BUGFIX: Correct display of TPGID field
  * Add TGID field
  * BUGFIX: Don't crash with invalid command-line flags
  (thanks to Nico Golde for the report)
  * Fix GCC 4.3 compilation issues
  (thanks to Martin Michlmayr for the report)
  * OpenVZ support, enabled at compile-time with
  the --enable-openvz flag.
  (thanks to Sergey Lychko)</changelog>
  <changelog author="bwalle@suse.de" date="1215777600">- update to htop 0.8
  * Ability to change sort column with the mouse by clicking
    column titles (click again to invert order)
  * Add support for Linux per-process IO statistics, enabled with
    the --enable-taskstats flag, which requires a kernel compiled
    with taskstats support.
  * Add Unicode support, enabled with the --enable-unicode flag,
    which requires libncursesw.  (thanks to Sergej Pupykin)
  * BUGFIX: Fix display of CPU count for threaded processes.  When
    user threads are hidden, process now shows the sum of
    processor usage for all processors. When user threads are
    displayed, each thread shows its own processor usage,
    including the root thread.
  * BUGFIX: avoid crashing when using many meters
- change source tarball format to bzip2</changelog>
  <changelog author="puzel@suse.cz" date="1217505600">- configure with --enable-taskstats to enable
  per-processes IO statistics
- use %configure and %makeinstall macros</changelog>
  <changelog author="thoenig@suse.de" date="1222171200">- Linux-VServer support
- battery meter
- fix collection of IO stats in multithreaded processes
- remove assertion that fails on hardened kernels</changelog>
  <changelog author="thoenig@suse.de" date="1227268800">- add patch htop-non-printable-characters.patch: Don't try to show
  non-printable charcaters (bnc#440951)</changelog>
  <changelog author="thoenig@suse.de" date="1227268801">- add python to build requires</changelog>
  <changelog author="puzel@suse.cz" date="1243944000">- update to 0.8.2
  * Integrated lsof (press 'l')
  * Fix display of gigabyte-sized values
  * Option to display hostname in the meters area
  * Rename VEID to CTID in OpenVZ systems
  * Corrections to the desktop entry file
  * BUGFIX: Correct page size calculation for FreeBSD systems
  * Allow compilation without PLPA on systems that don't support it
  * BUGFIX: Fix missing tree view when userland threads are hidden
  * BUGFIX: Fix for VPID on OpenVZ systems
- Recommends strace and lsof
- use suse_update_desktop_file macro</changelog>
  <changelog author="puzel@novell.com" date="1245844800">- update to htop-0.8.3
  * BUGFIX: Fix crash on F6 key (thanks to Rainer Suhm)
  * BUGFIX: Fix a minor bug which affected the build process.</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="puzel@novell.com" date="1291032000">- update to htop-0.9
  * Add support for "steal"/guest CPU time measurement
    in virtualization environments
  * Expand and collapse subtrees using '+' and '-' when in tree-view
  * Support for cgroups
  * Show custom thread names
  * Add support for STARTTIME field
  * Upgrade PLPA to version 1.3.2
  * Fix license terms with regard to PLPA
  * getopt-based long options and --no-color
  * BUGFIX: Fix display of nan% in CPU meters
  * BUGFIX: Fix memory leak
  * Add Bash/emacs style navigation keys
  * Improve battery meter support
  * BUGFIX: Fix IO-wait color in "Black on White" scheme
  * BUGFIX: Fix search by process name when list is filtered by
    user.
  * BUGFIX: Fix alignment for display of memory values above 100G
- drop htop-non-printable-characters.patch (in upstream)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312027200">- Use --enable-unicode and switch to ncurses ABI v6</changelog>
  <changelog author="puzel@suse.com" date="1322136000">- update to htop-1.0
  * Performance improvements
  * Support for splitting CPU meters into two or four columns
  * Switch from PLPA, which is now deprecated, to HWLOC.
  * Bring back support for native Linux sched_setaffinity,
    so we don't have to use HWLOC where we don't need to.
  * Support for typing in user names and column fields in selection
    panels.
  * Support for UTF-8 tree drawing
  * Option for counting CPUs from zero
  * Meters update in every screen (no longer halting while on
    Setup, etc.)
  * Stricter checks for command-line options
  * Incremental filtering
  * Try harder to find the ncurses header
  * Man page updates
  * BUGFIX: Support larger numbers for process times.
  * BUGFIX: Segfault in BarMeterMode_draw() for small terminal
    widths</changelog>
  <changelog author="puzel@suse.com" date="1329480000">- update to htop-1.0.1 (bugfix release)
  * respecting $XDG_CONFIG_HOME
    (thanks to Hadzhimurad Ustarkhan for the suggestion.)
  * Safer behavior on the kill screen, to make it harder to kill
    the wrong process.
  * BUGFIX: behavior of 'F' (follow) key was broken, also affecting
    the persistence of mouse selections.
  * BUGFIX: keep main panel up-to-date when running the screen
    manager, to fix crash when processes die while on the F9/Kill
    screen.</changelog>
  <changelog author="puzel@suse.com" date="1352721600">- update to htop-1.0.2
  * Add IO priority support ('i' key)
  * Avoid deleting .htoprc if it is a symlink
  * Fail gracefully when /proc is not mounted
    (thanks to Philipp Hagemeister)
  * Option to update process names on every refresh
    (thanks to Rob Hoelz)
  * BUGFIX: Fix crashes when process list is empty</changelog>
  <changelog author="jengelh@inai.de" date="1385467200">- Better make install, remove %clean</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1388059200">- improve autools build, we do not want packages
  using, for example std=c99, instead determine the
  latest C standard with gnu extensions using autoconf macros.
  (htop-stdgnu.patch)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1400500800">- Update to version 1.0.3
  * Tag all children ('c' key)
  * Fixes in accounting of guest time when using virtualization
  * Performance improvements
  * Further performance improvements due to conditional parsing
    of IO data depending on selected fields.
  * Better consistency in coloring.
  * Increase limit of buffer when tracing a deep nested process tree.
  * Display pagefault stats.
  * BUGFIX: Fix crash when adding meters and toggling detailed CPU time.
  * Add column to track the OOM-killer score of processes
  * Rebase htop-stdgnu.patch</changelog>
  <changelog author="jhura@suse.com" date="1424433600">- Cleanup of spec file with spec-cleaner.
- Enable oom score watching and native-affinity</changelog>
</package>
<package pkgid="e616df4d6b19b52d9cbbaff92dd52e1b3391dad9" name="htop" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="38.3"/>
  <changelog author="thoenig@suse.de" date="1180785600">- Update to htop 0.6.6
- Changes:
  * Add support of NLWP field
  * BUGFIX: Fix use of configurable /proc location
  * Fix memory percentage calculation and make it saner
  * Added display of DRS, DT, LRS and TRS
  * BUGFIX: LRS and DRS memory values were flipped
  * BUGFIX: Don't crash on very high UIDs</changelog>
  <changelog author="thoenig@suse.de" date="1196078400">- Update to htop 0.7
- Changes:
  * CPU affinity configuration ('a' key)
  * Improve display of tree view, properly nesting
  threads of the same app based on TGID.
  * IO-wait time now counts as idle time, which is a more
  accurate description. It is still available in
  split time, now called detailed CPU time.
  (thanks to Samuel Thibault for the report)
  * BUGFIX: Correct display of TPGID field
  * Add TGID field
  * BUGFIX: Don't crash with invalid command-line flags
  (thanks to Nico Golde for the report)
  * Fix GCC 4.3 compilation issues
  (thanks to Martin Michlmayr for the report)
  * OpenVZ support, enabled at compile-time with
  the --enable-openvz flag.
  (thanks to Sergey Lychko)</changelog>
  <changelog author="bwalle@suse.de" date="1215777600">- update to htop 0.8
  * Ability to change sort column with the mouse by clicking
    column titles (click again to invert order)
  * Add support for Linux per-process IO statistics, enabled with
    the --enable-taskstats flag, which requires a kernel compiled
    with taskstats support.
  * Add Unicode support, enabled with the --enable-unicode flag,
    which requires libncursesw.  (thanks to Sergej Pupykin)
  * BUGFIX: Fix display of CPU count for threaded processes.  When
    user threads are hidden, process now shows the sum of
    processor usage for all processors. When user threads are
    displayed, each thread shows its own processor usage,
    including the root thread.
  * BUGFIX: avoid crashing when using many meters
- change source tarball format to bzip2</changelog>
  <changelog author="puzel@suse.cz" date="1217505600">- configure with --enable-taskstats to enable
  per-processes IO statistics
- use %configure and %makeinstall macros</changelog>
  <changelog author="thoenig@suse.de" date="1222171200">- Linux-VServer support
- battery meter
- fix collection of IO stats in multithreaded processes
- remove assertion that fails on hardened kernels</changelog>
  <changelog author="thoenig@suse.de" date="1227268800">- add patch htop-non-printable-characters.patch: Don't try to show
  non-printable charcaters (bnc#440951)</changelog>
  <changelog author="thoenig@suse.de" date="1227268801">- add python to build requires</changelog>
  <changelog author="puzel@suse.cz" date="1243944000">- update to 0.8.2
  * Integrated lsof (press 'l')
  * Fix display of gigabyte-sized values
  * Option to display hostname in the meters area
  * Rename VEID to CTID in OpenVZ systems
  * Corrections to the desktop entry file
  * BUGFIX: Correct page size calculation for FreeBSD systems
  * Allow compilation without PLPA on systems that don't support it
  * BUGFIX: Fix missing tree view when userland threads are hidden
  * BUGFIX: Fix for VPID on OpenVZ systems
- Recommends strace and lsof
- use suse_update_desktop_file macro</changelog>
  <changelog author="puzel@novell.com" date="1245844800">- update to htop-0.8.3
  * BUGFIX: Fix crash on F6 key (thanks to Rainer Suhm)
  * BUGFIX: Fix a minor bug which affected the build process.</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="puzel@novell.com" date="1291032000">- update to htop-0.9
  * Add support for "steal"/guest CPU time measurement
    in virtualization environments
  * Expand and collapse subtrees using '+' and '-' when in tree-view
  * Support for cgroups
  * Show custom thread names
  * Add support for STARTTIME field
  * Upgrade PLPA to version 1.3.2
  * Fix license terms with regard to PLPA
  * getopt-based long options and --no-color
  * BUGFIX: Fix display of nan% in CPU meters
  * BUGFIX: Fix memory leak
  * Add Bash/emacs style navigation keys
  * Improve battery meter support
  * BUGFIX: Fix IO-wait color in "Black on White" scheme
  * BUGFIX: Fix search by process name when list is filtered by
    user.
  * BUGFIX: Fix alignment for display of memory values above 100G
- drop htop-non-printable-characters.patch (in upstream)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312027200">- Use --enable-unicode and switch to ncurses ABI v6</changelog>
  <changelog author="puzel@suse.com" date="1322136000">- update to htop-1.0
  * Performance improvements
  * Support for splitting CPU meters into two or four columns
  * Switch from PLPA, which is now deprecated, to HWLOC.
  * Bring back support for native Linux sched_setaffinity,
    so we don't have to use HWLOC where we don't need to.
  * Support for typing in user names and column fields in selection
    panels.
  * Support for UTF-8 tree drawing
  * Option for counting CPUs from zero
  * Meters update in every screen (no longer halting while on
    Setup, etc.)
  * Stricter checks for command-line options
  * Incremental filtering
  * Try harder to find the ncurses header
  * Man page updates
  * BUGFIX: Support larger numbers for process times.
  * BUGFIX: Segfault in BarMeterMode_draw() for small terminal
    widths</changelog>
  <changelog author="puzel@suse.com" date="1329480000">- update to htop-1.0.1 (bugfix release)
  * respecting $XDG_CONFIG_HOME
    (thanks to Hadzhimurad Ustarkhan for the suggestion.)
  * Safer behavior on the kill screen, to make it harder to kill
    the wrong process.
  * BUGFIX: behavior of 'F' (follow) key was broken, also affecting
    the persistence of mouse selections.
  * BUGFIX: keep main panel up-to-date when running the screen
    manager, to fix crash when processes die while on the F9/Kill
    screen.</changelog>
  <changelog author="puzel@suse.com" date="1352721600">- update to htop-1.0.2
  * Add IO priority support ('i' key)
  * Avoid deleting .htoprc if it is a symlink
  * Fail gracefully when /proc is not mounted
    (thanks to Philipp Hagemeister)
  * Option to update process names on every refresh
    (thanks to Rob Hoelz)
  * BUGFIX: Fix crashes when process list is empty</changelog>
  <changelog author="jengelh@inai.de" date="1385467200">- Better make install, remove %clean</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1388059200">- improve autools build, we do not want packages
  using, for example std=c99, instead determine the
  latest C standard with gnu extensions using autoconf macros.
  (htop-stdgnu.patch)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1400500800">- Update to version 1.0.3
  * Tag all children ('c' key)
  * Fixes in accounting of guest time when using virtualization
  * Performance improvements
  * Further performance improvements due to conditional parsing
    of IO data depending on selected fields.
  * Better consistency in coloring.
  * Increase limit of buffer when tracing a deep nested process tree.
  * Display pagefault stats.
  * BUGFIX: Fix crash when adding meters and toggling detailed CPU time.
  * Add column to track the OOM-killer score of processes
  * Rebase htop-stdgnu.patch</changelog>
  <changelog author="jhura@suse.com" date="1424433600">- Cleanup of spec file with spec-cleaner.
- Enable oom score watching and native-affinity</changelog>
</package>
<package pkgid="54b33464e431c69b372ea799a11435fc79eb5abb" name="invis-rdbu" arch="noarch">
  <version epoch="0" ver="0.10" rel="5.1"/>
  <changelog author="stefan@invis-server.org" date="1393502400">- initial build (V. 0.6)</changelog>
  <changelog author="stefan@invis-server.org" date="1393934400">- Update to V. 0.7 - Backuptargets now USB-Disk or Backup-Server</changelog>
  <changelog author="stefan@invis-server.org" date="1403092800">- Update to V. 0.8 - email notification system optimized</changelog>
  <changelog author="stefan@invis-server.org" date="1411646400">- Wrung path in udev-rule template fixed.</changelog>
  <changelog author="stefan@invis-server.org" date="1446292800">- udbadddisk now uses journalctl to search backup disks
- Disk- and Server-backups now uses different configs.</changelog>
</package>
<package pkgid="2ef43ebf6b1ecbcc9c1ce28904ffb313c97b7fc6" name="invis-rdbu" arch="src">
  <version epoch="0" ver="0.10" rel="5.1"/>
  <changelog author="stefan@invis-server.org" date="1393502400">- initial build (V. 0.6)</changelog>
  <changelog author="stefan@invis-server.org" date="1393934400">- Update to V. 0.7 - Backuptargets now USB-Disk or Backup-Server</changelog>
  <changelog author="stefan@invis-server.org" date="1403092800">- Update to V. 0.8 - email notification system optimized</changelog>
  <changelog author="stefan@invis-server.org" date="1411646400">- Wrung path in udev-rule template fixed.</changelog>
  <changelog author="stefan@invis-server.org" date="1446292800">- udbadddisk now uses journalctl to search backup disks
- Disk- and Server-backups now uses different configs.</changelog>
</package>
<package pkgid="873514fb94f890d321264b2d8856b377d3850052" name="libct4" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="48dea00ccb4ce3d68572dce4e463bf0c2d89e03c" name="libct4" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="8525f23ee677181accd6bd6c8005a51858ed05f5" name="libsybdb5" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="c361bd55f799193f69253f913cc594b0c71d948c" name="libsybdb5" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="5343dbcafa731fe8e73b56ee63da595e121f1a06" name="libtdsodbc0" arch="i586">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="29dfae0433137859a270d337e3cdcf294434f53e" name="libtdsodbc0" arch="x86_64">
  <version epoch="0" ver="0.95.95" rel="61.2"/>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
</package>
<package pkgid="37598945907b8b4ea1f871c083c4fa79c59bd6b8" name="ntp" arch="i586">
  <version epoch="0" ver="4.2.6p5" rel="108.1"/>
  <changelog author="varkoly@suse.com" date="1322136000">- bnc#730374 - Hardware Clock does not get synchronized</changelog>
  <changelog author="lmuelle@suse.de" date="1326110400">- Remove superfluously used NTPD_PID_NOPREFIX from init script.
- Refresh patches to apply with no offset.</changelog>
  <changelog author="lmuelle@suse.de" date="1326110401">- Update to version 4.2.6p5.
  - ntpd
  * Updated "nic" and "interface" IPv6 address handling to prevent
    mismatches with localhost [::1] and wildcard [::] which resulted from
    using the address/prefix format (e.g. fe80::/64)
  * Fix orphan mode stratum incorrectly counting to infinity
  * Orphan parent selection metric updated to includes missing ntohl()
  * Non-printable stratum 16 refid no longer sent to ntp
  * Duplicate ephemeral associations suppressed for broadcastclient and
    multicastclient without broadcastdelay
  * Exclude undetermined sys_refid from use in loopback TEST12
  * Exclude MODE_SERVER responses from KoD rate limiting
  * Include root delay in clock_update() sys_rootdisp calculations
  * get_systime() updated to exclude sys_residual offset (which only
    affected bits "below" sys_tick, the precision threshold)
  * sys.peer jitter weighting corrected in sys_jitter calculation
  - ntpq
  * -n option extended to include the billboard "server" column
  * IPv6 addresses in the local column truncated to prevent overruns
- Update to version 4.2.6p4.
  - Build system
  * Fix checking for struct rtattr
  * Upgrade required version of autogen and libopts for building
    from our source code repository
  - ntpd
  * Back-ported several fixes for Coverity warnings from ntp-dev
  * Fix a rare boundary condition in UNLINK_EXPR_SLIST()
  * Allow "logconfig =allall" configuration directive
  * Bind tentative IPv6 addresses on Linux
  * Correct WWVB/Spectracom driver to timestamp CR instead of LF
  * Improved tally bit handling to prevent incorrect ntpq peer status reports
  * Exclude the Undisciplined Local Clock and ACTS drivers from the initial
    candidate list unless they are designated a "prefer peer"
  * Prevent the consideration of Undisciplined Local Clock or ACTS drivers for
    selection during the 'tos orphanwait' period·
  * Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS
    drivers
  * Improved support of the Parse Refclock trusttime flag in Meinberg mode
  * Back-port utility routines from ntp-dev: mprintf(), emalloc_zero()
  * Code cleanup in libntpq
  - ntpdc
  * Fix timerstats reporting
  - ntpdate
  * Reduce time required to set clock
  * Allow a timeout greater than 2 seconds
  - sntp
  * Backward incompatible command-line option change:
  - l/--filelog changed -l/--logfile (to be consistent with ntpd)
  - Documentation
  * Update html2man. Fix some tags in the .html files
  * Distribute ntp-wait.html</changelog>
  <changelog author="lmuelle@suse.com" date="1326110402">- BuildRequire fdupes for post-10.1 systems.
- Do not call autoreconf for pre-10.2 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1326110403">- Remove superfluous remove of acconfig.h while build.
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
  <changelog author="varkoly@suse.com" date="1335182400">- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses
  ntp#1180 - ntpd won't start with more than 1000 interfaces</changelog>
  <changelog author="cfarrell@suse.com" date="1341403200">- license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0
  Properly categorise licenses and sync with Fedora declaration</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1342699200">-  Openssl wanted but not properly detected, fixed.</changelog>
  <changelog author="rmilasan@suse.com" date="1343908800">- Created the correct link to /run/ntp</changelog>
  <changelog author="lnussel@suse.de" date="1355486400">- logrotate is not strictly required for operation of ntp so change
  it to Suggested. That way the minimal installation doesn't draw in
  cron and postfix.</changelog>
  <changelog author="varkoly@suse.com" date="1358424000">- bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime</changelog>
  <changelog author="bwiedemann@suse.com" date="1358510400">- Speedup ntpq (bnc#782060)
  +ntp-4.2.6p2-ntpq-speedup-782060.patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1361534400">- disable Undisciplined Local Clock in default conf file (bnc#784760)</changelog>
  <changelog author="varkoly@suse.com" date="1361880000">- bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager</changelog>
  <changelog author="varkoly@suse.com" date="1362052800">- bnc#797351 - ntpd "listen-on" directive support is missing/broken;
  unable to restrict/secure listening IPs</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362830400">- fix build with automake-1.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- Build with -DOPENSSL_LOAD_CONF , ntp must respect and use
  the system's openssl configuration.</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink</changelog>
  <changelog author="max@suse.com" date="1390219200">- CVE-2013-5211, bnc#857195: restrict query, configuration,
  modification access from world by default. Avoids that ntp can
  be used as a DDoS amplifier.</changelog>
  <changelog author="max@suse.com" date="1392379200">- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket
  errors, so that it skips unreachable destinations immediately
  instead of trying to reach them for more than five minutes
  before finally timing out.
