# changelog

author: Davide Cavalca <dcavalca@fedoraproject.org> - 6.0.0-5
changelog:
  - Relax test dependencies
  - relax version pins
  - drop ruff as it's not actually needed
  - drop eventlet as it's been retired


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.7.4-35
changelog:
  - Switch from 'setup.py test' to '\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    PATH="/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/bin:$PATH"\
    PYTHONPATH="${PYTHONPATH:-/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/lib64/python3.15/site-packages:/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/lib/python3.15/site-packages}"\
    PYTHONDONTWRITEBYTECODE=1\
    \
    PYTEST_XDIST_AUTO_NUM_WORKERS="${PYTEST_XDIST_AUTO_NUM_WORKERS:-12}" /usr/bin/pytest'
  - Resolves: rhbz#2319736


author: Dan Callaghan <djc@djc.id.au> - 0.9.2-29
changelog:
  - Updated license tag to valid SPDX identifier
  - Dropped nose dependency and usage of setuptools test command


author: Filipe Rosset <filiperosset@fedoraproject.org> - 1.10.2-8
changelog:
  - Modernize spec file: remove duplicate/circular Recommends
  - Fix description encoding issue
  - Remove PKG-INFO from %doc
  - Add manual page for ytmusicapi binary


author: David Auer <dreua@posteo.de> - 5.2-1
changelog:
  - Version 5.2 (rhbz#2322672, rhbz#2329901)
  - Remove patch
  - Remove setuptools version requirement in tox.ini


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.243-9
changelog:
  - Fixes from upstream git:
  - add history.xml support
  - fix machine list DB not being saved to qmc2.ini
  - update bundled LZMA SDK to 23.01
  - replace manual XML parsing with QXmlStreamReader


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.243-10
changelog:
  - Improvements to upstream git patches:
  - Add patches updating build configurations
  - Update patches based on PRs to their respective final versions


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 6.1.2-1
changelog:
  - qcint is API compatible but ABI incompatible with libcint; qcint is
    now the only library built on x86_64 and replaces libcint.
  - Update to 6.1.2.


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-14
changelog:
  - Look for kernels in /lib/modules/*/vmlinuz
  - Display the correct test-suite.log if %check fails
  - Enhance debugging in tests/run-qemu-sanity-check


author: Karel Volný <kvolny@redhat.com> 2.3.0-1
changelog:
  - new version 2.3.0 (rhbz#2403550)
  - see the upstream changelog at http://qmmp.ylsoftware.com/
  - removes mms plugin (moves to plugin pack)


author: Karel Volný <kvolny@redhat.com> 2.2.2-1
changelog:
  - new version 2.2.2 (rhbz#2355923)
  - update source URL
  - see the upstream changelog at http://qmmp.ylsoftware.com/


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.2-3
changelog:
  - drop unused yasm from BuildRequires:, part of:
    https://fedoraproject.org/wiki/Changes/DeprecateYASM


author: Karel Volný <kvolny@redhat.com> 2.3.0-1
changelog:
  - new version 2.3.0 (rhbz#2403551)
  - add MMS plugin (moved from qmmp)
  - add mpv plugin
  - see the upstream changelog at http://qmmp.ylsoftware.com/


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.0.20-2
changelog:
  - Switched to autotools build system (upstream preferred)
  - Dropped useless subpackages
  - Fixed requirement
    Resolves: rhbz#2355068


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-11
changelog:
  - Convert License tag to SPDX format
  - Convert to autosetup
  - Use relative symlinks from /usr/bin/* to ../libexec/rancid/*
  - Remove doc files that were duplicated in /usr/share/rancid


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-12
changelog:
  - Enable git as default VCS for new installs
  - Remove extraneous BuildRequires
  - Requires /usr/sbin/sendmail and cronie for crontabs
  - Requires openssh-clients and git
  - Suggests telnet


author: Troy Curtis Jr <troy@troycurtisjr.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Fixes: rhbz#2321632
  - Enable running the tests now that catch2 v3 is in Fedora, and switch
    build to standard gcc.
  - Disable fuzzers now that the unit tests are available.


author: Troy Curtis Jr <troy@troycurtisjr.com> - 3.3.3-1
changelog:
  - Upgrade to 3.3.3.
  - Fixes rhbz#2338796
  - Update URL to point to the new rapidfuzz GitHub organization.


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-5
changelog:
  - Major spec file overhaul for Fedora packaging compliance
  - Added compatibility wrapper for xdg import
  - Improved Qt resource and manpage generation logic
  - Refined file and symlink handling, .pth and compat modules
  - Cleaned up excludes, bytecode, and manual packaging


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-6
changelog:
  - Add xdg-wrapper.py and raysession_xdg_compat.py as packaged Sources
  - Reference those files using their Source4 and Source5 macros in the spec
  - Upload sources to distgit and adjust install logic to use Source macros


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-7
changelog:
  - Refactor install section: introduce DATADIR, PY_SITELIB, PY_LEGACY variables
  - Consolidate .pth and compat shim installation into loops
  - Clean up bytecode removal and DRY repeated paths
  - Fix rpmlint warnings and rebuild SRPM/RPM


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-9
changelog:
  - Improve resource handling: ensure Qt resources and fonts are
    correctly compiled/installed so icons and application fonts load
    at runtime (fix rcc detection and safe regeneration behavior).


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Orion Poplawski <orion@nwra.com> - 1.9.0-15
changelog:
  - Add upstream patch to use correct modulus and exponent in
    rdssl_rkey_get_exp_mod
  - Use SPDX license


author: Sumit Bose <sbose@redhat.com> - 0.17.1-11
changelog:
  - Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening


author: Sumit Bose <sbose@redhat.com> - 0.17.1-14
changelog:
  - Various fixes for issues found by static code scanners
  - Systemd security setting and CacheDirectory
  - use 'dnshostname' with net ads join
  - Install dbus policy in /usr/share, not /etc


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)
  - add a sshd helper to rescue, otherwise sshd does not start, PR 3510


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-7
changelog:
  - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218)
  - fix duplicate execution of automated recovery (RHEL-110659)
  - fix sorting of stage scripts (RHEL-132181)
  - add support for dbus-broker (RHEL-134213)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.16.20231006git8d00acdc
changelog:
  - Require util-linux
  - Modification of sumamry and description to express that is not compliant with LSB


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Convert license headers to SPDX format
  - Bug fixes and translation updates


  - Resolves: rhbz#2376500


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-1
changelog:
  - Modernize BuildRequires and License sections
  - Remove deprecated intltool and dbus-glib-devel
  - Update GTK and other dependencies to modern versions
  - Use SPDX license tag and HTTPS for URLs
  - Add missing build dependencies


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-2
changelog:
  - Modernize %install and %files sections
  - Switch to appstreamcli validate
  - Use more specific file paths in %files
  - Add comments and use modern macros


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-3
changelog:
  - Fix build dependencies and locale directories
  - Replace libmagic-devel with file-devel
  - Fix Armenian locale directory name (hye -> hy)
  - Add empty %check section to satisfy rpmlint


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-4
changelog:
  - Fix locale directory and add %check section
  - Rename Armenian locale directory from hye to hy
  - Add empty %check section to satisfy rpmlint


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.5.0-0
changelog:
  - New upstream version 1.5.0
  - Use prebuilt binary fonts instead of building from source
  - Fixes RHBZ #2296161


author: Akira TAGOH <tagoh@redhat.com> - 1.6.2-4
changelog:
  - Add fallback rule of monospace.
    See https://fedoraproject.org/wiki/Changes/SetDefaultMonospaceFallbackFont


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.4-0
changelog:
  - New upstream version 1.4
  - Use prebuilt binary fonts instead of building from source
  - Fixes RHBZ #2293878


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.5.0-0
changelog:
  - New upstream version 1.5.0
  - Use prebuilt binary fonts instead of building from source
  - Fixes RHBZ #2293815


author: Parag Nemade <pnemade AT redhat DOT com> - 1.5.0-1
changelog:
  - Previous build packaged only otf and xml files but not docs and conf files
    Let's rebuild this to make sure all packaged files available for installation


