transmission-3.00-bp154.1.67

- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_transmission-daemon.service.patch

- Fix build with RPM 4.16: move installation of translations from
  %build to %install section.

- Update to transmission 3.00:
  + Common:
  - Allow the RPC server to listen on an IPv6 address.
  - Change TR_CURL_SSL_VERIFY to TR_CURL_SSL_NO_VERIFY and enable
    verification by default.
  - Go back to using hash as base name for resume and torrent
    files.
  - Handle "fields" argument in "session-get" RPC request.
  - Limit the number of incorrect authentication attempts in
    embedded web server to 100 to prevent brute-force attacks.
  - Set idle seed limit range to 1..40320 (4 weeks tops) in all
    clients.
  - Add Peer ID for Xfplay, PicoTorrent, Free Download Manager,
    Folx, Baidu Netdisk torrent clients.
  - Announce INT64_MAX as size left if the value is unknown.
  - Add TCP_FASTOPEN support.
  - Improve ToS handling on IPv6 connections.
  - Abort handshake if establishing DH shared secret fails.
  - Don't switch trackers while announcing.
  - Maintain a "session ID" file (in temporary directory) to
    better detect whether session is local or remote.
  - Change torrent location even if no data move is needed.
  - Support CIDR-notated blocklists.
  - Update the resume file before running scripts.
  - Make multiscrape limits adaptive.
  - Add label support to libtransmission and transmission-remote.
  - Parse session-id header case-insensitively.
  - Sanitize suspicious path components instead of rejecting
    them.
  - Add support for mbedtls (formely polarssl) and wolfssl
    (formely cyassl), LibreSSL.
  - Fix building against OpenSSL 1.1.0+.
  - Fix a number of memory leaks (magnet loading, session
    shutdown, bencoded data parsing).
  - Bump miniupnpc version to 2.0.20170509.
  - Switch to submodules to manage (most of) third-party
    dependencies.
  + GTK:
  - Add queue up/down hotkeys.
  - Modernize the .desktop file.
  - Add AppData file.
  - Add symbolic icon variant for the Gnome top bar and.
    when the high contrast theme is in use.
  - Update file icon when its name changes.
  - Switch from intltool to gettext for translations.
  + QT:
  - Bump minimum Qt version to 5.2.
  - Fix dropping .torrent files into main window on Windows .
  - Fix prepending of drive letter to various user-selected paths
    on Windows.
  - Fix sorting by progress in presence of magnet transfers.
  - Fix .torrent file trashing upon addition.
  - Add queue up/down hotkeys.
  - Reduce torrent properties (file tree) memory usage.
  - Display tooltips in torrent properties (file tree) in case
    the names don't fit.
  - Improve UI look on hi-dpi displays.
  - Use session ID (if available) to check if session is local
    or not.
  - Use default (instead of system) locale to be more flexible.
  - Modernize the .desktop file.
  + Daemon:
  - Use libsystemd instead of libsystemd-daemon.
  - Harden transmission-daemon.service by disallowing privileges elevation.
  - Fix exit code to be zero when dumping settings.
  + Web Client:
  - Fix tracker error XSS in inspector.
  - Fix performance issues due to improper use of setInterval()
    for UI refresh.
  - Fix recognition of https:// links in comments field.
  - Fix torrent list style in Google Chrome 59+.
  - Show ETA in compact view on non-mobile devices.
  - Show upload file button on mobile devices.
  - Add keyboard hotkeys for web interface.
  - Disable autocompletion in torrent URL field.
- Remove transmission-3rdparty-no-download.patch,
  transmission-appdata.patch andRemove transmission-systemd.patch:
  merged upstream.
- Change build system from cmake to autoconf: replace
  %cmake/%cmake_build/%cmake_install with
  %configure/%make/%make_install.

- Use modern macros for cmake building
- Cleanup spec file with spec-cleaner

- No longer recommend -lang: supplements are in use

- Drop transmission-daemon-systemd source: No longer needed, and
  does in fact lead to a problem for endusers to set own config for
  the daemon. Dropping fixes boo#1139004.
- Pass explicit ENABLE_DAEMON=ON and WITH_SYSTEMD=ON to cmake,
  ensure we build upstreams daemon and systemd support.