  This patch will probably be obsoleted by the next major upgrade,
  because the current development release takes a different
  approach to get a quick answer from one of the specified servers.</changelog>
</package>
<package pkgid="084b93f771ff36db445ee4c312acd256b56d210d" name="ntp" arch="src">
  <version epoch="0" ver="4.2.6p5" rel="108.1"/>
  <changelog author="varkoly@suse.com" date="1322136000">- bnc#730374 - Hardware Clock does not get synchronized</changelog>
  <changelog author="lmuelle@suse.de" date="1326110400">- Remove superfluously used NTPD_PID_NOPREFIX from init script.
- Refresh patches to apply with no offset.</changelog>
  <changelog author="lmuelle@suse.de" date="1326110401">- Update to version 4.2.6p5.
  - ntpd
  * Updated "nic" and "interface" IPv6 address handling to prevent
    mismatches with localhost [::1] and wildcard [::] which resulted from
    using the address/prefix format (e.g. fe80::/64)
  * Fix orphan mode stratum incorrectly counting to infinity
  * Orphan parent selection metric updated to includes missing ntohl()
  * Non-printable stratum 16 refid no longer sent to ntp
  * Duplicate ephemeral associations suppressed for broadcastclient and
    multicastclient without broadcastdelay
  * Exclude undetermined sys_refid from use in loopback TEST12
  * Exclude MODE_SERVER responses from KoD rate limiting
  * Include root delay in clock_update() sys_rootdisp calculations
  * get_systime() updated to exclude sys_residual offset (which only
    affected bits "below" sys_tick, the precision threshold)
  * sys.peer jitter weighting corrected in sys_jitter calculation
  - ntpq
  * -n option extended to include the billboard "server" column
  * IPv6 addresses in the local column truncated to prevent overruns
- Update to version 4.2.6p4.
  - Build system
  * Fix checking for struct rtattr
  * Upgrade required version of autogen and libopts for building
    from our source code repository
  - ntpd
  * Back-ported several fixes for Coverity warnings from ntp-dev
  * Fix a rare boundary condition in UNLINK_EXPR_SLIST()
  * Allow "logconfig =allall" configuration directive
  * Bind tentative IPv6 addresses on Linux
  * Correct WWVB/Spectracom driver to timestamp CR instead of LF
  * Improved tally bit handling to prevent incorrect ntpq peer status reports
  * Exclude the Undisciplined Local Clock and ACTS drivers from the initial
    candidate list unless they are designated a "prefer peer"
  * Prevent the consideration of Undisciplined Local Clock or ACTS drivers for
    selection during the 'tos orphanwait' period·
  * Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS
    drivers
  * Improved support of the Parse Refclock trusttime flag in Meinberg mode
  * Back-port utility routines from ntp-dev: mprintf(), emalloc_zero()
  * Code cleanup in libntpq
  - ntpdc
  * Fix timerstats reporting
  - ntpdate
  * Reduce time required to set clock
  * Allow a timeout greater than 2 seconds
  - sntp
  * Backward incompatible command-line option change:
  - l/--filelog changed -l/--logfile (to be consistent with ntpd)
  - Documentation
  * Update html2man. Fix some tags in the .html files
  * Distribute ntp-wait.html</changelog>
  <changelog author="lmuelle@suse.com" date="1326110402">- BuildRequire fdupes for post-10.1 systems.
- Do not call autoreconf for pre-10.2 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1326110403">- Remove superfluous remove of acconfig.h while build.
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
  <changelog author="varkoly@suse.com" date="1335182400">- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses
  ntp#1180 - ntpd won't start with more than 1000 interfaces</changelog>
  <changelog author="cfarrell@suse.com" date="1341403200">- license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0
  Properly categorise licenses and sync with Fedora declaration</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1342699200">-  Openssl wanted but not properly detected, fixed.</changelog>
  <changelog author="rmilasan@suse.com" date="1343908800">- Created the correct link to /run/ntp</changelog>
  <changelog author="lnussel@suse.de" date="1355486400">- logrotate is not strictly required for operation of ntp so change
  it to Suggested. That way the minimal installation doesn't draw in
  cron and postfix.</changelog>
  <changelog author="varkoly@suse.com" date="1358424000">- bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime</changelog>
  <changelog author="bwiedemann@suse.com" date="1358510400">- Speedup ntpq (bnc#782060)
  +ntp-4.2.6p2-ntpq-speedup-782060.patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1361534400">- disable Undisciplined Local Clock in default conf file (bnc#784760)</changelog>
  <changelog author="varkoly@suse.com" date="1361880000">- bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager</changelog>
  <changelog author="varkoly@suse.com" date="1362052800">- bnc#797351 - ntpd "listen-on" directive support is missing/broken;
  unable to restrict/secure listening IPs</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362830400">- fix build with automake-1.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- Build with -DOPENSSL_LOAD_CONF , ntp must respect and use
  the system's openssl configuration.</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink</changelog>
  <changelog author="max@suse.com" date="1390219200">- CVE-2013-5211, bnc#857195: restrict query, configuration,
  modification access from world by default. Avoids that ntp can
  be used as a DDoS amplifier.</changelog>
  <changelog author="max@suse.com" date="1392379200">- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket
  errors, so that it skips unreachable destinations immediately
  instead of trying to reach them for more than five minutes
  before finally timing out.
  This patch will probably be obsoleted by the next major upgrade,
  because the current development release takes a different
  approach to get a quick answer from one of the specified servers.</changelog>
</package>
<package pkgid="1c536e1f49e33a147ab63f53adb639846e8c53bf" name="ntp" arch="x86_64">
  <version epoch="0" ver="4.2.6p5" rel="108.1"/>
  <changelog author="varkoly@suse.com" date="1322136000">- bnc#730374 - Hardware Clock does not get synchronized</changelog>
  <changelog author="lmuelle@suse.de" date="1326110400">- Remove superfluously used NTPD_PID_NOPREFIX from init script.
- Refresh patches to apply with no offset.</changelog>
  <changelog author="lmuelle@suse.de" date="1326110401">- Update to version 4.2.6p5.
  - ntpd
  * Updated "nic" and "interface" IPv6 address handling to prevent
    mismatches with localhost [::1] and wildcard [::] which resulted from
    using the address/prefix format (e.g. fe80::/64)
  * Fix orphan mode stratum incorrectly counting to infinity
  * Orphan parent selection metric updated to includes missing ntohl()
  * Non-printable stratum 16 refid no longer sent to ntp
  * Duplicate ephemeral associations suppressed for broadcastclient and
    multicastclient without broadcastdelay
  * Exclude undetermined sys_refid from use in loopback TEST12
  * Exclude MODE_SERVER responses from KoD rate limiting
  * Include root delay in clock_update() sys_rootdisp calculations
  * get_systime() updated to exclude sys_residual offset (which only
    affected bits "below" sys_tick, the precision threshold)
  * sys.peer jitter weighting corrected in sys_jitter calculation
  - ntpq
  * -n option extended to include the billboard "server" column
  * IPv6 addresses in the local column truncated to prevent overruns
- Update to version 4.2.6p4.
  - Build system
  * Fix checking for struct rtattr
  * Upgrade required version of autogen and libopts for building
    from our source code repository
  - ntpd
  * Back-ported several fixes for Coverity warnings from ntp-dev
  * Fix a rare boundary condition in UNLINK_EXPR_SLIST()
  * Allow "logconfig =allall" configuration directive
  * Bind tentative IPv6 addresses on Linux
  * Correct WWVB/Spectracom driver to timestamp CR instead of LF
  * Improved tally bit handling to prevent incorrect ntpq peer status reports
  * Exclude the Undisciplined Local Clock and ACTS drivers from the initial
    candidate list unless they are designated a "prefer peer"
  * Prevent the consideration of Undisciplined Local Clock or ACTS drivers for
    selection during the 'tos orphanwait' period·
  * Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS
    drivers
  * Improved support of the Parse Refclock trusttime flag in Meinberg mode
  * Back-port utility routines from ntp-dev: mprintf(), emalloc_zero()
  * Code cleanup in libntpq
  - ntpdc
  * Fix timerstats reporting
  - ntpdate
  * Reduce time required to set clock
  * Allow a timeout greater than 2 seconds
  - sntp
  * Backward incompatible command-line option change:
  - l/--filelog changed -l/--logfile (to be consistent with ntpd)
  - Documentation
  * Update html2man. Fix some tags in the .html files
  * Distribute ntp-wait.html</changelog>
  <changelog author="lmuelle@suse.com" date="1326110402">- BuildRequire fdupes for post-10.1 systems.
- Do not call autoreconf for pre-10.2 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1326110403">- Remove superfluous remove of acconfig.h while build.
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
  <changelog author="varkoly@suse.com" date="1335182400">- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses
  ntp#1180 - ntpd won't start with more than 1000 interfaces</changelog>
  <changelog author="cfarrell@suse.com" date="1341403200">- license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0
  Properly categorise licenses and sync with Fedora declaration</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1342699200">-  Openssl wanted but not properly detected, fixed.</changelog>
  <changelog author="rmilasan@suse.com" date="1343908800">- Created the correct link to /run/ntp</changelog>
  <changelog author="lnussel@suse.de" date="1355486400">- logrotate is not strictly required for operation of ntp so change
  it to Suggested. That way the minimal installation doesn't draw in
  cron and postfix.</changelog>
  <changelog author="varkoly@suse.com" date="1358424000">- bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime</changelog>
  <changelog author="bwiedemann@suse.com" date="1358510400">- Speedup ntpq (bnc#782060)
  +ntp-4.2.6p2-ntpq-speedup-782060.patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1361534400">- disable Undisciplined Local Clock in default conf file (bnc#784760)</changelog>
  <changelog author="varkoly@suse.com" date="1361880000">- bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager</changelog>
  <changelog author="varkoly@suse.com" date="1362052800">- bnc#797351 - ntpd "listen-on" directive support is missing/broken;
  unable to restrict/secure listening IPs</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362830400">- fix build with automake-1.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- Build with -DOPENSSL_LOAD_CONF , ntp must respect and use
  the system's openssl configuration.</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink</changelog>
  <changelog author="max@suse.com" date="1390219200">- CVE-2013-5211, bnc#857195: restrict query, configuration,
  modification access from world by default. Avoids that ntp can
  be used as a DDoS amplifier.</changelog>
  <changelog author="max@suse.com" date="1392379200">- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket
  errors, so that it skips unreachable destinations immediately
  instead of trying to reach them for more than five minutes
  before finally timing out.
  This patch will probably be obsoleted by the next major upgrade,
  because the current development release takes a different
  approach to get a quick answer from one of the specified servers.</changelog>
</package>
<package pkgid="aca762546e05f1ee4cccfeb5bd3f7a44982d98eb" name="ntp-doc" arch="i586">
  <version epoch="0" ver="4.2.6p5" rel="108.1"/>
  <changelog author="varkoly@suse.com" date="1322136000">- bnc#730374 - Hardware Clock does not get synchronized</changelog>
  <changelog author="lmuelle@suse.de" date="1326110400">- Remove superfluously used NTPD_PID_NOPREFIX from init script.
- Refresh patches to apply with no offset.</changelog>
  <changelog author="lmuelle@suse.de" date="1326110401">- Update to version 4.2.6p5.
  - ntpd
  * Updated "nic" and "interface" IPv6 address handling to prevent
    mismatches with localhost [::1] and wildcard [::] which resulted from
    using the address/prefix format (e.g. fe80::/64)
  * Fix orphan mode stratum incorrectly counting to infinity
  * Orphan parent selection metric updated to includes missing ntohl()
  * Non-printable stratum 16 refid no longer sent to ntp
  * Duplicate ephemeral associations suppressed for broadcastclient and
    multicastclient without broadcastdelay
  * Exclude undetermined sys_refid from use in loopback TEST12
  * Exclude MODE_SERVER responses from KoD rate limiting
  * Include root delay in clock_update() sys_rootdisp calculations
  * get_systime() updated to exclude sys_residual offset (which only
    affected bits "below" sys_tick, the precision threshold)
  * sys.peer jitter weighting corrected in sys_jitter calculation
  - ntpq
  * -n option extended to include the billboard "server" column
  * IPv6 addresses in the local column truncated to prevent overruns
- Update to version 4.2.6p4.
  - Build system
  * Fix checking for struct rtattr
  * Upgrade required version of autogen and libopts for building
    from our source code repository
  - ntpd
  * Back-ported several fixes for Coverity warnings from ntp-dev
  * Fix a rare boundary condition in UNLINK_EXPR_SLIST()
  * Allow "logconfig =allall" configuration directive
  * Bind tentative IPv6 addresses on Linux
  * Correct WWVB/Spectracom driver to timestamp CR instead of LF
  * Improved tally bit handling to prevent incorrect ntpq peer status reports
  * Exclude the Undisciplined Local Clock and ACTS drivers from the initial
    candidate list unless they are designated a "prefer peer"
  * Prevent the consideration of Undisciplined Local Clock or ACTS drivers for
    selection during the 'tos orphanwait' period·
  * Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS
    drivers
  * Improved support of the Parse Refclock trusttime flag in Meinberg mode
  * Back-port utility routines from ntp-dev: mprintf(), emalloc_zero()
  * Code cleanup in libntpq
  - ntpdc
  * Fix timerstats reporting
  - ntpdate
  * Reduce time required to set clock
  * Allow a timeout greater than 2 seconds
  - sntp
  * Backward incompatible command-line option change:
  - l/--filelog changed -l/--logfile (to be consistent with ntpd)
  - Documentation
  * Update html2man. Fix some tags in the .html files
  * Distribute ntp-wait.html</changelog>
  <changelog author="lmuelle@suse.com" date="1326110402">- BuildRequire fdupes for post-10.1 systems.
- Do not call autoreconf for pre-10.2 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1326110403">- Remove superfluous remove of acconfig.h while build.
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
  <changelog author="varkoly@suse.com" date="1335182400">- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses
  ntp#1180 - ntpd won't start with more than 1000 interfaces</changelog>
  <changelog author="cfarrell@suse.com" date="1341403200">- license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0
  Properly categorise licenses and sync with Fedora declaration</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1342699200">-  Openssl wanted but not properly detected, fixed.</changelog>
  <changelog author="rmilasan@suse.com" date="1343908800">- Created the correct link to /run/ntp</changelog>
  <changelog author="lnussel@suse.de" date="1355486400">- logrotate is not strictly required for operation of ntp so change
  it to Suggested. That way the minimal installation doesn't draw in
  cron and postfix.</changelog>
  <changelog author="varkoly@suse.com" date="1358424000">- bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime</changelog>
  <changelog author="bwiedemann@suse.com" date="1358510400">- Speedup ntpq (bnc#782060)
  +ntp-4.2.6p2-ntpq-speedup-782060.patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1361534400">- disable Undisciplined Local Clock in default conf file (bnc#784760)</changelog>
  <changelog author="varkoly@suse.com" date="1361880000">- bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager</changelog>
  <changelog author="varkoly@suse.com" date="1362052800">- bnc#797351 - ntpd "listen-on" directive support is missing/broken;
  unable to restrict/secure listening IPs</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362830400">- fix build with automake-1.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- Build with -DOPENSSL_LOAD_CONF , ntp must respect and use
  the system's openssl configuration.</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink</changelog>
  <changelog author="max@suse.com" date="1390219200">- CVE-2013-5211, bnc#857195: restrict query, configuration,
  modification access from world by default. Avoids that ntp can
  be used as a DDoS amplifier.</changelog>
  <changelog author="max@suse.com" date="1392379200">- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket
  errors, so that it skips unreachable destinations immediately
  instead of trying to reach them for more than five minutes
  before finally timing out.
  This patch will probably be obsoleted by the next major upgrade,
  because the current development release takes a different
  approach to get a quick answer from one of the specified servers.</changelog>
</package>
<package pkgid="e757939658fcec52cee3ee0801f34f05a0408f08" name="ntp-doc" arch="x86_64">
  <version epoch="0" ver="4.2.6p5" rel="108.1"/>
  <changelog author="varkoly@suse.com" date="1322136000">- bnc#730374 - Hardware Clock does not get synchronized</changelog>
  <changelog author="lmuelle@suse.de" date="1326110400">- Remove superfluously used NTPD_PID_NOPREFIX from init script.
- Refresh patches to apply with no offset.</changelog>
  <changelog author="lmuelle@suse.de" date="1326110401">- Update to version 4.2.6p5.
  - ntpd
  * Updated "nic" and "interface" IPv6 address handling to prevent
    mismatches with localhost [::1] and wildcard [::] which resulted from
    using the address/prefix format (e.g. fe80::/64)
  * Fix orphan mode stratum incorrectly counting to infinity
  * Orphan parent selection metric updated to includes missing ntohl()
  * Non-printable stratum 16 refid no longer sent to ntp
  * Duplicate ephemeral associations suppressed for broadcastclient and
    multicastclient without broadcastdelay
  * Exclude undetermined sys_refid from use in loopback TEST12
  * Exclude MODE_SERVER responses from KoD rate limiting
  * Include root delay in clock_update() sys_rootdisp calculations
  * get_systime() updated to exclude sys_residual offset (which only
    affected bits "below" sys_tick, the precision threshold)
  * sys.peer jitter weighting corrected in sys_jitter calculation
  - ntpq
  * -n option extended to include the billboard "server" column
  * IPv6 addresses in the local column truncated to prevent overruns
- Update to version 4.2.6p4.
  - Build system
  * Fix checking for struct rtattr
  * Upgrade required version of autogen and libopts for building
    from our source code repository
  - ntpd
  * Back-ported several fixes for Coverity warnings from ntp-dev
  * Fix a rare boundary condition in UNLINK_EXPR_SLIST()
  * Allow "logconfig =allall" configuration directive
  * Bind tentative IPv6 addresses on Linux
  * Correct WWVB/Spectracom driver to timestamp CR instead of LF
  * Improved tally bit handling to prevent incorrect ntpq peer status reports
  * Exclude the Undisciplined Local Clock and ACTS drivers from the initial
    candidate list unless they are designated a "prefer peer"
  * Prevent the consideration of Undisciplined Local Clock or ACTS drivers for
    selection during the 'tos orphanwait' period·
  * Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS
    drivers
  * Improved support of the Parse Refclock trusttime flag in Meinberg mode
  * Back-port utility routines from ntp-dev: mprintf(), emalloc_zero()
  * Code cleanup in libntpq
  - ntpdc
  * Fix timerstats reporting
  - ntpdate
  * Reduce time required to set clock
  * Allow a timeout greater than 2 seconds
  - sntp
  * Backward incompatible command-line option change:
  - l/--filelog changed -l/--logfile (to be consistent with ntpd)
  - Documentation
  * Update html2man. Fix some tags in the .html files
  * Distribute ntp-wait.html</changelog>
  <changelog author="lmuelle@suse.com" date="1326110402">- BuildRequire fdupes for post-10.1 systems.
- Do not call autoreconf for pre-10.2 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1326110403">- Remove superfluous remove of acconfig.h while build.
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
  <changelog author="varkoly@suse.com" date="1335182400">- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses
  ntp#1180 - ntpd won't start with more than 1000 interfaces</changelog>
  <changelog author="cfarrell@suse.com" date="1341403200">- license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0
  Properly categorise licenses and sync with Fedora declaration</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1342699200">-  Openssl wanted but not properly detected, fixed.</changelog>
  <changelog author="rmilasan@suse.com" date="1343908800">- Created the correct link to /run/ntp</changelog>
  <changelog author="lnussel@suse.de" date="1355486400">- logrotate is not strictly required for operation of ntp so change
  it to Suggested. That way the minimal installation doesn't draw in
  cron and postfix.</changelog>
  <changelog author="varkoly@suse.com" date="1358424000">- bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime</changelog>
  <changelog author="bwiedemann@suse.com" date="1358510400">- Speedup ntpq (bnc#782060)
  +ntp-4.2.6p2-ntpq-speedup-782060.patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1361534400">- disable Undisciplined Local Clock in default conf file (bnc#784760)</changelog>
  <changelog author="varkoly@suse.com" date="1361880000">- bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager</changelog>
  <changelog author="varkoly@suse.com" date="1362052800">- bnc#797351 - ntpd "listen-on" directive support is missing/broken;
  unable to restrict/secure listening IPs</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362830400">- fix build with automake-1.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- Build with -DOPENSSL_LOAD_CONF , ntp must respect and use
  the system's openssl configuration.</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink</changelog>
  <changelog author="max@suse.com" date="1390219200">- CVE-2013-5211, bnc#857195: restrict query, configuration,
  modification access from world by default. Avoids that ntp can
  be used as a DDoS amplifier.</changelog>
  <changelog author="max@suse.com" date="1392379200">- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket
  errors, so that it skips unreachable destinations immediately
  instead of trying to reach them for more than five minutes
  before finally timing out.