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 2.3-0
changelog:
  - New upstream version 2.3
  - Use prebuilt binary fonts instead of building from source
  - Fixes RHBZ #2295562


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.6-0
changelog:
  - New upstream version 1.6
  - Use prebuilt binary fonts instead of building from source
  - Fixes RHBZ #2293879


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-31
changelog:
  - Add patch to find systemd-journald config and avoid warning. Fixes rhbz#2361203
  - Add patch to fix false positive on Li0n from bin/sbin merge. Fixes rhbz#2382304


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-1
changelog:
  - Draft release
  - Update to new maintained fork at Codeberg:
    https://codeberg.org/schilytools/schilytools


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-2
changelog:
  - Bump release to include rmt package as requested
  - Added provides/obsoletes
  - Fixed up package versioning to avoid the use of epoch
  - Switch to autorelease


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-3
changelog:
  - Fix bogus date warning in spec
  - Added missing generaldocs macro for rmt
  - Unsuccessfully tried fixing check. Leaving it disabled as Fedora Sources 
    variant presently does not have this


author: Petr Khartskhaev <pkhartsk@redhat.com> - 2024.03.21-4
changelog:
  - Update license info
  - Replace spax and scpio subpackages with Provides due to them being compiled as symlinks
  - Re-add rmt's epoch
  - Re-add linker flags and add default rpm flags to make
  - Make tests functional by adding LD_LIBRARY_PATH and enable them
  - Re-add post and preun scriptlets for alternatives
  - Change rmt's location to bin instead of sbin in a cleaner way
  - Exclude 32bit architectures since the build was failing on them
  - Convert star 5 manfile to UTF-8


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Jerry James <loganjerry@gmail.com> - 5.4.5-41
changelog:
  - Fix FTBFS due to ncurses change
  - Update license to BSD-3-Clause
  - Stop building for 32-bit x86
  - Build in C17 mode to avoid FTBFS with GCC 15


author: Jakub Kadlcik <frostyx@email.cz> 3.3-1
changelog:
  - Make the INVALID_SPEC_TEMPLATE really invalid
  - Use quote from shlex instead of deprecated pipes
  - rpkg-macros.spec: testsuite work-around for new git
  - Fix FTBFS on Fedora 38+


author: Tom Callaway <spot@fedoraproject.org> - 2.8.0-1
changelog:
  - update to 2.8.0
  - filter out the "alternative-link-missing" and "alternative-generic-name-not-symlink" checks
    these reflect the OpenSUSE packaging guidelines, but NOT the Fedora ones (bz2208474)


author: Miro Hrončok <mhroncok@redhat.com> - 2.8.0-2
changelog:
  - Filter out cross-directory-hard-link
  - https://fedoraproject.org/wiki/Changes/Hardlink_identical_files_in_packages_by_default
  - Fixes: rhbz#2400621


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: John Kacur <jkacur@redhat.com> - 3.11-1
changelog:
  - Upgrade to rteval-3.11
  - rteval: cyclictest: Improve handling of truncated histogram output
  - rteval: timerlat: Improve handling of truncated histogram output


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Vít Ondruch <vondruch@redhat.com> - 0.5.0-1
changelog:
  - Update to abrt 0.5.0
    Resolves: rhbz#2385934
  - Fix FTBFS in Fedora rawhide/f43
    Resolves: rhbz#2385583


author: Vít Ondruch <vondruch@redhat.com> - 1:8.0.2-1
changelog:
  - Update to Action Pack 8.0.2.
    Related: rhbz#2238177
  - Fix missing security headers in Action Pack on non-HTML responses (CVE-2024-28103)
    Resolves: 2290530
    Resolves: 2290531
  - Avoid possible XSS on translation helpers (CVE-2024-26143)
    Resolves: 2266388
    Resolves: 2266389


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.0.20-8
changelog:
  - Backport upstream PR to remove base64 dependency
  - Backport upstream fix for ruby34 formatting change


author: Vít Ondruch <vondruch@redhat.com> - 0.18.0-1
changelog:
  - Update to Ethon 0.18.0.
    Resolves: rhbz#2411926
  - Add `libcurl.so.4` requires to make the dependency explicit.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-3
changelog:
  - Workaround for new gdk-pixbuf with glycin backend dependency (ref: bug
    2387002)
  - F-43: ignore test failure for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 8.3.0-25
changelog:
  - Fix module method function definition argument
    detected by c99 -Werror=incompatible-pointer-types
  - Use modern gem2rpm style
  - SPDX confirmation


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.1.0-24
changelog:
  - Use recent gem packaging style
  - Modify License tag
  - Use test-unit for testsuite
  - Upstream PR to suppress warnings for literal string


author: Vít Ondruch <vondruch@redhat.com> - 5.3.1-1
changelog:
  - Update to MiniMagick 5.3.1.
    Resolves: rhbz#2389591
  - Fix FTBFS in Fedora rawhide/f43
    Resolves: rhbz#2385590


author: Vít Ondruch <vondruch@redhat.com> - 0.5.5-6
changelog:
  - Disable test cases to workadoun FTBFS due to mariadb-connector-c-3.4.1-1.fc42
    Related: rhbz#2323148


author: Michal Schorm <mschorm@redhat.com> - 0.5.5-9
changelog:
  - Re-enable test cases, the FTBFS due to mariadb-connector-c-3.4.1-1.fc42 was fixed in
    mariadb-connector-c-3.4.3-10
    Related: rhbz#2323148


author: Björn Esser <besser82@fedoraproject.org> - 0.6.1.2-1
changelog:
  - New upstream release
  - Add patch with last upstream commits
  - Set GCC in C99 mode explicitly
  - Build devel package archful
  - Drop explicit Requires and Provides


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.10.0-35
changelog:
  - Adjust to mesa 24.2.2 change that swrast with dril does not expose
    accum buffers anymore
  - Adjust test result message with recent mesa


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.4.2-9
changelog:
  - Backport upstream change for updating SSL certs again for testsuite
  - Backport upstream fix for some OpenSSL method removal for ruby4_0


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-8
changelog:
  - Backport upstream patch for ruby34 hash formatting change
  - Add dependency for rubygem(base64) explicitly


author: Vít Ondruch <vondruch@redhat.com> - 1:3.1.16-1
changelog:
  - Update to Rack 3.1.16
    Resolves: rhbz#2124662
  - Denial of service in Content-Disposition parsing (CVE-2022-44571)
    Resolves: rhbz#2164714
    Resolves: rhbz#2164716
  - Denial of service in Content-Disposition parsing (CVE-2022-44570)
    Resolves: rhbz#2164719
    Resolves: rhbz#2164721
  - Denial of service in Content-Disposition parsing (CVE-2022-44572)
    Resolves: rhbz#2164722
    Resolves: rhbz#2164724
  - Denial of service in Multipart MIME parsing (CVE-2023-27530)
    Resolves: rhbz#2176477
    Resolves: rhbz#2176478
  - Denial of service in header parsing (CVE-2023-27539)
    Resolves: rhbz#2179649
    Resolves: rhbz#2179651
  - Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
    Resolves: rhbz#2265593
  - Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
    Resolves: rhbz#2265594
  - Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
    Resolves: rhbz#2265595
  - Possible Log Injection in Rack::CommonLogger (CVE-2025-25184)
    Resolves: rhbz#2345301
  - Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection (CVE-2025-27111)
    Resolves: rhbz#2349810
  - File Inclusion in Rack::Static (CVE-2025-27610)
    Resolves: rhbz#2351231
  - Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)
    Resolves: rhbz#2364966
  - Rack Session Reuse Vulnerability (CVE-2025-32441). Current version
    actually extracts the affected code into rack-session package.
    Resolves: rhbz#2364965


author: Vít Ondruch <vondruch@redhat.com> - 1:3.2.3-1
changelog:
  - Update to Rack 3.2.3
    Resolves: rhbz#2385295
  - Rack QueryParser has an unsafe default allowing params_limit bypass via
    semicolon-separated parameters (CVE-2025-59830)
  - Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion
    (CVE-2025-61919)
  - Improper handling of headers in `Rack::Sendfile` may allow proxy bypass
    (CVE-2025-61780)