- Added %global WITH_APPINDICATOR 1 to enable missing appindicator
  support

- fix boo#1111323 transmission-qt try to load translations from /usr/bin
  + upstream issue#736 recommends to use cmake instead of autotools
    because codes related to autotools are deprecated. Nowadays
    we manually install transmission-qt translations into /usr/
    share/qt5/ directory where is designed for official Qt project
    only, while cmake will install to the right location /usr/share/
    transmission/translations.
  + switch build time configuration from autotools to cmake
- refactored transmission-appdata.patch to cmake-oriented.
  + handle transmission-gtk.appdata.xml translations with
    intltool-merge which is used by upstream for desktop files
    in gtk/CMakeLists.txt
  + handle transmission-qt.appdata.xml installation in
    qt/CMakeLists.txt instead of in specfile, because anyway
    we binary patch the -gtk.appdata.xml.in, we'd better not
    binary patch one while add another one as Source. so the
    SOURCE4 is also dropped.
- add transmission-3rdparty-no-download.patch
  + transmission's cmake configuration will download and build
    some 3rd-party libraries that could not be found in system.
    we patch its ExternalProject_Add() method to avoid the download
    because there are already source codes for such 3rd-party
    libraries located in third-party directory. Also, our OBS
    build machine doesn't support downloading in the build VM.
- mark COPYING with %license tag instead of %doc tag
- add extras/{rpc-spec.txt,send-email-when-torrent-done.sh}
  as doc since upstream installs them as doc too

- Update to version 2.94:
  + All Platforms:
  - Fix building against LibreSSL.
  - Fix building against mbedTLS.
  - Fix torrents ETA calculation.
  - Fix cross-compilation issues caused by miniupnpc
    configuration test.
  + Qt Client: Fix bad downloaded percentage in DetailsDialog.
  + Web Client:
  - Fix tracker error XSS in inspector (CVE pending).
  - Fix torrent name HTML-escaping in trackers inspector tab.

- Remove marketing from description.

- Update to version 2.93:
  + Mitigate dns rebind attacks against daemon CVE-2018-5702).
  + Fix crash on handshake if establishing DH shared secret fails.
  + Fix crash when switching to next tracker during announcement.
  + Fix potential issue during password salt extraction in OOM
    situation.
  + Workaround glib_DEFUN- and glib_REQUIRE-related configuration
    issue.
  + Fix building against OpenSSL 1.1.0+.
- Drop 0001-transmission-build-against-openssl-1.1.0.patch: fixed
  upstream (commit id f91cf5a).
- Drop
  0002-Fix-coding-style-and-building-with-TR_LIGHTWEIGHT.patch:
  fixed upstream (commit id 8c8386a).
- Drop CVE-2018-5072.patch: fixed upstream (commit id cf7173df).
- Cleanup with spec-cleaner.
- Use https url.
- Use qmake/make_jobs macros for building qt binary.

- Add CVE-2018-5072.patch (backported from
  gh#transmission/transmission#468):  Mitigate dns rebind attacks
  against daemon (boo#1075921, CVE-2018-5072).
- Conditionalize usage of desktop_database_post/postun macros to
  suse_version < 1500: recent versions use file triggers.
- Add %check session: run make check.

- Backport support for OpenSSL 1.1
  + Added patches:
    0001-transmission-build-against-openssl-1.1.0.patch.
    0002-Fix-coding-style-and-building-with-TR_LIGHTWEIGHT.patch.

- boo#1052817 - Edit transmission-qt.desktop to handle magnet links
  (x-scheme-handler/magnet).

- Add transmission-systemd.patch: Look for libsystemd instead of
  libsystemd-daemon. The modules have been merged since
  systemd 209.

- Add transmission-appdata.patch to add, translate and install
  metainfo files for gtk application.
- Patch touches autotool files, add BuildRequires on libtool and
  run autoreconf -fi before ./configure; workaround an issue where
  aclocal fails due to "won't overwrite defined macro:
  glib_DEFUN".
- Add and install metainfo for transmission-qt as a separate
  source file.