  This patch will probably be obsoleted by the next major upgrade,
  because the current development release takes a different
  approach to get a quick answer from one of the specified servers.</changelog>
</package>
<package pkgid="76a0fddceb89df84c9ec0fecb7db119ceba1a67a" name="owncloud-3rdparty" arch="noarch">
  <version epoch="0" ver="7.0.15" rel="3.6"/>
  <changelog author="jw@owncloud.com" date="1439035200">- Update to version 7.0.8</changelog>
  <changelog author="jw@owncloud.com" date="1440676800">- Update to version 7.0.9~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1441195200">- Update to version 7.0.9</changelog>
  <changelog author="jw@owncloud.com" date="1441972800">- Update to version 7.0.10</changelog>
  <changelog author="jw@owncloud.com" date="1445515200">- Update to version 7.0.11~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1446033600">- maintenance:mode --on during upgrade
  According to https://github.com/owncloud/core/pull/19661</changelog>
  <changelog author="jw@owncloud.com" date="1446033601">- Update to version 7.0.11~RC2</changelog>
  <changelog author="jw@owncloud.com" date="1446206400">- Update to version 7.0.11</changelog>
  <changelog author="jenkins@owncloud.com" date="1450267200">- Update to version 7.0.12~RC1</changelog>
  <changelog author="jenkins@owncloud.com" date="1450699200">- Update to version 7.0.12</changelog>
  <changelog author="jw@owncloud.com" date="1457006400">- Update to version 7.0.13~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1457092800">- added Requires: php-pdo php-gd for centos
  https://github.com/owncloud/core/issues/22853</changelog>
  <changelog author="jw@owncloud.com" date="1457092801">- owncloud (7.0.13-0) stable; urgency=low
  * PHPMailer address validation - 3rdparty/#253</changelog>
  <changelog author="jw@owncloud.com" date="1457179200">- Update to version 7.0.13~RC2</changelog>
  <changelog author="jw@owncloud.com" date="1457438400">- Update to version 7.0.13</changelog>
  <changelog author="jw@owncloud.com" date="1461758400">- Update to version 7.0.14~rc1</changelog>
  <changelog author="jw@owncloud.com" date="1462190400">- Update to version 7.0.14~rc2</changelog>
  <changelog author="jnweiger@gmail.com" date="1462276800">- Update to version 7.0.14</changelog>
  <changelog author="jnweiger@gmail.com" date="1462881600">- Update to version 7.0.15~rc1</changelog>
  <changelog author="jnweiger@gmail.com" date="1463140800">- Update to version 7.0.15
- updated files_videoviewer</changelog>
</package>
<package pkgid="e4d9ad2b7287a4f9ea464d85210f466fbf526a10" name="owncloud" arch="noarch">
  <version epoch="0" ver="7.0.15" rel="3.6"/>
  <changelog author="jw@owncloud.com" date="1439035200">- Update to version 7.0.8</changelog>
  <changelog author="jw@owncloud.com" date="1440676800">- Update to version 7.0.9~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1441195200">- Update to version 7.0.9</changelog>
  <changelog author="jw@owncloud.com" date="1441972800">- Update to version 7.0.10</changelog>
  <changelog author="jw@owncloud.com" date="1445515200">- Update to version 7.0.11~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1446033600">- maintenance:mode --on during upgrade
  According to https://github.com/owncloud/core/pull/19661</changelog>
  <changelog author="jw@owncloud.com" date="1446033601">- Update to version 7.0.11~RC2</changelog>
  <changelog author="jw@owncloud.com" date="1446206400">- Update to version 7.0.11</changelog>
  <changelog author="jenkins@owncloud.com" date="1450267200">- Update to version 7.0.12~RC1</changelog>
  <changelog author="jenkins@owncloud.com" date="1450699200">- Update to version 7.0.12</changelog>
  <changelog author="jw@owncloud.com" date="1457006400">- Update to version 7.0.13~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1457092800">- added Requires: php-pdo php-gd for centos
  https://github.com/owncloud/core/issues/22853</changelog>
  <changelog author="jw@owncloud.com" date="1457092801">- owncloud (7.0.13-0) stable; urgency=low
  * PHPMailer address validation - 3rdparty/#253</changelog>
  <changelog author="jw@owncloud.com" date="1457179200">- Update to version 7.0.13~RC2</changelog>
  <changelog author="jw@owncloud.com" date="1457438400">- Update to version 7.0.13</changelog>
  <changelog author="jw@owncloud.com" date="1461758400">- Update to version 7.0.14~rc1</changelog>
  <changelog author="jw@owncloud.com" date="1462190400">- Update to version 7.0.14~rc2</changelog>
  <changelog author="jnweiger@gmail.com" date="1462276800">- Update to version 7.0.14</changelog>
  <changelog author="jnweiger@gmail.com" date="1462881600">- Update to version 7.0.15~rc1</changelog>
  <changelog author="jnweiger@gmail.com" date="1463140800">- Update to version 7.0.15
- updated files_videoviewer</changelog>
</package>
<package pkgid="cd0610f5d3ec7e36e1df92289d1b9103df0b1e7a" name="owncloud" arch="src">
  <version epoch="0" ver="7.0.15" rel="3.6"/>
  <changelog author="jw@owncloud.com" date="1439035200">- Update to version 7.0.8</changelog>
  <changelog author="jw@owncloud.com" date="1440676800">- Update to version 7.0.9~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1441195200">- Update to version 7.0.9</changelog>
  <changelog author="jw@owncloud.com" date="1441972800">- Update to version 7.0.10</changelog>
  <changelog author="jw@owncloud.com" date="1445515200">- Update to version 7.0.11~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1446033600">- maintenance:mode --on during upgrade
  According to https://github.com/owncloud/core/pull/19661</changelog>
  <changelog author="jw@owncloud.com" date="1446033601">- Update to version 7.0.11~RC2</changelog>
  <changelog author="jw@owncloud.com" date="1446206400">- Update to version 7.0.11</changelog>
  <changelog author="jenkins@owncloud.com" date="1450267200">- Update to version 7.0.12~RC1</changelog>
  <changelog author="jenkins@owncloud.com" date="1450699200">- Update to version 7.0.12</changelog>
  <changelog author="jw@owncloud.com" date="1457006400">- Update to version 7.0.13~RC1</changelog>
  <changelog author="jw@owncloud.com" date="1457092800">- added Requires: php-pdo php-gd for centos
  https://github.com/owncloud/core/issues/22853</changelog>
  <changelog author="jw@owncloud.com" date="1457092801">- owncloud (7.0.13-0) stable; urgency=low
  * PHPMailer address validation - 3rdparty/#253</changelog>
  <changelog author="jw@owncloud.com" date="1457179200">- Update to version 7.0.13~RC2</changelog>
  <changelog author="jw@owncloud.com" date="1457438400">- Update to version 7.0.13</changelog>
  <changelog author="jw@owncloud.com" date="1461758400">- Update to version 7.0.14~rc1</changelog>
  <changelog author="jw@owncloud.com" date="1462190400">- Update to version 7.0.14~rc2</changelog>
  <changelog author="jnweiger@gmail.com" date="1462276800">- Update to version 7.0.14</changelog>
  <changelog author="jnweiger@gmail.com" date="1462881600">- Update to version 7.0.15~rc1</changelog>
  <changelog author="jnweiger@gmail.com" date="1463140800">- Update to version 7.0.15
- updated files_videoviewer</changelog>
</package>
<package pkgid="e01973ed1d78b5af790532b4b3eb493221c07a2d" name="php5" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="fa261f3e7387eda7ab4a470c30d3a1a69df9e18a" name="php5" arch="src">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="2700d5341f7464297a68246257af14f1fe0a7a71" name="php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="fa4bd62dc6f785660756f3d4a6440f13496c8b2f" name="php5-bcmath" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="aa3c4d76badc08bf0ff015e8fb8e2d0b87f6224b" name="php5-bcmath" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="c22b85aa35e95923f59345e70f4dde5093feddb9" name="php5-bz2" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="46b54e51af7a7cdbdf15f9d9536e5bf4b8d6feba" name="php5-bz2" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="8e2960171fed58cb1af41e50b1d238b12b0ecfee" name="php5-calendar" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="86801ac9012a1a2dbbdea81e8de9a0c222c85fa6" name="php5-calendar" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="ca9bcdf471653f23a01e64f3361b197deb0424a0" name="php5-ctype" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="1fad2cda9e38a15ba42b6f96929dd341fd87351b" name="php5-ctype" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="2c56a56fbdefc5c9cae6d0b305c7fb617c187e52" name="php5-curl" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="d5946bab5599b04be52a1452bcca5db300581b9e" name="php5-curl" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="180308b31ba8dbc4ff375e3a282ff5701e3b610e" name="php5-dba" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="95628e7ad3b03c09f5710e4fbabbbd0291394a6e" name="php5-dba" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="4b79bd16d16f3ed948dd66f06e100df9b07220af" name="php5-devel" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="079bc2726f147a042b7aaedd21e68b7464c16134" name="php5-devel" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="0ed9e436398577b57c26a46441beedbc17229bec" name="php5-dom" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="37c2a772c8e9892d6e2638c725c35f34157098a3" name="php5-dom" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="34f525dfd5f22a62dc88711fd9eba0ef982843d7" name="php5-enchant" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="72bf6ca6e305f92702f6dda1d5252734bd22c9e4" name="php5-enchant" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="21748258cbb171d3bde145889213a11ccd707dfa" name="php5-exif" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="84b3a550936fef2f60bb8242ec89330448319e4e" name="php5-exif" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="a3fdbd3a52e95296f7956fba84fdb0bab99ad8ce" name="php5-fastcgi" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="badc130de24449ff94c32277d61670611a930487" name="php5-fastcgi" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="03e0a4a6744e9262499784311f546e2c085cc412" name="php5-fileinfo" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="0119d8e2175411fc5316063a9cc4cd7c16ee03d1" name="php5-fileinfo" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="89344bbb0d09926530e78b91b2dbdc44f0c7bf07" name="php5-fpm" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e3574121aa06767ca57bcd248efb114df070bca9" name="php5-fpm" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="363dc5a80d57f306c8e4093efd7fd97f3d9f2064" name="php5-ftp" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="2029196511de39b0f5ce8e989004facc96428316" name="php5-ftp" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e23acc298a2d332ded7d30dd719c1adc79727abf" name="php5-gd" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="84db4782251c69e679f441f06a7c58a24c758326" name="php5-gd" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="a25a8298ad99c7fd7bde62a5d30eb335d0fef7f1" name="php5-gettext" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="38e992997e21d26e3524cc6b4751336e97acde92" name="php5-gettext" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="718f7b4efe45f00537db276c866f72a1840eba0e" name="php5-gmp" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="cdb09b3fac89487a00270f5d2bb776b62314358f" name="php5-gmp" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="64746b16ebdcfa9e97d9f91d7b27f968a44290e4" name="php5-iconv" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="f5895fd8d917fa5173d4dda72895259379ef48d9" name="php5-iconv" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="13faf461d45c3a64cd1b455a2746112d55e4e125" name="php5-imap" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="d179a3ae314b14d13223c0fdcb575acab6a4651c" name="php5-imap" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="cd5a93bf01506269b10fc1d45f24064d3e325b25" name="php5-intl" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="5a80c8f76e3675ac6cdef2de2bafe3e79219c742" name="php5-intl" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="369da175af024c5e678df6b01640cc9f2ed7b232" name="php5-json" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="8bf7061e5b59ac20ebb1bd6e7ad25bbcacfaee3c" name="php5-json" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="37d44a9a4e551b3ec1821490e45717f3cdd47768" name="php5-ldap" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="9d23cd10241d5446a7348ddf25b53ebce4959ca7" name="php5-ldap" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="2fa9d5becca38c728f0334cbd9de1e60f19da690" name="php5-mbstring" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="308da6462737fe3f05f90056abee10240c1b247c" name="php5-mbstring" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="3b45fdc171bd4b7702e8ac994b3f5edac8e2dada" name="php5-mcrypt" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="c6ca94fd78f1e213f3fbe70bd524883cfd770fda" name="php5-mcrypt" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="71381174c2544d85d5f4e3fbef9243841c40db58" name="php5-mysql" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="c202a33ead3b19154ba58fb8888eaf752e9f7a42" name="php5-mysql" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="4424eb09263aeba14bab5236787989a60877d8dc" name="php5-odbc" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e933b0a2b361f996c1ad936b023e7ad7ea814676" name="php5-odbc" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="f589243e4142f7415444d3bce2469a92c2387c2d" name="php5-opcache" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="15782c38a2c2766677c39fd5c6c9e2d75b4b7c3f" name="php5-opcache" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="9f81e16d3b0e4bda035231ad71746292d0fe655d" name="php5-openssl" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="1da730c9caee471e4342f2d9660e15607daba722" name="php5-openssl" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="10326101bc1609c6a7c890988c853156238fd046" name="php5-pcntl" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="5784b6dd4ebb1c5846748836ae2092a15a1d18cb" name="php5-pcntl" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="3b224f9adc8c46801c966dd2fbc23d6e0cd53c83" name="php5-pdo" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e6d71eb8b2202c21faf3e04db8d91826c29e4874" name="php5-pdo" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="d8cf5d5d1da05c731196e06d5258ed6c148bfe7d" name="php5-pear" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="b6665f49d080817e6f9a8d44735109a516fdffd6" name="php5-pear" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="78736db6833d923a53c738ac31bd8ecb899a31c1" name="php5-pgsql" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="bda5bafd31f6193d325502bfb47c478e77282199" name="php5-pgsql" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="14d5952165ade8e924ade37aa37cef08507cd425" name="php5-phar" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="d8728b9fa5e8a5ee4fc3ccb3404c2a558a51cfae" name="php5-phar" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="b6bf8c48d986e395ecb07795d9faaa22b734ad58" name="php5-posix" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="8954bcb841698ff1e6f4c76b6b921f2814275d71" name="php5-posix" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="c30c48ab3b08052f8f26e7303af9cd89205a85ed" name="php5-pspell" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="93e59efe98bee9bf5dfc9ca44fa9b0f8f4aa8268" name="php5-pspell" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e02e70a6355b3151ad7c892fca89e395bc296ba6" name="php5-readline" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="77b54a1764992f03f062af106070dd1676ef6333" name="php5-readline" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="be822bf5f2bb5ded639a3fee1d472f79c9e582b4" name="php5-shmop" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="09c24a76c8e2691347214e4cd50176231b982d03" name="php5-shmop" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="df824166da4ddfba964784f8e362758558a65f07" name="php5-snmp" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e361f92b1eadd0078c6c050c7d20986d5a70ade2" name="php5-snmp" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="d27a3fa8e68211b6792dfe0f3c21a3d836ac9704" name="php5-soap" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="f165acf141044e881c67ef8062a35b5c32052cb7" name="php5-soap" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="dcd96a7ee28e2a79831785c3b2e2b956c8fd4d11" name="php5-sockets" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="62fd6462ff1f7b28e9f083e46fc1e14567d43b6f" name="php5-sockets" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="1e67fa3257379986d3df2887b7e4b79f3d7f0133" name="php5-sqlite" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="68e9e81efe0e1d98ce847c5d404d1a66cbcbd28b" name="php5-sqlite" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="a1abcd323d36934cb20ee8eb6c57ec680c9ad7c1" name="php5-suhosin" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="16d0597d0dc766dbef2a5a4c2af0443bc9e85226" name="php5-suhosin" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="9b5ef24c79de3cbce60961e2c79b8b3857f3fa5f" name="php5-sysvmsg" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="a2b8826f67ad9531cee2d46f78374933ac235c9e" name="php5-sysvmsg" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="f7172dacbf319f4dfc97f931ccd5bd5164b7594c" name="php5-sysvsem" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="b5a816e02d54c5b95b44f62a82a6d31d486dea46" name="php5-sysvsem" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="cc141660ca3bfac4d1fa163765d2e0d61c9570bf" name="php5-sysvshm" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="9819004e758e3a69f77da638a62e987cafcb6fff" name="php5-sysvshm" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="b923a5ff4f0ee2ccb7194cd73b8e8cccfb42a011" name="php5-tidy" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="21d0caf42a833b0f04b05a7afca337d45700367b" name="php5-tidy" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="ff19f9bcdcb527f8f4398dfbe5b1b48f3e143f05" name="php5-tokenizer" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="893565e78b5c7c405e060acb73b5c562b35bcc17" name="php5-tokenizer" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="0982f434c06d9f2c00c4bf39bcd4a8c42d578be2" name="php5-wddx" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="1e984bdf82b91ff15a015a9efe928ef742093d17" name="php5-wddx" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="cf1a91586c08df4f696112aafaddb877702cb598" name="php5-xmlreader" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="5468654d20e8c958b3d59b45d9e4474501935c6f" name="php5-xmlreader" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="8279a241cd26cb8b8ea76126abb10ba82a62f65c" name="php5-xmlrpc" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="7a221a4d690e296d3051764ded502d20ed35de5e" name="php5-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="b84fc2299c8d968fd49584e863564e1ac5dbdf79" name="php5-xmlwriter" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="1df0b56e61e92e9d6fa9b41c65af6f0f5d18a3db" name="php5-xmlwriter" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="17eae775a0cf6c6fa2e633644a71aa90659e29b4" name="php5-xsl" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="3fa62be404fa8ae2904e47a036592d0db9479487" name="php5-xsl" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e9a00cbdf8dd0d33f2421a602ee59d7a4b43f372" name="php5-zip" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="beeab5f3165448e958f704c551955fbdf70953b3" name="php5-zip" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="3600c7317b2c5e6bf0407f936684c060ef8aafc0" name="php5-zlib" arch="i586">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="3ba138667fc06341d71df6446eaccd1e6aa20cbb" name="php5-zlib" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="81.1"/>
  <changelog author="pgajdos@suse.com" date="1460030400">- fixed libmagic buffer overflow [bsc#974305]
    + php-libmagic-boverflow-malformed-magic-file.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1460635200">- fix incomplete php-CVE-2015-8835.patch [bsc#973351#c14]</changelog>
  <changelog author="pgajdos@suse.com" date="1461585600">- security update:
  * CVE-2016-4073 [bsc#977003]
    + php-CVE-2016-4073.patch
  * CVE-2015-8867 [bsc#977005]
    + php-CVE-2015-8867.patch
  * CVE-2016-4070 [bsc#976997]
    + php-CVE-2016-4070.patch
  * CVE-2015-8866 [bsc#976996]
    + php-CVE-2015-8866.patch
  * CVE-2016-4071 [bsc#977000]
    + php-CVE-2016-4071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462190400">- security update:
  * CVE-2016-4342 [bsc#977991]
    + php-CVE-2016-4342.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch
  * CVE-2016-4346 [bsc#977994]
    + php-CVE-2016-4346.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- security update:
  * CVE-2016-4540, CVE-2016-4541 [bsc#978829]
    + php-CVE-2016-4540,4541.patch
  * CVE-2016-4542, CVE-2016-4543, CVE-2016-4544 [bsc#978830]
    + php-CVE-2016-4542,4543,4544.patch
  * CVE-2016-4537, CVE-2016-4538 [bsc#978827]
    + php-CVE-2016-4537,4538.patch
  * CVE-2016-4539 [bsc#978828]
    + php-CVE-2016-4539.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- security update:
  * CVE-2015-4116 [bsc#980366]
    + php-CVE-2015-4116.patch
  * CVE-2015-8874 [bsc#980375]
    + php-CVE-2015-8874.patch
  * CVE-2015-8873 [bsc#980373]
    + php-CVE-2015-8873.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
</package>
<package pkgid="e1e09deeda401bf0dbf093bf3b1cfda3a44854f6" name="php53" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ea62ad831bf79d0c08491d3f08cad6ed5bf39f90" name="php53" arch="src">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="820970caa66a1e3c24249caba0c660e8298471fe" name="php53" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="26c6a844269407f0b4d10fa1dc6a55b3fe4a6446" name="php53-bcmath" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="7bd181a5b5fbda4370b226b0c6b1c891541cbe00" name="php53-bcmath" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="efe86d3d5a45a30895a1cd380e6f14349defa8cb" name="php53-bz2" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="7508b6d69ebaca25fc18e6bfd1720f0da4f76603" name="php53-bz2" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="2e8dce08afc50d94a93a7cb445f1060202ad7ea7" name="php53-calendar" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="b94970f8b12592bdc2f8d379ee6af7ce3ce45e0e" name="php53-calendar" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="92012d3b5aeabd49b5ed1727f05d5ebea6b660b1" name="php53-ctype" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="cc2a19984657334e9bb2c7d299cf61ca90c88ad9" name="php53-ctype" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="954e1302b96887fb57426fccd185879600aafcd1" name="php53-curl" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="00c6b68962515bcab2daf61f5eb7ac547b502b84" name="php53-curl" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="2751e2838309359808efee9f59bd876d266e251e" name="php53-dba" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="226461dbd3f9ce8dc7ff29b8fcc4008d18cef008" name="php53-dba" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="af5b87e57c4d138a302b8f1d84efd40f76c62624" name="php53-devel" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="f0708fdb2702354469274845a523bef7d6b4ebe2" name="php53-devel" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="5d590e440ec384d32a7040aea1027211e20d750d" name="php53-dom" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="859d2c1084ec173879ce548d97362c2b5bc555ea" name="php53-dom" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="b25173b5925c2e634db62c5145d50bdb86266a79" name="php53-enchant" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="167559bbc593734c7fb9f72bafde5eaea899d6f3" name="php53-enchant" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="3c5155ec2b4dde638d3607d86bb6982707cad9dd" name="php53-exif" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="0e8e7843ad59b7311d5d472415f50d0d4bc19286" name="php53-exif" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="eff85057ed224e3e07619e5dad42cbd367924f7a" name="php53-fastcgi" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="f64fbd4535a56cb3986f9aec3d4d53d9cccf7312" name="php53-fastcgi" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="558996b5822ea102a9ffe558c10f84fb7ca2c082" name="php53-fileinfo" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="2e1aecd808c4e59ff720b324ed4312eae1887d94" name="php53-fileinfo" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="00771c0448d2a9653ec213f6baa4448803326e1b" name="php53-fpm" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="985bae1e419bcba47bd5cfa3b122a53270d633e4" name="php53-fpm" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ff31da5f83f1ed1cb73bf9cdafcdf17a2482b9b1" name="php53-ftp" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="23bdfb319626946e75d6f2a7be02ff3e7a244aa3" name="php53-ftp" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="a5e60c407fac339917c31961115bf7877edf440f" name="php53-gd" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="4790ea2d2887f38e4ee9d3c34a60a365056e9ce7" name="php53-gd" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="52b3b0c5f444e12a72463b680f177162c7d705b3" name="php53-gettext" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="a39532d147afd10524f9e0cfdd3762cfdd51528f" name="php53-gettext" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="efff4bb93b0f1cb767ab122b101e37f323abd12a" name="php53-gmp" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="f43150ceb77231b6ccf4fee071b3d8c79bfc265e" name="php53-gmp" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="7aa5ba84eaf5aecaafb5939564014d1bfe192c4a" name="php53-iconv" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="efb5e110dcc520f410552beb32f723689314566a" name="php53-iconv" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="30e719608740e1d7ad693c19b290c8e6889da6b8" name="php53-imap" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="a6cb06f0057566a9357e398fbf7c4389030a657d" name="php53-imap" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="a9183cc21b01d45aaab3a4d6962bbd9f41e6e26b" name="php53-intl" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="a9fba27f52eccdc43e24dbc3913b231b6bcafe4e" name="php53-intl" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="22ea6ae84891bc71c255b8206fec12daf5fa445e" name="php53-json" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="85bda6879ea77d02cc803d2c2cc35b3956bd25df" name="php53-json" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="72c1a0321e6e19c0be4cf12087d817645f18115c" name="php53-ldap" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="5e2ec319e90882d2c0580d6c706ff98e7064b750" name="php53-ldap" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ffa64c66642e593864018ee8f788d8f5aa5135e5" name="php53-mbstring" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="3061c0e4a9aab67fbe24eb02590937f187d83e16" name="php53-mbstring" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="13fbde63a2a119bcf01554d944ff4d626cc2fed9" name="php53-mcrypt" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="8edaac4b108ea73c6404aa40710d2590223536ef" name="php53-mcrypt" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="eb4633781aa6e93a2316eb033b098d5bfd48d45b" name="php53-mssql" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="47b577d138be142bedd57d712048ff887d83d1e6" name="php53-mssql" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="10688d5d6a718db46659ff47073ac4dfa95f51af" name="php53-mysql" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="4d0112b3e055afdf2563e2c68a89bb8069e57c6a" name="php53-mysql" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ff5f46084141add6eeadf3cdb6774987e2bfc588" name="php53-odbc" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="da53d8b86892c87b35d4c1aa4c16b2a99ed97b16" name="php53-odbc" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="02c210b6d1f2b0e1b6e7cd0a785d9d9c1b6c5f57" name="php53-openssl" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="84c9f2dab9d52a9841d7a7e94711d88d597be04d" name="php53-openssl" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="8e5adf89eca9bc456a50564d40824ebde51a84fe" name="php53-pcntl" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="8006a2601c3e3f7a62441c266a260b5de236083a" name="php53-pcntl" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="be6272afadbf8519f799bde665452e685afe17b8" name="php53-pdo" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="85f7b98a9ed902e5d47e576c706c52bb0225f7d3" name="php53-pdo" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="b23925579f7498b39b6b7ef5b64245b60b4bb7da" name="php53-pear" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="86a7eda160bb18d174a9cf406d1f1931615e70c0" name="php53-pear" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="240672cb66d7614a5315a54d0db76040f830571c" name="php53-pgsql" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="31d0eb950114a707eda9da41af8757b1d5914c52" name="php53-pgsql" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ca02ac82cf8c6381cf0c9edbbc8b6df9f1fe2aa5" name="php53-phar" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="bd9bec34d5526151f92e146c48b4f99234e89b35" name="php53-phar" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="09626834d8d30b8ba1fc8b3473afdbb8adb73ead" name="php53-posix" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="b632d00ba3de943f27a0b37d0183d8b47eed0f14" name="php53-posix" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="562b5d3dd9df86790b53e622036aa74888737342" name="php53-pspell" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="5564ecbe9221c1de93cfa73814b557b0870e03b2" name="php53-pspell" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="f917ab73999c866d862981a78a19a46d53130f96" name="php53-readline" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="2c85e6532eba234ae05e475e801f6ee0b8f91c0f" name="php53-readline" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="71e9cb9b88af9c5c24b90879ad98b0481b01cf6a" name="php53-shmop" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="4baaf84be99864993bcc3c7c7b9b38375e19d382" name="php53-shmop" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="1ef5658885fa6e36d445a188723445b659a578c0" name="php53-snmp" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="d299fe3ee9a884c8b45421bdd265ed1187150cc8" name="php53-snmp" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="64f82e6525a6c183b8c200d667e6ef1a8dc0d0cc" name="php53-soap" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="38a5489ab41830da22392eb21c43f88a5068fa89" name="php53-soap" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="adfaded25870cf4a33faece17faa82d4e5c25905" name="php53-sockets" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="40277b75d5e52cc90b2ad5bad96e570cbd134e20" name="php53-sockets" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="1b8d48bc360073fe996841d8870b1ac8f52a60db" name="php53-sqlite" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="d8d9fef6a20f0cee183e4187f5934ee7b7ee3f3e" name="php53-sqlite" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="59127e9ed783a7200b3c1ad705b396c4cad2e592" name="php53-suhosin" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="4550539cc3f93e3f3b613e6f38bf53a330daa3d2" name="php53-suhosin" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="1d1654661658a5d775dcb07e3dec5613cee83b67" name="php53-sysvmsg" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="646ddc62238eb15aa083115941eaa94626beaf8a" name="php53-sysvmsg" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ae0cda1bfb8a97b9cd98a434f2d82e0768633045" name="php53-sysvsem" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="a73a72b6d9a86157f13ff2cd8bff20c5ca9f881b" name="php53-sysvsem" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="3936abf655006b0c8284a9822567de6b6421ad8e" name="php53-sysvshm" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="919eb5e0c2f4f0da3ce9099e2c56c87fdfbf1dcf" name="php53-sysvshm" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="9ab26f68ce21af2946a785a0a1bd2d659c5f134e" name="php53-tidy" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="93e378d37af5e94ae7dfb56670d50916d92093a6" name="php53-tidy" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="7027007535ee1bc778c58385d4612576389b3e17" name="php53-tokenizer" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="1aeb1ea8ae065990cdf03c115ef16d0a4781ed09" name="php53-tokenizer" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="5da7cba09026b5e88fe4ba0df9948d51a48deec2" name="php53-wddx" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="329086129a8d651af7cddc903b541e0bbf218e17" name="php53-wddx" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="ef725ca8bc6c6584407ad7a0aabe38f6959824a9" name="php53-xmlreader" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="172a462d127055c0354c77b0c86c53efc319cae8" name="php53-xmlreader" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="551fd5933374f3a68658e2c2538032c558ea6445" name="php53-xmlrpc" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="836ea850d39cb2190e2c4bc0e31585a40fa7a404" name="php53-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="c0f3fa7644b853f048b7766ec5e31f40dfb01f2a" name="php53-xmlwriter" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="7d217fd700297e422bf73a0a338778886eb06ffe" name="php53-xmlwriter" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="4e7ac4de249456323d42524f1e643283a23ba40a" name="php53-xsl" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="59c07c8864d8ae955f1c12cfe5ea9ce737bcc2b8" name="php53-xsl" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="56c132d462c03e9c275ff77f97beda2cdd36a642" name="php53-zip" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="974e7394b8b1239e3e24d9e4db6589be7a927ece" name="php53-zip" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="506f3c4f82e69a750f9e76842cfe5d89df29ccf1" name="php53-zlib" arch="i586">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="7e0f518a7a051e64abc496af46c82fe675250bc8" name="php53-zlib" arch="x86_64">
  <version epoch="0" ver="5.3.17" rel="36.22"/>
  <changelog author="pgajdos@suse.com" date="1324382400">- amend README.SUSE to discourage using apache module with
  apache2-worker [bnc#728671]</changelog>
  <changelog author="pgajdos@suse.com" date="1325505600">- security update:
  * CVE-2011-4885 [bnc#738221] -- added max_input_vars directive
    to prevent attacks based on hash collisions</changelog>
  <changelog author="pgajdos@suse.com" date="1327320000">- security update:
  * CVE-2012-0781 [bnc#742273]
  * CVE-2012-0788 [bnc#742806]
  * memory corruption in parse_ini_string() [bnc#742806]
  * CVE-2012-0789 [bnc#742806]</changelog>
  <changelog author="pgajdos@suse.com" date="1328270400">- security update CVE-2012-0830 and other memory leaks
  (fixes the fix of CVE-2011-4885) [bnc#744966]</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- security update:
  * CVE-2012-0807 [bnc#743308]
  * CVE-2012-0057 [bnc#741520]
  * CVE-2011-4153 [bnc#741859]
  * CVE-2012-0831 [bnc#746661]</changelog>
  <changelog author="pgajdos@suse.com" date="1331208000">- fixed regressions after fix for CVE-2012-0830 [bnc#749111]</changelog>
  <changelog author="pgajdos@suse.com" date="1333627200">- security update:
  * CVE-2012-1172 [bnc#752030]</changelog>
  <changelog author="pgajdos@suse.com" date="1336132800">- security update:
  * CVE-2012-1823, CVE-2012-2311 [bnc#760536]</changelog>
  <changelog author="pgajdos@suse.com" date="1336996800">- improved fix for CVE-2012-1823 (CVE-2012-2335, CVE-2012-2336)
  [bnc#761631]</changelog>
  <changelog author="pgajdos@suse.com" date="1338206400">- security update:
  * CVE-2012-2386 [bnc#763814]</changelog>
  <changelog author="pgajdos@suse.com" date="1339675200">- security update:
  * CVE-2012-2143 [bnc#766798]</changelog>
  <changelog author="pgajdos@suse.com" date="1343304000">- security update:
  * CVE-2012-2688 [bnc#772580]
  * CVE-2012-3365 [bnc#772582]
  * oob-read-sql-dos [bnc#769785]</changelog>
  <changelog author="pgajdos@suse.com" date="1346155200">- use FilesMatch with 'SetHandler' rather than 'AddHandler'
  [bnc#775852]</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- fixed CVE-2011-1398 and CVE-2011-4388 [bnc#778003]</changelog>
  <changelog author="pgajdos@suse.com" date="1352203200">- updated to 5.3.17
  * Fixed bug #62763 (register_shutdown_function and extending class).
  * Fixed bug #62744 (dangling pointers made by zend_disable_class).
  * Fixed bug #62716 (munmap() is called with the incorrect length).
  * Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE).
  * Fixed bug #62852 (Unserialize invalid DateTime causes crash).
  * Fix null pointer dereferences in some classes of ext/intl.
  * Fixed bug #62885 (mysqli_poll - Segmentation fault).
  * Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()).
  * Fixed bug (segfault due to retval is not initialized).
  * Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray).
  * Fixed bug #62838 (enchant_dict_quick_check() destroys zval, but fails to
    initialize it).
  * Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK
    with run-test.php).
  * Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false).
  * Fixed Bug #62500 (Segfault in DateInterval class when extended).
  * Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result).
  * Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance
    gives Segmentation fault).
  * Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
    includes a semi-colon).
  * Fixed potential overflow in _php_stream_scandir, CVE-2012-2688.
  * Fixed bug #62432 (ReflectionMethod random corrupt memory on high
    concurrent).
  * Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
    Salt).
  * Fixed magic file regex support.
  * Fixed bug #61045 (fpm don't send error log to fastcgi clients).
  * Fixed bug #61835 (php-fpm is not allowed to run as root).
  * Fixed bug #61295 (php-fpm should not fail with commented 'user'
    for non-root start).
  * Fixed bug #61026 (FPM pools can listen on the same address).
  * Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
  * Fixed bug #62153 (when using unix sockets, multiples FPM instances
    can be launched without errors).
  * Fixed bug #62160 (Add process.priority to set nice(2) priorities).
  * Fixed bug #61218 (FPM drops connection while receiving some binary values
    in FastCGI requests).
  * Fixed bug #62205 (php-fpm segfaults (null passed to strstr)).
  * Fixed bug #62083 (grapheme_extract() memory leaks).
  * Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
    twice).
  * Fixed bug #62070 (Collator::getSortKey() returns garbage).
  * etc. see NEWS file</changelog>
  <changelog author="pgajdos@suse.com" date="1357128000">- versioned provides [bnc#795615]</changelog>
  <changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800]
- added partially upstreamed patch from php5
  * 64bit-post-large-files.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1368100800">- security update [bnc#807707]
  * CVE-2013-1635.patch
  * CVE-2013-1643.patch</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374062400">- mssql Package enabled for SLES 11</changelog>
  <changelog author="stefan.schaefer@fsproductions.de" date="1374235200">- pdo-dblib enabled</changelog>
</package>
<package pkgid="e830e9b4101ac127c1efd5ba870f237fb09a4f3c" name="phpMyAdmin" arch="noarch">
  <version epoch="0" ver="4.7.0" rel="289.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- 4.5.x package was missing template - fix boo#961285</changelog>
  <changelog author="astieger@suse.com" date="1453982400">- phpMyAdmin 4.5.4
  The followinng vulnerabilities were fixed: (boo#964024)
  * CVE-2016-2038: Multiple full path disclosure vulnerabilities
  * CVE-2016-2039: Unsafe generation of XSRF/CSRF token
  * CVE-2016-2040: Multiple XSS vulnerabilities
  * CVE-2016-1927: Insecure password generation in JavaScript
  * CVE-2016-2041: Unsafe comparison of XSRF/CSRF token
  * CVE-2016-2042: Multiple full path disclosure vulnerabilities
  * CVE-2016-2043: XSS vulnerability in normalization page
  * CVE-2016-2044: Full path disclosure vulnerability in SQL parser
  * CVE-2016-2045: XSS vulnerability in SQL editor
- update upstream singing keyring</changelog>
  <changelog author="ecsos@opensuse.org" date="1454155200">- update to 4.5.4.1 (2016-01-28)
  - gh#11892 Error with PMA 4.4.15.3
  - gh#11896 Remove hard dependency on phpseclib</changelog>
  <changelog author="astieger@suse.com" date="1456315200">- phpMyAdmin 4.5.5
  * improvements to changing passwords on newer MariaDB servers
  * several fixes to the SQL parser</changelog>
  <changelog author="astieger@suse.com" date="1456833600">- phpMyAdmin 4.5.5.1:
  The following vulnerabilities were fixed:
  * CVE-2016-2559: XSS vulnerability in SQL parser (PMASA-2016-10 boo#968940)
  * CVE-2016-2560: Multiple XSS vulnerabilities (PMASA-2016-11 boo#968938)
  * CVE-2016-2561: Multiple XSS vulnerabilities (PMASA-2016-12 boo#968941)
  * CVE-2016-2562: Vulnerability allowing man-in-the-middle attack on API call to GitHub (PMASA-2016-13 boo#968928)
  The following upstream bugs were fixed:
  * CREATE UNIQUE INDEX index type is not recognized by parser.
  * Row count wrong when grouping joined tables.
  * Column definition with default value and comment in CREATE TABLE expoerted faulty.
  * New statement but no delimiter and unexpected token with REPLACE.
