# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.9.5-5
changelog:
  - Modernized spec file for rawhide/epel10 - Removed redundant %%global
    _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
    %%make_build for better compliance - Updated %%install to use more
    idiomatic install commands - Listed binaries explicitly in %%files to
    avoid warnings - Improved man page globs to be compression-neutral -
    Ensured correct directory ownership for logs


author: Jerry James <loganjerry@gmail.com> - 1.6.15-1
changelog:
  - Verion 1.6.15
  - Drop upstreamed const patch
  - Force use of environment-modules in Rawhide until Lmod is fixed


author: Michel Lind <salimma@fedoraproject.org> - 25.01-1
changelog:
  - Update to 25.01
  - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
  - Backport Debian patch to disable echo-ing password; Resolves:
    rhbz#2412315


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7-2
changelog:
  - Porting to qt6
  - Add %{name}-3.7-qwtconfig.pri.patch
  - Remove "env QT_QPA_PLATFORM=xcb" from GoldenCheetah.desktop


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7.1-1
changelog:
  - This is a patch release update for v3.7 to include high priority fixes for
    stability and security and to make new planning and calendar functionality
    available to a wider audience


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.13.3-29
changelog:
  - Use the bundled gtest. GTest 1.17.1 will require C++17, and this version of
    ITK can’t be compiled as C++17.


author: Michal Schorm <mschorm@redhat.com> - 1.0.5-42
changelog:
  - Start providing the lower-case 'judy-devel' name for compatibility with
    other RPM based distributions (rhbz#2435466)


author: Jerry James <loganjerry@gmail.com> - 1.24.11-1
changelog:
  - Version 1.24.11
  - Drop upstreamed vector overrun patch
  - Add patch to fix mismatched options to codim
  - BR e-antic-devel
  - BR and Recommend msolve
  - Move configuration steps to %conf
  - Remove pessimization on s390x


author: Jerry James <loganjerry@gmail.com> - 1.25.05-1
changelog:
  - Version 1.25.05
  - Drop upstreamed patches: no_gftables, fplll, codim-option, rightarrow
  - Add patch to avoid the deprecated strstream C++ header
  - Unbundle memtailor, mathic, and mathicgb


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.3-1
changelog:
  - Update to 1.54.3
  - Partially fixes CVE-2025-9615. To protect totally from it, see:
    https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2325.


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.2-1
changelog:
  - Updated to 1.52.2 release which has experimental IPv6 support.
  - Update CVE-2025-9615 related Requires and BuildRequires.
  - Fix typos found by codespell.


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.24-1
changelog:
  - Update to 1.2.24 release
  - Fixes a local privilege escalation bug with severity "important" (CVE-2024-9050)


author: Dan Fruehauf <malkodan@gmail.com> - 1.3.0-1
changelog:
  - Update from upstream to version 1.3.0
  - Support for no tunnel (dummy interface)
  - Support for SOCKS, local and remote binds


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.1-1
changelog:
  - Update to upstream 1.4.1
  - Local bind support
  - Remote bind support
  - Support for no remote device, sudo command, and no remote command


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.3-1
changelog:
  - Always run autoreconf -fvi
  - Fix file access for private key and known hosts (rhbz#2428396)
  - Fix pkg-config macro
  - Move D-Bus policy file to /usr/share/dbus-1/system.d/


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.4-5
changelog:
  - Go back to bundling dr_flac and dr_mp3, since it is not straightforward to
    patch for the current releases


author: Dominik Mierzejewski <dominik@greysector.net> - 2.0.5^20260117git1be041b-1
changelog:
  - update to 20260117 snapshot from stable-2.0 branch
  - fixes CVE-2025-14369 (resolves rhbz#2431177)
  - fixes rpmbuild -bi --short-circuit


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.0.0~20260117gitb00e4a3-1
changelog:
  - update to 20260117 snapshot from main (3.0) branch
  - fixes CVE-2025-14369 (resolves rhbz#2431178)
  - fixes rpmbuild -bi --short-circuit


author: Jerry James <loganjerry@gmail.com> - 4.4.0p4-1
changelog:
  - Version 4.4.0p4
  - Add upstream patch to fix id_Saturate
  - Upstream moved modules from libexecdir to libdir


author: Jerry James <loganjerry@gmail.com> - 4.4.1-1
changelog:
  - Version 4.4.1
  - Drop upstreamed type-mismatch and fix-id-saturate patches
  - Drop unused Java BRs (thanks to Marián Konček)
  - Remove dependency on surf-geometry


