<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="29">
<package pkgid="233553e9275de799380ed741ead0ebdf947adda7bce8a8aaaeef7598617ab6b6" name="dpdk" arch="src">
  <version epoch="0" ver="16.11.1" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="7205a757e30d05652dd980c3a3644c4afcfed4a3f42735a327380a88eaafa5a6" name="dpdk" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="bd9019cba630bdc724d7c8ed0f55d8f627a6cb3255119cc6204a56211f9b7035" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="8e478503b9967c306ffa7e7416e720d6ebbcf2b6198e1ba8b884a6f0cf6335ac" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="16.11.1" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="52e4a76dc3feccbaeccc35a955fac8cf13b62cb75f14947e151d6e2a5fd3e6cf" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="e1d570ff300ebe01b6d6b2f8b84b37dfd88bb79f36c00d98cfd78ca2b0dc14f3" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="16.11.1_k4.4.21_69" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="0128066f2f8c3d3ce44cb8c4ae2ee4c765f37904e2931f0242fb0487786c5ef5" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="63.1"/>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
</package>
<package pkgid="95fba0b51366316d61a597b9ab0c3e187b0fc2f3e65bb33e442b7d2d5302e37c" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.4.4.4" rel="80.1"/>
  <changelog author="jslaby@suse.com" date="1456142400">- firewall-config needs typelib(NetworkManager) to run</changelog>
  <changelog author="mchandras@suse.de" date="1456142401">- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
  and libnotify dependencies (see OBS SR#360792)</changelog>
  <changelog author="mchandras@suse.de" date="1456747200">- Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
  /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
  properly prevent the firewalld service from being restarted during
  updates.</changelog>
  <changelog author="mchandras@suse.de" date="1456833600">- Move translations to a new subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1457438400">- Do not recommend a specific version for the lang subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1461240000">- Update to version 0.4.1.2
  * Install fw_nm module
  * firewalld: Do not fail if log file could not be opened
  * Make ipsets visible per default in firewall-config
  * Fixed translations with python3
  [changes in 0.4.1.1]
  * Fix for broken frensh translation
  [changes in 0.4.1]
  * Enhancements of ipset handling
  * No cleanup of ipsets using timeouts while reloading
  * Only destroy conflicting ipsets
  * Only use ipset types supported by the system
  * Add and remove several ipset entries in one call using a file
  * Reduce time frame where builtin chains are on policy DROP while reloading
  * Include descriptions in --info-X calls
  * Command line interface support to get and alter descriptions of zones,
  * services, ipsets and icmptypes with permanent option
  * Properly watch changes in combined zones
  * Fix logging in rich rule forward rules
  * Transformed direct.passthrough errors into warnings
  * Rework of import structures
  * Reduced calls to get ids for port and protocol names (rh#1305434)
  * Build and installation fixes by Markos Chandras
  * Provide D-Bus properties in introspection data
  * Fix for flaws found by landscape.io
  * Fix for repeated SUGHUP
  * New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  * Code cleanups
  * Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency</changelog>
  <changelog author="mchandras@suse.de" date="1461931200">- Suggest the susefirewall2-to-firewalld package which could assist
  in migrating the SuSEFirewall2 iptables rules to FirewallD.</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.</changelog>
  <changelog author="mchandras@suse.de" date="1464696000">- Update to version 0.4.2
  * New module to search for and change ifcfg files for interfaces
    not under control of NM
  * firewall_config: Enhanced messages in status bar
  * firewall-config: New message window as overlay if not connected
  * firewall-config: Fix sentivity of option, view menus and main
    paned if not connected
  * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
    some cleanup
  * firewall-[offline]cmd: Show target in zone information
  * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  * Fixed log-denied rules for icmp-blocks
  * Keep sorting of interfaces, services, icmp-blocks and other
    settings in zones
  * Fixed runtime-to-permanent not to save interfaces under control
    of NM
  * New icmp-block-inversion flag in the zones
  * ICMP type filtering in the zones
  * New services: sip, sips, managesieve
  * rich rules: Allow destination action (rh#1163428)
  * firewall-offline-cmd: New option -q/--quiet
  * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  * firewall-[offline-]cmd: Fix option for setting the destination
    address
  * firewall-config: Fixed resizing behaviour
  * New transaction model for speed ups in start, restart, stop and
    other actions
  * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  * Fixed memory leak in dbus_introspection_add_properties
  * Landscape.io fixes, pylint calm downs
  * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  * ebtables-restore: No support for COMMIT command
  * Source port support in services, zones and rich rules
  * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  * firewall-config: New active bindings side bar for simple binding changes
  * Reworked NetworkManager module
  * Proper default zone handling for NM connections
  * Try to set zone binding with NM if interface is under control of NM
  * Code cleanup and bug fixes
  * Include test suite in the release and install in /usr/share/firewalld/tests
  * New Travis-CI configuration file
  * Fixed more broken frensh translations
  * Translation updates
- Add upstream patches
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
    unneeded python shebangs
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
    not try to access the network-scripts ifcfg directory.
- Drop rejected patch
  * drop-standard-output-error-systemd.patch
- Minor spec file clean-up</changelog>
  <changelog author="mchandras@suse.de" date="1465387200">- Add upstream patch to prevent unconditional dependencies to the
  NetworkManager typelib (gh#t-woerner/firewalld#119)
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466596800">- Update to version 0.4.3
  * New firewallctl utility (rh#1147959)
  * doc.xml.seealso: Show firewalld.dbus in See Also sections
  * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
  * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  * firewall-cmd: Dropped duplicate setType call in --new-ipset
  * radius service: Support also tcp ports (RBZ#1219717)
  * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
  * config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
  * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  * firewall.command: Only print summary and description in print_X_info with verbose
  * firewall.command: print_msg should be able to print empty lines
  * firewall-config: No processing of runtime passthroughs signals in permanent
  * Landspace.io fixes and pylint calm downs
  * firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
  * firewall-config: Fixed titles of command and context dialogs, also entry lenths
  * firewall-config: pylint calm downs
  * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  * firewall-config: Use self.active_zoens in conf_zone_added_cb
  * firewall.command: New parse_port, extended parse methods with more checks
  * firewall.command: Fixed parse_port to use the separator in the split call
  * firewall.command: New [de]activate_exception_handler, raise error in parse_X
  * services ha: Allow corosync-qnetd port
  * firewall-applet: Support for kde5-nm-connection-editor
  * tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
  * tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-cmd: Fixed set, remove and query destination options for services
  * firewall.core.io.service: Source ports have not been checked in _check_config
  * firewall.core.fw_zone: Method check_source_port is not used, removed
  * firewall.core.base: Added default to ZONE_TARGETS
  * firewall.client: Allow to remove ipv:address pair for service destinations
  * tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  * firewall-cmd: Landscape.io fixes, pylint calm downs
  * firewall-cmd: Use FirewallCommand for simplification and sequence options
  * firewall.command: New FirewallCommand for command line client simplification
  * New services: kshell, rsh, ganglia-master, ganglia-client
  * firewalld: Cleanup of unused imports, do not translate some deamon messages
  * firewalld: With fd close interation in runProg, it is not needed here anymore
  * firewall.core.prog: Add fd close iteration to runProg
  * firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
  * firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  * firewall-config: New add/remove ipset entries from file, remove all entries
  * firewall-applet: Fix tooltip after applet start with connection to firewalld
  * firewall-config: Select new zone, service or icmptype if the view was empty
  * firewalld.spec: Added build requires for iptables, ebtables and ipset
  * Adding nf_conntrack_sip module to the service SIP
  * firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  * Drop unneeded python shebangs
  * Translation updates
- Remove obsolete patches:
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
  the installation phase as well as expose build system's problems
  due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Update to version 0.4.3.1
  * firewall.command: Fix python3 DBusException message not interable error
  * src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  * firewallctl: Do not trace back on list command without further arguments
  * firewallctl (man1): Added remaining sections zone, service, ..
  * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
  * firewall.server.config: Allow to set IndividualCalls property in config interface
  * Fix missing icmp rules for some zones
  * runProg: Fix issue with running programs
  * firewall-offline-cmd: Fix issues with missing system-config-firewall
  * firewall.core.ipXtables: Split up source and dest addresses for transaction
  * firewall.server.config: Log error in case of loading malformed files in watcher
  * Install and package the firewallctl man page
  * Translation updates</changelog>
  <changelog author="mchandras@suse.de" date="1467720000">- Update to version 0.4.3.2
  * Fix regression with unavailable optional commands
  * All missing backend messages should be warnings
  * Individual calls for missing restore commands
  * Only one authenticate call for add and remove options and also
    sequences
  * New service RH-Satellite-6</changelog>
  <changelog author="mchandras@suse.de" date="1471348800">- Update to version 0.4.3.3
  * Fixes CVE-2016-5410 (bsc#992772)
  * Standard error is now used for errors and warnings
  * Several fixes for use in change roots
  * Systemd service file changes
  * Fixed translations in firewall-config
  * Command line clients
  * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)</changelog>
  <changelog author="mchandras@suse.de" date="1472817600">- Relax permissions for default installation files. The files in
  /usr/lib/firewalld are the default ones as shipped by the package and
  there is nothing secret in them.</changelog>
  <changelog author="mchandras@suse.de" date="1477915200">- Update to version 0.4.4
  * firewall-applet: Use PyQt5
  * firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
    D-Bus property
  * New helpers Q.931 and RAS from nf_conntrack_h323
  * firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  * firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
    table
  * New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
    sane, sip, snmp and tftp
  * firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  * firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
    sequences
  * Misc bug fixes.
  * For the complete list of changes please see:
    https://github.com/t-woerner/firewalld/releases/tag/v0.4.4</changelog>
  <changelog author="mchandras@suse.de" date="1479124800">- Update to version 0.4.4.1
  * Translation updates form zanata
  * firewallctl: New support for helpers
  * firewallctl: Use sys.excepthook to force exception_handler usage always
  * firewall-config: Use proper source check in sourceDialog</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 0.4.4.2
  * firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
  * firewall.core.fw_nm: create NMClient lazily
  * Do not use hard-coded path for modinfo, use autofoo to detect it
  * firewall.core.io.ifcfg: Dropped invalid option warning with bad format string
  * firewall.core.io.ifcfg: Properly handle quoted ifcfg values
  * firewall.core.fw_zone: Do not reset ZONE with ifdown
  * Updated translations from zanata
  * firewall-config: Extra grid at bottom to visualize firewalld settings</changelog>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490616000">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
</package>
<package pkgid="3abb2c44788b1319355c8b5de2e58b2eb07420fb8670bb04ba83e76e9c12a9f8" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.4.4.4" rel="80.1"/>
  <changelog author="jslaby@suse.com" date="1456142400">- firewall-config needs typelib(NetworkManager) to run</changelog>
  <changelog author="mchandras@suse.de" date="1456142401">- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
  and libnotify dependencies (see OBS SR#360792)</changelog>
  <changelog author="mchandras@suse.de" date="1456747200">- Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
  /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
  properly prevent the firewalld service from being restarted during
  updates.</changelog>
  <changelog author="mchandras@suse.de" date="1456833600">- Move translations to a new subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1457438400">- Do not recommend a specific version for the lang subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1461240000">- Update to version 0.4.1.2
  * Install fw_nm module
  * firewalld: Do not fail if log file could not be opened
  * Make ipsets visible per default in firewall-config
  * Fixed translations with python3
  [changes in 0.4.1.1]
  * Fix for broken frensh translation
  [changes in 0.4.1]
  * Enhancements of ipset handling
  * No cleanup of ipsets using timeouts while reloading
  * Only destroy conflicting ipsets
  * Only use ipset types supported by the system
  * Add and remove several ipset entries in one call using a file
  * Reduce time frame where builtin chains are on policy DROP while reloading
  * Include descriptions in --info-X calls
  * Command line interface support to get and alter descriptions of zones,
  * services, ipsets and icmptypes with permanent option
  * Properly watch changes in combined zones
  * Fix logging in rich rule forward rules
  * Transformed direct.passthrough errors into warnings
  * Rework of import structures
  * Reduced calls to get ids for port and protocol names (rh#1305434)
  * Build and installation fixes by Markos Chandras
  * Provide D-Bus properties in introspection data
  * Fix for flaws found by landscape.io
  * Fix for repeated SUGHUP
  * New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  * Code cleanups
  * Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency</changelog>
  <changelog author="mchandras@suse.de" date="1461931200">- Suggest the susefirewall2-to-firewalld package which could assist
  in migrating the SuSEFirewall2 iptables rules to FirewallD.</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.</changelog>
  <changelog author="mchandras@suse.de" date="1464696000">- Update to version 0.4.2
  * New module to search for and change ifcfg files for interfaces
    not under control of NM
  * firewall_config: Enhanced messages in status bar
  * firewall-config: New message window as overlay if not connected
  * firewall-config: Fix sentivity of option, view menus and main
    paned if not connected
  * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
    some cleanup
  * firewall-[offline]cmd: Show target in zone information
  * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  * Fixed log-denied rules for icmp-blocks
  * Keep sorting of interfaces, services, icmp-blocks and other
    settings in zones
  * Fixed runtime-to-permanent not to save interfaces under control
    of NM
  * New icmp-block-inversion flag in the zones
  * ICMP type filtering in the zones
  * New services: sip, sips, managesieve
  * rich rules: Allow destination action (rh#1163428)
  * firewall-offline-cmd: New option -q/--quiet
  * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  * firewall-[offline-]cmd: Fix option for setting the destination
    address
  * firewall-config: Fixed resizing behaviour
  * New transaction model for speed ups in start, restart, stop and
    other actions
  * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  * Fixed memory leak in dbus_introspection_add_properties
  * Landscape.io fixes, pylint calm downs
  * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  * ebtables-restore: No support for COMMIT command
  * Source port support in services, zones and rich rules
  * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  * firewall-config: New active bindings side bar for simple binding changes
  * Reworked NetworkManager module
  * Proper default zone handling for NM connections
  * Try to set zone binding with NM if interface is under control of NM
  * Code cleanup and bug fixes
  * Include test suite in the release and install in /usr/share/firewalld/tests
  * New Travis-CI configuration file
  * Fixed more broken frensh translations
  * Translation updates
- Add upstream patches
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
    unneeded python shebangs
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
    not try to access the network-scripts ifcfg directory.
