<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="11"><package pkgid="18a2fe97f3dc3b967d62e56858b2a3267ae42f87" name="curl" arch="i586">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="fa0b41cba4357bd114f1af45c1cee0461273c11c" name="curl" arch="src">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="4ed6c502931edf69395705b6fe8eb84601d718e3" name="curl" arch="x86_64">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="0dca024152d32ca105c7969109cb276ca20daad0" name="libcurl-devel" arch="i586">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="2d4a2c08f7e4ce7a7de11f2c78578df84a8b542b" name="libcurl-devel" arch="x86_64">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="cdf8c3f3617d28a0fa34be1ed9cc6b2ab89d318e" name="libcurl4" arch="i586">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="a453b2468f6ec94eb6c7a39bf8c72d404aa2e029" name="libcurl4" arch="x86_64">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="04761549b54e8b3e6931d32cc51d3aa80f0e8742" name="libcurl4-32bit" arch="x86_64">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="c890ffce6ca749f146ef5bc3720b6a792a5c8ba9" name="libcurl4-x86" arch="ia64">
    <version epoch="0" ver="7.38.0" rel="23.3"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1397217600">- remove the useless BuildRequires that were meant for debugging only</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1409227200">- curl 7.37.1:
  This release includes many bugfixes and the following changes:
  * bits.close: introduce connection close tracking
  * darwinssl: Add support for --cacert
  * polarssl: add ALPN support
  * docs: Added new option man pages</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- update to 7.38.0
  * fixes CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks with IP address as domain and TLDs respectively
  Changes:
    supports HTTP/2 draft-14
    CURLE_HTTP2 is a new error code
    CURLAUTH_NEGOTIATE is a new auth define
    CURL_VERSION_GSSAPI is a new capability bit
    no longer use fbopenssl for anything
    schannel: use CryptGenRandom for random numbers
    axtls: define curlssl_random using axTLS's PRNG
    cyassl: use RNG_GenerateBlock to generate a good random number
    findprotocol: show unsupported protocol within quotes
    version: detect and show LibreSSL
    version: detect and show BoringSSL
    imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
    http2: requires nghttp2 0.6.0 or later
  Bugfixes:
    SECURITY ADVISORY: cookie leak with IP address as domain
    SECURITY ADVISORY: cookie leak for TLDs
    And many other fixes</changelog>

</package>
<package pkgid="12d9531ed370a639723693a7396e3044ae11717e" name="mariadb-java-client" arch="noarch">
    <version epoch="0" ver="1.1.7" rel="60.1"/>

<changelog author="Joerg Bruehe &lt;joerg.bruehe@oracle.com&gt;" date="1316001600">- Let the RPM capabilities ("obsoletes" etc) ensure that an upgrade may replace
the RPMs of any configuration (of the current or the preceding release series)
by the new ones. This is done by not using the implicitly generated capabilities
(which include the configuration name) and relying on more generic ones which
just list the function ("server", "client", ...).
The implicit generation cannot be prevented, so all these capabilities must be
explicitly listed in "Obsoletes:"</changelog>
<changelog author="Joerg Bruehe &lt;joerg.bruehe@oracle.com&gt;" date="1317211200">- Fix duplicate mentioning of "mysql_plugin" and its manual page,
it is better to keep alphabetic order in the files list (merging!).</changelog>
<changelog author="Shawn Sterling &lt;shawn@systemtemplar.org&gt;" date="1335873600">- Spec overhaul to work with MariaDB 5.5.23 release</changelog>

</package>
<package pkgid="473453cb7b9522cd07e743c96c43d429cdfa2a46" name="mariadb-java-client" arch="src">
    <version epoch="0" ver="1.1.7" rel="60.1"/>

<changelog author="Joerg Bruehe &lt;joerg.bruehe@oracle.com&gt;" date="1316001600">- Let the RPM capabilities ("obsoletes" etc) ensure that an upgrade may replace
the RPMs of any configuration (of the current or the preceding release series)
by the new ones. This is done by not using the implicitly generated capabilities
(which include the configuration name) and relying on more generic ones which
just list the function ("server", "client", ...).
The implicit generation cannot be prevented, so all these capabilities must be
explicitly listed in "Obsoletes:"</changelog>
<changelog author="Joerg Bruehe &lt;joerg.bruehe@oracle.com&gt;" date="1317211200">- Fix duplicate mentioning of "mysql_plugin" and its manual page,
it is better to keep alphabetic order in the files list (merging!).</changelog>
<changelog author="Shawn Sterling &lt;shawn@systemtemplar.org&gt;" date="1335873600">- Spec overhaul to work with MariaDB 5.5.23 release</changelog>

</package>

</otherdata>