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-1
changelog:
  - Update to Rack::Session 2.1.1
  - Rack::Session Session Persistence Vulnerability (CVE-2025-46336)
    Resolves: rhbz#2365151


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 7.0.3-200
changelog:
  - Update to RDoc 7.0.3
    Resolves: rhbz#2341304
    Resolves: rhbz#2401435
  - Apply upstream fix for error with gem install --document=rdoc,ri


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.22.2-4
changelog:
  - Add BR: rubygem(benchmark) for testsuite for ruby4_0 explicitly
  - Backport upstream patch to support ruby4_0 Ractor change


author: Vít Ondruch <vondruch@redhat.com> - 1.3.1-1
changelog:
  - Update to rspec-its 1.3.1.
    Resolves: rhbz#2321250
  - Use single quotes in tests to fix Ruby 3.4 compatibility.


author: Vít Ondruch <vondruch@redhat.com> - 1:4.1.1-1
changelog:
  - Update to Sinatra 4.1.1.
    Resolves: rhbz#2185968
  - Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header (CVE-2024-21510)
    Resolves: rhbz#2323117


author: Dan Callaghan <djc@djc.id.au> - 2.5.0-1
changelog:
  - new upstream release 2.5.0:
    https://github.com/janlelis/unicode-display_width/blob/v2.5.0/CHANGELOG.md


author: Dan Callaghan <djc@djc.id.au> - 2.6.0-1
changelog:
  - new upstream release 2.6.0:
    https://github.com/janlelis/unicode-display_width/blob/v2.6.0/CHANGELOG.md


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.23.1-2
changelog:
  - Apply upstream patch for ruby34 hash inspect formatting change
  - Apply upstream patch for ruby34 net-http legacy constants removal


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Michel Lind <salimma@fedoraproject.org> - 0.9.0-1
changelog:
  - Update to 0.9.0; Fixes: RHBZ#2347620
  - Disable assertions that fail at certain times of day; Fixes: RHBZ#2338148


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-5
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Michel Lind <salimma@fedoraproject.org> - 0.10.0-1
changelog:
  - Update to version 0.10.0; Fixes RHBZ#2303607
  - No longer uses proc-macro-error; Fixes RHBZ#2329702


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Michel Lind <salimma@fedoraproject.org> - 2.2.1-1
changelog:
  - Update to 2.2.1; Fixes RHBZ#2277401
  - Temporarily remove tests/ because of unsatisfied color-eyre dependency


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.3.0-6
changelog:
  - Re-generate with rust2rpm 27
  - Since it is easier to re-use Cargo.toml patches, replace the tomcli
    dependency with a patch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.0-8
changelog:
  - Re-generate with rust2rpm 27
  - Now that we can more easily re-apply Cargo.toml patches when updating, do
    not use tomcli to remove cargo-husky


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.2.0-4
changelog:
  - Unretirement request: pagure.io/releng/issue/12761 Revert "unused leaf
    package for more than two release cycles"


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to version 0.17.0; Fixes RHBZ#2316899
  - Re-enable all tests except test_procinfo, and a couple we had to skip


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-2
changelog:
  - Report and skip failing tests on non-x86_64 architectures
  - Fix tests failing to compile on 32-bit architectures


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-3
changelog:
  - Fix missing license metadata, texts
  - Fix missing license SPDX expression in Cargo.toml
  - Add a missing `BSD-3-Clause` term to `License`
  - Fix missing license texts
  - Add a rust2rpm.toml and generate the metadata patch with `cargo2rpm -p`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419337


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419341


author: Ben Boeckel <fedora@me.benboeckel.net> - 9.31-8
changelog:
  - Backport https://github.com/exg/rxvt-unicode/commit/417b540d6dba67d440e3617bc2cf6d7cea1ed968
  - Resolves: #2277965


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.0-3
changelog:
  - 2377132 - sane-backends: "scanimage --device=test --batch-count=2" hangs: Turns on unsafe asynchronous cancellation


author: Stephane Thiell <sthiell@stanford.edu> 0.6.1-7
changelog:
  - Migrate from deprecated setup.py build/install to pyproject macros
  - Switch Source0 to PyPI archive


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Tom Callaway <spot@fedoraproject.org> - 2.2.2-1
changelog:
  - update to 2.2.2
  - fix hardcoded versioning (with sed, not patch)
  - fixup .pc file
  - fix old minimum cmake version which breaks the build


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Remi Collet <remi@remirepo.net> - 1:2.0.3-6
changelog:
  - fix build with GCC 15 using patch from
    https://github.com/sclorg/scl-utils/pull/57
  - FTBFS rhbz#2385622 workaround to rhbz#2386537


author: Remi Collet <remi@remirepo.net> - 1:2.0.3-8
changelog:
  - raise cmake minimum version to 3.5
  - use arch-agnostic test for packaging /usr/lib64 (Joe Orton, PR #2)


author: Christian Krause <chkr@fedoraproject.org> - 2.8.1-1
changelog:
  - Update to 2.8.1 (#2254942)
  - Fix FTBFS (#2261685)
  - Adjust filenames
  - Set StartupWMClass in desktop file in order to enable the window manager
    to reference the correct desktop file (e.g. needed for the
    task switcher to show the correct application icon)
  - Add upstreamed patch to fix compile issue with GCC 14
  - Update license tag
  - Add BR: libmikmod-devel, libvpx-devel and sonivox-devel


author: Christian Krause <chkr@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 (#2330987)
  - Fix FTBFS (#2341334)
  - Remove patch already included upstream
  - Add BR: pipewire-jack-audio-connection-kit (needed for fluidsynth)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Jeremy Linton <jeremy.linton@arm.com> - 1.0-8
changelog:
  - Add default kernel compatibility flag and install.conf file to force kernel-install to do the right thing, work around BZ 2271674


author: Christian Iseli <christian.iseli@epfl.ch> - 5.1-1
changelog:
  - New upstream version
  - Fix FTBFS bugzilla 2385624
  - Update license definition according to upstream


author: Jakub Martisko <jamartis@redhat.com> - 4.9-6
changelog:
  - The manpage should no longer mention whether the SELinux is enabled/disabled on the system
  - It was based on the build system anyway
  - Resolves: rhbz#2396649


author: Jakub Martisko <jamartis@redhat.com> - 4.9-8
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Related: RHEL-144026


author: Jakub Martisko <jamartis@redhat.com> - 4.10-1
changelog:
  - Update to 4.10
  - Remove the --without-included-regex build option
    There were some fixes regarding the backrefences in the new release. 
    Removing the option fixed a testsuire failure in the backref test.


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.20.0-7
changelog:
  - Convert to SPDX license string and add missing licenses
  - Add macros for github owner/project/commit