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.2-1
changelog:
  - update to 0.6.2 (resolves rhbz#2432808)
  - drop obsolete patches
  - backport upstream patches
  - use HTTPS in URLs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-1
changelog:
  - Version 0.5.0
  - New "zip" handler
  - Improved behaviour for zip/jar handlers when $SOURCE_DATE_EPOCH is not
    set


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.6.1-10
changelog:
  - Fix a typo in the License expression
  - Fix build not respecting distribution compiler flags; this means executables
    are now PIE, and the debuginfo package is now useful


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.3-1
changelog:
  - Updated to 4.0.3 release
  - Bundled antlr4-cpp-runtime-4.13.2
  - List packaged executables explicitly
  - Correct/update and better document the License expression


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2024.11.21.0-2
changelog:
  - Add an AppStream metainfo file
  - Include full license text in the packages
  - Include documentation in the package


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jan Macku <jamacku@redhat.com> - 1.31-1
changelog:
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (French)
  - Update translation files
  - Translated using Weblate (Turkish)


author: Jan Macku <jamacku@redhat.com> - 1.32-1
changelog:
  - Allow paths with /usr/sbin and /usr/bin as equivalent
  - mkosi: update conf to match latest mkosi version
  - Translated using Weblate (Italian)


author: Diego Herrera <dherrera@redhat.com> - 4.2.6-1
changelog:
  - Release 4.2.6 * Added angband_homedir to be able to play saving files to
    homedir * Added simple launcher to be able to pick what version to play *
    Added sound assets since now they are distributed under a compatible
    license


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Richard W.M. Jones <rjones@redhat.com> - 18.12.1-1.10
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Chad Lemmen <rpm@stansoft.org> - 1.6.1.p4-1
changelog:
  - added BuildRequires: rpcgen libtirpc-devel
  - added configure option --enable-minimal=yes to not build aace or glade
  - updated to 1.6.1.p4


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Neal Gompa <ngompa@fedoraproject.org> - 1.35.0-1
changelog:
  - Update to version 1.35.0
    Resolves: rhbz#2419155
  - Add patch to fix build with Linux 6.19+ headers


author: Neal Gompa <ngompa@fedoraproject.org> - 1.37.2-1
changelog:
  - Update to version 1.37.2
  - Resolves: rhbz#2447761
  - Backport fixes for various altarch build failures


author: Rasmus Ory Nielsen <ron@ron.dk> - 1.23-1
changelog:
  - Updated to 1.23
  - Removed obsolete vcf_plugin_tests patch
  - Remove invalid `-errors` from PERL_LIBS to fix linker warnings


author: Mateus Rodrigues Costa <mateusrodcosta@gmail.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Switch to new upstream meson build system
  - Start using manual RPM changelogs and add previous missing changelogs


author: Dominik Mierzejewski <dominik@greysector.net> - 122-1
changelog:
  - update to 122 (resolves rhbz#2342841)
  - rebase patch for using system GTest
  - fix setting the RPATH to private shared library
  - skip v8 tests (not available in Fedora)


author: Dominik Mierzejewski <dominik@greysector.net> - 126-1
changelog:
  - update to 126 (resolves rhbz#2439791)
  - backport upstream fix for https://github.com/WebAssembly/binaryen/issues/8360


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to 1.2.0 (close RHBZ#2401888)
  - Stop trying to support EPEL7, which is end-of-life
  - Port to pyproject-rpm-macros (close RHBZ#2377212)
  - Test the Python extension


author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Thomas E. Dickey <dickey@invisible-island.net> - 5.0.20250116
changelog:
  - update license (https://invisible-island.net/cdk/CHANGES.html#t20221018)
  - update URLs
  - update changelog