- Update to version 2.92:
  + Mac Client: Build OSX.KeRanger.A ransomware removal into the
    app.
- Changes from version 2.91:
  + All Platforms:
  - Fix Makefile.am to include Windows patches into source
    archive.
  - Fix miniupnpc script to handle spaces and other special chars
    in paths.
  + Mac Client:
  - Prevent crash during group rules removal in some cases.
  - Fix failure to remove seeding completion notifications from
    notification center.
  - Show main window and scroll to torrent on notification click.
  - Fix issue on Yosemite where peers view didn't occupy all the
    available space when web seed view was hidden.
  + Qt Client: Fix existing running instance detection and torrents
    delegation when using DBus.
  + Daemon:
  - Fix building on Windows x86.
  - Add `--blocklist-update` argument description to
    transmission-remote man page.
  - Use `-rad` as short form of `--remove-and-delete` option in
    transmission-remote.

- Update to version 2.90:
  + All Platforms:
  - Fix renaming torrent files with common prefix.
  - Fix some more thread safety bugs in the tr_list datatype.
  - Fix infinite loop when removing torrent data.
  - Add support for CyaSSL/WolfSSL and PolarSSL cryptographic
    backends; bump OpenSSL minimum to v0.9.7.
  - Initial CMake build system support.
  - Many improvements to support Windows builds with MSVS and
    MinGW; drop XP/2003 support, only Vista and up now.
  - Allow building against system UTP and DHT libraries.
  - Fix several memory leaks and buffer overflows.
  - Support miniupnpc API v14.
  - Fix "prefetch-enabled" value type in settings.json (boolean
    instead of integer).
  - Fix some issues discovered by static analysis (cppcheck,
    coverity).
  - Fix invalid JSON encoding for non-printable characters.
  - Fix multi-threaded locale use when encoding/decoding JSON
    data.
  - Fix encrypted communication with libevent 2.1+.
  - Prevent completed pieces modification by webseeds.
  - Require absolute paths in RPC requests.
  - Fix and unify torrent origin display in GTK+, Qt and web
    clients.
  - Fix crash on session shutdown (evdns_getaddrinfo_cancel).
  - Retry if RPC server fails to bind to specified address.
  - Improve error checking on metadata retrieval.
  - Improve UTF-8 validity checking (merge changes from LLVM).
  - Don't build transmission-cli by default (it's long
    deprecated).
  + GTK+ Client:
  - Fix overshoot and undershoot indicators display with GTK+
    3.16+ in main window.
  - Don't require DISPLAY if started with `--version` argument.
  + Qt Client:
  - Improve performance in Torrent Properties dialog for torrents
    with lots of files.
  - Prevent entering file renaming mode with mouse double-click.
  - Add context menu on files tab of Torrent Properties dialog
    resembling that of Mac client.
  - Remove torrent file from watch directory even if "show
    options dialog" is not set.
  - Use theme-provided icons in system tray and About dialog.
  - Fix initial watch directory scan.
  - Improve filter bar look and feel; lots of other small visual
    fixes; RTL layout fixes.
  - Show message to the user when duplicate torrent is being
    added.
  - Improve magnets handling in main window.
  - Display notifications via tray icon if D-Bus is not
    available.
  - Show notice on top of filtered torrents list; clear whole
    filter on notice double-click.
  - Add proper compiler flags to indicate C++11 use.
  - Fix translation files loading.
  + Daemon:
  - Run as service on Windows when in background mode.
  - Rework directory watching, add support for native mechanisms
    on BSD/Darwin (kqueue) and Windows (ReadDirectoryChanges).
  - Don't make assumptions of remote path validity in
    transmission-remote.
  + Web Client:
  - Content Security Policy enhancements.
  - Enable "resume now" for queued torrents.
  - Mark appropriate fields in preferences dialog as HTML5 number
    fields.
  - Update to jQuery 1.11.2, jQueryUI 1.11.4; use jQueryUI menus
    instead of custom ones.
  + Updated translations.
- Pass --enable-external-b64 to configure: use the system provided
  b64 library.
- Pass --enable-cli to configure: retain the (deprecated) CLI
  interface.
- Add pkgconfig(zlip) and libb64-devel BuildRequires: new
  dependencies.
- Drop transmission-miniupnp14.patch: fixed upstream.

- Add transmission-miniupnp14.patch to fix compilation with
  miniupnpc API level 14

- Add rctransmission-daemon symlink for convenience.
- Fix usage of update-alternatives.