- Drop rejected patch
  * drop-standard-output-error-systemd.patch
- Minor spec file clean-up</changelog>
  <changelog author="mchandras@suse.de" date="1465387200">- Add upstream patch to prevent unconditional dependencies to the
  NetworkManager typelib (gh#t-woerner/firewalld#119)
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466596800">- Update to version 0.4.3
  * New firewallctl utility (rh#1147959)
  * doc.xml.seealso: Show firewalld.dbus in See Also sections
  * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
  * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  * firewall-cmd: Dropped duplicate setType call in --new-ipset
  * radius service: Support also tcp ports (RBZ#1219717)
  * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
  * config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
  * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  * firewall.command: Only print summary and description in print_X_info with verbose
  * firewall.command: print_msg should be able to print empty lines
  * firewall-config: No processing of runtime passthroughs signals in permanent
  * Landspace.io fixes and pylint calm downs
  * firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
  * firewall-config: Fixed titles of command and context dialogs, also entry lenths
  * firewall-config: pylint calm downs
  * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  * firewall-config: Use self.active_zoens in conf_zone_added_cb
  * firewall.command: New parse_port, extended parse methods with more checks
  * firewall.command: Fixed parse_port to use the separator in the split call
  * firewall.command: New [de]activate_exception_handler, raise error in parse_X
  * services ha: Allow corosync-qnetd port
  * firewall-applet: Support for kde5-nm-connection-editor
  * tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
  * tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-cmd: Fixed set, remove and query destination options for services
  * firewall.core.io.service: Source ports have not been checked in _check_config
  * firewall.core.fw_zone: Method check_source_port is not used, removed
  * firewall.core.base: Added default to ZONE_TARGETS
  * firewall.client: Allow to remove ipv:address pair for service destinations
  * tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  * firewall-cmd: Landscape.io fixes, pylint calm downs
  * firewall-cmd: Use FirewallCommand for simplification and sequence options
  * firewall.command: New FirewallCommand for command line client simplification
  * New services: kshell, rsh, ganglia-master, ganglia-client
  * firewalld: Cleanup of unused imports, do not translate some deamon messages
  * firewalld: With fd close interation in runProg, it is not needed here anymore
  * firewall.core.prog: Add fd close iteration to runProg
  * firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
  * firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  * firewall-config: New add/remove ipset entries from file, remove all entries
  * firewall-applet: Fix tooltip after applet start with connection to firewalld
  * firewall-config: Select new zone, service or icmptype if the view was empty
  * firewalld.spec: Added build requires for iptables, ebtables and ipset
  * Adding nf_conntrack_sip module to the service SIP
  * firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  * Drop unneeded python shebangs
  * Translation updates
- Remove obsolete patches:
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
  the installation phase as well as expose build system's problems
  due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Update to version 0.4.3.1
  * firewall.command: Fix python3 DBusException message not interable error
  * src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  * firewallctl: Do not trace back on list command without further arguments
  * firewallctl (man1): Added remaining sections zone, service, ..
  * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
  * firewall.server.config: Allow to set IndividualCalls property in config interface
  * Fix missing icmp rules for some zones
  * runProg: Fix issue with running programs
  * firewall-offline-cmd: Fix issues with missing system-config-firewall
  * firewall.core.ipXtables: Split up source and dest addresses for transaction
  * firewall.server.config: Log error in case of loading malformed files in watcher
  * Install and package the firewallctl man page
  * Translation updates</changelog>
  <changelog author="mchandras@suse.de" date="1467720000">- Update to version 0.4.3.2
  * Fix regression with unavailable optional commands
  * All missing backend messages should be warnings
  * Individual calls for missing restore commands
  * Only one authenticate call for add and remove options and also
    sequences
  * New service RH-Satellite-6</changelog>
  <changelog author="mchandras@suse.de" date="1471348800">- Update to version 0.4.3.3
  * Fixes CVE-2016-5410 (bsc#992772)
  * Standard error is now used for errors and warnings
  * Several fixes for use in change roots
  * Systemd service file changes
  * Fixed translations in firewall-config
  * Command line clients
  * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)</changelog>
  <changelog author="mchandras@suse.de" date="1472817600">- Relax permissions for default installation files. The files in
  /usr/lib/firewalld are the default ones as shipped by the package and
  there is nothing secret in them.</changelog>
  <changelog author="mchandras@suse.de" date="1477915200">- Update to version 0.4.4
  * firewall-applet: Use PyQt5
  * firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
    D-Bus property
  * New helpers Q.931 and RAS from nf_conntrack_h323
  * firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  * firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
    table
  * New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
    sane, sip, snmp and tftp
  * firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  * firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
    sequences
  * Misc bug fixes.