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.49.13-1
changelog:
  - Update to 1.49.13
  - Remove ExcludeArch: ppc64le since it is now fixed:
    https://github.com/Drive-Trust-Alliance/sedutil/issues/489


author: Zdenek Pytela <zpytela@redhat.com> - 43.5-1
changelog:
  - Allow virtnetworkd get attributes of filesystems with extended attributes
  - Allow Polkit to get attributes of user terminals
  - Allow nfsidmap connect to xdm over a unix stream socket
  - Label /usr/share/accountsservice with accountsd_share_t
  - Allow systemd-resolved write to systemd-networkd socket
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  - Support sandboxing features for sysadm_t
  - Allow unconfined_t mounton on itself (bsc#1261035)


author: Zdenek Pytela <zpytela@redhat.com> - 43.6-1
changelog:
  - Allow accountsd dbus chat with systemd-homed
  - Allow accountsd read accountsd_share_t files
  - Fix file context specification for /usr/share/accountsservice
  - Allow xdm_exec_t be an entrypoint of login_userdomain
  - Allow sshd-session send a generic signal to sshd-auth
  - Allow virtnetworkd get attributes of filesystems with extended attributes
  - Allow Polkit to get attributes of user terminals
  - Allow nfsidmap connect to xdm over a unix stream socket


author: Vit Mojzis <vmojzis@redhat.com> - 43.6-2
changelog:
  - Advertise ownership of DPS-related file paths
  - Remove trigger{in|preun} triggers for binsbin and varrun
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  - Use docdir for documentation data directory
  - Move the awk post-requires to the minimum subpackage
  - Fix disabling modules in "%post minimum"


author: Zdenek Pytela <zpytela@redhat.com> - 45.1-1
changelog:
  - Do not backslash-escape underscores in file context specifications
  - Allow systemd_homework_t to delete systemd_homed_record_t dirs (bsc#1261359)
  - Allow sshd-auth/sshd-session get attributes of their sshd parent
  - Allow systemd-tmpfiles to adjust resource limits
  - Allow logwatch to getattr nsfs files
  - Allow xdm dbus chat with rhsmcertd
  - Allow dhcpc_hook_t unix_dgram_socket and module_request
  - Allow accountsd list accountsd_share_t dirs
  - Allow cloud init to domtrans into ssh keygen (bsc#1249964)


author: Zdenek Pytela <zpytela@redhat.com> - 45.2-1
changelog:
  - Allow init nnp domain transition do dirsrv_t and dirsrv_snmp_t
  - Allow NetworkManager_dispatcher_nvme_t check status of systemd services
  - Allow iptables_t read state of some processes
  - Label /dev/HID-SENSOR-.* with hid_sensor_device_t
  - Allow thump_t setattr on thumb_tmp_t lnk_files
  - Allow accounts-daemon read accountsd_share_t symlinks
  - Label /usr/bin/sudo-rs and /usr/bin/su-rs
  - Allow gpsd the setcap process capability


author: Zdenek Pytela <zpytela@redhat.com> - 45.3-1
changelog:
  - Allow sys_resource on execution of generic executables conditionally
  - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
  - Label /run/coreos with coreos_installer_var_run_t
  - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
  - Allow virtnwfilterd_t r/w on packet_socket (bsc#1264273)
  - Update fstools swap interfaces with dir search
  - Allow go-fdo-server to read system information
  - Add missing fc rule for org.gnome.DisplayManager (bsc#1264182)
  - config: make /etc/systemd/user same as /usr/lib/systemd/user
  - Do not audit iptables attempts to read other process state
  - Policy for go-fdo-server
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot


author: Zdenek Pytela <zpytela@redhat.com> - 45.4-1
changelog:
  - Update dbus_role_template() with communication over unix dgram socket
  - Allow staff user read nsfs files
  - Allow staff user additional sandboxing permissions
  - Dontaudit sa-update perfmon and sys_admin capabilities
  - packit: Stop notifying martinpitt for Cockpit test failures
  - Allow the kernel to execute also special files
  - Bring back execmem permission for svirt_tcg_t
  - Dontaudit tlp_t requesting dac_read_search (bsc#1265386)
  - Leave content of virtqemud_use_execmem empty
  - Dontaudit libvirt-daemons execmem
  - Allow virtstoraged to setattr fixed disk devices
  - Dontaudit ksmtuned dac_read_search and dac_override capabilities
  - Remove unused hypervkvp_unit_file_t
  - Allow mock create and use its private tmpfs files
  - Allow samba-bgqd send to nmbd over a unix datagram socket
  - Dontaudit apcupsd dac_override (bsc#1261232)
  - Allow virtqemud_t to call and transition into udev


author: Zdenek Pytela <zpytela@redhat.com> - 45.5-1
changelog:
  - Add anaconda_ioctl_fifo_files_install() and anaconda_write_fifo_files_install()
  - Allow install_t domain transition to insights_client_t
  - Allow staff user mounton /var/lib dirs
  - Allow systemd-coredump signull container runtime
  - Allow blueman get the attributes of a tmpfs filesystem
  - portage_compile_domain: Require xdm_xserver_tmp_t type
  - Add missing interface requirements
  - Dontaudit virt_driver_domain execmem
  - fixed file after comment from zpytela.
  - added caddy related paths.
  - Remove extra parameters from interface headers
  - Update bootupd policy for running lsblk
  - Allow pcscd_t to search cgroup


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.15-1
changelog:
  - restorecon.py: exclude more paths
  - Improve disable_ipv6 plugin then_text
  - Update generated configuration files
  - Update translations


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-122982)
  - rescan-scsi-bus.sh: Replace 'which' with built in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix missing output fields in --export format (RHEL-119246)
  - sg_inq: re-add Unit serial number field (RHEL-119246)


author: Paul Pfeister <code@pfeister.dev> - 0.15.0-1
changelog:
  - Importable module renamed to sherlock_project (see Debian 1072733).
  - --dump-response flag added to aid in debugging.


author: Marta Lewandowska <mlewando@redhat.com> - 15.8-4
changelog:
  - Phase 1 of the bootloader updates proposal implementation
  - https://fedoraproject.org/wiki/Changes/BootLoaderUpdatesPhase1


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Marcel Metz <me@marcel-metz.net> - 1.2-1
changelog:
  - Updated upstream: Project was moved to https://github.com/aklomp/shrinkpdf
  - New upstream release 1.2


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304308)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0 (rhbz#2316879)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323726)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329755)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 (rhbz#2359282)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Tarik ROKHSANE <trkrksn@proton.me> - 4.400-1
changelog:
  - Update to new upstream release 4.400
  - Remove fontconfig scaling matrix (upstream resized glyphs to match standard
    Arabic fonts in v3.000; the 1.2x scale factor is no longer needed)


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-1
changelog:
  - Upgrade to SIMDe 0.8.2
    Resolves: rhbz#2251016
  - Use upstream ci.sh
  - Fix build on aarch64 and backport some upstream fixes


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-2
changelog:
  - use upstream PR to fix tests with clang on aarch64
  - switch to noarch for the devel subpackage (tests still run on all arches)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.11.0-28
changelog:
  - Convert the spec from tabs to spaces
  - Refactor and update the spec to follow the latest packaging guidelines


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.70.0-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

  - Tue Aug 27 2024 Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-3
  - Fixed initialization regression that caused compat tree never be populated


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-1
changelog:
  - Rebuilt 1.4.0 from slim-fork
  - Updated Fedora and selinux patches to correspond to 1.4.0
  - Note no need to remove files from slim.service and libslim.so.
  - selinux patch now removes xserver_arguments   -nolisten tcp -deferglyphs 16
  - TOD0: changes to the default wallpaoer for Fedora, perhaps through a patch


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-2
changelog:
  - Changed default theme to the current Fedora theme
  - dropped desktop-backgrounds-basic and included f42-backgrounds-base


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-4
changelog:
  - Changed  
    
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ;
    RUSTFLAGS="${RUSTFLAGS:--Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn}" ; export RUSTFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON -DUSE_PAM=yes  to 
    
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ;
    RUSTFLAGS="${RUSTFLAGS:--Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn}" ; export RUSTFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON -DUSE_PAM=yes -DUSE_CONSOLEKIT=no -DBUILD_SHARED_LIBS=no -DBUILD_SLIMLOCK=yes (per RH BZ #2173236, comment #18)
  - Also removed rm /builddir/build/BUILD/slim-1.4.0-build/BUILDROOT//usr/lib64/libslim.so as a consequence	- Removed /usr/lib64/libslim.so.1.4.0 from before the config files
  -Changed daemon default to no in slim.conf


author: Tom spot Callaway <spotaws@amazon.com> - 25.11.4-1
changelog:
  - i came to rebuild this for lua, but I figured I would bump it to the
    latest while I was here, so now it is at 25.11.4


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.1-1
changelog:
  - Version 1.1.1 (rhbz#2264233)
  - Upstream mentions documentation improvements and build-system changes. In
    the sources, there's a bit of churn, which seems to be fixes and
    cleanups.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.1-2
changelog:
  - Add missing BuildRequires
  - Update license tag to SPDX spelling (this was actually done in the
    previous commit.)