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
  - * CVE-2026-3913: Heap buffer overflow in WebML
  - * CVE-2026-3914: Integer overflow in WebML
  - * CVE-2026-3915: Heap buffer overflow in WebML
  - * CVE-2026-3916: Out of bounds read in Web Speech
  - * CVE-2026-3917: Use after free in Agents
  - * CVE-2026-3918: Use after free in WebMCP
  - * CVE-2026-3919: Use after free in Extensions
  - * CVE-2026-3920: Out of bounds memory access in WebML
  - * CVE-2026-3921: Use after free in TextEncoding
  - * CVE-2026-3922: Use after free in MediaStream
  - * CVE-2026-3923: Use after free in WebMIDI
  - * CVE-2026-3924: Use after free in WindowDialog
  - * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  - * CVE-2026-3926: Out of bounds read in V8
  - * CVE-2026-3927: Incorrect security UI in PictureInPicture
  - * CVE-2026-3928: Insufficient policy enforcement in Extensions
  - * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  - * CVE-2026-3930: Unsafe navigation in Navigation
  - * CVE-2026-3931: Heap buffer overflow in Skia
  - * CVE-2026-3932: Insufficient policy enforcement in PDF
  - * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  - * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  - * CVE-2026-3936: Use after free in WebView
  - * CVE-2026-3937: Incorrect security UI in Downloads
  - * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  - * CVE-2026-3939: Insufficient policy enforcement in PDF
  - * CVE-2026-3940: Insufficient policy enforcement in DevTools
  - * CVE-2026-3941: Insufficient policy enforcement in DevTools
  - * CVE-2026-3942: Incorrect security UI in PictureInPicture
  - Fix build errors
  - Refresh patches for new upstream changes
  - Remove patches merged by upstream
  - Hoshino Lina: Update to cef-146.0.6+g68649e2 (rhbz#2450085)


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.75-1
changelog:
  - Update to 146.0.7680.75
  - * CVE-2026-3909: Out of bounds write in Skia
  - * CVE-2026-3910: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
  - * CVE-2026-4439: Out of bounds memory access in WebGL
  - * CVE-2026-4440: Out of bounds read and write in WebGL
  - * CVE-2026-4441: Use after free in Base
  - * CVE-2026-4442: Heap buffer overflow in CSS
  - * CVE-2026-4443: Heap buffer overflow in WebAudio
  - * CVE-2026-4444: Stack buffer overflow in WebRTC
  - * CVE-2026-4445: Use after free in WebRTC
  - * CVE-2026-4446: Use after free in WebRTC
  - * CVE-2026-4447: Inappropriate implementation in V8
  - * CVE-2026-4448: Heap buffer overflow in ANGLE
  - * CVE-2026-4449: Use after free in Blink
  - * CVE-2026-4450: Out of bounds write in V8
  - * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  - * CVE-2026-4452: Integer overflow in ANGLE
  - * CVE-2026-4453: Integer overflow in Dawn
  - * CVE-2026-4454: Use after free in Network
  - * CVE-2026-4455: Heap buffer overflow in PDFium
  - * CVE-2026-4456: Use after free in Digital Credentials API
  - * CVE-2026-4457: Type Confusion in V8
  - * CVE-2026-4458: Use after free in Extensions
  - * CVE-2026-4459: Out of bounds read and write in WebAudio
  - * CVE-2026-4460: Out of bounds read in Skia
  - * CVE-2026-4461: Inappropriate implementation in V8
  - * CVE-2026-4462: Out of bounds read in Blink
  - * CVE-2026-4463: Heap buffer overflow in WebRTC
  - * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
  - * High CVE-2026-4673: Heap buffer overflow in WebAudio
  - * High CVE-2026-4674: Out of bounds read in CSS
  - * High CVE-2026-4675: Heap buffer overflow in WebGL
  - * High CVE-2026-4676: Use after free in Dawn
  - * High CVE-2026-4677: Out of bounds read in WebAudio
  - * High CVE-2026-4678: Use after free in WebGPU
  - * High CVE-2026-4679: Integer overflow in Fonts
  - * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.9^chromium146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
  - * High CVE-2026-5273: Use after free in CSS
  - * High CVE-2026-5272: Heap buffer overflow in GPU
  - * High CVE-2026-5274: Integer overflow in Codecs
  - * High CVE-2026-5275: Heap buffer overflow in ANGLE
  - * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
  - * High CVE-2026-5277: Integer overflow in ANGLE
  - * High CVE-2026-5278: Use after free in Web MIDI
  - * High CVE-2026-5279: Object corruption in V8
  - * High CVE-2026-5280: Use after free in WebCodecs
  - * High CVE-2026-5281: Use after free in Dawn
  - * High CVE-2026-5282: Out of bounds read in WebCodecs
  - * High CVE-2026-5283: Inappropriate implementation in ANGLE
  - * High CVE-2026-5284: Use after free in Dawn
  - * High CVE-2026-5285: Use after free in WebGL
  - * High CVE-2026-5286: Use after free in Dawn
  - * High CVE-2026-5287: Use after free in PDF
  - * High CVE-2026-5288: Use after free in WebView
  - * High CVE-2026-5289: Use after free in Navigation
  - * High CVE-2026-5290: Use after free in Compositing
  - * Medium CVE-2026-5291: Inappropriate implementation in WebGL
  - * Medium CVE-2026-5292: Out of bounds read in WebCodecs
  - removed ppc64le-build-error patch that is merged in upstream