  * Fixed incorrect usage of SQL parser context in SQL export
  * Fixed inclusion of gettext library from SQL parser</changelog>
  <changelog author="astieger@suse.com" date="1458820800">- phpMyAdmin 4.6.0:
  * Allow setting routine-wise privileges
  * UI for defining partitioning in create table window
  * Support JSON data type
  * Editing partitions in table Structure
  * Copy results to clipboard
  * Reactivate cut&amp;paste possibility in print view
  * Display binary strings as text if they are valid UTF-8
  * Copy multiple tables to database
  * Show MySQL error messages in user language
  * Add new configuration directive 'ssl_verify' for self-signed
    certificates with mysqlnd and PHP &gt;= 5.6
  * Remove ForceSSL and PmaAbsoluteUri configuration directives
    (these are better handled by proper webserver configuration)
  * Fixed several bugs relating to exporting, particularly with
    DEFAULT and COMMENT fields</changelog>
  <changelog author="chris@computersalat.de" date="1462795200">- phpMyAdmin 4.6.1:
  * Problems with SQL syntax warnings from the linter/parser
  * Fixing an error about "PMA_Util" not found
  * Better handling of JSON columns
  * Fixed quoting with the SQL parser, which in particular adversely
    affected SQL imports and exports</changelog>
  <changelog author="ecsos@opensuse.org" date="1464436800">- update to 4.6.2 (2016-05-25)
  - gh#12225 Use https for documentation links
  - gh#12234 Fix schema export with too many tables
  - gh#12240 Avoid parsing non JSON responses as JSON
  - gh#12244 Avoid using too log URLs when getting javascripts
  - gh#12118 Fixed setting mixed case languages
  - gh#12229 Avoid storing objects in session when debugging SQL
  - gh#12249 Fix cookie path on IIS
  - gh#11705 Fix occassional 200 errors on Windows
  - gh#12219 Fix locking issues when importing SQL
  - gh#12231 Avoid confusing warning when mysql extension is missing
  - fix issue Improve handling of logout
  - fix issue Safer handling of sessions during authentication
  - gh#12209 Fix server selection on main page
  - gh#12192 Avoid storing full error data in session
  - gh#12082 Fixed export of ARCHIVE tables with keys
  - gh#11565 Add session reload for config authentication
  - gh#12229 Do not fail on errors stored in session
  - gh#12248 Fix loading of APC based upload progress bar
- remove PmaAbsoluteUri from phpMyAdmin-config.patch because since
  version 4.6.0 it is remove
- Security fixes:
  * PMASA-2016-14 (CVE-2016-5097, CWE-661, boo#982126)
    https://www.phpmyadmin.net/security/PMASA-2016-14/
  - User SQL queries can be revealed through URL GET parameters,
    see PMASA-2016-14
  * PMASA-2016-16 (CVE-2016-5099, CWE-661, boo#982128)
    https://www.phpmyadmin.net/security/PMASA-2016-16/
  - Self XSS vulneratbility, see PMASA-2016-16</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- rebase phpMyAdmin-config.patch</changelog>
  <changelog author="chris@computersalat.de" date="1466683200">- update to 4.6.3 (2016-06-23)
  * gh#12249 Fixed cookie path on Windows
  * gh#12279 Fixed error reporting on connect problems
  * gh#12290 Fixed export of tables without explicitly set engine
  * gh#12285 Designer JavaScript error: Show/Hide tables list
  * gh#12293 Fix MySQL SSL connection with some PHP versions
  * gh#12279 Fix MySQL connection error on version mismatch
  * gh#12281 Keep user attributes (privileges, authentication mode, etc) when copying a user
  * gh#12308 Fix division by zero in case of misconfigured MySQL server
  * gh#12317 Fix editing server variables
  * gh#12303 Fix table size calculation in some circumstances
  * gh#12310 Fix listing routines for non privileged user
  * issue Escape generated query in exporting a database
  * issue Setup script did not properly use input type password for some input types
- fix for boo#986154
  * PMASA-2016-17 (CVE-2016-5701, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-17/
  - BBCode injection vulnerability
  * PMASA-2016-18 (CVE-2016-5702, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-18/
  - Cookie attribute injection attack
  * PMASA-2016-19 (CVE-2016-5703, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-19/
  - SQL injection attack
  * PMASA-2016-20 (CVE-2016-5704, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-20/
  - XSS on table structure page
  * PMASA-2016-21 (CVE-2016-5705, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-21/
  - Multiple XSS vulnerabilities
  * PMASA-2016-22 (CVE-2016-5706, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-22/
  - DOS attack
  * PMASA-2016-23 (CVE-2016-5730, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-23/
  - Multiple full path disclosure vulnerabilities
  * PMASA-2016-24 (CVE-2016-5731, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-24/
  - XSS through FPD
  * PMASA-2016-25 (CVE-2016-5732, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-25/
  - XSS in partition range functionality
  * PMASA-2016-26 (CVE-2016-5733, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-26/
  - Multiple XSS vulnerabilities
  * PMASA-2016-27 (CVE-2016-5734, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-27/
  - Unsafe handling of preg_replace parameters
  * PMASA-2016-28 (CVE-2016-5739, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-28/
  - Referrer leak in transformations</changelog>
  <changelog author="chris@computersalat.de" date="1471521600">- 4.6.4 (2016-08-16)
  - securitiy fixes
  * Improve session cookie code for openid.php and signon.php example
    files
  * Full path disclosure in openid.php and signon.php example files
  * Unsafe generation of BlowfishSecret (when not supplied by the user)
  * Referrer leak when phpinfo is enabled
  * Use HTTPS for wiki links
  * Improve SSL certificate handling
  * Fix full path disclosure in debugging code
  * Administrators could trigger SQL injection attack against users
  - other fixes
  * Remove Swekey support
  * Include X-Robots-Tag header in responses
  * Enforce numeric field length when creating table
  * Fixed invalid Content-Length in some HTTP responses
  * gh#12394 Create view should require a view name
  * gh#12391 Message with 'Change password successfully' displayed,
    but does not take effect
  * Tighten control on PHP sessions and session cookies
  * gh#12409 Re-enable overhead on server databases view
  * gh#12414 Fixed rendering of Original theme
  * gh#12413 Fixed deleting users in non English locales
  * gh#12416 Fixed replication status output in Databases listing
  * gh#12303 Avoid typecasting to float when not needed
  * gh#12425 Duplicate message variable names in messages.inc.php
  * gh#12399 Adding index to table shows wrong top navigation
  * gh#12424 Fixed password change on MariaDB without auth plugin
  * gh#12339 Do not error on unset server port
  * gh#12422 Improvements to the original theme
  * gh#12395 Do not try to load old transformation plugins
  * gh#12423 Fixed replication status in database listing
  * gh#12433 Copy table with prefix does not copy the indexes
  * gh#12375 Search in database: Window content is not scrolling down
    when clicking first time on Browse link
  * gh#12346 SQL Editor textareas can have their size increased from
    the top, distorting the page view
- fix for boo#994313
  https://www.phpmyadmin.net/security/
  * Weaknesses with cookie encryption
    see PMASA-2016-29 (CVE-2016-6606, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-30 (CVE-2016-6607, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-31 (CVE-2016-6608, CWE-661)
  * PHP code injection
    see PMASA-2016-32 (CVE-2016-6609, CWE-661)
  * Full path disclosure
    see PMASA-2016-33 (CVE-2016-6610, CWE-661)
  * SQL injection attack
    see PMASA-2016-34 (CVE-2016-6611, CWE-661)
  * Local file exposure through LOAD DATA LOCAL INFILE
    see PMASA-2016-35 (CVE-2016-6612, CWE-661)
  * Local file exposure through symlinks with UploadDir
    see PMASA-2016-36 (CVE-2016-6613, CWE-661)
  * Path traversal with SaveDir and UploadDir
    see PMASA-2016-37 (CVE-2016-6614, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-38 (CVE-2016-6615, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-39 (CVE-2016-6616, CWE-661)
  * SQL injection vulnerability
    see PMASA-2016-40 (CVE-2016-6617, CWE-661)
  * Denial-of-service attack through transformation feature
    see PMASA-2016-41 (CVE-2016-6618, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-42 (CVE-2016-6619, CWE-661)
  * Verify data before unserializing
    see PMASA-2016-43 (CVE-2016-6620, CWE-661)
  * SSRF in setup script
    see PMASA-2016-44 (CVE-2016-6621, CWE-661)
  * Denial-of-service attack with
    $cfg['AllowArbitraryServer'] = true and persistent connections
    see PMASA-2016-45 (CVE-2016-6622, CWE-661)
  * Denial-of-service attack by using for loops
    see PMASA-2016-46 (CVE-2016-6623, CWE-661)
  * Possible circumvention of IP-based allow/deny rules with IPv6 and
    proxy server
    see PMASA-2016-47 (CVE-2016-6624, CWE-661)
  * Detect if user is logged in
    see PMASA-2016-48 (CVE-2016-6625, CWE-661)
  * Bypass URL redirection protection
    see PMASA-2016-49 (CVE-2016-6626, CWE-661)
  * Referrer leak
    see PMASA-2016-50 (CVE-2016-6627, CWE-661)
  * Reflected File Download
    see PMASA-2016-51 (CVE-2016-6628, CWE-661)
  * ArbitraryServerRegexp bypass
    see PMASA-2016-52 (CVE-2016-6629, CWE-661)
  * Denial-of-service attack by entering long password
    see PMASA-2016-53 (CVE-2016-6630, CWE-661)
  * Remote code execution vulnerability when running as CGI
    see PMASA-2016-54 (CVE-2016-6631, CWE-661)
  * Denial-of-service attack when PHP uses dbase extension
    see PMASA-2016-55 (CVE-2016-6632, CWE-661)
  * Remove tode execution vulnerability when PHP uses dbase extension
    see PMASA-2016-56 (CVE-2016-6633, CWE-661)
- fix deps
  * add missing php-gettext
- rebase phpMyAdmin-config.patch</changelog>
  <changelog author="chris@computersalat.de" date="1478347200">- fix phpMyAdmin.http</changelog>
  <changelog author="chris@computersalat.de" date="1478433600">- fix deps
  * add missing Recommends php5-curl
- fix phpMyAdmin.http
  * add &lt;IfModule mod_php7.c&gt;</changelog>
  <changelog author="ecsos@opensuse.org" date="1480161600">- update to 4.6.5.1 (2016-11-26)
  - quick fix for 4.6.5
  * an issue affecting a small number of users using
    $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db'].
  * an issue affecting the create table dialog where the partition
    selection tool was overzealous and made it difficult to create
    a new table.
- update to 4.6.5 (2016-11-25)
  - security fixes
  * Fix for expanding in navigation pane
  * Reintroduced a simplified version of PmaAbsoluteUri directive
    (needed with reverse proxies)
  * Fix editing of ENUM/SET/DECIMAL field structures
  * Improvements to the parser
  - other fixes
  * Remove potentionally license problematic sRGB profile
  * gh#12459 Display read only fields as read only when editing
  * gh#12384 Fix expanding of navigation pane when clicking on database
  * gh#12430 Impove partitioning support
  * gh#12374 Reintroduced simplified PmaAbsoluteUri configuration
    directive
  * Always use UTC time in HTTP headers
  * gh#12479 Simplified validation of external links
  * gh#12483 Fix browsing tables with built in transformations
  * gh#12485 Do not show warning about short blowfish_secret if none
    is set
  * gh#12251 Fixed random logouts due to wrong cookie path
  * gh#12480 Fixed editing of ENUM/SET/DECIMAL fields structure
  * gh#12497 Missing escaping of configuration used in SQL
    (hide_db and only_db)
  * gh#12476 Add error checking in reading advisory rules file
  * gh#12477 Add checking missing elements and confirming element
    types from json_decode
  * gh#12251 Automatically save SQL query in browser local storage
    rather than in cookie
  * gh#12292 Unable to edit transformations
  * gh#12502 Remove unused paramenter when connecting to MySQLi
  * gh#12303 Fix number formatting with different settings of
    precision in PHP
  * gh#12405 Use single quotes in PHP code
  * gh#12534 Option for the dropped column is not removed from
    'after_field' select, after the column is dropped
  * gh#12531 Properly detect DROP DATABASE queries
  * gh#12470 Fix possible race condition in setting URL hash
  * gh#11924 Remove caching of server information
  * gh#11628 Proper parsing of INSERT ... ON DUPLICATE KEY queries
  * gh#12545 Proper parsing of CREATE TABLE ... PARTITION queries
  * gh#12473 Code can throw unhandled exception
  * gh#12550 Do not try to keep alive session even after expiry
  * gh#12512 Fixed rendering BBCode links in setup
  * gh#12518 Fixed copy of table with generated columns
  * gh#12221 Fixed export of table with generated columns
  * gh#12320 Copying a user does not copy usergroup
  * gh#12272 Adding a new row with default enum goes to no selection
    when you want to add more then 2 rows
  * gh#12487 Drag and drop import prevents file dropping to blob
    column file selector on the insert tab
  * gh#12554 Absence of scrolling makes it impossible to read longer
    text values in grid editing
  * gh#12530 "Edit routine" crashes when the current user is not the
    definer, even if privileges are adequate
  * gh#12300 Export selective tables by-default dumps Events also
  * gh#12298 Fixed export of view definitions
  * gh#12242 Edit routine detail dialog does not fill "Return length"
    field in mysql functions
  * gh#12575 New index Confirm adds whitespace around the field name
  * gh#12382 Bug in zoom search
  * gh#12321 Assign LIMIT clause only to syntactically correct queries
  * gh#12461 Can't Execute SQL With Sub-Query Due To "LIMIT 0,25"
    Inserted At Wrong Place
  * gh#12511 Clarify documentation on ArbitraryServerRegexp
  * gh#12508 Remove duplicate code in SQL escaping
  * gh#12475 Cleanup code for getting table information
  * gh#12579 phpMyAdmin's export of a Select statment without a FROM
    clause generates Wrong SQL
  * gh#12316 Correct export of complex SELECT statements
  * gh#12080 Fixed parsing of subselect queries
  * gh#11740 Fixed handling DELETE ... USING queries
  * gh#12100 Fixed handling of CASE operator
  * gh#12455 Query history stores separate entry for every letter
    typed
  * gh#12327 Create PHP code no longer works
  * gh#12179 Fixed bookmarking of query with multiple statements
  * gh#12419 Wrong description on GRANT OPTION
  * gh#12615 Fixed regexp for matching browser versions
  * gh#12569 Avoid showing import errors twice
  * gh#12362 prefs_manage.php can leave an orphaned temporary file
  * gh#12619 Unable to export csv when using union select
  * gh#12625 Broken Edit links in query results of JOIN query
  * gh#12634 Drop DB error in import if DB doesn't exist
  * gh#12338 Designer reverts to first saved ER after EACH relation
    create or delete
  * gh#12639 'Show trace' in Console generates JS error for functions
    in query's trace called without any arguments
  * gh#12366 Fix user creation with certain MariaDB setups
  * gh#12616 Refuse to work with mbstring.func_overload enabled
  * gh#12472 Properly report connection without password in setup
  * gh#12365 Fix records count for large tables
  * gh#12533 Fix records count for complex queries
  * gh#12454 Query history not updated in console until page refresh
  * gh#12344 Fixed parsing of labels in loop
  * gh#12228 Fixed parsing of BEGIN labels
  * gh#12637 Fixed editing some timestamp values
  * gh#12622 Fixed javascript error in designer
  * gh#12334 Missing page indicator or VIEWs
  * gh#12610 Export of tables with Timestamp/Datetime/Time columns
    defined with ON UPDATE clause with precision fails
  * gh#12661 Error inserting into pma__history after timeout
  * gh#12195 Row_format = fixed not visible
  * gh#12665 Cannot add a foreign key - non-indexed fields not listed
    in InnoDB tables
  * gh#12674 Allow for proper MySQL-allowed strings as identifiers
  * gh#12651 Allow for partial dates on table insert page
  * gh#12681 Fixed designer with tables using special chars
  * gh#12652 Fixed visual query builder for foreign keys with more
    fields
  * gh#12257 Improved search page performance
  * gh#12322 Avoid selecting default function for foreign keys
  * gh#12453 Fixed escaping of SQL parts in some corner cases
  * gh#12542 Missing table name in account privileges editor
  * gh#12691 Remove ksort call on empty array in PMA_getPlugins
    function
  * gh#12443 Check parameter type before processing
  * gh#12299 Avoid generating too long URLs in search
  * gh#12361 Fix self SQL injection in table-specific privileges
  * gh#12698 Add link to release notes and download on new version
    notification
  * gh#12712 Error when trying to setup replication (fatal error in
    call to an old PMA_DBI_connect function)
- fix for boo#1012271
  https://www.phpmyadmin.net/security/
  * Unsafe generation of $cfg['blowfish_secret']
    see PMASA-2016-58 (CVE ids: CVE-2016-9847, CWE-661)
  * phpMyAdmin's phpinfo functionality is removed
    see PMASA-2016-59 (CVE ids: CVE-2016-9848, CWE-661)
  * AllowRoot and allow/deny rule bypass with specially-crafted
    username
    see PMASA-2016-60 (CVE ids: CVE-2016-9849, CWE-661)
  * Username matching weaknesses with allow/deny rules
    see PMASA-2016-61 (CVE ids: CVE-2016-9850, CWE-661)
  * Possible to bypass logout timeout
    see PMASA-2016-62 (CVE ids: CVE-2016-9851, CWE-661)
  * Full path disclosure (FPD) weaknesses
    see PMASA-2016-63 (CVE ids: CVE-2016-9852, CVE-2016-9853,
    CVE-2016-9854, CVE-2016-9855, CWE-661)
  * Multiple XSS weaknesses
    see PMASA-2016-64 (CVE ids: CVE-2016-9856, CVE-2016-9857,
    CWE-661, CWE-352)
  * Multiple denial-of-service (DOS) vulnerabilities
    see PMASA-2016-65 (CVE ids: CVE-2016-9858, CVE-2016-9859,
    CVE-2016-9860, CWE-661, CW-400)
  * Possible to bypass white-list protection for URL redirection
    see PMASA-2016-66 (CVE ids: CVE-2016-9861, CWE-661, CWE-20,
    CWE-601)
  * BBCode injection to login page
    see PMASA-2016-67 (CVE ids: CVE-2016-9862, CWE-661)
  * Denial-of-service (DOS) vulnerability in table partitioning
    see PMASA-2016-68 (CVE ids: CVE-2016-9863, CWE-661, CWE-400)
  * Multiple SQL injection vulnerabilities
    see PMASA-2016-69 (CVE ids: CVE-2016-9864, CWE-661, CWE-89)
  * Incorrect serialized string parsing
    see PMASA-2016-70 (CVE ids: CVE-2016-9865, CWE-661)
  * CSRF token not stripped from the URL
    see PMASA-2016-71 (CVE ids: CVE-2016-9866, CWE-661)</changelog>
  <changelog author="chris@computersalat.de" date="1481025600">- update to 4.6.5.2 (2016-12-05)
  * gh#12765 Fixed SQL export with newlines
- update changes (update to 4.6.5 (2016-11-25))
  * add missing (Not yet available) CVE's
- fix phpMyAdmin.http</changelog>
  <changelog author="ecsos@opensuse.org" date="1484827200">- Add Patch phpMyAdmin-12757_sql_syntax_errror.patch to fix
  gh#12757 SQL syntax errror on MariaDB &lt; 10.0.2 in check for mysql
  password check plugin.
  Will be fixed in 4.6.6</changelog>
  <changelog author="chris@computersalat.de" date="1485345600">- 4.6.6 (2017-01-23)
  * gh#12759 Fix Notice regarding 'Undefined index: old_usergroup'
  * gh#12760 Fix Notice regarding 'Undefined index: users'
  * gh#12762 Fixed parsing of SQL with BINARY function
  * gh#12588 ReCaptcha now works without allow_url_fopen
  * gh#12699 Show no local storage warning only on settings tab
  * gh#12778 Syntax Error in Adding/Changing TIMESTAMP columns with
    default value as NULL
  * gh#12769 Edit/Export links are not clickable under Routines tab
  * gh#12757 Fixed creating new user with older MariaDB
  * gh#12784 Remove ctype installation suggestion
  * gh#12780 Format button replaces all text with blank spaces
  * gh#12786 Fixed database searching
  * gh#12792 Fixed javascript error on new version link
  * gh#12785 Add information about required and suggested extensions
    to composer.json
  * gh#12801 Custom header shown twice with cookie login form
  * gh#12802 Custom footer not shown with auth_type http login failure
  * gh#12434 Improve documentation for servers running with Suhosin
  * gh#12800 Updated embedded phpSecLib to 2.0.4
  * gh#12800 Fixed various issues with PHP 7.1
  * gh#11816 Fixed operation with lower_case_table_names=2
  * gh#12813 Fixed stored procedure execution
  * gh#12826 Honor user configured connection collation
  * gh#12293 Correctly report OpenSSL errors from cookie encryption
  * gh#12814 DateTime won't allow to input length in Routine editor
  * gh#12840 Fix Notice regarding 'Undefined index: row_format' when
    altering table options
  * gh#12841 Fixed moving of columns with whitespace in name
  * gh#12847 Fixed editing of virtual columns
  * gh#12859 Changed WHERE condition to 0 instead of 1 for SQL query
    window to avoid accidents
  * gh#12872 Use same query for display and execution when dropping
    index
  * gh#12868 Fix check for user groups freatures being enabled
  * gh#12876 Fix notices and warning related to dbs_to_test global
  * gh#12831 Fix table formatting on Insert tab, which mostly
    affected row highlighting
  * gh#12495 Reintroduced phpinfo page with limited capabilities
  * gh#12861 Fix renaming tables with lower_case_table_names=2
  * gh#12876 Fix possible PHP error in navigation
  * gh#12881 Fix database search with newer php-gettext
  * gh#12894 Fix linter error on unterminated variable name
  * gh#12732 Fixed filtering for active processes
- fix for boo#1021597
  * PMASA-2016-44 (CVE-2016-6621, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-44/
  - Multiple vulnerabilities in setup script
  * PMASA-2017-1 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-1/
  - Open redirect
  * PMASA-2017-2 ( CVE-2015-8980, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-2/
  - php-gettext code execution
  * PMASA-2017-3 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-3/
  - DOS vulnerabiltiy in table editing
  * PMASA-2017-4 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-4/
  - CSS injection in themes
  * PMASA-2017-5 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-5/
  - Cookie attribute injection attack
  * PMASA-2017-6 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-6/
  - SSRF in replication
  * PMASA-2017-7 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-7/
  - DOS in replication status
- remove obsolete phpMyAdmin-12757_sql_syntax_errror.patch
- rework phpMyAdmin-config.patch</changelog>
  <changelog author="chris@computersalat.de" date="1490011200">- add http.inc file
  * include one file for php5/php7 admin flags/values</changelog>
  <changelog author="ecsos@opensuse.org" date="1491048000">- update to 4.7.0 (2017-03-28)
  * gh#12233 [Display] Improve message when renaming database to
    same name
  * gh#6146  Log authentication attempts to syslog
  * gh#11981 Remove support for Swekey authentication
  * gh#11987 Remove code for no longer supported MSIE versions
  * gh#11962 Remove embedded PHP libraries, use composer to install
    them
  * gh#12017 Cannot easily select multiple tables when exporting
  * gh#12047 Add javascript filtering for databases
  * gh#12166 More compact rendering of navigation tree
  * gh#12129 Improve performance with SkipLockedTables
  * gh#12173 Do not hide indexes under a slider
  * Improve performance of zip file import
  * gh#12196 Removed $cfg['ThemePath']
  * gh#6274  Add support for export user settings as config.inc.php
    snippet
  * gh#5555  Better report query errors while generating SQL exports
  * gh#12307 Produce valid JSON on export
  * gh#12325 Setup script icons broken
  * gh#12378 Support IPv6 proxies
  * Removed MySQL connection retry without password
  * gh#12218 Allow to specify further parameters for control
    connection
  * gh#12162 Show charset for each table on Database structure page
  * gh#12463 Incorrect link in the href of icon at Hide/Show unhide
    links
  * gh#12330 Shortcut for closing console
  * gh#12465 Improved handling of http requests
  * gh#12474 Broken links in Setup forms Navigation
  * gh#12494 Can't add a new User
  * gh#12523 Add 'token' Parameter in all POST requests
    (Fix 'Token mismatch' errors)
  * gh#12302 Improved usage of number_format
  * gh#12656 Server selection not working
  * gh#12543 NULL results in dataset are colored grey
  * gh#12664 Create Bookmark broken
  * gh#12688 Use unsigned int for storing bookmark ID
  * gh#12352 Added password strength indicator
  * gh#12713 Correctly handle HTTP status when doing requests
  * gh#12247 Add option to delete settings from browser storage
  * gh#12783 Remove unused PMA_addJSCode function
  * gh#12069 Add table filtering to database structure
  * gh#12799 Allow to configure signon session parameters
  * gh#12854 Drop database is broken
  * gh#12863 Can't toggle Event Scheduler on
  * gh#12742 Finish removing dead code references to xls/xlsx
    import and export, which was removed some time ago.