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.2-1
changelog:
  - Update to 0.9.2
  - Unpin sev, reqwest, x509-parser, and asn1-rs deps. from exact versions
  - Allow x509-parser 0.18 and asn1-rs 0.7


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.16-1
changelog:
  - update to 1.1.16 (resolves rhbz#2405379)
  - drop obsolete patches
  - apply upstream patch to fix appstream data


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.18-1
changelog:
  - update to 1.1.18 (resolves rhbz#2420854)
  - drop obsolete patch
  - add missing cairo-1.0 and xlib-2.0 typelib dependencies for tests
  - add new icons to file list
  - run GTK3 tests under Xvfb


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Peter Hanecak <hany@hany.sk> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - build_type_safety_c lowered to work around several "incompatible pointer type"
    errors


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.3.1-1
changelog:
  - Update to 1.3; Fixes: RHBZ#2379679
  - Backport upstream commit to use the systemd journal; Fixes: RHBZ#2375403


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Robert Scheck <robert@fedoraproject.org> 4.00-4
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.3-14
changelog:
  - Remove macros obsolete in Fedora
  - Use CMake RPM macros to build and install
  - Build and run the tests
  - Do not glob over the .so version
  - Test with the system gtest instead of the bundled one


author: Martin Gansser <martinkg@fedoraproject.org> - 1:2.4.1-1
changelog:
  - Update to 2.4.1
  - Add 9ae2b6cc83ce5cdaec58cb4d2aed2fb5ae60b7c8.patch to restore FindSOLID.cmake
    so that the FreeSOLID library can be found again


author: David Cantrell <dcantrell@redhat.com> - 0.4.0-37
changelog:
  - Rebuild against latest iniparser
  - Update spec file macro use
  - Fix compile issues with latest gcc


author: Artem Polishchuk <ego.cordatus@gmail.com> - 0.274-8
changelog:
  - Modernize Cmake
  - https://fedoraproject.org/wiki/Changes/CMake_ninja_default
  - https://fedoraproject.org/wiki/Changes/CMake_drop_install_vars


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 3.2.1-38
changelog:
  - Add patch to fix ambiguous references to StringTemplate
  - Add patch to avoid using deprecated "new Integer" and "new Boolean"
  - Change license to BSD-3-Clause


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Tom Callaway <spot@fedoraproject.org> - 8.0.3-3
changelog:
  - lua-devel is no longer needed, suricata is getting lua support from a bundled rust crate
  - this seems weird and wrong, but whatever
  - added libunwind-devel as BR since the configure script wants it (and Fedora has it)


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Drop upstreamed C23 patch
  - Add patch to properly detect the secure_getenv function
  - Figure the License fields out all over again
  - Rename swi-prolog-nox to swi-prolog-cli
  - Combine swi-prolog-x into swi-prolog-win


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Jerry James <loganjerry@gmail.com> - 0-0.20.20230627gite6ac3af
changelog:
  - Switch to the cvc5 git branch
  - Drop all patches
  - Package is now header-only and therefore noarch


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.0-1
changelog:
  - Second release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.0


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.1-1
changelog:
  - Third release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.1


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-1
changelog:
  - Fourth release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.2


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-2
changelog:
  - Temporarily disabled the buildtime checks until an approach is finalized
  - See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/ZSHSHZKVA4XJQBJD7FMMCALKN4UP5SAJ/


author: Josue Hernandez <josherna@redhat.com> - 6.04-0.36
changelog:
  - Update zlib version to zlib-1.2.11
  - Resolves: CVE-2022-37434 CVE-2018-25032 CVE-2016-9840 CVE-2016-9843


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Peter Czanik <peter@czanik.hu> - 4.10.2-1
changelog:
  - update to 4.10.2
  - disable SNMP support temporarily
  - remove patches made redundant by the version update


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.9-1
changelog:
  - update upstream URL
  - add tmpfiles configs for Image Mode
  - rebase to the latest upstraem release (rhbz#2419756)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 261~rc3-1
changelog:
  - Version 261~rc3
  - Various smaller and larger fixes
  - A hint is emitted if init is called with the legacy telinit args
    (rhbz#2479961)
  - Various messages for missing dlopened libraries have been downgraded
    (rhbz#2463540)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 261~rc3-1
changelog:
  - Version 261~rc3
  - This is the first signed version. C.f.
    https://forge.fedoraproject.org/releng/tickets/issues/10765,
    https://forge.fedoraproject.org/infra/ansible/pulls/3387.


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Jonathan Wright <jonathan@almalinux.org> - 1.98.4-1
changelog:
  - update to 1.98.4
  - Allow nftables to satisfy firewall dependency in lieu of iptables rhbz#2453924
  - Fix 45s timeout on shutdowns in certain cases rhbz#2440864
  - Fixes CVE-2026-34165 rhbz#2454571
  - Fixes CVE-2026-33762 rhbz#2454572


author: Scott K Logan <logans@cottsay.net> - 0.8.90-32
changelog:
  - Fix svg2png.sh permissions after build
  - Review SPDX license identifier
  - Switch to %license macro


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream fix for savannah bug 65838, commit 1e6ce98e (fedora#2427654)
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS) (fedora#2389217)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582 (fedora#2380007)


author: Tony Asleson <tasleson@redhat.com> - 0.10.4-8
changelog:
  - Workaround for: https://github.com/open-iscsi/rtslib-fb/issues/220
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2383084


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.9.6-0.1
changelog:
  - Snapshot of upcoming upstream release 0.9.6
  - New upstream source at github
  - Removed patches and hacks merged upstream
  - Installs a default systemd unit tayga.service that points to a default config
    (similar to Debian and upstream)
  - Pulled support for older EL releases


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.15-3
changelog:
  - Fixed SPDX license case, it was according to the SPDX standard, but
    now it should be more easy to validate with some XML validators


author: Peter Bieringer <pb@bieringer.de> - 7.6-110
changelog:
  - add patch to fix errors on GCC 15 (#2341423)
  - add patch to fix some warnings
  - change URLs to GitHub repository


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Jochen Breuer <brejoc@gmail.com> - 0.2.7-1
changelog:
  - Update to version 0.2.7
    - Switch to poetry with gh#22 and some more security updates: gh#23 gh#24
    - Fixes for gh#9 gh#10


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.18.4-23
changelog:
  - Patch for libxml2 2.12.0 API constness change
  - Patch for variable name confusion with errno
  - Use libsoup-3, linking with both libsoup-2 and -3 is not supported


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.13.16-42
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (Zbigniew Jędrzejewski-Szmek)
  - Fix GCC build, compiling with -std=gnu17


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78771-2
changelog:
  - Update collection from svn77561 to svn78771
  - Add chempid
  - Add dnsrecord
  - Add fits-astro
  - Add glmatrix
  - Add mohelper
  - Add mystyletau
  - Add query-astro
  - Add quickderivs
  - Add register-transfer-level
  - Add statementsp
  - Update 70 components


author: Tom Callaway <spot@fedoraproject.org> - 12:2025-1
changelog:
  - convert to simple metapackage
  - thank you for your service, you can rest now.
  - lots and lots of old changelogs in the git history, but with the change, they're kinda irrelevant, so I dropped them.