- Update to version 2.84 (bnc#887079, CVE-2014-4909):
  + All Platforms: Fix peer communication vulnerability.
- Changes from version 2.83:
  + All Platforms:
  - Licensing change: the GNU GPLv2 code can now be used under
    GNU GPL v2 or v3.
  - Fix network hanging issues that could occur when both UTP and
    DHT were enabled.
  - Fix 2.82 file descriptor leak when importing a blocklist.
  - Disallow torrents that contain "/../" in the path.
  - Fix 2.82 bug that didn't retain peers between sessions.
  - Fix potential dangling memory error in UDP tracker DNS
    lookups.
  - Remember a torrent's "queued" state between Transmission
    sessions.
  - Updated third party libraries: DHT updated to v0.22;
    miniupnpc updated to v1.9.
  - Autoconf script fixes: better detection of ccache, minupnpc.
  - Fix the X-Transmission-Session-Id header to be valid with the
    SPDY protocol.
  - Fix thread safety bugs in the tr_list datatype.
  - When determining free disk space on NetBSD>=6, support its
    Quota feature.
  - Windows portability improvements.
  + GTK+ Client: Fix threading issue on shutdown.
  + Qt Client:
  - Fix toggle-downloading-by-pressing-spacebar in the file list.
  - Fix "Open URL" crash from dangling pointer.
  - Support launching downloaded files from inside Transmission.
  - On Windows, use native Windows icons.
  - Improved network status info and tooltip in the status bar.
  - Fix "Open Torrent" dialog crash in Qt 5.2.
  + Daemon:
  - On systemd systems, fix config reloading via
    'systemctl reload'.
  - Use libevent's event loop.
  - Fix discrepancy in curl SSL setup between tr-daemon and
    tr-remote.
  - Fix broken OS X build.
  + Web Client:
  - Support file renaming in the web client.
  - Fix incorrect torrent state being displayed for magnet links.
  - Make URLs in the torrent's comment field clickable (and
    sanitize them to prevent cross-scripting).
  + Mac client fixes.
- Change license to (GPL-2.0 or GPL-3.0) and MIT, following
  upstreams relicensing.
- Switch Qt build to Qt5:
  + Replqce libqt4-devel BuildRequires with libqt5-linguist and
    libqt5-qtbase-devel.
  + Change qmake calls to be qmake-qt5 and lrelease to be
    lrelease-qt5.
  + Drop transmission-qt4.patch: no longer required.

- Update to version 2.82:
  + All Platforms:
  - Fix webseed crash.
  - Fix crash when adding UDP trackers whose host's canonical
    name couldn't be found.
  - Fix crash when sending handshakes to some peers immediately
    after adding a magnet link.
  - Fix crash when parsing incoming encrypted handshakes when the
    user is removing the related torrent.
  - Add safeguard to prevent zombie processes after running a
    script when a torrent finishes downloading.
  - Fix "bad file descriptor" error.
  - Queued torrents no longer show up as paused after exiting &
    restarting.
  - Fix 2.81 compilation error on OpenBSD.
  - Don't misidentify Tixati as BitTornado.
  + Mac Client:
  - Fix bug that had slow download speeds until editing
    preferences.
  + GTK+ Client:
  - Fix crash that occurred in some cases after using
    Torrent > Set Location.
  - Fix crash where on_app_exit() got called twice in a row.
  - Fix 2.81 compilation error on older versions of glib.
  - Can now open folders that have a '#' in their names.
  - Silence gobject warning when updating a blocklist from URL.
  + Qt Client:
  - Qt 5 support.
  + Web Client:
  - Fix syntax error in index.html's meta name="viewport".
  - Fix file uploading issue in Internet Explorer 11.
- Add transmission-qt4.patch: Revert the changes for Qt5, as we do
  not have it available yet.

- Update to version 2.81:
  + All Platforms:
  - Fix 2.80 bug that showed the incorrect status for some peers.
  - Better handling of announce errors returned by some trackers.
  - Fix compilation error on Solaris.
  + GTK+ Client:
  - Fix minor memory leaks.
  - Remove OnlyShowIn= from the .desktop file.
  + Qt Client: Remove OnlyShowIn= from the .desktop file.
  + Daemon: Change the systemd script to start Transmission after
    the network's initialized.
  + Web Client: Slightly better compression of png files.
  + Mac client fixes.