  * gh#12536 Rename "Relations" to "Relationships" in many places
    as it's the more proper term
  * gh#12834 Fixed margins in central columns feature
  * gh#12903 Document more export configuration options
  * gh#12897 Use consistent numeric format for table overhead
  * gh#12901 Use server returned table name on renaming table
  * gh#12918 Always use \r\n as newline when editing fields
  * gh#12923 Fixed server side search in navigation panel
  * gh#12929 Undefined index warning with ssl_ca_paths
  * gh#12924 Do not show errors from OpenSSL cookie
    encryption/decryption
  * gh#12945 Fixed hint rendering on adding new user
  * gh#12941 Fixed sorting of tables in relation view
  * gh#12936 Fixed tables pagination in navigation panel
  * gh#12904 Do not collapse add form for central columns if there
    are none
  * gh#12955 Fixed database renaming
  * gh#12954 Fixed export of tracking data
  * gh#12960 Enclose exports in transaction by default
  * gh#12966 After adding a column ADD INDEX option won't be
    displayed when enabling AI
  * gh#12972 Better error message when Composer has not been run
  * gh#12988 Do not show language selector without choices
  * gh#12993 Fixed external links to php documentation
  * gh#12990 Fixed error when loading favorite tables to console
  * gh#12981 Improved rendering of new version information
  * gh#12922 Fixed bookmarks ordering
  * gh#12964 Fixed table search in navigation
  * gh#12985 Fixed rendering of foreign key browsing
  * gh#12957 Fixed manipulation with GIS data having zero
    coordinates
  * gh#12804 Fixed various designer javascript errors
  * gh#12934 Fixed possible javascript error on server status page
  * gh#12927 Fixed javascript error on 3NF normalization
  * gh#12996 List all databses in navigation panel database
    dropdown
  * gh#12980 Better defaults when creating multi field foreign key
  * gh#12976 Improved foreign key editor behavior
  * gh#12958 Always show error reporting dialog on top
  * gh#12693 Improved support for TokuDB
  * gh#11231 Try harder to honor LoginCookieValidity setting
  * gh#13016 and #13017 Slight improvements to the table layout of
    Relation view
  * gh#12345 Correctly show affected rows for LOAD DATA queries
  * gh#13010 Copy database: SQL error for copying PMADB metadata
  * gh#13002 Fixed OpenDocument exports
  * gh#13000 Align NULL values according to the column alignment
  * gh#13021 Show phpMyAdmin errors even with error_reporting
    set to 0
  * gh#13020 Removed warning about client and server versions
    mismatch
  * Hide comments on table Structure tab when no comment is set
  * Fixed submission of error reports
  * gh#13033 Use Referrer-Policy header to specify referrer policy
  * Fixed javascript confirmation of dangerous queries
  * gh#13040 Compatibility with hhvm 3.18
  * gh#13031 Fixed displaying of all rows
  * gh#12967 Fixed related field selection for native relations
  * gh#13045 Properly escape MIME transformatoin names
  * gh#13028 Always show 100% in font selector
  * gh#13047 Fix query simulating for more servers
  * gh#12846 Fix new version check for sites with wrongly
    configured curl
  * gh#12951 When exporting to Excel, the default is now to include
    column names in the first row
  * gh#13059 Removed debugging code
  * gh#13029 Fixed table tracking for nested table groups
  * gh#13053 Fixed broken links in setup
  * gh#12708 Removed phpMyAdmin version from User-Agent header
  * gh#13084 Do not point users to setup when it is disabled
  * gh#12660 Delete only phpMyAdmin cookies on upgrade
  * gh#13088 Fixed editing of rows with text primary key
  * gh#13092 Do not try to sync favorite tables if configuration
    storage is not enabled
  * gh#13105 Fixed changing attribute for virtual field
  * gh#12757 Fixed setting password on recent MariaDB with non
    working plugins
  * gh#12349 Fixed undefined variable on import from some formats
  * gh#13103 Do not offer default names for copying/renaming
    databases
  * [security] Possible to bypass
    $cfg['Servers'][$i]['AllowNoPassword'], see PMASA-2017-08
- Drop patch phpMyAdmin-pma.patch because now in upstream</changelog>
  <changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
</package>
<package pkgid="ffefd80f28887f811b47d1f9e6aec99ab2a8b03b" name="phpMyAdmin" arch="src">
  <version epoch="0" ver="4.7.0" rel="289.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- 4.5.x package was missing template - fix boo#961285</changelog>
  <changelog author="astieger@suse.com" date="1453982400">- phpMyAdmin 4.5.4
  The followinng vulnerabilities were fixed: (boo#964024)
  * CVE-2016-2038: Multiple full path disclosure vulnerabilities
  * CVE-2016-2039: Unsafe generation of XSRF/CSRF token
  * CVE-2016-2040: Multiple XSS vulnerabilities
  * CVE-2016-1927: Insecure password generation in JavaScript
  * CVE-2016-2041: Unsafe comparison of XSRF/CSRF token
  * CVE-2016-2042: Multiple full path disclosure vulnerabilities
  * CVE-2016-2043: XSS vulnerability in normalization page
  * CVE-2016-2044: Full path disclosure vulnerability in SQL parser
  * CVE-2016-2045: XSS vulnerability in SQL editor
- update upstream singing keyring</changelog>
  <changelog author="ecsos@opensuse.org" date="1454155200">- update to 4.5.4.1 (2016-01-28)
  - gh#11892 Error with PMA 4.4.15.3
  - gh#11896 Remove hard dependency on phpseclib</changelog>
  <changelog author="astieger@suse.com" date="1456315200">- phpMyAdmin 4.5.5
  * improvements to changing passwords on newer MariaDB servers
  * several fixes to the SQL parser</changelog>
  <changelog author="astieger@suse.com" date="1456833600">- phpMyAdmin 4.5.5.1:
  The following vulnerabilities were fixed:
  * CVE-2016-2559: XSS vulnerability in SQL parser (PMASA-2016-10 boo#968940)
  * CVE-2016-2560: Multiple XSS vulnerabilities (PMASA-2016-11 boo#968938)
  * CVE-2016-2561: Multiple XSS vulnerabilities (PMASA-2016-12 boo#968941)
  * CVE-2016-2562: Vulnerability allowing man-in-the-middle attack on API call to GitHub (PMASA-2016-13 boo#968928)
  The following upstream bugs were fixed:
  * CREATE UNIQUE INDEX index type is not recognized by parser.
  * Row count wrong when grouping joined tables.
  * Column definition with default value and comment in CREATE TABLE expoerted faulty.
  * New statement but no delimiter and unexpected token with REPLACE.
  * Fixed incorrect usage of SQL parser context in SQL export
  * Fixed inclusion of gettext library from SQL parser</changelog>
  <changelog author="astieger@suse.com" date="1458820800">- phpMyAdmin 4.6.0:
  * Allow setting routine-wise privileges
  * UI for defining partitioning in create table window
  * Support JSON data type
  * Editing partitions in table Structure
  * Copy results to clipboard
  * Reactivate cut&amp;paste possibility in print view
  * Display binary strings as text if they are valid UTF-8
  * Copy multiple tables to database
  * Show MySQL error messages in user language
  * Add new configuration directive 'ssl_verify' for self-signed
    certificates with mysqlnd and PHP &gt;= 5.6
  * Remove ForceSSL and PmaAbsoluteUri configuration directives
    (these are better handled by proper webserver configuration)
  * Fixed several bugs relating to exporting, particularly with
    DEFAULT and COMMENT fields</changelog>
  <changelog author="chris@computersalat.de" date="1462795200">- phpMyAdmin 4.6.1:
  * Problems with SQL syntax warnings from the linter/parser
  * Fixing an error about "PMA_Util" not found
  * Better handling of JSON columns
  * Fixed quoting with the SQL parser, which in particular adversely
    affected SQL imports and exports</changelog>
  <changelog author="ecsos@opensuse.org" date="1464436800">- update to 4.6.2 (2016-05-25)
  - gh#12225 Use https for documentation links
  - gh#12234 Fix schema export with too many tables
  - gh#12240 Avoid parsing non JSON responses as JSON
  - gh#12244 Avoid using too log URLs when getting javascripts
  - gh#12118 Fixed setting mixed case languages
  - gh#12229 Avoid storing objects in session when debugging SQL
  - gh#12249 Fix cookie path on IIS
  - gh#11705 Fix occassional 200 errors on Windows
  - gh#12219 Fix locking issues when importing SQL
  - gh#12231 Avoid confusing warning when mysql extension is missing
  - fix issue Improve handling of logout
  - fix issue Safer handling of sessions during authentication
  - gh#12209 Fix server selection on main page
  - gh#12192 Avoid storing full error data in session
  - gh#12082 Fixed export of ARCHIVE tables with keys
  - gh#11565 Add session reload for config authentication
  - gh#12229 Do not fail on errors stored in session
  - gh#12248 Fix loading of APC based upload progress bar
- remove PmaAbsoluteUri from phpMyAdmin-config.patch because since
  version 4.6.0 it is remove
- Security fixes:
  * PMASA-2016-14 (CVE-2016-5097, CWE-661, boo#982126)
    https://www.phpmyadmin.net/security/PMASA-2016-14/
  - User SQL queries can be revealed through URL GET parameters,
    see PMASA-2016-14
  * PMASA-2016-16 (CVE-2016-5099, CWE-661, boo#982128)
    https://www.phpmyadmin.net/security/PMASA-2016-16/
  - Self XSS vulneratbility, see PMASA-2016-16</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- rebase phpMyAdmin-config.patch</changelog>
  <changelog author="chris@computersalat.de" date="1466683200">- update to 4.6.3 (2016-06-23)
  * gh#12249 Fixed cookie path on Windows
  * gh#12279 Fixed error reporting on connect problems
  * gh#12290 Fixed export of tables without explicitly set engine
  * gh#12285 Designer JavaScript error: Show/Hide tables list
  * gh#12293 Fix MySQL SSL connection with some PHP versions
  * gh#12279 Fix MySQL connection error on version mismatch
  * gh#12281 Keep user attributes (privileges, authentication mode, etc) when copying a user
  * gh#12308 Fix division by zero in case of misconfigured MySQL server
  * gh#12317 Fix editing server variables
  * gh#12303 Fix table size calculation in some circumstances
  * gh#12310 Fix listing routines for non privileged user
  * issue Escape generated query in exporting a database
  * issue Setup script did not properly use input type password for some input types
- fix for boo#986154
  * PMASA-2016-17 (CVE-2016-5701, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-17/
  - BBCode injection vulnerability
  * PMASA-2016-18 (CVE-2016-5702, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-18/
  - Cookie attribute injection attack
  * PMASA-2016-19 (CVE-2016-5703, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-19/
  - SQL injection attack
  * PMASA-2016-20 (CVE-2016-5704, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-20/
  - XSS on table structure page
  * PMASA-2016-21 (CVE-2016-5705, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-21/
  - Multiple XSS vulnerabilities
  * PMASA-2016-22 (CVE-2016-5706, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-22/
  - DOS attack
  * PMASA-2016-23 (CVE-2016-5730, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-23/
  - Multiple full path disclosure vulnerabilities
  * PMASA-2016-24 (CVE-2016-5731, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-24/
  - XSS through FPD
  * PMASA-2016-25 (CVE-2016-5732, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-25/
  - XSS in partition range functionality
  * PMASA-2016-26 (CVE-2016-5733, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-26/
  - Multiple XSS vulnerabilities
  * PMASA-2016-27 (CVE-2016-5734, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-27/
  - Unsafe handling of preg_replace parameters
  * PMASA-2016-28 (CVE-2016-5739, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-28/
  - Referrer leak in transformations</changelog>
  <changelog author="chris@computersalat.de" date="1471521600">- 4.6.4 (2016-08-16)
  - securitiy fixes
  * Improve session cookie code for openid.php and signon.php example
    files
  * Full path disclosure in openid.php and signon.php example files
  * Unsafe generation of BlowfishSecret (when not supplied by the user)
  * Referrer leak when phpinfo is enabled
  * Use HTTPS for wiki links
  * Improve SSL certificate handling
  * Fix full path disclosure in debugging code
  * Administrators could trigger SQL injection attack against users
  - other fixes
  * Remove Swekey support
  * Include X-Robots-Tag header in responses
  * Enforce numeric field length when creating table
  * Fixed invalid Content-Length in some HTTP responses
  * gh#12394 Create view should require a view name
  * gh#12391 Message with 'Change password successfully' displayed,
    but does not take effect
  * Tighten control on PHP sessions and session cookies
  * gh#12409 Re-enable overhead on server databases view
  * gh#12414 Fixed rendering of Original theme
  * gh#12413 Fixed deleting users in non English locales
  * gh#12416 Fixed replication status output in Databases listing
  * gh#12303 Avoid typecasting to float when not needed
  * gh#12425 Duplicate message variable names in messages.inc.php
  * gh#12399 Adding index to table shows wrong top navigation
  * gh#12424 Fixed password change on MariaDB without auth plugin
  * gh#12339 Do not error on unset server port
  * gh#12422 Improvements to the original theme
  * gh#12395 Do not try to load old transformation plugins
  * gh#12423 Fixed replication status in database listing
  * gh#12433 Copy table with prefix does not copy the indexes
  * gh#12375 Search in database: Window content is not scrolling down
    when clicking first time on Browse link
  * gh#12346 SQL Editor textareas can have their size increased from
    the top, distorting the page view
- fix for boo#994313
  https://www.phpmyadmin.net/security/
  * Weaknesses with cookie encryption
    see PMASA-2016-29 (CVE-2016-6606, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-30 (CVE-2016-6607, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-31 (CVE-2016-6608, CWE-661)
  * PHP code injection
    see PMASA-2016-32 (CVE-2016-6609, CWE-661)
  * Full path disclosure
    see PMASA-2016-33 (CVE-2016-6610, CWE-661)
  * SQL injection attack
    see PMASA-2016-34 (CVE-2016-6611, CWE-661)
  * Local file exposure through LOAD DATA LOCAL INFILE
    see PMASA-2016-35 (CVE-2016-6612, CWE-661)
  * Local file exposure through symlinks with UploadDir
    see PMASA-2016-36 (CVE-2016-6613, CWE-661)
  * Path traversal with SaveDir and UploadDir
    see PMASA-2016-37 (CVE-2016-6614, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-38 (CVE-2016-6615, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-39 (CVE-2016-6616, CWE-661)
  * SQL injection vulnerability
    see PMASA-2016-40 (CVE-2016-6617, CWE-661)
  * Denial-of-service attack through transformation feature
    see PMASA-2016-41 (CVE-2016-6618, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-42 (CVE-2016-6619, CWE-661)
  * Verify data before unserializing
    see PMASA-2016-43 (CVE-2016-6620, CWE-661)
  * SSRF in setup script
    see PMASA-2016-44 (CVE-2016-6621, CWE-661)
  * Denial-of-service attack with
    $cfg['AllowArbitraryServer'] = true and persistent connections
    see PMASA-2016-45 (CVE-2016-6622, CWE-661)
  * Denial-of-service attack by using for loops
    see PMASA-2016-46 (CVE-2016-6623, CWE-661)
  * Possible circumvention of IP-based allow/deny rules with IPv6 and
    proxy server
    see PMASA-2016-47 (CVE-2016-6624, CWE-661)
  * Detect if user is logged in
    see PMASA-2016-48 (CVE-2016-6625, CWE-661)
  * Bypass URL redirection protection
    see PMASA-2016-49 (CVE-2016-6626, CWE-661)
  * Referrer leak
    see PMASA-2016-50 (CVE-2016-6627, CWE-661)
  * Reflected File Download
    see PMASA-2016-51 (CVE-2016-6628, CWE-661)
  * ArbitraryServerRegexp bypass
    see PMASA-2016-52 (CVE-2016-6629, CWE-661)
  * Denial-of-service attack by entering long password
    see PMASA-2016-53 (CVE-2016-6630, CWE-661)
  * Remote code execution vulnerability when running as CGI
    see PMASA-2016-54 (CVE-2016-6631, CWE-661)
  * Denial-of-service attack when PHP uses dbase extension
    see PMASA-2016-55 (CVE-2016-6632, CWE-661)
  * Remove tode execution vulnerability when PHP uses dbase extension
    see PMASA-2016-56 (CVE-2016-6633, CWE-661)
- fix deps
  * add missing php-gettext
- rebase phpMyAdmin-config.patch</changelog>
  <changelog author="chris@computersalat.de" date="1478347200">- fix phpMyAdmin.http</changelog>
  <changelog author="chris@computersalat.de" date="1478433600">- fix deps
  * add missing Recommends php5-curl
- fix phpMyAdmin.http
  * add &lt;IfModule mod_php7.c&gt;</changelog>
  <changelog author="ecsos@opensuse.org" date="1480161600">- update to 4.6.5.1 (2016-11-26)
  - quick fix for 4.6.5
  * an issue affecting a small number of users using
    $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db'].
  * an issue affecting the create table dialog where the partition
    selection tool was overzealous and made it difficult to create
    a new table.