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77598-3
changelog:
  - Update to svn77598
  - update tagpdf starray numspell moderncv latex-tagging-status latex-lab-dev jsonparse beamer-reveal amsaddr


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78352-4
changelog:
  - Update to svn78352
  - new packages: aliascnt, beamertheme-westlake, elegantbook, elegantnote,
                  elegantpaper, fixtounicode, fox-listings, memoize-ext,
                  metacapture, milestonetimeline, pyjupyter, realscripts,
                  simplex, spotxcolor, tokglobalstack, tokgroupmark, xstix2
  - lots of existing packages updated
  - fix Obsoletes on newcommand-doc (bz2447035)


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78824-5
changelog:
  - Update collection from svn78352 to svn78824
  - Add booktabstabular
  - Add clawxiv
  - Add cleveref-icelandic
  - Add dirtreex
  - Add infufrgs
  - Add ltmermaid
  - Add metaphor
  - Add simplesystemtex
  - Add smartnotes
  - Add styleitems
  - Add user-persona
  - Add zebra
  - Update 53 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78847-6
changelog:
  - Update collection from svn78824 to svn78847
  - Add lucide-admonitions
  - Update 24 components
  - Remove preview


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Tom Callaway <spot@fedoraproject.org> - 12:svn75480-6
changelog:
  - Update amsrefs apacite authordate biblatex biblatex-chicago biblatex-dw
    biblatex-ext biblatex-juradiss biblatex-publist biblatex-swiss-legal
    biblatex-trad biblatex2bibitem biblist bibtopic bibunits chicago
    citeall collref harvard jmb jurabib multibib nar nmbib notes2bib oscola
    showtags splitbib usebib xcite
  - add cls Provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78803-8
changelog:
  - Update collection from svn75480 to svn78803
  - Add biblatex-abs-annote
  - Add biblatex-ams
  - Update biblatex-gb7714-2015, biblatex-nature, biblatex-oxref


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77587-2
changelog:
  - remove Requires: tex(uarial.sty), it is optional in the code and not provided by texlive (bz437624)
  - update asmeconf asmejour har2nat llncs lni mitthesis novel oup-authoring-template sysuthesis tugboat
    ualberta univie-ling ut-thesis uwa-letterhead uwa-pcf uwa-pif


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78756-3
changelog:
  - Update collection from svn77587 to svn78756
  - Add bibleref-sbl
  - Add delvierre
  - Add deutschesmuseum
  - Add iacrj
  - Add jouthesis
  - Add jyu-chem-thesis
  - Add nxtlatex
  - Add onlinebrief24
  - Add sblarticle
  - Add sblbook
  - Add sblfonts
  - Add sblidx
  - Add sblreport
  - Add uvlhighlight
  - Update 34 components
  - Remove shtthesis


author: Tom Callaway <spot@fedoraproject.org> - 12:svn76267-2
changelog:
  - Update musicography, piano, xpiano
  - fix latex3 issue with leadsheets (bz2455217)
  - drop explicit provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78246-6
changelog:
  - Update collection from svn77044 to svn78246
  - Add sourcesans
  - Add sourceserif
  - Update 192 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77106-1
changelog:
  - Update to svn77106
  - description fixes
  - licensing fixes
  - manual license handling (be careful with minim)
  - updated components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78670-3
changelog:
  - Update collection from svn77516 to svn78670
  - Add countwords
  - Add lua-list-hyphen
  - Add luahyperbolic
  - Add lualineno
  - Update 50 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78823-2
changelog:
  - Update collection from svn77389 to svn78823
  - Add corasdiagram
  - Add eurion
  - Add sneaker
  - Add svg-animate
  - Update 45 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77034-3
changelog:
  - update latex2e tools to the latest upstream version as of 2026-02-10 (bz2437303)
    this is mostly longtable, array, and varioref
  - update amscls amsmath atbegshi atveryend auxhook babel-english bigintcalc bitset
    bookmark colortbl epstopdf-pkg etoolbox fancyhdr geometry gettitlestring grfext
    hycolor hypcap hyperref intcalc kvdefinekeys kvoptions kvsetkeys letltxmacro
    ltxcmds mfnfss natbib pagesel pdfescape pdftexcmds psnfss refcount
    rerunfilecheck stringenc uniquecounter url


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78733-4
changelog:
  - Update collection from svn77034 to svn78733
  - Add pdfmanagement
  - Add tagpdf
  - Update 41 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn74022-3
changelog:
  - drop drawing-with-metapost (license "OpenPublication" is non-free)
  - fix summaries
  - fix license tags


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78607-6
changelog:
  - Update collection from svn74022 to svn78607
  - Update comprehensive
  - fix missing -doc provides/obsoletes


author: Tom Callaway <spot@fedoraproject.org> - 12:svn72890-6
changelog:
  - Fix knuth & public domain license labels to be correct
  - Fix capitalization on summaries that needed it
  - Flush out unnecessary INSTALL file in enctex


author: Tom Callaway <spot@fedoraproject.org> - 12:svn72203-4
changelog:
  - Update babel-spanish, hyphen-catalan, hyphen-galician, hyphen-spanish, texlive-es
  - Fix missing -doc provides/obsoletes
  - use auto file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78568-3
changelog:
  - Update collection from svn77082 to svn78568
  - Update 57 components
  - Remove pdfmanagement-testphase


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78834-4
changelog:
  - Update collection from svn71515 to svn78834
  - upstream moved all the xetex dependent packages here...
  - Add ctex
  - Add ctex-faq
  - Add shtthesis
  - Add xecjk
  - Add xetex-devanagari
  - Add xetexref
  - Update 16 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn73414-5
changelog:
  - Update babel-albanian babel-bosnian babel-croatian babel-danish babel-dutch
    babel-finnish babel-friulan babel-irish babel-norsk babel-romanian
    babel-romansh babel-samin babel-scottish babel-slovenian babel-swedish
    babel-welsh turkmen
  - Add provides for .cls files


author: Tom Callaway <spot@fedoraproject.org> - 12:svn54074-4
changelog:
  - Update babel-polish, hyphen-polish, polski, texlive-pl
  - Fix missing -doc provides/obsoletes
  - use automatic file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn73303-4
changelog:
  - Update babel-portuges, hyphen-portuguese, latex-via-exemplos
  - Fix missing -doc provides/obsoletes
  - Use auto file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78746-6
changelog:
  - Update collection from svn78456 to svn78746
  - Add cardgame
  - Update crossword, rpgicons
  - Add missing -doc Provides/Obsoletes


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3-3
changelog:
  - apply following patches from RHEL 10
    - tftp: propagate exit codes in non-interactive mode
    - fix creation of /var/lib/tftpboot on bootc systems


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 0.34.0-2
changelog:
  - Remove older patches
  - QEMU is no longer broken for the cases we need.
  - The optional package suggestion was never fully implemented, so drop it
    for now.


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.3-2
changelog:
  - Backport upstream CVE fixes
  - Fixes rhbz#2452969 CVE-2026-3945
  - Fixes rhbz#2455913 CVE-2026-31842
  - Run upstream test suite


author: Jakub Kadlčík <frostyx@email.cz>
changelog:
  - Defer submodule detection to git
  - Many improvements to tests and they now run during package build
  - New config option `buildconfig.test_version_suffix`


author: Miro Hrončok <mhroncok@redhat.com> - 1:8.4.3-44
changelog:
  - Drop needles runtime requirements on tk-devel and tcl-devel
  - Make the package installable with tk/ctl 8 as well as tk8/tcl8 compat packages
    Resolves: #2337797


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Stewart Smith <trawets@amazon.com> - 1.4.48-29
changelog:
  - Update project and source URLs.
  - Update description to include the author's suggestions of successors


author: dsoumis <dsoumis@redhat.com> - 1:10.1.52-3
changelog:
  - Add noarch in ExclusiveArch as per: https://github.com/fedora-
    java/javapackages-validator/issues/292#issuecomment-4040344159


author: Alessio <alciregi_AT_fedoraproject.org> - 0.48.1-2
changelog:
  - Changed pyproject.toml in order to allow urwid > 2 urwid 3 specifically,
    the version in rawhide. Now toot is installable in F43. Btw the tui
    interface doesn't work.