author: Hector Martin <marcan@marcan.st> - 2:19.2.3-7
changelog:
  - Work around mgr `restful` module PyO3 failures
  - Fix NOTIFY_TYPES exceptions during module import (rhbz#2361850)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.0-1
changelog:
  - Update to v3.1.0
  - Drop Patch0 (duplicate definitions in code - backport from this release)
  - Drop Fedora-specific metainfo file (now provided by upstream)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.1-1
changelog:
  - Update to v3.1.1
  - Drop Patch2 (C99 issues) - backport from this release
  - Drop Patch3 (missing includes) - merged upstream


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.6.0-1
changelog:
  - 1.6.0 release RHBZ#2391533
  - Includes fixes for Cmake 4 RHBZ#2381184 RHBZ#2380497
  - re-enable tests. They no longer require external artifacts


author: Than Ngo <than@redhat.com> - 146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
    * CVE-2026-4439: Out of bounds memory access in WebGL
    * CVE-2026-4440: Out of bounds read and write in WebGL
    * CVE-2026-4441: Use after free in Base
    * CVE-2026-4442: Heap buffer overflow in CSS
    * CVE-2026-4443: Heap buffer overflow in WebAudio
    * CVE-2026-4444: Stack buffer overflow in WebRTC
    * CVE-2026-4445: Use after free in WebRTC
    * CVE-2026-4446: Use after free in WebRTC
    * CVE-2026-4447: Inappropriate implementation in V8
    * CVE-2026-4448: Heap buffer overflow in ANGLE
    * CVE-2026-4449: Use after free in Blink
    * CVE-2026-4450: Out of bounds write in V8
    * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    * CVE-2026-4452: Integer overflow in ANGLE
    * CVE-2026-4453: Integer overflow in Dawn
    * CVE-2026-4454: Use after free in Network
    * CVE-2026-4455: Heap buffer overflow in PDFium
    * CVE-2026-4456: Use after free in Digital Credentials API
    * CVE-2026-4457: Type Confusion in V8
    * CVE-2026-4458: Use after free in Extensions
    * CVE-2026-4459: Out of bounds read and write in WebAudio
    * CVE-2026-4460: Out of bounds read in Skia
    * CVE-2026-4461: Inappropriate implementation in V8
    * CVE-2026-4462: Out of bounds read in Blink
    * CVE-2026-4463: Heap buffer overflow in WebRTC
    * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
    * High CVE-2026-4673: Heap buffer overflow in WebAudio
    * High CVE-2026-4674: Out of bounds read in CSS
    * High CVE-2026-4675: Heap buffer overflow in WebGL
    * High CVE-2026-4676: Use after free in Dawn
    * High CVE-2026-4677: Out of bounds read in WebAudio
    * High CVE-2026-4678: Use after free in WebGPU
    * High CVE-2026-4679: Integer overflow in Fonts
    * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 147.0.7727.55-1
changelog:
  - Update to 147.0.7727.55
    * Critical CVE-2026-5858: Heap buffer overflow in WebML
    * Critical CVE-2026-5859: Integer overflow in WebML
    * High CVE-2026-5860: Use after free in WebRTC
    * High CVE-2026-5861: Use after free in V8
    * High CVE-2026-5862: Inappropriate implementation in V8