- update to 4.6.5 (2016-11-25)
  - security fixes
  * Fix for expanding in navigation pane
  * Reintroduced a simplified version of PmaAbsoluteUri directive
    (needed with reverse proxies)
  * Fix editing of ENUM/SET/DECIMAL field structures
  * Improvements to the parser
  - other fixes
  * Remove potentionally license problematic sRGB profile
  * gh#12459 Display read only fields as read only when editing
  * gh#12384 Fix expanding of navigation pane when clicking on database
  * gh#12430 Impove partitioning support
  * gh#12374 Reintroduced simplified PmaAbsoluteUri configuration
    directive
  * Always use UTC time in HTTP headers
  * gh#12479 Simplified validation of external links
  * gh#12483 Fix browsing tables with built in transformations
  * gh#12485 Do not show warning about short blowfish_secret if none
    is set
  * gh#12251 Fixed random logouts due to wrong cookie path
  * gh#12480 Fixed editing of ENUM/SET/DECIMAL fields structure
  * gh#12497 Missing escaping of configuration used in SQL
    (hide_db and only_db)
  * gh#12476 Add error checking in reading advisory rules file
  * gh#12477 Add checking missing elements and confirming element
    types from json_decode
  * gh#12251 Automatically save SQL query in browser local storage
    rather than in cookie
  * gh#12292 Unable to edit transformations
  * gh#12502 Remove unused paramenter when connecting to MySQLi
  * gh#12303 Fix number formatting with different settings of
    precision in PHP
  * gh#12405 Use single quotes in PHP code
  * gh#12534 Option for the dropped column is not removed from
    'after_field' select, after the column is dropped
  * gh#12531 Properly detect DROP DATABASE queries
  * gh#12470 Fix possible race condition in setting URL hash
  * gh#11924 Remove caching of server information
  * gh#11628 Proper parsing of INSERT ... ON DUPLICATE KEY queries
  * gh#12545 Proper parsing of CREATE TABLE ... PARTITION queries
  * gh#12473 Code can throw unhandled exception
  * gh#12550 Do not try to keep alive session even after expiry
  * gh#12512 Fixed rendering BBCode links in setup
  * gh#12518 Fixed copy of table with generated columns
  * gh#12221 Fixed export of table with generated columns
  * gh#12320 Copying a user does not copy usergroup
  * gh#12272 Adding a new row with default enum goes to no selection
    when you want to add more then 2 rows
  * gh#12487 Drag and drop import prevents file dropping to blob
    column file selector on the insert tab
  * gh#12554 Absence of scrolling makes it impossible to read longer
    text values in grid editing
  * gh#12530 "Edit routine" crashes when the current user is not the
    definer, even if privileges are adequate
  * gh#12300 Export selective tables by-default dumps Events also
  * gh#12298 Fixed export of view definitions
  * gh#12242 Edit routine detail dialog does not fill "Return length"
    field in mysql functions
  * gh#12575 New index Confirm adds whitespace around the field name
  * gh#12382 Bug in zoom search
  * gh#12321 Assign LIMIT clause only to syntactically correct queries
  * gh#12461 Can't Execute SQL With Sub-Query Due To "LIMIT 0,25"
    Inserted At Wrong Place
  * gh#12511 Clarify documentation on ArbitraryServerRegexp
  * gh#12508 Remove duplicate code in SQL escaping
  * gh#12475 Cleanup code for getting table information
  * gh#12579 phpMyAdmin's export of a Select statment without a FROM
    clause generates Wrong SQL
  * gh#12316 Correct export of complex SELECT statements
  * gh#12080 Fixed parsing of subselect queries
  * gh#11740 Fixed handling DELETE ... USING queries
  * gh#12100 Fixed handling of CASE operator
  * gh#12455 Query history stores separate entry for every letter
    typed
  * gh#12327 Create PHP code no longer works
  * gh#12179 Fixed bookmarking of query with multiple statements
  * gh#12419 Wrong description on GRANT OPTION
  * gh#12615 Fixed regexp for matching browser versions
  * gh#12569 Avoid showing import errors twice
  * gh#12362 prefs_manage.php can leave an orphaned temporary file
  * gh#12619 Unable to export csv when using union select
  * gh#12625 Broken Edit links in query results of JOIN query
  * gh#12634 Drop DB error in import if DB doesn't exist
  * gh#12338 Designer reverts to first saved ER after EACH relation
    create or delete
  * gh#12639 'Show trace' in Console generates JS error for functions
    in query's trace called without any arguments
  * gh#12366 Fix user creation with certain MariaDB setups
  * gh#12616 Refuse to work with mbstring.func_overload enabled
  * gh#12472 Properly report connection without password in setup
  * gh#12365 Fix records count for large tables
  * gh#12533 Fix records count for complex queries
  * gh#12454 Query history not updated in console until page refresh
  * gh#12344 Fixed parsing of labels in loop
  * gh#12228 Fixed parsing of BEGIN labels
  * gh#12637 Fixed editing some timestamp values
  * gh#12622 Fixed javascript error in designer
  * gh#12334 Missing page indicator or VIEWs
  * gh#12610 Export of tables with Timestamp/Datetime/Time columns
    defined with ON UPDATE clause with precision fails
  * gh#12661 Error inserting into pma__history after timeout
  * gh#12195 Row_format = fixed not visible
  * gh#12665 Cannot add a foreign key - non-indexed fields not listed
    in InnoDB tables
  * gh#12674 Allow for proper MySQL-allowed strings as identifiers
  * gh#12651 Allow for partial dates on table insert page
  * gh#12681 Fixed designer with tables using special chars
  * gh#12652 Fixed visual query builder for foreign keys with more
    fields
  * gh#12257 Improved search page performance
  * gh#12322 Avoid selecting default function for foreign keys
  * gh#12453 Fixed escaping of SQL parts in some corner cases
  * gh#12542 Missing table name in account privileges editor
  * gh#12691 Remove ksort call on empty array in PMA_getPlugins
    function
  * gh#12443 Check parameter type before processing
  * gh#12299 Avoid generating too long URLs in search
  * gh#12361 Fix self SQL injection in table-specific privileges
  * gh#12698 Add link to release notes and download on new version
    notification
  * gh#12712 Error when trying to setup replication (fatal error in
    call to an old PMA_DBI_connect function)
- fix for boo#1012271
  https://www.phpmyadmin.net/security/
  * Unsafe generation of $cfg['blowfish_secret']
    see PMASA-2016-58 (CVE ids: CVE-2016-9847, CWE-661)
  * phpMyAdmin's phpinfo functionality is removed
    see PMASA-2016-59 (CVE ids: CVE-2016-9848, CWE-661)
  * AllowRoot and allow/deny rule bypass with specially-crafted
    username
    see PMASA-2016-60 (CVE ids: CVE-2016-9849, CWE-661)
  * Username matching weaknesses with allow/deny rules
    see PMASA-2016-61 (CVE ids: CVE-2016-9850, CWE-661)
  * Possible to bypass logout timeout
    see PMASA-2016-62 (CVE ids: CVE-2016-9851, CWE-661)
  * Full path disclosure (FPD) weaknesses
    see PMASA-2016-63 (CVE ids: CVE-2016-9852, CVE-2016-9853,
    CVE-2016-9854, CVE-2016-9855, CWE-661)
  * Multiple XSS weaknesses
    see PMASA-2016-64 (CVE ids: CVE-2016-9856, CVE-2016-9857,
    CWE-661, CWE-352)
  * Multiple denial-of-service (DOS) vulnerabilities
    see PMASA-2016-65 (CVE ids: CVE-2016-9858, CVE-2016-9859,
    CVE-2016-9860, CWE-661, CW-400)
  * Possible to bypass white-list protection for URL redirection
    see PMASA-2016-66 (CVE ids: CVE-2016-9861, CWE-661, CWE-20,
    CWE-601)
  * BBCode injection to login page
    see PMASA-2016-67 (CVE ids: CVE-2016-9862, CWE-661)
  * Denial-of-service (DOS) vulnerability in table partitioning
    see PMASA-2016-68 (CVE ids: CVE-2016-9863, CWE-661, CWE-400)
  * Multiple SQL injection vulnerabilities
    see PMASA-2016-69 (CVE ids: CVE-2016-9864, CWE-661, CWE-89)
  * Incorrect serialized string parsing
    see PMASA-2016-70 (CVE ids: CVE-2016-9865, CWE-661)
  * CSRF token not stripped from the URL
    see PMASA-2016-71 (CVE ids: CVE-2016-9866, CWE-661)</changelog>
  <changelog author="chris@computersalat.de" date="1481025600">- update to 4.6.5.2 (2016-12-05)
  * gh#12765 Fixed SQL export with newlines
- update changes (update to 4.6.5 (2016-11-25))
  * add missing (Not yet available) CVE's
- fix phpMyAdmin.http</changelog>
  <changelog author="ecsos@opensuse.org" date="1484827200">- Add Patch phpMyAdmin-12757_sql_syntax_errror.patch to fix
  gh#12757 SQL syntax errror on MariaDB &lt; 10.0.2 in check for mysql
  password check plugin.
  Will be fixed in 4.6.6</changelog>
  <changelog author="chris@computersalat.de" date="1485345600">- 4.6.6 (2017-01-23)
  * gh#12759 Fix Notice regarding 'Undefined index: old_usergroup'
  * gh#12760 Fix Notice regarding 'Undefined index: users'
  * gh#12762 Fixed parsing of SQL with BINARY function
  * gh#12588 ReCaptcha now works without allow_url_fopen
  * gh#12699 Show no local storage warning only on settings tab
  * gh#12778 Syntax Error in Adding/Changing TIMESTAMP columns with
    default value as NULL
  * gh#12769 Edit/Export links are not clickable under Routines tab
  * gh#12757 Fixed creating new user with older MariaDB
  * gh#12784 Remove ctype installation suggestion
  * gh#12780 Format button replaces all text with blank spaces
  * gh#12786 Fixed database searching
  * gh#12792 Fixed javascript error on new version link
  * gh#12785 Add information about required and suggested extensions
    to composer.json
  * gh#12801 Custom header shown twice with cookie login form
  * gh#12802 Custom footer not shown with auth_type http login failure
  * gh#12434 Improve documentation for servers running with Suhosin
  * gh#12800 Updated embedded phpSecLib to 2.0.4
  * gh#12800 Fixed various issues with PHP 7.1
  * gh#11816 Fixed operation with lower_case_table_names=2
  * gh#12813 Fixed stored procedure execution
  * gh#12826 Honor user configured connection collation
  * gh#12293 Correctly report OpenSSL errors from cookie encryption
  * gh#12814 DateTime won't allow to input length in Routine editor
  * gh#12840 Fix Notice regarding 'Undefined index: row_format' when
    altering table options
  * gh#12841 Fixed moving of columns with whitespace in name
  * gh#12847 Fixed editing of virtual columns
  * gh#12859 Changed WHERE condition to 0 instead of 1 for SQL query
    window to avoid accidents
  * gh#12872 Use same query for display and execution when dropping
    index
  * gh#12868 Fix check for user groups freatures being enabled
  * gh#12876 Fix notices and warning related to dbs_to_test global
  * gh#12831 Fix table formatting on Insert tab, which mostly
    affected row highlighting
  * gh#12495 Reintroduced phpinfo page with limited capabilities
  * gh#12861 Fix renaming tables with lower_case_table_names=2
  * gh#12876 Fix possible PHP error in navigation
  * gh#12881 Fix database search with newer php-gettext
  * gh#12894 Fix linter error on unterminated variable name
  * gh#12732 Fixed filtering for active processes
- fix for boo#1021597
  * PMASA-2016-44 (CVE-2016-6621, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-44/
  - Multiple vulnerabilities in setup script
  * PMASA-2017-1 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-1/
  - Open redirect
  * PMASA-2017-2 ( CVE-2015-8980, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-2/
  - php-gettext code execution
  * PMASA-2017-3 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-3/
  - DOS vulnerabiltiy in table editing
  * PMASA-2017-4 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-4/
  - CSS injection in themes
  * PMASA-2017-5 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-5/
  - Cookie attribute injection attack
  * PMASA-2017-6 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-6/
  - SSRF in replication
  * PMASA-2017-7 ( CVE-Nya, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-7/
  - DOS in replication status
- remove obsolete phpMyAdmin-12757_sql_syntax_errror.patch
- rework phpMyAdmin-config.patch</changelog>
  <changelog author="chris@computersalat.de" date="1490011200">- add http.inc file
  * include one file for php5/php7 admin flags/values</changelog>
  <changelog author="ecsos@opensuse.org" date="1491048000">- update to 4.7.0 (2017-03-28)
  * gh#12233 [Display] Improve message when renaming database to
    same name
  * gh#6146  Log authentication attempts to syslog
  * gh#11981 Remove support for Swekey authentication
  * gh#11987 Remove code for no longer supported MSIE versions
  * gh#11962 Remove embedded PHP libraries, use composer to install
    them
  * gh#12017 Cannot easily select multiple tables when exporting
  * gh#12047 Add javascript filtering for databases
  * gh#12166 More compact rendering of navigation tree
  * gh#12129 Improve performance with SkipLockedTables
  * gh#12173 Do not hide indexes under a slider
  * Improve performance of zip file import
  * gh#12196 Removed $cfg['ThemePath']
  * gh#6274  Add support for export user settings as config.inc.php
    snippet
  * gh#5555  Better report query errors while generating SQL exports
  * gh#12307 Produce valid JSON on export
  * gh#12325 Setup script icons broken
  * gh#12378 Support IPv6 proxies
  * Removed MySQL connection retry without password
  * gh#12218 Allow to specify further parameters for control
    connection
  * gh#12162 Show charset for each table on Database structure page
  * gh#12463 Incorrect link in the href of icon at Hide/Show unhide
    links
  * gh#12330 Shortcut for closing console
  * gh#12465 Improved handling of http requests
  * gh#12474 Broken links in Setup forms Navigation
  * gh#12494 Can't add a new User
  * gh#12523 Add 'token' Parameter in all POST requests
    (Fix 'Token mismatch' errors)
  * gh#12302 Improved usage of number_format
  * gh#12656 Server selection not working
  * gh#12543 NULL results in dataset are colored grey
  * gh#12664 Create Bookmark broken
  * gh#12688 Use unsigned int for storing bookmark ID
  * gh#12352 Added password strength indicator
  * gh#12713 Correctly handle HTTP status when doing requests
  * gh#12247 Add option to delete settings from browser storage
  * gh#12783 Remove unused PMA_addJSCode function
  * gh#12069 Add table filtering to database structure
  * gh#12799 Allow to configure signon session parameters
  * gh#12854 Drop database is broken
  * gh#12863 Can't toggle Event Scheduler on
  * gh#12742 Finish removing dead code references to xls/xlsx
    import and export, which was removed some time ago.
  * gh#12536 Rename "Relations" to "Relationships" in many places
    as it's the more proper term
  * gh#12834 Fixed margins in central columns feature
  * gh#12903 Document more export configuration options
  * gh#12897 Use consistent numeric format for table overhead
  * gh#12901 Use server returned table name on renaming table
  * gh#12918 Always use \r\n as newline when editing fields
  * gh#12923 Fixed server side search in navigation panel
  * gh#12929 Undefined index warning with ssl_ca_paths
  * gh#12924 Do not show errors from OpenSSL cookie
    encryption/decryption
  * gh#12945 Fixed hint rendering on adding new user
  * gh#12941 Fixed sorting of tables in relation view
  * gh#12936 Fixed tables pagination in navigation panel
  * gh#12904 Do not collapse add form for central columns if there
    are none
  * gh#12955 Fixed database renaming
  * gh#12954 Fixed export of tracking data
  * gh#12960 Enclose exports in transaction by default
  * gh#12966 After adding a column ADD INDEX option won't be
    displayed when enabling AI
  * gh#12972 Better error message when Composer has not been run
  * gh#12988 Do not show language selector without choices
  * gh#12993 Fixed external links to php documentation
  * gh#12990 Fixed error when loading favorite tables to console
  * gh#12981 Improved rendering of new version information
  * gh#12922 Fixed bookmarks ordering
  * gh#12964 Fixed table search in navigation
  * gh#12985 Fixed rendering of foreign key browsing
  * gh#12957 Fixed manipulation with GIS data having zero
    coordinates
  * gh#12804 Fixed various designer javascript errors
  * gh#12934 Fixed possible javascript error on server status page
  * gh#12927 Fixed javascript error on 3NF normalization
  * gh#12996 List all databses in navigation panel database
    dropdown
  * gh#12980 Better defaults when creating multi field foreign key
  * gh#12976 Improved foreign key editor behavior
  * gh#12958 Always show error reporting dialog on top
  * gh#12693 Improved support for TokuDB
  * gh#11231 Try harder to honor LoginCookieValidity setting
  * gh#13016 and #13017 Slight improvements to the table layout of
    Relation view
  * gh#12345 Correctly show affected rows for LOAD DATA queries
  * gh#13010 Copy database: SQL error for copying PMADB metadata
  * gh#13002 Fixed OpenDocument exports
  * gh#13000 Align NULL values according to the column alignment
  * gh#13021 Show phpMyAdmin errors even with error_reporting
    set to 0
  * gh#13020 Removed warning about client and server versions
    mismatch
  * Hide comments on table Structure tab when no comment is set
  * Fixed submission of error reports
  * gh#13033 Use Referrer-Policy header to specify referrer policy
  * Fixed javascript confirmation of dangerous queries
  * gh#13040 Compatibility with hhvm 3.18
  * gh#13031 Fixed displaying of all rows
  * gh#12967 Fixed related field selection for native relations
  * gh#13045 Properly escape MIME transformatoin names
  * gh#13028 Always show 100% in font selector
  * gh#13047 Fix query simulating for more servers
  * gh#12846 Fix new version check for sites with wrongly
    configured curl
  * gh#12951 When exporting to Excel, the default is now to include
    column names in the first row
  * gh#13059 Removed debugging code
  * gh#13029 Fixed table tracking for nested table groups
  * gh#13053 Fixed broken links in setup
  * gh#12708 Removed phpMyAdmin version from User-Agent header
  * gh#13084 Do not point users to setup when it is disabled
  * gh#12660 Delete only phpMyAdmin cookies on upgrade
  * gh#13088 Fixed editing of rows with text primary key
  * gh#13092 Do not try to sync favorite tables if configuration
    storage is not enabled
  * gh#13105 Fixed changing attribute for virtual field
  * gh#12757 Fixed setting password on recent MariaDB with non
    working plugins
  * gh#12349 Fixed undefined variable on import from some formats
  * gh#13103 Do not offer default names for copying/renaming
    databases
  * [security] Possible to bypass
    $cfg['Servers'][$i]['AllowNoPassword'], see PMASA-2017-08
- Drop patch phpMyAdmin-pma.patch because now in upstream</changelog>
  <changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
</package>
<package pkgid="a733c24b87f7cd22714dd0fbde4b4b58708b3967" name="phpldapadmin" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="3.1"/>
  <changelog author="gerrit.beine@gmx.de" date="1228996800">- package created</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1264507200">- update to latest version</changelog>
  <changelog author="gerrit.beine@gmx.de" date="1304856000">- update to version 1.2.1</changelog>
  <changelog author="bosim@opensuse.org" date="1489233600">- update to 1.2.3
- added password_hash.patch for php5.5+ support (bnc#965097)</changelog>
  <changelog author="aj@ajaissle.de" date="1490011200">- Spec cleanup</changelog>
</package>
<package pkgid="5f7fa69a4fd6bed8311ab946f83e7842f1f239a6" name="phpldapadmin" arch="src">
  <version epoch="0" ver="1.2.3" rel="3.1"/>
  <changelog author="gerrit.beine@gmx.de" date="1228996800">- package created</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1264507200">- update to latest version</changelog>
  <changelog author="gerrit.beine@gmx.de" date="1304856000">- update to version 1.2.1</changelog>
  <changelog author="bosim@opensuse.org" date="1489233600">- update to 1.2.3
- added password_hash.patch for php5.5+ support (bnc#965097)</changelog>
  <changelog author="aj@ajaissle.de" date="1490011200">- Spec cleanup</changelog>
</package>
<package pkgid="1d49a80563d5a1865aaef2c45e8d65e41fc17513" name="phpvirtualbox" arch="noarch">
  <version epoch="0" ver="4.3" rel="28.4"/>
  <changelog author="MET 14:42:30 - stefan@invis-server.org" date="1353758400">- package created</changelog>
  <changelog author="stefan@invis-server.org" date="1390824000">- New Version 4.3.1</changelog>
</package>
<package pkgid="6428c8adf511dd0582dd0fe96fe00bfb7b424d53" name="phpvirtualbox" arch="src">
  <version epoch="0" ver="4.3" rel="28.4"/>
  <changelog author="MET 14:42:30 - stefan@invis-server.org" date="1353758400">- package created</changelog>
  <changelog author="stefan@invis-server.org" date="1390824000">- New Version 4.3.1</changelog>
</package>
<package pkgid="30c320199aeda2d6b1f95f1be849aefd8ba8ab9e" name="pwgen" arch="i586">
  <version epoch="0" ver="2.07" rel="198.7"/>
  <changelog author="kssingvo@suse.de" date="1136980800">- update to version 2.04</changelog>
  <changelog author="kssingvo@suse.de" date="1137412800">- update to version 2.05</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="kssingvo@suse.de" date="1183636800">- update to version 2.06:
  * Fix spelling mistakes in the man page pwgen.1
  * Fix bug which would cause pwgen to loop forever if the password
    length specified is 1</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- fix fdleaks including [bnc#529521]</changelog>
  <changelog author="lnussel@suse.de" date="1285070400">- remove superfluous makepasswd script (bnc#619084)</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286884800">- remove rm -rf buildroot in the install section to remove the
  rpmlint warrning</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- updated to version 2.07 (bsc#908992):
  * New upstream version
  * Remove backwards compatibility for no-tty mode.  Addresses
    CVE-2013-4440 (Closes: #725507) (bsc#846397)
  * Fail hard if /dev/urandom and /dev/random are not available.
    Addresses CVE-2013-4442 and Launchpad #1183213 (Closes: #767008)
    (bsc#846397)
  * Fix pwgen -B so that it doesn't accidentally generate passwords with
    ambiguous characters after changing the case of some letters.
    Addresses Launchpad Bugs #638418 and #1349863
  * Fix potential portability bug on architectures where unsgined ints
    are not 4 bytes long</changelog>
  <changelog author="mpluskal@suse.com" date="1436702400">- Add gpg signature
- Use autoreconf
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="1c16a4c9b803df42c1751ad5ad63502c9607cdfe" name="pwgen" arch="src">
  <version epoch="0" ver="2.07" rel="198.7"/>
  <changelog author="bjacke@suse.de" date="987508800">- initial build</changelog>
  <changelog author="poeml@suse.de" date="1028203200">- update to the successor 2.02
  note: if stdout is not on a terminal, it will behave like the old
- run autoconf and use RPM_OPT_FLAGS</changelog>
  <changelog author="poeml@suse.de" date="1028203201">- add documentation to the filelist</changelog>
  <changelog author="ro@suse.de" date="1028203202">- fix file ownership</changelog>
  <changelog author="poeml@suse.de" date="1052827200">- update to 2.03
  - pw_phonemes.c (pw_phonemes): Fix bug in how we call
    pw_random_number() so that we generate passwords that start
    with vowels, and insert numbers from 0-9, not just 0-8. (Oops!)
    Addresses Debian bug #176688.
- use %defattr</changelog>
  <changelog author="poeml@suse.de" date="1059220800">- fix permissions of documentation, and don't use deprecated chown
  * .* syntax</changelog>
  <changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
  <changelog author="kssingvo@suse.de" date="1136980800">- update to version 2.04</changelog>
  <changelog author="kssingvo@suse.de" date="1137412800">- update to version 2.05</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="kssingvo@suse.de" date="1183636800">- update to version 2.06:
  * Fix spelling mistakes in the man page pwgen.1
  * Fix bug which would cause pwgen to loop forever if the password
    length specified is 1</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- fix fdleaks including [bnc#529521]</changelog>
  <changelog author="lnussel@suse.de" date="1285070400">- remove superfluous makepasswd script (bnc#619084)</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286884800">- remove rm -rf buildroot in the install section to remove the
  rpmlint warrning</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- updated to version 2.07 (bsc#908992):
  * New upstream version
  * Remove backwards compatibility for no-tty mode.  Addresses
    CVE-2013-4440 (Closes: #725507) (bsc#846397)
  * Fail hard if /dev/urandom and /dev/random are not available.