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Miro Hrončok <miro@hroncok.cz> - 4.53.1-1
changelog:
  - Update to 4.53.1
  - Requires packaging >= 26 and virtualenv >= 21.1
  - Adds manual page
  - Adds optional shell completion (tox+completion package), installed by
    default
  - Fixes: rhbz#2440111


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-5
changelog:
  - Fix tests for F41 https://bugzilla.redhat.com/show_bug.cgi?id=2301337
  - Revert exclude broken test on s390


author: Adrian Freihofer <adrian.freihofer@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0
  - Drop sha1/sha256 Fedora patches (already upstream in 1.3.0)
  - Replace downstream OpenSSL 4.0 patch with upstream cherry-pick (6dcc3b2)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Vincent Mihalkovic <vmihalko@redhat.com> - 2.3.1-1
changelog:
  - update to 2.3.1, switch source to GitLab unix-tree archive
  - refresh patches for 2.3.1 (tree-static-analysis.patch tree.c hunk)


author: Ken Goldman <kgoldman@us.ibm.com> - 1:2.3.1-1
changelog:
  - Add support for loadexternal schemes
  - Fix ObjectTemplates to accept caller curveID
  - Add Nuvoton configure utilities to VS projects
  - ifdef out functions deprecated with openssl 3.x
  - Recode the OpenSSL pkeyutl uses.  OpenSSL 3.x no longer ignores the oaep hash algorithm for the pkcs1 scheme.
  - Add userWithAuth to unseal policy sample scripts.  This is best practice.
  - Add policyparameters, policycapability


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
      resolves: RHEL-61801
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Carl George <carlwgeorge@fedoraproject.org> - 5.5.3-1
changelog:
  - Update to version 5.5.3 rhbz#2218490
  - Change runtime dependency from /usr/bin/node to /usr/bin/node-<major>
  - Avoid broken command symlinks that can happen after a nodejs major
    version bump


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Patsy Griffin <patsy@redhat.com> - 2026b-1
changelog:
  Update to tzdata-2026b (#2461119)
    - British Columbia’s 2026-03-08 spring forward is expected
      to be its last transition as it moves to permanent -07.


author: Akira TAGOH <tagoh@redhat.com> - 1.9.0-1
changelog:
  - New upstream release.
    Resolves: rhbz#2347165
  - Disable OpenSSL support.
    OpenSSL plugin isn't packaged. should be no harm.


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Jens Petersen <petersen@redhat.com> - 17.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode17.0.0/
  - https://blog.unicode.org/2025/09/unicode-170-release-announcement.html


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 16.0.01-1
changelog:
  - Version 16.0.01
  - License tag is updated and converted to proper SPDX
  - The ttf subpackage is dropped and will be removed from systems


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Zipinfo: remove the extra %c that cause invalid reads
  - Zipinfo: fix the whitespace formating of the help message
  Related: RHEL-59972


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Michal Hlavinka <mhlavink@redhat.com> - 1.114-14
changelog:
  - drop console.apps files as pam no longer uses those and pam_console
    was dropped https://fedoraproject.org/wiki/Changes/RemovePamConsole


author: Michael Jeanson <mjeanson@efficios.com> - 0.15.0-1
changelog:
  - New upstream release
  - The 'signal' flavour of liburcu was removed upstream
  - Enable compiler atomics


author: Charles R. Anderson <cra@alum.wpi.edu> - 0.5.20^20241111git7ef9e26-2
changelog:
  - Rebuilt for Tcl/Tk 9.0 (#2337805)
  - Patch to always set -D_REENTRANT since Tcl 9.0 no longer sets TCL_THREADS,
    and add -std=gnu17 to CFLAGS since GCC 15 changed to gnu23 which fails.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@remirepo.net> - 9.0.2-1
changelog:
  - Valkey 9.0.2 - February 3, 2026
  - Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.0-0.1.beta1
changelog:
  - Update to 0.9.0-0.1.beta1
  - Add python3dist(setuptools-gettext)
  - Fixed icon installation
  - Fixed desktop validation
  - Fixed setuptools discovery warnings


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.7.3-1
changelog:
  - New upstream release: A security release
  - Includes fix for VSV00017 aka CVE-2025-8671, rhbz#2388222


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 8.0.0-1
changelog:
  - New upstream release
  - New pkg-varnish-cache checkout
  - Added cflag -Wno-error=discarded-qualifiers to build on fedora while waiting for upstream


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 2026.4.1-1
changelog:
  - update to 2026.4.1 rhbz#2387335
  - Fixes CVE-2026-27803 Unauthorized collection management operations due to improper access control
  - Fixes CVE-2026-27801 Two-factor authentication bypass allows unauthorized access and data deletion
  - Fixes CVE-2026-27802 Privilege Escalation via Unauthorized Bulk Permission Update
  - Fixes CVE-2026-27898 Information disclosure via API partial update


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - Handle (no traceback) "invalid-syntax" code from Ruff
  - log.debug() all git commands
  - do not let "git apply" pollute stderr with whitespace errors


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Carl George <carlwgeorge@fedoraproject.org> - 2.8.0-9
changelog:
  - Port to new golang packaging guidelines
  - Use vendor tarball for build dependencies
  - Remove golang-github-vrothberg-vgrep-devel subpackage rhbz#2446694


author: Jerry James <loganjerry@gmail.com> - 5.4-1
changelog:
  - Version 5.4
  - Stop building for 32-bit x86
  - SPDX migration
  - Get the tarball from github
  - Use the system-defined vimfiles_root macro
  - Install metainfo in the metainfo directory
  - Validate the metainfo


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: Petr Pisar <ppisar@redhat.com> - 1.2.4-41
changelog:
  - Adapt to GCC 15 (bug #2341514)
  - Correct a license tag to "BSD-3-Clause AND MIT-open-group AND SMLNJ"


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3^20241114.git11e15a1-2
changelog:
  - Fix issues with /usr/bin/ and /usr/sbin/ merge (#2363531)
  - Always use consolehelper, implicitly allowed for root,
    remove consoleuser sub-package
  - Remove pam_console.so from vpnc.pam (not available anymore)


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Major Hayden <major@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Fixes CVE-2025-11065: go-viper/mapstructure updated to v2.4.0
  - Resolves: rhbz#2390882, rhbz#2399729, rhbz#2397062


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-1
changelog:
  - update to 1.0.36 (#2246227)
  - drop obsolete patches
  - fix some tests in i686
  - simde-0.8.2 is now required
  - run all tests on aarch64, all issues resolved
  - review skipped tests on i686, ppc64le and s390x


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-3
changelog:
  - use upstream way of running tests
  - run unit tests
  - re-enable most tests on s390x now that they pass
  - skip failing test on ppc64le and s390x with GCC 15


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.37-1
changelog:
  - update to 1.0.37 (resolves rhbz#2349655)
  - skip new failing tests on i686 and ppc64le
  - re-enable wasm2c/spec/float_exprs.txt test, now that GCC 15 is fixed


author: hydai <hydai@hyd.ai> - 0.17.0-1
changelog:
  - Release 0.17.0
  - Bump C API library version (capi_version) to 0.1.1
  - Drop Patch0: Poller context refactor merged upstream in 0.17.0
    (WasmEdge/WasmEdge#4509)


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.0-1
changelog:
  - Toggle ADB secure mode by default
    + ADB will no longer auto-connect on session start
    + You may use the new waydroid adb connect command to connect ADB
    + To connect ADB, you will need to provide authorization on the Android side
  - Rotate and trim waydroid.log file at 5MB
  - Hide system apps from the desktop applications menu
    + To make a system app visible in your apps menu, switch NoDisplay=false in its desktop file
  - Do not hide the main Waydroid launcher after enabling multi-windows mode
  - Add desktop action to stop Waydroid session
    + Right-click the Waydroid entry in your desktop application launcher, then Stop Waydroid
  - Add desktop action to re-initialize Waydroid
    + Right-click the Waydroid entry in your desktop application launcher, then Initialize Waydroid
    + This allows switching between VANILLA and GAPPS
  - Make sure to stop waydroid session on user log-out
  - Add new waydroid command with no arguments, alias for waydroid show-full-ui
  - Add new waydroid bugreport command to gather logs for a bug report
  - Forward Android notifications to the desktop
    + Requires updating the Android system image to a compatible version


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.1-1
changelog:
  - Fix graphical initialization with Python 3.14 and newer (rhbz#2425593)
  - Allow using block device as pre-installed image files