    * High CVE-2026-5863: Inappropriate implementation in V8
    * High CVE-2026-5864: Heap buffer overflow in WebAudio
    * High CVE-2026-5865: Type Confusion in V8
    * High CVE-2026-5866: Use after free in Media
    * High CVE-2026-5867: Heap buffer overflow in WebML
    * High CVE-2026-5868: Heap buffer overflow in ANGLE
    * High CVE-2026-5869: Heap buffer overflow in WebML
    * High CVE-2026-5870: Integer overflow in Skia
    * High CVE-2026-5871: Type Confusion in V8
    * High CVE-2026-5872: Use after free in Blink
    * High CVE-2026-5873: Out of bounds read and write in V8
    * Medium CVE-2026-5874: Use after free in PrivateAI
    * Medium CVE-2026-5875: Policy bypass in Blink
    * Medium CVE-2026-5876: Side-channel information leakage in Navigation
    * Medium CVE-2026-5877: Use after free in Navigation
    * Medium CVE-2026-5878: Incorrect security UI in Blink
    * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
    * Medium CVE-2026-5880: Incorrect security UI in browser UI
    * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
    * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
    * Medium CVE-2026-5883: Use after free in Media
    * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
    * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
    * Medium CVE-2026-5886: Out of bounds read in WebAudio
    * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
    * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
    * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
    * Medium CVE-2026-5890: Race in WebCodecs
    * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
    * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
    * Medium CVE-2026-5893: Race in V8
    * Low CVE-2026-5894: Inappropriate implementation in PDF
    * Low CVE-2026-5895: Incorrect security UI in Omnibox
    * Low CVE-2026-5896: Policy bypass in Audio
    * Low CVE-2026-5897: Incorrect security UI in Downloads
    * Low CVE-2026-5898: Incorrect security UI in Omnibox
    * Low CVE-2026-5899: Incorrect security UI in History Navigation
    * Low CVE-2026-5900: Policy bypass in Downloads
    * Low CVE-2026-5901: Policy bypass in DevTools
    * Low CVE-2026-5902: Race in Media
    * Low CVE-2026-5903: Policy bypass in IFrameSandbox
    * Low CVE-2026-5904: Use after free in V8
    * Low CVE-2026-5905: Incorrect security UI in Permissions
    * Low CVE-2026-5906: Incorrect security UI in Omnibox
    * Low CVE-2026-5907: Insufficient data validation in Media
    * Low CVE-2026-5908: Integer overflow in Media
    * Low CVE-2026-5909: Integer overflow in Media
    * Low CVE-2026-5910: Integer overflow in Media
    * Low CVE-2026-5911: Policy bypass in ServiceWorkers
    * Low CVE-2026-5912: Integer overflow in WebRTC
    * Low CVE-2026-5913: Out of bounds read in Blink
    * Low CVE-2026-5914: Type Confusion in CSS
    * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
    * Low CVE-2026-5918: Inappropriate implementation in Navigation
    * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets


author: Than Ngo <than@redhat.com> - 147.0.7727.101-1
changelog:
  - Update to 147.0.7727.101
    * Critical CVE-2026-6296: Heap buffer overflow in ANGLE
    * Critical CVE-2026-6297: Use after free in Proxy
    * Critical CVE-2026-6298: Heap buffer overflow in Skia
    * Critical CVE-2026-6299: Use after free in Prerender
    * Critical CVE-2026-6358: Use after free in XR
    * High CVE-2026-6359: Use after free in Video
    * High CVE-2026-6300: Use after free in CSS
    * High CVE-2026-6301: Type Confusion in Turbofan
    * High CVE-2026-6302: Use after free in Video
    * High CVE-2026-6303: Use after free in Codecs
    * High CVE-2026-6304: Use after free in Graphite
    * High CVE-2026-6305: Heap buffer overflow in PDFium
    * High CVE-2026-6306: Heap buffer overflow in PDFium
    * High CVE-2026-6307: Type Confusion in Turbofan
    * High CVE-2026-6308: Out of bounds read in Media
    * High CVE-2026-6309: Use after free in Viz
    * High CVE-2026-6360: Use after free in FileSystem
    * High CVE-2026-6310: Use after free in Dawn
    * High CVE-2026-6311: Uninitialized Use in Accessibility
    * High CVE-2026-6312: Insufficient policy enforcement in Passwords
    * High CVE-2026-6313: Insufficient policy enforcement in CORS
    * High CVE-2026-6314: Out of bounds write in GPU
    * High CVE-2026-6315: Use after free in Permissions
    * High CVE-2026-6316: Use after free in Forms
    * High CVE-2026-6361: Heap buffer overflow in PDFium
    * High CVE-2026-6362: Use after free in Codecs
    * High CVE-2026-6317: Use after free in Cast
    * Medium CVE-2026-6363: Type Confusion in V8
    * Medium CVE-2026-6318: Use after free in Codecs
    * Medium CVE-2026-6319: Use after free in Payments
    * Medium CVE-2026-6364: Out of bounds read in Skia


author: Than Ngo <than@redhat.com> - 147.0.7727.116-1
changelog:
  - Update to 147.0.7727.116
    * High CVE-2026-6919: Use after free in DevTools
    * High CVE-2026-6920: Out of bounds read in GPU
    * Medium CVE-2026-6921: Race in GPU
  - Fix rhbz#2458171, unexpanded macros in manpage


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Alexander Bokovoy <abokovoy@redhat.com> - 7.0-5
changelog:
  - Add COPYING license file to the documentation
  - Resolves: rhbz#2295837 - cifs-utils copyright not installed in package


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 0.10.0-1
changelog:
  - update to 0.10.0 (resolves rhbz#2424290)
  - add missing dependency on graphviz-devel for GStreamer pipeline previews


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.3.1-2
changelog:
  - Run autopoint before autoreconf, since apparently autoreconf doesn't
    do it automatically, but that breaks badly with gettext 0.25.


author: Jerry James <loganjerry@gmail.com> - 2.49.93-39
changelog:
  - Update to latest git snapshot
  - Add patch to fix FTBFS in the new-clx code
  - Add patch to avoid calling the deprecated siginterrupt function
  - Add VCS field
  - Setting LC_ALL is no longer necessary


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patch to fix undefined behavior (rhbz#2339979)
  - Add two patches to fix memory leaks
  - Do not force -O1


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patches to fix more undefined behavior
  - Fix misaligned memory accesses on ppc64le
  - Fix mismatched readline function declarations


author: Jerry James <loganjerry@gmail.com> - 2.49.95-6
changelog:
  - Update to latest git snapshot to fix gnulib issue
  - Update the French translation
  - Add patch to update POSIX structure sizes for 64-bit systems
  - Fix a broken file-stat test


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.1.5-1
changelog:
  - Update to release v2.1.5
  - Resolves: GHSA-pwhc-rpq9-4c8w (CVE-2024-25621)
  - Resolves: GHSA-m6hq-p25p-ffr2
  - Resolves: rhbz#2408134 rhbz#2408696 rhbz#2409604 rhbz#2410555
  - Resolves: rhbz#2412671
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.6-1
changelog:
  - rebase to latest upstream version (rhbz#2338620)
  - sync i18n patch with SUSE (Kudos to Berny Völker!)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/107536, ada/113536, ada/117517, ada/118343, c/122188, c++/120757,
  	c++/121981, c++/122302, fortran/108581, fortran/121616,
  	fortran/121939, go/104290, libstdc++/122062, libstdc++/122322,
  	middle-end/121922, middle-end/122133, target/110812, target/121599,
  	target/121652, target/121742, target/121780, target/121781,
  	target/121845, target/121875, target/122119, target/122177,
  	target/122187, target/122210, target/122220, target/122222,
  	target/122223, tree-optimization/121772, tree-optimization/122104,
  	tree-optimization/122213
  - package libgcobol.spec (#2401679)