- Update to version 2.80:
  + All Platforms:
  - Support renaming a transfer's files and folders.
  - Remove the most frequent thread locks in libtransmission (ie,
    fewer beachballs).
  - Show the free disk space available when adding torrent.
  - Faster reading and parsing of local data files.
  - Better use of the OS's filesystem cache.
  - Lengthen the prefetch cache for data sent to peers.
  - Other small speedups.
  - Replace the previous JSON parser with jsonsl to resolve DFSG
    licensing issue.
  - Fix fails-to-build when compiling with
  - Werror=format-security.
  - Improved unit tests in libtransmission.
  - Tarballs are now released only in .xz format.
  + Mac Client:
  - Use VDKQueue for watching for torrent files.
  + GTK+ Client:
  - Simplify the tracker filter pulldown's interface (now matches
    the Qt client).
  - Synced preferences text & shortcuts.
  - Remove deprecated calls to gdk_threads_enter().
  - Silence a handful of console warnings.
  + Qt Client:
  - More efficient updates when receiving information from the
    server.
  - Add an option to play a sound when a torrent finishes
    downloading.
  - Add an option to start up iconified into the notification
    area.
  - Fix an issue with the tray icon preventing
    hibernation/logout.
  - Other CPU speedups.
  - Open the correct folder when clicking on single-file
    torrents.
  - Synced preferences text & shortcuts.
  - Fix non Latin-1 unit strings.
  + Daemon:
  - Add support for specifying recently-active torrents in
    transmission-remote.
  + Web Client:
  - Extend the cookie lifespan so that settings like sort order
    don't get lost.
  + Utils:
  - Support user-defined piece sizes in transmission-create.
- Replace systemd BuildRequires with pkgconfig(libsystemd-daemon)
  to match what configure is checking for.
- Drop transmission-fix-qt-translations-dir.patch: fixed upstream.

- Add transmission-daemon-systemd to sources
- Split transmission-daemon into sub-package, add systemd service
  and macros (service to be disabled by default)
- Create 'transmission' user to run transmission-daemon (dont run
  service as root).

- Update to version 2.77:
  + All Platforms:
  - Fix 2.75 regression that broke JSON parsing of real numbers
    in locales that don't use '.' as a decimal separator.
  - Don't invalidate the OS's file cache when closing files.
  - Fix overflow error when setting speed limits above ~8589
    kB/s.
  - Generated magnet links didn't include webseeds.
  - Fix minor memory leaks when using webseeds.
  + GTK+ Client:
  - Minor pluralization fixes in the UI.
  - Fix folder mis-selection issue in the Preferences dialog.
  - Fix GTK+ console warnings on shutdown.
  + Qt Client:
  - Fix non Latin-1 symbol issue when showing file transfer
    speeds.
  - Fix issue when creating new torrents with multiple trackers.
  - Fix lost text selection in the properties dialog's 'comment'
    field.
  + Daemon: Fix documentation errors in the spec and manpages.
  + Web Client: Fix minor DOM leak.
  + CLI: Fix transmission-cli failure when the download directory
    doesn't exist.

- Update to version 2.76:
  + All Platforms:
  - Better error logging when user-provided scripts can't be
    executed.
  - The "Time Remaining" property wasn't set for torrents with
    webseeds but no peers.
  - Fix rare error that created a directory name "$HOME".
  + GTK+ Client:
  - Fix sort-by-age regression introduced in 2.74.
  - The "Edit Trackers" window didn't resize properly due to a
    2.70 regression.
  - Raise the main window when presenting it from an App
    Indicator.
  + Qt Client:
  - Add magnet link support to transmission-qt.desktop.
  - Fix notification area bug that inhibited logouts & desktop
    hibernation.
  - Use the "video" icon when the torrent is an mkv or mp4 file.
  - Toggling the "Append '.part' to incomplete files' names" had
    no effect.
  - Fix display of the torrent name in the Torrent Options dialog
  - Fix cursor point bug in the filterbar's entry field.
  - Fix crash when adding a magnet link when Transmission was
    only visible in the system tray.
  - Fix free-memory-read error on shutdown.
  + Daemon:
  - Better watchdir support.
  - Documentation fixes in transmission-remote's manpage.
  + Web Client:
  - Fix indentation of the torrent list and toolbar buttons on
    mobile devices.
  + CLI:
  - If the Download directory doesn't exist, try to create it
    instead of exiting.

- Update to version 2.75:
  + Mac-only fixes.