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.2-1
changelog:
  - Attempt to further fix initialization with Python 3.14
  - Fix desktop file update logic for headless apps
  - Add Vulkan support for xe kernel driver
  - Allow passing arguments to "waydroid logcat"


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Wolfgang Stöggl <c72578@yahoo.de> - 0.8.2^git20220525.b9aeec6-1
changelog:
  - Update to post-release git snapshot on 0.8.2
  - Add patch:
    websocketpp-0.8.2-compatibility_fixes_for_boost_1.87.patch, which
    fixes FTBFS with Boost 1.90
  - Update cmake_noarch patch
  - Drop patches:
    websocketpp-0.8.2-fix-cmake-find-boost.patch
    websocketpp-0.8.2-cpp20-fixes.patch
    websocketpp-0.8.2-cmake40.patch


author: Christian Krause <chkr@fedoraproject.org> - 2.8.4-4
changelog:
  - Fix FailsToInstall in F42 due to orphaned package (php-erusev-parsedown)
    by removing that dependency (RHBZ#2342582)


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Neal Gompa <ngompa@fedoraproject.org> - 0.5.0-3
changelog:
  - Refresh build dependencies to match actual build requirements
  - Refresh free codec patch
  - Drop ffmpeg 7 compatibility patch as its included in this release


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Joe Doss <joe@solidadmin.com> - 1.0.20260223-1
changelog:
  - Update to 1.0.20260223
  - syncconf: account for persistent keepalive removed from config file
  - config: preserve const correctness
  - wg-quick@.service: add deps on wg-quick.target
  - wg-quick: linux: do not unnecessarily set sysctl
  - wg-quick: use addconf instead of setconf
  - wg-quick: linux: deal with resolvconf migration more gracefully
  - wg-quick: pass on # comments to {Pre,Post}{Up,Down}
  - syncconf: account for psks removed from config file
  - wg-quick: linux: use smallest mtu, not largest


author: Shawn W Dunn <sfalken@opensuse.org> - 0.7-1
changelog:
  - Update to 0.7
  - Add 0001-fix-config-path.patch to put configs in the correct place
  - Add 0002-remove-google-chrome.patch to remove Google Chrome and enable
    Firefox as default browser
  - Update to libbase-aa0da7a355b04b1dd8572a94261a0b0c497e1a85
  - Change Recommends: to firefox, foot, and wdisplays for functionality


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: David Cantrell <dcantrell@redhat.com> - 1.2.4.1-40
changelog:
  - Modernize the spec file with newer macros
  - Pull source from github using forge macros since the original site
    has disappeared
  - Patched for latest glibc and gcc to handle warnings
  - Use SPDX license expression for the License tag


author: Tom Callaway <spot@fedoraproject.org> - 4.2.6-1
changelog:
  - so, funny story. turns out this thing is still being actively developed.
    and... i just noticed. whoops. sorry.
  - anyways, new achievement: Back From The Dead
  - update to 4.2.6


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.1.3-2
changelog:
  - spec cleanup and modernization - use https for spec urls - sort BR in
    alphabetical order - silent rpmlint


author: Neal Gompa <ngompa@fedoraproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races (#2319081)
  - Fix minor spec formatting inconsistencies


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-1
changelog:
  - update to xen 4.21.0
    rebase mini-os
    use .xz xen tarball instead of .gz
    fix quotes around sed command
    update libxenstore version
    package libxenmanage and xen-watchdog-sleep.sh files
    add a new package for test files
    renumber patches
    use json-c instead of yajl
  - fix bug in xen code when using json-c
  - fix code issues detected by gcc16


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-5
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
  	[XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.2.9-2
changelog:
  - Backport upstream patches for upstream 2 issues
    - Fix exporting only active layers
    - Sanitize a call to realloc (redhat #2252679)


author: Hans de Goede <hans@hansg.org> - 3.2.9a-1.20250317gitce9782a
changelog:
  - Update to 3.2.9a + latest git changes to fix build with -std=c11
  - Switch to upstream appdata/metainfo and desktop file
  - Drop all patches (all upstreamed)
  - Resolves: rhbz#2341567
  - Resolves: rhbz#2385740


author: Pavel Reichl <preichl@redhat.com> - 7.0.1-1
changelog:
  - Update to upstream v7.0.1
  - Move xfs_healer systemd units from xfsprogs-xfs_scrub to main xfsprogs package
  - Related: rhbz#2467694


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Greg Hellings <greg.hellings@gmail.com> - 4.3.1-1
changelog:
  - New upstream version 4.3.1 which already has editor fixed
  - Updated dependencies
  - Removed all patches


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.45-1
changelog:
  - xkeyboard-config 2.45
    xkeyboard-config changed from /usr/share/X11/xkb to /usr/share/xkeyboard-config-2/,
    with the same contents and the old location symlinked to the new one.
    Add a pretrans script to move the old location to the new one to stick with the
    upstream packaging approach.


author: Tom spot Callaway <spotaws@amazon.com> - 3.0.7-5
changelog:
  - revert 6ca325d Fix libsv include path, while libsv upstream has moved
    their header location, the libsv in fedora has not moved it yet as of
    1.2-7


author: Tom Callaway <spot@fedoraproject.org> - 4.7-39
changelog:
  - am i wrong for keeping a motif app alive in 2025? No, it is the kids who are wrong.
  - uh, apply fix for compiling with c23 (gcc15)


author: Jonathan Wright <jonathan@almalinux.org> - 1.60.4-1
changelog:
  - update to 1.60.4 rhbz#2334236
  - re-enable builds against libxml2, no more bundled libexpat
  - fixes rhbz#2310136
  - fixes rhbz#2310146
  - fixes rhbz#2310152


author: Simone Caronni <negativo17@gmail.com> - 23.0.0-6
changelog:
  - Clean up SPEC file.
  - Trim changelog.
  - Do not disable debug stripping (caught by rpminspect) tests.


author: Dominik Mierzejewski <dominik@greysector.net> - 25.0.0-1
changelog:
  - Update to 25.0.0 (resolves rhbz#2384262)
  - Download and validate GPG signature
  - Switch to meson build system


author: Simone Caronni <negativo17@gmail.com> - 0.6.604^20230328git857d892-1
changelog:
  - Update to latest snapshot.
  - Clean up SPEC file.
  - Trim changelog.
  - Drop devel subpackage (no headers?).


author: José Expósito <jexposit@redhat.com> - 2024.1-2
changelog:
  - Own the /usr/share/doc/xorgproto directory
    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2283223


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.23-1
changelog:
  - Update to xserver 21.1.23
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 24.1.12-1
changelog:
  - Update to xwayland 24.1.12
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.7-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix build with GCC15 (Dominik Mierzejewski)


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.8.3-1
changelog:
  - New upstream version 5.8.3 (fixes RHBZ#2453487, CVE-2026-34743)
  - Add Arabic language translations


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Ondrej Sloup <osloup@redhat.com> - 4.2.3-17
changelog:
  - Update license tag to the SPDX format (GPL-2.0-only)
  - Fix /etc/passwd flags for locked and deactivated account (rhbz#2093381)


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 4.1.5^git20251117.c9a0e98-1
changelog:
  - Removed debug package creation opt-out.
  - Updated to Git revision c9a0e98 (Nov 17, 2025).
  - Updated the SPDX license expression.
  - The examples can now be found in the package documentation directory.
  - All package summaries and descriptions have been updated.
  - The README-file has been removed from the package as it doesn't contain any
    useful information for Fedora users.
  - The license file can now be found in the package license directory.
  - Made the generated project file architecture-independent.


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Martin Gieseking <martin.gieseking@uos.de> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Dropped rpath patch which is no longer required
  - Updated license (libzint is now licensed under BSD-3-Clause)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.0.0-1
changelog:
  - Update to upstream 7.0.0 (fixes rhbz#2307507)
  - License audit and update to SPDX license expressions (fixes rhbz#2118200)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.1.0-1
changelog:
  - Update to upstream 7.1.0 (fixes rhbz#2330000, rhbz#2331292)
  - Update license string with final SPDX expression