  * For the complete list of changes please see:
    https://github.com/t-woerner/firewalld/releases/tag/v0.4.4</changelog>
  <changelog author="mchandras@suse.de" date="1479124800">- Update to version 0.4.4.1
  * Translation updates form zanata
  * firewallctl: New support for helpers
  * firewallctl: Use sys.excepthook to force exception_handler usage always
  * firewall-config: Use proper source check in sourceDialog</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 0.4.4.2
  * firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
  * firewall.core.fw_nm: create NMClient lazily
  * Do not use hard-coded path for modinfo, use autofoo to detect it
  * firewall.core.io.ifcfg: Dropped invalid option warning with bad format string
  * firewall.core.io.ifcfg: Properly handle quoted ifcfg values
  * firewall.core.fw_zone: Do not reset ZONE with ifdown
  * Updated translations from zanata
  * firewall-config: Extra grid at bottom to visualize firewalld settings</changelog>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490616000">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
</package>
<package pkgid="bf9f1aa6c1872ddb2764e1a411f73719e0356604159dffc7b45a6663a0dd96cc" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.4.4.4" rel="80.1"/>
  <changelog author="jslaby@suse.com" date="1456142400">- firewall-config needs typelib(NetworkManager) to run</changelog>
  <changelog author="mchandras@suse.de" date="1456142401">- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
  and libnotify dependencies (see OBS SR#360792)</changelog>
  <changelog author="mchandras@suse.de" date="1456747200">- Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
  /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
  properly prevent the firewalld service from being restarted during
  updates.</changelog>
  <changelog author="mchandras@suse.de" date="1456833600">- Move translations to a new subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1457438400">- Do not recommend a specific version for the lang subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1461240000">- Update to version 0.4.1.2
  * Install fw_nm module
  * firewalld: Do not fail if log file could not be opened
  * Make ipsets visible per default in firewall-config
  * Fixed translations with python3
  [changes in 0.4.1.1]
  * Fix for broken frensh translation
  [changes in 0.4.1]
  * Enhancements of ipset handling
  * No cleanup of ipsets using timeouts while reloading
  * Only destroy conflicting ipsets
  * Only use ipset types supported by the system
  * Add and remove several ipset entries in one call using a file
  * Reduce time frame where builtin chains are on policy DROP while reloading
  * Include descriptions in --info-X calls
  * Command line interface support to get and alter descriptions of zones,
  * services, ipsets and icmptypes with permanent option
  * Properly watch changes in combined zones
  * Fix logging in rich rule forward rules
  * Transformed direct.passthrough errors into warnings
  * Rework of import structures
  * Reduced calls to get ids for port and protocol names (rh#1305434)
  * Build and installation fixes by Markos Chandras
  * Provide D-Bus properties in introspection data
  * Fix for flaws found by landscape.io
  * Fix for repeated SUGHUP
  * New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  * Code cleanups
  * Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency</changelog>
  <changelog author="mchandras@suse.de" date="1461931200">- Suggest the susefirewall2-to-firewalld package which could assist
  in migrating the SuSEFirewall2 iptables rules to FirewallD.</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.</changelog>
  <changelog author="mchandras@suse.de" date="1464696000">- Update to version 0.4.2
  * New module to search for and change ifcfg files for interfaces
    not under control of NM
  * firewall_config: Enhanced messages in status bar
  * firewall-config: New message window as overlay if not connected
  * firewall-config: Fix sentivity of option, view menus and main
    paned if not connected
  * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
    some cleanup
  * firewall-[offline]cmd: Show target in zone information
  * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  * Fixed log-denied rules for icmp-blocks
  * Keep sorting of interfaces, services, icmp-blocks and other
    settings in zones
  * Fixed runtime-to-permanent not to save interfaces under control
    of NM
  * New icmp-block-inversion flag in the zones
  * ICMP type filtering in the zones
  * New services: sip, sips, managesieve
  * rich rules: Allow destination action (rh#1163428)
  * firewall-offline-cmd: New option -q/--quiet
  * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  * firewall-[offline-]cmd: Fix option for setting the destination
    address
  * firewall-config: Fixed resizing behaviour
  * New transaction model for speed ups in start, restart, stop and
    other actions
  * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  * Fixed memory leak in dbus_introspection_add_properties
  * Landscape.io fixes, pylint calm downs
  * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  * ebtables-restore: No support for COMMIT command
  * Source port support in services, zones and rich rules
  * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  * firewall-config: New active bindings side bar for simple binding changes
  * Reworked NetworkManager module
  * Proper default zone handling for NM connections
  * Try to set zone binding with NM if interface is under control of NM
  * Code cleanup and bug fixes
  * Include test suite in the release and install in /usr/share/firewalld/tests
  * New Travis-CI configuration file
  * Fixed more broken frensh translations
  * Translation updates
- Add upstream patches
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
    unneeded python shebangs
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
    not try to access the network-scripts ifcfg directory.
- Drop rejected patch
  * drop-standard-output-error-systemd.patch
- Minor spec file clean-up</changelog>
  <changelog author="mchandras@suse.de" date="1465387200">- Add upstream patch to prevent unconditional dependencies to the
  NetworkManager typelib (gh#t-woerner/firewalld#119)
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466596800">- Update to version 0.4.3
  * New firewallctl utility (rh#1147959)
  * doc.xml.seealso: Show firewalld.dbus in See Also sections
  * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
  * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  * firewall-cmd: Dropped duplicate setType call in --new-ipset
  * radius service: Support also tcp ports (RBZ#1219717)
  * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
  * config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
  * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  * firewall.command: Only print summary and description in print_X_info with verbose
  * firewall.command: print_msg should be able to print empty lines
  * firewall-config: No processing of runtime passthroughs signals in permanent
  * Landspace.io fixes and pylint calm downs
  * firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
  * firewall-config: Fixed titles of command and context dialogs, also entry lenths
  * firewall-config: pylint calm downs
  * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  * firewall-config: Use self.active_zoens in conf_zone_added_cb
  * firewall.command: New parse_port, extended parse methods with more checks
  * firewall.command: Fixed parse_port to use the separator in the split call
  * firewall.command: New [de]activate_exception_handler, raise error in parse_X
  * services ha: Allow corosync-qnetd port
  * firewall-applet: Support for kde5-nm-connection-editor
  * tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
  * tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-cmd: Fixed set, remove and query destination options for services
  * firewall.core.io.service: Source ports have not been checked in _check_config
  * firewall.core.fw_zone: Method check_source_port is not used, removed
  * firewall.core.base: Added default to ZONE_TARGETS
  * firewall.client: Allow to remove ipv:address pair for service destinations
  * tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  * firewall-cmd: Landscape.io fixes, pylint calm downs
  * firewall-cmd: Use FirewallCommand for simplification and sequence options
  * firewall.command: New FirewallCommand for command line client simplification
  * New services: kshell, rsh, ganglia-master, ganglia-client
  * firewalld: Cleanup of unused imports, do not translate some deamon messages
  * firewalld: With fd close interation in runProg, it is not needed here anymore
  * firewall.core.prog: Add fd close iteration to runProg
  * firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
  * firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  * firewall-config: New add/remove ipset entries from file, remove all entries
  * firewall-applet: Fix tooltip after applet start with connection to firewalld
  * firewall-config: Select new zone, service or icmptype if the view was empty
  * firewalld.spec: Added build requires for iptables, ebtables and ipset
  * Adding nf_conntrack_sip module to the service SIP
  * firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  * Drop unneeded python shebangs
  * Translation updates
- Remove obsolete patches:
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
  the installation phase as well as expose build system's problems
  due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Update to version 0.4.3.1
  * firewall.command: Fix python3 DBusException message not interable error
  * src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  * firewallctl: Do not trace back on list command without further arguments
  * firewallctl (man1): Added remaining sections zone, service, ..
  * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
  * firewall.server.config: Allow to set IndividualCalls property in config interface
  * Fix missing icmp rules for some zones
  * runProg: Fix issue with running programs
  * firewall-offline-cmd: Fix issues with missing system-config-firewall
  * firewall.core.ipXtables: Split up source and dest addresses for transaction
  * firewall.server.config: Log error in case of loading malformed files in watcher
  * Install and package the firewallctl man page
  * Translation updates</changelog>
  <changelog author="mchandras@suse.de" date="1467720000">- Update to version 0.4.3.2
  * Fix regression with unavailable optional commands
  * All missing backend messages should be warnings
  * Individual calls for missing restore commands
  * Only one authenticate call for add and remove options and also
    sequences
  * New service RH-Satellite-6</changelog>
  <changelog author="mchandras@suse.de" date="1471348800">- Update to version 0.4.3.3
  * Fixes CVE-2016-5410 (bsc#992772)
  * Standard error is now used for errors and warnings
  * Several fixes for use in change roots
  * Systemd service file changes
  * Fixed translations in firewall-config
  * Command line clients
  * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)</changelog>
  <changelog author="mchandras@suse.de" date="1472817600">- Relax permissions for default installation files. The files in
  /usr/lib/firewalld are the default ones as shipped by the package and
  there is nothing secret in them.</changelog>
  <changelog author="mchandras@suse.de" date="1477915200">- Update to version 0.4.4
  * firewall-applet: Use PyQt5
  * firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
    D-Bus property
  * New helpers Q.931 and RAS from nf_conntrack_h323
  * firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  * firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
    table
  * New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
    sane, sip, snmp and tftp
  * firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  * firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
    sequences
  * Misc bug fixes.
  * For the complete list of changes please see:
    https://github.com/t-woerner/firewalld/releases/tag/v0.4.4</changelog>
  <changelog author="mchandras@suse.de" date="1479124800">- Update to version 0.4.4.1
  * Translation updates form zanata
  * firewallctl: New support for helpers
  * firewallctl: Use sys.excepthook to force exception_handler usage always
  * firewall-config: Use proper source check in sourceDialog</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 0.4.4.2
  * firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
  * firewall.core.fw_nm: create NMClient lazily
  * Do not use hard-coded path for modinfo, use autofoo to detect it
  * firewall.core.io.ifcfg: Dropped invalid option warning with bad format string
  * firewall.core.io.ifcfg: Properly handle quoted ifcfg values
  * firewall.core.fw_zone: Do not reset ZONE with ifdown
  * Updated translations from zanata
  * firewall-config: Extra grid at bottom to visualize firewalld settings</changelog>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490616000">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
</package>
<package pkgid="aee3fc023fd3fa7c032c39b226650d4daa3272f70c61a05c43526e99da6f949f" name="firewalld" arch="src">
  <version epoch="0" ver="0.4.4.4" rel="80.1"/>
  <changelog author="jslaby@suse.com" date="1456142400">- firewall-config needs typelib(NetworkManager) to run</changelog>
  <changelog author="mchandras@suse.de" date="1456142401">- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
  and libnotify dependencies (see OBS SR#360792)</changelog>
  <changelog author="mchandras@suse.de" date="1456747200">- Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
  /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
  properly prevent the firewalld service from being restarted during
  updates.</changelog>
  <changelog author="mchandras@suse.de" date="1456833600">- Move translations to a new subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1457438400">- Do not recommend a specific version for the lang subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1461240000">- Update to version 0.4.1.2
  * Install fw_nm module
  * firewalld: Do not fail if log file could not be opened
  * Make ipsets visible per default in firewall-config
  * Fixed translations with python3
  [changes in 0.4.1.1]
  * Fix for broken frensh translation
  [changes in 0.4.1]
  * Enhancements of ipset handling
  * No cleanup of ipsets using timeouts while reloading
  * Only destroy conflicting ipsets
  * Only use ipset types supported by the system
  * Add and remove several ipset entries in one call using a file
  * Reduce time frame where builtin chains are on policy DROP while reloading
  * Include descriptions in --info-X calls
  * Command line interface support to get and alter descriptions of zones,
  * services, ipsets and icmptypes with permanent option
  * Properly watch changes in combined zones
  * Fix logging in rich rule forward rules
  * Transformed direct.passthrough errors into warnings
  * Rework of import structures
  * Reduced calls to get ids for port and protocol names (rh#1305434)
  * Build and installation fixes by Markos Chandras
  * Provide D-Bus properties in introspection data
  * Fix for flaws found by landscape.io
  * Fix for repeated SUGHUP
  * New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  * Code cleanups
  * Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency</changelog>
  <changelog author="mchandras@suse.de" date="1461931200">- Suggest the susefirewall2-to-firewalld package which could assist
  in migrating the SuSEFirewall2 iptables rules to FirewallD.</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.</changelog>
  <changelog author="mchandras@suse.de" date="1464696000">- Update to version 0.4.2
  * New module to search for and change ifcfg files for interfaces
    not under control of NM
  * firewall_config: Enhanced messages in status bar
  * firewall-config: New message window as overlay if not connected
  * firewall-config: Fix sentivity of option, view menus and main
    paned if not connected
  * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
    some cleanup
  * firewall-[offline]cmd: Show target in zone information
  * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  * Fixed log-denied rules for icmp-blocks
  * Keep sorting of interfaces, services, icmp-blocks and other
    settings in zones
  * Fixed runtime-to-permanent not to save interfaces under control
    of NM
  * New icmp-block-inversion flag in the zones
  * ICMP type filtering in the zones
  * New services: sip, sips, managesieve
  * rich rules: Allow destination action (rh#1163428)
  * firewall-offline-cmd: New option -q/--quiet
  * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  * firewall-[offline-]cmd: Fix option for setting the destination
    address
  * firewall-config: Fixed resizing behaviour
  * New transaction model for speed ups in start, restart, stop and
    other actions
  * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  * Fixed memory leak in dbus_introspection_add_properties
  * Landscape.io fixes, pylint calm downs
  * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  * ebtables-restore: No support for COMMIT command
  * Source port support in services, zones and rich rules
  * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  * firewall-config: New active bindings side bar for simple binding changes
  * Reworked NetworkManager module
  * Proper default zone handling for NM connections
  * Try to set zone binding with NM if interface is under control of NM
  * Code cleanup and bug fixes
  * Include test suite in the release and install in /usr/share/firewalld/tests
  * New Travis-CI configuration file
  * Fixed more broken frensh translations
  * Translation updates
- Add upstream patches
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
    unneeded python shebangs
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
    not try to access the network-scripts ifcfg directory.