    Addresses CVE-2013-4442 and Launchpad #1183213 (Closes: #767008)
    (bsc#846397)
  * Fix pwgen -B so that it doesn't accidentally generate passwords with
    ambiguous characters after changing the case of some letters.
    Addresses Launchpad Bugs #638418 and #1349863
  * Fix potential portability bug on architectures where unsgined ints
    are not 4 bytes long</changelog>
  <changelog author="mpluskal@suse.com" date="1436702400">- Add gpg signature
- Use autoreconf
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="a2f400ee20e8159f030254d5c1de9a76077f7daa" name="pwgen" arch="x86_64">
  <version epoch="0" ver="2.07" rel="198.7"/>
  <changelog author="kssingvo@suse.de" date="1136980800">- update to version 2.04</changelog>
  <changelog author="kssingvo@suse.de" date="1137412800">- update to version 2.05</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="kssingvo@suse.de" date="1183636800">- update to version 2.06:
  * Fix spelling mistakes in the man page pwgen.1
  * Fix bug which would cause pwgen to loop forever if the password
    length specified is 1</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- fix fdleaks including [bnc#529521]</changelog>
  <changelog author="lnussel@suse.de" date="1285070400">- remove superfluous makepasswd script (bnc#619084)</changelog>
  <changelog author="mrdocs@opensuse.org" date="1286884800">- remove rm -rf buildroot in the install section to remove the
  rpmlint warrning</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- updated to version 2.07 (bsc#908992):
  * New upstream version
  * Remove backwards compatibility for no-tty mode.  Addresses
    CVE-2013-4440 (Closes: #725507) (bsc#846397)
  * Fail hard if /dev/urandom and /dev/random are not available.
    Addresses CVE-2013-4442 and Launchpad #1183213 (Closes: #767008)
    (bsc#846397)
  * Fix pwgen -B so that it doesn't accidentally generate passwords with
    ambiguous characters after changing the case of some letters.
    Addresses Launchpad Bugs #638418 and #1349863
  * Fix potential portability bug on architectures where unsgined ints
    are not 4 bytes long</changelog>
  <changelog author="mpluskal@suse.com" date="1436702400">- Add gpg signature
- Use autoreconf
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="659a3e51d03775fc7c6d8f7792344898cc2c1216" name="rdiff-backup" arch="i586">
  <version epoch="0" ver="1.2.8" rel="44.9"/>
  <changelog author="cthiel@suse.de" date="1158840000">- fix build with python 2.5</changelog>
  <changelog author="cthiel@suse.de" date="1159790400">- fix build on older distributions</changelog>
  <changelog author="cthiel@suse.de" date="1168257600">- update to version 1.0.5
  * Fix a traceback due to an off-by-1 error in "--remove-older-than nB".
  * Fix a security violation when restoring from a remote repository.
  * --list-at-time, --list-increments, and --list-increment-sizes should now
    work from a read-only repository.</changelog>
  <changelog author="cthiel@suse.de" date="1168344000">- fix ICC warning:  warning #592: variable "return_val" is used before its
  value is set (#232824)</changelog>
  <changelog author="cthiel@suse.de" date="1217851200">- update to version 1.2.0
  * This is the new stable branch of rdiff-backup, representing almost three
    years of development releases. From the previous development release, this
    release includes two fixes for Unicode issues. From the previous stable
    release, this release features a large number of new features, including
    SHA1 checksums, native Windows support, improved Mac OS X and Cygwin
    support, better filesystem support for HFS+, NFS, SSHFS, SMB, CIFS, AFS,
    NTFS, and FAT32, and better handling of unreadable or pathological file
    permissions. It also includes the previously separate
    'rdiff-backup-statistics' tool.</changelog>
  <changelog author="cthiel@suse.de" date="1219752000">- update to version 1.2.1
  * Produce a new binary for Windows which includes the Python for Windows
    Extensions.
  * Disable hardlinks by default when backup source or restore destination
    is on Windows.
  * Properly catch KeyboardInterrupt on Python 2.5.
  * Don't crash if a CacheIndexable tries to clear a non-existent cache
    entry, since the entry must already be cleared.</changelog>
  <changelog author="puzel@suse.cz" date="1234526400">- update to 1.2.6
  - too many changes to be listed here, please see
    /usr/share/doc/packages/rdiff-backup/CHANGELOG
  for details</changelog>
  <changelog author="poeml@suse.de" date="1251979200">- update to 1.2.8
  New in v1.2.8:
  * Improve handling of incorrect permissions on backup repository during restore
    operation. Closes Ubuntu bug #329722. (Andrew Ferguson)
  * Don't crash on zlib errors. Closes Debian bug #518531. (Andrew Ferguson)
  * Make sticky bit warnings quieter while determining file system abilities.
    Closes Savannah bug #25788. (Andrew Ferguson)
  * Fix situation where destination file cannot be opened because of an access
    error. Thanks to Dean Cording for the bug report. (Andrew Ferguson)
  * Fix --compare-hash options on Windows. Thanks to Serge Zub for the fix.
  New in v1.2.7:
  * Don't crash when filesystem can't set ACL. Thanks to Matt Thompson for the bug
    report. (Andrew Ferguson)
  * Properly disable hardlinks by default on Windows.
  * Fix Python 2.2 compatibility. Closes Savannah bug #25529. (Andrew Ferguson)
  * Fix typo which caused failure when checking if another rdiff-backup process is
    running on Windows. Thanks to Ryan Hughes for the bug report. (Andrew Ferguson)</changelog>
  <changelog author="boris@steki.net" date="1329739200">- fixed building on Factory as librsync is now split into lib and devel package</changelog>
  <changelog author="hpj@urpla.net" date="1363348800">- fix os.popen2 deprecation
- add recommends for python-xattr and python-pylibacl</changelog>
  <changelog author="hpj@urpla.net" date="1384430400">- fix hardlink issue: http://savannah.nongnu.org/bugs/?26848
  - apply Joe Steeles patches to resolve it:
  * Hardlink.py.revised-patch
  * compare.py.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1392379200">- add rdiff-backup-1.2.8-sparsefiles.diff to efficiently back up
  sparse files (found on rdiff-backup mailing list)</changelog>
  <changelog author="hpj@urpla.net" date="1398254400">- apply rdiff-backup-dont-pick-empty-sessions.diff:
  don't take empty sessions into account, which has the potential of
  removing valid backups with --remove-older-than xB, while keeping
  empty/useless sessions instead</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1404129600">- add rdiff-backup-1.2.8-sparse-no-seek-in-gzip.diff:
  the sparse code makes no sense in gzip compressed case and it
  triggers an IO error in gzip.py when trying to seek backwards</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add rdiff-backup-librsync-1.0.patch: Fix build with
  librsync 1.0.0.</changelog>
</package>
<package pkgid="e13edd8b77d9da336b4522e53e369e8376bce4a4" name="rdiff-backup" arch="src">
  <version epoch="0" ver="1.2.8" rel="44.9"/>
  <changelog author="cthiel@suse.de" date="1133006400">- update to version 1.0.3</changelog>
  <changelog author="cthiel@suse.de" date="1138017600">- update to version 1.0.4</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jmatejek@suse.cz" date="1141128000">- updated to reflect python changes due to #149809</changelog>
  <changelog author="cthiel@suse.de" date="1158840000">- fix build with python 2.5</changelog>
  <changelog author="cthiel@suse.de" date="1159790400">- fix build on older distributions</changelog>
  <changelog author="cthiel@suse.de" date="1168257600">- update to version 1.0.5
  * Fix a traceback due to an off-by-1 error in "--remove-older-than nB".
  * Fix a security violation when restoring from a remote repository.
  * --list-at-time, --list-increments, and --list-increment-sizes should now
    work from a read-only repository.</changelog>
  <changelog author="cthiel@suse.de" date="1168344000">- fix ICC warning:  warning #592: variable "return_val" is used before its
  value is set (#232824)</changelog>
  <changelog author="cthiel@suse.de" date="1217851200">- update to version 1.2.0
  * This is the new stable branch of rdiff-backup, representing almost three
    years of development releases. From the previous development release, this
    release includes two fixes for Unicode issues. From the previous stable
    release, this release features a large number of new features, including
    SHA1 checksums, native Windows support, improved Mac OS X and Cygwin
    support, better filesystem support for HFS+, NFS, SSHFS, SMB, CIFS, AFS,
    NTFS, and FAT32, and better handling of unreadable or pathological file
    permissions. It also includes the previously separate
    'rdiff-backup-statistics' tool.</changelog>
  <changelog author="cthiel@suse.de" date="1219752000">- update to version 1.2.1
  * Produce a new binary for Windows which includes the Python for Windows
    Extensions.
  * Disable hardlinks by default when backup source or restore destination
    is on Windows.
  * Properly catch KeyboardInterrupt on Python 2.5.
  * Don't crash if a CacheIndexable tries to clear a non-existent cache
    entry, since the entry must already be cleared.</changelog>
  <changelog author="puzel@suse.cz" date="1234526400">- update to 1.2.6
  - too many changes to be listed here, please see
    /usr/share/doc/packages/rdiff-backup/CHANGELOG
  for details</changelog>
  <changelog author="poeml@suse.de" date="1251979200">- update to 1.2.8
  New in v1.2.8:
  * Improve handling of incorrect permissions on backup repository during restore
    operation. Closes Ubuntu bug #329722. (Andrew Ferguson)
  * Don't crash on zlib errors. Closes Debian bug #518531. (Andrew Ferguson)
  * Make sticky bit warnings quieter while determining file system abilities.
    Closes Savannah bug #25788. (Andrew Ferguson)
  * Fix situation where destination file cannot be opened because of an access
    error. Thanks to Dean Cording for the bug report. (Andrew Ferguson)
  * Fix --compare-hash options on Windows. Thanks to Serge Zub for the fix.
  New in v1.2.7:
  * Don't crash when filesystem can't set ACL. Thanks to Matt Thompson for the bug
    report. (Andrew Ferguson)
  * Properly disable hardlinks by default on Windows.
  * Fix Python 2.2 compatibility. Closes Savannah bug #25529. (Andrew Ferguson)
  * Fix typo which caused failure when checking if another rdiff-backup process is
    running on Windows. Thanks to Ryan Hughes for the bug report. (Andrew Ferguson)</changelog>
  <changelog author="boris@steki.net" date="1329739200">- fixed building on Factory as librsync is now split into lib and devel package</changelog>
  <changelog author="hpj@urpla.net" date="1363348800">- fix os.popen2 deprecation
- add recommends for python-xattr and python-pylibacl</changelog>
  <changelog author="hpj@urpla.net" date="1384430400">- fix hardlink issue: http://savannah.nongnu.org/bugs/?26848
  - apply Joe Steeles patches to resolve it:
  * Hardlink.py.revised-patch
  * compare.py.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1392379200">- add rdiff-backup-1.2.8-sparsefiles.diff to efficiently back up
  sparse files (found on rdiff-backup mailing list)</changelog>
  <changelog author="hpj@urpla.net" date="1398254400">- apply rdiff-backup-dont-pick-empty-sessions.diff:
  don't take empty sessions into account, which has the potential of
  removing valid backups with --remove-older-than xB, while keeping
  empty/useless sessions instead</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1404129600">- add rdiff-backup-1.2.8-sparse-no-seek-in-gzip.diff:
  the sparse code makes no sense in gzip compressed case and it
  triggers an IO error in gzip.py when trying to seek backwards</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add rdiff-backup-librsync-1.0.patch: Fix build with
  librsync 1.0.0.</changelog>
</package>
<package pkgid="3fdd2e94396b03efdb3c839fa54892bbd12867c0" name="rdiff-backup" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="44.9"/>
  <changelog author="cthiel@suse.de" date="1158840000">- fix build with python 2.5</changelog>
  <changelog author="cthiel@suse.de" date="1159790400">- fix build on older distributions</changelog>
  <changelog author="cthiel@suse.de" date="1168257600">- update to version 1.0.5
  * Fix a traceback due to an off-by-1 error in "--remove-older-than nB".
  * Fix a security violation when restoring from a remote repository.
  * --list-at-time, --list-increments, and --list-increment-sizes should now
    work from a read-only repository.</changelog>
  <changelog author="cthiel@suse.de" date="1168344000">- fix ICC warning:  warning #592: variable "return_val" is used before its
  value is set (#232824)</changelog>
  <changelog author="cthiel@suse.de" date="1217851200">- update to version 1.2.0
  * This is the new stable branch of rdiff-backup, representing almost three
    years of development releases. From the previous development release, this
    release includes two fixes for Unicode issues. From the previous stable
    release, this release features a large number of new features, including
    SHA1 checksums, native Windows support, improved Mac OS X and Cygwin
    support, better filesystem support for HFS+, NFS, SSHFS, SMB, CIFS, AFS,
    NTFS, and FAT32, and better handling of unreadable or pathological file
    permissions. It also includes the previously separate
    'rdiff-backup-statistics' tool.</changelog>
  <changelog author="cthiel@suse.de" date="1219752000">- update to version 1.2.1
  * Produce a new binary for Windows which includes the Python for Windows
    Extensions.
  * Disable hardlinks by default when backup source or restore destination
    is on Windows.
  * Properly catch KeyboardInterrupt on Python 2.5.
  * Don't crash if a CacheIndexable tries to clear a non-existent cache
    entry, since the entry must already be cleared.</changelog>
  <changelog author="puzel@suse.cz" date="1234526400">- update to 1.2.6
  - too many changes to be listed here, please see
    /usr/share/doc/packages/rdiff-backup/CHANGELOG
  for details</changelog>
  <changelog author="poeml@suse.de" date="1251979200">- update to 1.2.8
  New in v1.2.8:
  * Improve handling of incorrect permissions on backup repository during restore
    operation. Closes Ubuntu bug #329722. (Andrew Ferguson)
  * Don't crash on zlib errors. Closes Debian bug #518531. (Andrew Ferguson)
  * Make sticky bit warnings quieter while determining file system abilities.
    Closes Savannah bug #25788. (Andrew Ferguson)
  * Fix situation where destination file cannot be opened because of an access
    error. Thanks to Dean Cording for the bug report. (Andrew Ferguson)
  * Fix --compare-hash options on Windows. Thanks to Serge Zub for the fix.
  New in v1.2.7:
  * Don't crash when filesystem can't set ACL. Thanks to Matt Thompson for the bug
    report. (Andrew Ferguson)
  * Properly disable hardlinks by default on Windows.
  * Fix Python 2.2 compatibility. Closes Savannah bug #25529. (Andrew Ferguson)
  * Fix typo which caused failure when checking if another rdiff-backup process is
    running on Windows. Thanks to Ryan Hughes for the bug report. (Andrew Ferguson)</changelog>
  <changelog author="boris@steki.net" date="1329739200">- fixed building on Factory as librsync is now split into lib and devel package</changelog>
  <changelog author="hpj@urpla.net" date="1363348800">- fix os.popen2 deprecation
- add recommends for python-xattr and python-pylibacl</changelog>
  <changelog author="hpj@urpla.net" date="1384430400">- fix hardlink issue: http://savannah.nongnu.org/bugs/?26848
  - apply Joe Steeles patches to resolve it:
  * Hardlink.py.revised-patch
  * compare.py.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1392379200">- add rdiff-backup-1.2.8-sparsefiles.diff to efficiently back up
  sparse files (found on rdiff-backup mailing list)</changelog>
  <changelog author="hpj@urpla.net" date="1398254400">- apply rdiff-backup-dont-pick-empty-sessions.diff:
  don't take empty sessions into account, which has the potential of
  removing valid backups with --remove-older-than xB, while keeping
  empty/useless sessions instead</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1404129600">- add rdiff-backup-1.2.8-sparse-no-seek-in-gzip.diff:
  the sparse code makes no sense in gzip compressed case and it
  triggers an IO error in gzip.py when trying to seek backwards</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add rdiff-backup-librsync-1.0.patch: Fix build with
  librsync 1.0.0.</changelog>
</package>
<package pkgid="29125f41e5a258b9f9df5584ea0e2d9182466a49" name="z-push2" arch="noarch">
  <version epoch="0" ver="2.2.12" rel="6.4"/>
  <changelog author="ingo.goeppert@gmx.de" date="1381233600">- Directory for state files added
- Owner for state dir and log dir set
- Requirement php-posix added (needed at least for the migration script)</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1381752000">- Patch from https://jira.zarafa.com/browse/ZP-455 included</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1381838400">- Spec file fixes</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1383220800">- Patch for https://jira.zarafa.com/browse/ZP-458 added
- Patch for https://jira.zarafa.com/browse/ZP-470 added
  (German umlauts broken in forwarded/replied mails)</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1383739200">- Patch from https://jira.zarafa.com/browse/ZP-455 was modified</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1383825600">- Make /backend/zarafa/listfolders.php executable</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1385208000">- Update to Z-Push 2.1.1RC
- Dependency to php-iconv added</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1390305600">- Update to 2.1.1 final (same as RC)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1399896000">- Update to 2.1.2</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1403870400">- Update to 2.1.3</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1435320000">- update to 2.2.2beta (many fixes for BBs...)
- make RPMLINT happy: no duplicate files anymore
- wrong license: was GPLv2 is now GNU AFFERO GENERAL PUBLIC LICENSE V3
- make RPMLINT happy: correct license string set
- added new tools: fix-meetings-2.0.8+2.1.0-ios7.py, printwbxml.php
- modified acls for the tools (webserver does not need to run them)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1438344000">- update to 2.2.2 final</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1444046400">- update to 2.2.4 final
- no release-version anymore (spec-file changed)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1445342400">- Update to 2.2.5. This version replaces Z-Push 2.2.4 which
  introduced a high impact bug that a single device could cause
  a high load on a server (ZP-723)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1450699200">- update to 2.2.7 final</changelog>
  <changelog author="stefan@invis-server.org" date="1457438400">- Apache conf modified for V. 2.4</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1458475200">- update to 2.2.9 final</changelog>
  <changelog author="stefan@invis-server.org" date="1468065600">- update to 2.2.11 final</changelog>
  <changelog author="stefan@invis-server.org" date="1478001600">- upgrade to 2.3.2 final</changelog>
  <changelog author="stefan@invis-server.org" date="1480507200">- downgrade to 2.2.12 for compatibility reasons
  (2.3.2 is build in own package)</changelog>
</package>
<package pkgid="7011d5d8a8bb452ac194f1f165d11044e85dcfd2" name="z-push2" arch="src">
  <version epoch="0" ver="2.2.12" rel="6.4"/>
  <changelog author="ingo.goeppert@gmx.de" date="1381233600">- Directory for state files added
- Owner for state dir and log dir set
- Requirement php-posix added (needed at least for the migration script)</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1381752000">- Patch from https://jira.zarafa.com/browse/ZP-455 included</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1381838400">- Spec file fixes</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1383220800">- Patch for https://jira.zarafa.com/browse/ZP-458 added
- Patch for https://jira.zarafa.com/browse/ZP-470 added
  (German umlauts broken in forwarded/replied mails)</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1383739200">- Patch from https://jira.zarafa.com/browse/ZP-455 was modified</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1383825600">- Make /backend/zarafa/listfolders.php executable</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1385208000">- Update to Z-Push 2.1.1RC
- Dependency to php-iconv added</changelog>
  <changelog author="ingo.goeppert@gmx.de" date="1390305600">- Update to 2.1.1 final (same as RC)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1399896000">- Update to 2.1.2</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1403870400">- Update to 2.1.3</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1435320000">- update to 2.2.2beta (many fixes for BBs...)
- make RPMLINT happy: no duplicate files anymore
- wrong license: was GPLv2 is now GNU AFFERO GENERAL PUBLIC LICENSE V3
- make RPMLINT happy: correct license string set
- added new tools: fix-meetings-2.0.8+2.1.0-ios7.py, printwbxml.php
- modified acls for the tools (webserver does not need to run them)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1438344000">- update to 2.2.2 final</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1444046400">- update to 2.2.4 final
- no release-version anymore (spec-file changed)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1445342400">- Update to 2.2.5. This version replaces Z-Push 2.2.4 which
  introduced a high impact bug that a single device could cause
  a high load on a server (ZP-723)</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1450699200">- update to 2.2.7 final</changelog>
  <changelog author="stefan@invis-server.org" date="1457438400">- Apache conf modified for V. 2.4</changelog>
  <changelog author="ingo.goeppert+suse@mailbox.org" date="1458475200">- update to 2.2.9 final</changelog>
  <changelog author="stefan@invis-server.org" date="1468065600">- update to 2.2.11 final</changelog>
  <changelog author="stefan@invis-server.org" date="1478001600">- upgrade to 2.3.2 final</changelog>
  <changelog author="stefan@invis-server.org" date="1480507200">- downgrade to 2.2.12 for compatibility reasons
  (2.3.2 is build in own package)</changelog>
</package>
</otherdata>