- Drop rejected patch
  * drop-standard-output-error-systemd.patch
- Minor spec file clean-up</changelog>
  <changelog author="mchandras@suse.de" date="1465387200">- Add upstream patch to prevent unconditional dependencies to the
  NetworkManager typelib (gh#t-woerner/firewalld#119)
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466596800">- Update to version 0.4.3
  * New firewallctl utility (rh#1147959)
  * doc.xml.seealso: Show firewalld.dbus in See Also sections
  * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
  * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  * firewall-cmd: Dropped duplicate setType call in --new-ipset
  * radius service: Support also tcp ports (RBZ#1219717)
  * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
  * config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
  * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  * firewall.command: Only print summary and description in print_X_info with verbose
  * firewall.command: print_msg should be able to print empty lines
  * firewall-config: No processing of runtime passthroughs signals in permanent
  * Landspace.io fixes and pylint calm downs
  * firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
  * firewall-config: Fixed titles of command and context dialogs, also entry lenths
  * firewall-config: pylint calm downs
  * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  * firewall-config: Use self.active_zoens in conf_zone_added_cb
  * firewall.command: New parse_port, extended parse methods with more checks
  * firewall.command: Fixed parse_port to use the separator in the split call
  * firewall.command: New [de]activate_exception_handler, raise error in parse_X
  * services ha: Allow corosync-qnetd port
  * firewall-applet: Support for kde5-nm-connection-editor
  * tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
  * tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-cmd: Fixed set, remove and query destination options for services
  * firewall.core.io.service: Source ports have not been checked in _check_config
  * firewall.core.fw_zone: Method check_source_port is not used, removed
  * firewall.core.base: Added default to ZONE_TARGETS
  * firewall.client: Allow to remove ipv:address pair for service destinations
  * tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  * firewall-cmd: Landscape.io fixes, pylint calm downs
  * firewall-cmd: Use FirewallCommand for simplification and sequence options
  * firewall.command: New FirewallCommand for command line client simplification
  * New services: kshell, rsh, ganglia-master, ganglia-client
  * firewalld: Cleanup of unused imports, do not translate some deamon messages
  * firewalld: With fd close interation in runProg, it is not needed here anymore
  * firewall.core.prog: Add fd close iteration to runProg
  * firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
  * firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  * firewall-config: New add/remove ipset entries from file, remove all entries
  * firewall-applet: Fix tooltip after applet start with connection to firewalld
  * firewall-config: Select new zone, service or icmptype if the view was empty
  * firewalld.spec: Added build requires for iptables, ebtables and ipset
  * Adding nf_conntrack_sip module to the service SIP
  * firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  * Drop unneeded python shebangs
  * Translation updates
- Remove obsolete patches:
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
  the installation phase as well as expose build system's problems
  due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Update to version 0.4.3.1
  * firewall.command: Fix python3 DBusException message not interable error
  * src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  * firewallctl: Do not trace back on list command without further arguments
  * firewallctl (man1): Added remaining sections zone, service, ..
  * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
  * firewall.server.config: Allow to set IndividualCalls property in config interface
  * Fix missing icmp rules for some zones
  * runProg: Fix issue with running programs
  * firewall-offline-cmd: Fix issues with missing system-config-firewall
  * firewall.core.ipXtables: Split up source and dest addresses for transaction
  * firewall.server.config: Log error in case of loading malformed files in watcher
  * Install and package the firewallctl man page
  * Translation updates</changelog>
  <changelog author="mchandras@suse.de" date="1467720000">- Update to version 0.4.3.2
  * Fix regression with unavailable optional commands
  * All missing backend messages should be warnings
  * Individual calls for missing restore commands
  * Only one authenticate call for add and remove options and also
    sequences
  * New service RH-Satellite-6</changelog>
  <changelog author="mchandras@suse.de" date="1471348800">- Update to version 0.4.3.3
  * Fixes CVE-2016-5410 (bsc#992772)
  * Standard error is now used for errors and warnings
  * Several fixes for use in change roots
  * Systemd service file changes
  * Fixed translations in firewall-config
  * Command line clients
  * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)</changelog>
  <changelog author="mchandras@suse.de" date="1472817600">- Relax permissions for default installation files. The files in
  /usr/lib/firewalld are the default ones as shipped by the package and
  there is nothing secret in them.</changelog>
  <changelog author="mchandras@suse.de" date="1477915200">- Update to version 0.4.4
  * firewall-applet: Use PyQt5
  * firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
    D-Bus property
  * New helpers Q.931 and RAS from nf_conntrack_h323
  * firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  * firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
    table
  * New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
    sane, sip, snmp and tftp
  * firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  * firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
    sequences
  * Misc bug fixes.
  * For the complete list of changes please see:
    https://github.com/t-woerner/firewalld/releases/tag/v0.4.4</changelog>
  <changelog author="mchandras@suse.de" date="1479124800">- Update to version 0.4.4.1
  * Translation updates form zanata
  * firewallctl: New support for helpers
  * firewallctl: Use sys.excepthook to force exception_handler usage always
  * firewall-config: Use proper source check in sourceDialog</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 0.4.4.2
  * firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
  * firewall.core.fw_nm: create NMClient lazily
  * Do not use hard-coded path for modinfo, use autofoo to detect it
  * firewall.core.io.ifcfg: Dropped invalid option warning with bad format string
  * firewall.core.io.ifcfg: Properly handle quoted ifcfg values
  * firewall.core.fw_zone: Do not reset ZONE with ifdown
  * Updated translations from zanata
  * firewall-config: Extra grid at bottom to visualize firewalld settings</changelog>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490616000">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
</package>
<package pkgid="63e2a56c74ed7ab088f6f52efa4c5be0573f8907b55afaf82176ebaee55c6928" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.4.4.4" rel="80.1"/>
  <changelog author="jslaby@suse.com" date="1456142400">- firewall-config needs typelib(NetworkManager) to run</changelog>
  <changelog author="mchandras@suse.de" date="1456142401">- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
  and libnotify dependencies (see OBS SR#360792)</changelog>
  <changelog author="mchandras@suse.de" date="1456747200">- Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
  /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
  properly prevent the firewalld service from being restarted during
  updates.</changelog>
  <changelog author="mchandras@suse.de" date="1456833600">- Move translations to a new subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1457438400">- Do not recommend a specific version for the lang subpackage</changelog>
  <changelog author="mchandras@suse.de" date="1461240000">- Update to version 0.4.1.2
  * Install fw_nm module
  * firewalld: Do not fail if log file could not be opened
  * Make ipsets visible per default in firewall-config
  * Fixed translations with python3
  [changes in 0.4.1.1]
  * Fix for broken frensh translation
  [changes in 0.4.1]
  * Enhancements of ipset handling
  * No cleanup of ipsets using timeouts while reloading
  * Only destroy conflicting ipsets
  * Only use ipset types supported by the system
  * Add and remove several ipset entries in one call using a file
  * Reduce time frame where builtin chains are on policy DROP while reloading
  * Include descriptions in --info-X calls
  * Command line interface support to get and alter descriptions of zones,
  * services, ipsets and icmptypes with permanent option
  * Properly watch changes in combined zones
  * Fix logging in rich rule forward rules
  * Transformed direct.passthrough errors into warnings
  * Rework of import structures
  * Reduced calls to get ids for port and protocol names (rh#1305434)
  * Build and installation fixes by Markos Chandras
  * Provide D-Bus properties in introspection data
  * Fix for flaws found by landscape.io
  * Fix for repeated SUGHUP
  * New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  * Code cleanups
  * Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency</changelog>
  <changelog author="mchandras@suse.de" date="1461931200">- Suggest the susefirewall2-to-firewalld package which could assist
  in migrating the SuSEFirewall2 iptables rules to FirewallD.</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.</changelog>
  <changelog author="mchandras@suse.de" date="1464696000">- Update to version 0.4.2
  * New module to search for and change ifcfg files for interfaces
    not under control of NM
  * firewall_config: Enhanced messages in status bar
  * firewall-config: New message window as overlay if not connected
  * firewall-config: Fix sentivity of option, view menus and main
    paned if not connected
  * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
    some cleanup
  * firewall-[offline]cmd: Show target in zone information
  * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  * Fixed log-denied rules for icmp-blocks
  * Keep sorting of interfaces, services, icmp-blocks and other
    settings in zones
  * Fixed runtime-to-permanent not to save interfaces under control
    of NM
  * New icmp-block-inversion flag in the zones
  * ICMP type filtering in the zones
  * New services: sip, sips, managesieve
  * rich rules: Allow destination action (rh#1163428)
  * firewall-offline-cmd: New option -q/--quiet
  * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  * firewall-[offline-]cmd: Fix option for setting the destination
    address
  * firewall-config: Fixed resizing behaviour
  * New transaction model for speed ups in start, restart, stop and
    other actions
  * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  * Fixed memory leak in dbus_introspection_add_properties
  * Landscape.io fixes, pylint calm downs
  * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  * ebtables-restore: No support for COMMIT command
  * Source port support in services, zones and rich rules
  * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  * firewall-config: New active bindings side bar for simple binding changes
  * Reworked NetworkManager module
  * Proper default zone handling for NM connections
  * Try to set zone binding with NM if interface is under control of NM
  * Code cleanup and bug fixes
  * Include test suite in the release and install in /usr/share/firewalld/tests
  * New Travis-CI configuration file
  * Fixed more broken frensh translations
  * Translation updates
- Add upstream patches
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
    unneeded python shebangs
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
    not try to access the network-scripts ifcfg directory.
- Drop rejected patch
  * drop-standard-output-error-systemd.patch
- Minor spec file clean-up</changelog>
  <changelog author="mchandras@suse.de" date="1465387200">- Add upstream patch to prevent unconditional dependencies to the
  NetworkManager typelib (gh#t-woerner/firewalld#119)
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466596800">- Update to version 0.4.3
  * New firewallctl utility (rh#1147959)
  * doc.xml.seealso: Show firewalld.dbus in See Also sections
  * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
  * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  * firewall-cmd: Dropped duplicate setType call in --new-ipset
  * radius service: Support also tcp ports (RBZ#1219717)
  * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
  * config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
  * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  * firewall.command: Only print summary and description in print_X_info with verbose
  * firewall.command: print_msg should be able to print empty lines
  * firewall-config: No processing of runtime passthroughs signals in permanent
  * Landspace.io fixes and pylint calm downs
  * firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
  * firewall-config: Fixed titles of command and context dialogs, also entry lenths
  * firewall-config: pylint calm downs
  * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  * firewall-config: Use self.active_zoens in conf_zone_added_cb
  * firewall.command: New parse_port, extended parse methods with more checks
  * firewall.command: Fixed parse_port to use the separator in the split call
  * firewall.command: New [de]activate_exception_handler, raise error in parse_X
  * services ha: Allow corosync-qnetd port
  * firewall-applet: Support for kde5-nm-connection-editor
  * tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
  * tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-cmd: Fixed set, remove and query destination options for services
  * firewall.core.io.service: Source ports have not been checked in _check_config
  * firewall.core.fw_zone: Method check_source_port is not used, removed
  * firewall.core.base: Added default to ZONE_TARGETS
  * firewall.client: Allow to remove ipv:address pair for service destinations
  * tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  * firewall-cmd: Landscape.io fixes, pylint calm downs
  * firewall-cmd: Use FirewallCommand for simplification and sequence options
  * firewall.command: New FirewallCommand for command line client simplification
  * New services: kshell, rsh, ganglia-master, ganglia-client
  * firewalld: Cleanup of unused imports, do not translate some deamon messages
  * firewalld: With fd close interation in runProg, it is not needed here anymore
  * firewall.core.prog: Add fd close iteration to runProg
  * firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
  * firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  * firewall-config: New add/remove ipset entries from file, remove all entries
  * firewall-applet: Fix tooltip after applet start with connection to firewalld
  * firewall-config: Select new zone, service or icmptype if the view was empty
  * firewalld.spec: Added build requires for iptables, ebtables and ipset
  * Adding nf_conntrack_sip module to the service SIP
  * firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  * Drop unneeded python shebangs
  * Translation updates
- Remove obsolete patches:
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
  the installation phase as well as expose build system's problems
  due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Update to version 0.4.3.1
  * firewall.command: Fix python3 DBusException message not interable error
  * src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  * firewallctl: Do not trace back on list command without further arguments
  * firewallctl (man1): Added remaining sections zone, service, ..
  * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
  * firewall.server.config: Allow to set IndividualCalls property in config interface
  * Fix missing icmp rules for some zones
  * runProg: Fix issue with running programs
  * firewall-offline-cmd: Fix issues with missing system-config-firewall
  * firewall.core.ipXtables: Split up source and dest addresses for transaction
  * firewall.server.config: Log error in case of loading malformed files in watcher
  * Install and package the firewallctl man page
  * Translation updates</changelog>
  <changelog author="mchandras@suse.de" date="1467720000">- Update to version 0.4.3.2
  * Fix regression with unavailable optional commands
  * All missing backend messages should be warnings
  * Individual calls for missing restore commands
  * Only one authenticate call for add and remove options and also
    sequences
  * New service RH-Satellite-6</changelog>
  <changelog author="mchandras@suse.de" date="1471348800">- Update to version 0.4.3.3
  * Fixes CVE-2016-5410 (bsc#992772)
  * Standard error is now used for errors and warnings
  * Several fixes for use in change roots
  * Systemd service file changes
  * Fixed translations in firewall-config
  * Command line clients
  * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)</changelog>
  <changelog author="mchandras@suse.de" date="1472817600">- Relax permissions for default installation files. The files in
  /usr/lib/firewalld are the default ones as shipped by the package and
  there is nothing secret in them.</changelog>
  <changelog author="mchandras@suse.de" date="1477915200">- Update to version 0.4.4
  * firewall-applet: Use PyQt5
  * firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
    D-Bus property
  * New helpers Q.931 and RAS from nf_conntrack_h323
  * firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  * firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
    table
  * New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
    sane, sip, snmp and tftp
  * firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  * firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
    sequences
  * Misc bug fixes.
  * For the complete list of changes please see:
    https://github.com/t-woerner/firewalld/releases/tag/v0.4.4</changelog>
  <changelog author="mchandras@suse.de" date="1479124800">- Update to version 0.4.4.1
  * Translation updates form zanata
  * firewallctl: New support for helpers
  * firewallctl: Use sys.excepthook to force exception_handler usage always
  * firewall-config: Use proper source check in sourceDialog</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 0.4.4.2
  * firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
  * firewall.core.fw_nm: create NMClient lazily
  * Do not use hard-coded path for modinfo, use autofoo to detect it
  * firewall.core.io.ifcfg: Dropped invalid option warning with bad format string
  * firewall.core.io.ifcfg: Properly handle quoted ifcfg values
  * firewall.core.fw_zone: Do not reset ZONE with ifdown
  * Updated translations from zanata
  * firewall-config: Extra grid at bottom to visualize firewalld settings</changelog>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490616000">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
</package>
<package pkgid="4635aec120f007f2d5dd46624b69db7caa8a4fe6928eefcbde1a541dfe9a9923" name="mininet" arch="src">
  <version epoch="0" ver="2.2.1" rel="11.1"/>
  <changelog author="mchandras@suse.de" date="1456747200">- Initial commit of version 2.2.1
  * Add upstream mininet-2.2.1-private-mount.patch: Fixes mounts
    with newer systemd</changelog>
  <changelog author="mchandras@suse.de" date="1458820800">- Cherry-pick upstream patches (and one from PR) to fix compatibility
  with latest OVS releases.
  * Add mininet-2.2.1-add-ovs-testcontroller.patch: Take renamed
    ovs-testcontroller into consideration when checking for existing
    OVS controllers.
  * Add mininet-2.2.1-fallback-to-ovs-testcontroller: Fixes previous
    upstream patch to use the ovs-testcontroller if it's present.
  * Add mininet-2.2.1-default-ofport: Adds support for the new OpenFlow
    port if the controller listens to it.</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Use the openvswitch capabilities as dependencies to accept the
  openvswitch-dpdk packages as well.</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Adjust openvswitch dependencies since the openvswitch and openvswitch-dpdk
  packages have been merged into a single 'openvswitch' package.</changelog>
</package>
<package pkgid="381182c955cf3a61a6b724a064bbb51285366dc7b7aaa726ce0d16c441d9e296" name="mininet" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="11.1"/>
  <changelog author="mchandras@suse.de" date="1456747200">- Initial commit of version 2.2.1
  * Add upstream mininet-2.2.1-private-mount.patch: Fixes mounts
    with newer systemd</changelog>
  <changelog author="mchandras@suse.de" date="1458820800">- Cherry-pick upstream patches (and one from PR) to fix compatibility
  with latest OVS releases.
  * Add mininet-2.2.1-add-ovs-testcontroller.patch: Take renamed
    ovs-testcontroller into consideration when checking for existing
    OVS controllers.
  * Add mininet-2.2.1-fallback-to-ovs-testcontroller: Fixes previous
    upstream patch to use the ovs-testcontroller if it's present.
  * Add mininet-2.2.1-default-ofport: Adds support for the new OpenFlow
    port if the controller listens to it.</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Use the openvswitch capabilities as dependencies to accept the
  openvswitch-dpdk packages as well.</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Adjust openvswitch dependencies since the openvswitch and openvswitch-dpdk
  packages have been merged into a single 'openvswitch' package.</changelog>
</package>
<package pkgid="926df55fd9461dec09226cc43dabaa3b59d2ba2fa894ebbf56c0105d2f3c1f12" name="openvswitch" arch="src">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="852883537509e57d109a719a7f64f531f7fdbd99db5bab67e3a47a9c92427001" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="ec4af5b70e39acca6eebe67ff9079fe9b18556c3a01d45ef5359384629bf52c7" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="3ecd95534c3aa56a5ed50116d01765fefaf8bae654335a4c6836ec5e87caad42" name="openvswitch-ovn-central" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="73637cd0c1260954d35ee7d403f5053c96027da099d3569aa281e857e5f9cf3b" name="openvswitch-ovn-common" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="8783f4e3c13eb8d341e0801de34234022fa0f14c425a0ab4212899a57a701230" name="openvswitch-ovn-docker" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="c024d6b77c0ccb3d28b3c7e3f5bf6dcee7fbce7a66c98657218ca0ffc161c266" name="openvswitch-ovn-host" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="15c8eab0d2f951c819bb3066f56a7603f350f94dc31874bf8dae107ae5e71cef" name="openvswitch-ovn-vtep" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="a5e1b58afd96c7dbf1a42b5804ddcec1c445f07c782556ff338aa9222cef60ec" name="openvswitch-pki" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="ca98ceffe6d8b82c8b0bc1e35214d44c2ec90aeecd09ecf28a8582bd7ed69fa5" name="openvswitch-test" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="0a9600114e5d47cffc99e2f4c4fe8170460aacdfc95e2675635ee531092a8049" name="openvswitch-vtep" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="a85f34572ffacf64a35e22d1c2022adc4e1d8b4f47f43dcb4ad13e7819ffe65a" name="python-openvswitch" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="c28da950b729037fd603f0f5a2bf7898685d0350dfc5658a610f89edde7c08ba" name="python-openvswitch-test" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="115.1"/>
  <changelog author="mchandras@suse.de" date="1463745600">- Add missing %dir directive for /var/log/openvswitch</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Keep %prep small for speedier `quilt setup`. Kill __DATE__ from
  source. Drop all .la files that are in %_libdir.</changelog>
  <changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
  <changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
  <changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
  <changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
  <changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
  <changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
  <changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
  <changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
  <changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
  <changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
  <changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
  <changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
  <changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
  <changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
  <changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
  <changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
  <changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
</package>
<package pkgid="df5a4b2639a75746f8052b4a92d22fce8790c904983c6490a832c9d300ef39af" name="susefirewall2-to-firewalld" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="8.1"/>
  <changelog author="mchandras@suse.de" date="1459252800">- Initial commit for susefirewall2-to-firewalld-0.0.1</changelog>
  <changelog author="mchandras@suse.de" date="1459771200">- Fix Source URL</changelog>
</package>
<package pkgid="a84f89a1cc7a56eca424ccd0796986a6c0d01d8b722f2cb1d8a8f4f691e41bb1" name="susefirewall2-to-firewalld" arch="src">
  <version epoch="0" ver="0.0.1" rel="8.1"/>
  <changelog author="mchandras@suse.de" date="1459252800">- Initial commit for susefirewall2-to-firewalld-0.0.1</changelog>
  <changelog author="mchandras@suse.de" date="1459771200">- Fix Source URL</changelog>
</package>
</otherdata>