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/81087, ada/118208, ada/118782, c++/122192, c++/122253, c++/122310,
  	c++/122381, c++/122421, fortran/107968, fortran/114023,
  	fortran/122206, fortran/122386, rtl-optimization/122321,
  	target/99930, target/118460, target/119079, target/120674,
  	target/121604, target/122097, target/122270, target/122323,
  	target/122516, target/122527, tree-optimization/122012,
  	tree-optimization/122394, tree-optimization/122408,
  	tree-optimization/122505
    - fix ICE while building firefox with LTO+PGO (#2395476, PR lto/122620)


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/111433, ada/115305, ada/122640, ada/123037, c/121506, c/123018,
  	c++/119580, c++/120529, c++/120876, c++/121325, c++/121445,
  	c++/122625, c++/122658, c++/122677, c++/122789, fortran/122709,
  	fortran/122977, libstdc++/122661, libstdc++/122726, libstdc++/122743,
  	libstdc++/122842, libstdc++/122921, lto/122515, middle-end/120052,
  	middle-end/120564, middle-end/121581, middle-end/122624,
  	rtl-optimization/122627, target/110796, target/118446, target/119275,
  	target/121853, target/122175, target/122189, target/122216,
  	target/122446, target/122539, target/122652, target/122656,
  	target/122692, target/122695, target/122858, target/122867,
  	target/122991, tree-optimization/121776, tree-optimization/122126,
  	tree-optimization/122225, tree-optimization/122943
  - create gnatgcc symlink only when building Ada
  - avoid building libssp and disabled libraries
  - remove various unpackaged files from the buildroot


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-6
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122668, c++/122752, c++/122772, c++/122834, c++/122922,
  	c++/123331, debug/121964, diagnostics/120063, fortran/107406,
  	libfortran/122936, libstdc++/120446, libstdc++/122812,
  	libstdc++/122907, middle-end/111817, middle-end/123392,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123523, target/117575,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	testsuite/123353, tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch
    - PRs c++/122070, c++/122550, c++/123597, libstdc++/123147,
  	middle-end/123107, middle-end/123703, target/119130, target/123742,
  	tree-optimization/122793, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-1
changelog:
  - This fixes a long standing bug; see the heading 02-14 on
  - https://cppad.readthedocs.io/latest/whats_new_24.html


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-2
changelog:
  - This fixes a bug in fun2val.hpp. This change will not be necessary
  - once the upstream source advances to 20240000.4.


author: Brad Bell <bradbell at seanet dot com> - 20250000.0-3
changelog:
  - 1. Add the year macro and use it to define soversion and Version.
  - 2. Remove the cppad-doc subpackage because documantion for this stable 
       version is not available at https://cppad.readthedocs.io/stable-2025/ .
  - 3. Change include_doc=true, cmake_install_docdir=NOTFOUND, and add
       make doc_user to test building, but not installing, user documentation.
  - 4. The ppc64le arch has been fixed and now the CppAD to_string test pass
       for long double (so we do not need to skip that test).
  - 5. Use get_started.cpp to test the installed version of CppAD.


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.6-2
changelog:
  - Fix infinite loop during module symbols initialization
  - Fix for "help -r" segfault in case of ramdump
  - arm64: add cpu context registers to better support gdb stack unwind
  - x86_64: Mark #VC stack unavailable when CONFIG_AMD_MEM_ENCRYPT is not set
  - Fix incorrect 'bt -v' output suggesting overflow


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.6-4
changelog:
  - Doc: add compilation requirements note in README
  - Fix "net -a" option on Linux 6.13 and later kernels
  - kmem: fix the determination of slab page due to invalid page_type
  - Enhance "kmem -i[=shared]" to display(or not) shared pages
  - Fix misleading CPU count in display_sys_stats()
  - arm64: add pac mask to better support gdb stack unwind
  - x86_64: Fix 'bt -S/-I' segfault issue
  - Fix build failure in readline lib
  - tools.c: do not use keywords 'nullptr' as a variable in code
  - Fix build failure on 32bit machine(i686)


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-4
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-5
changelog:
  - Add blk_mq shared tags support for dev -d/-D
  - Support running on X86_64 with RISCV target
  - RISCV64: Add 'PAGE DIRECTORY' property to the 'vtop' command
  - vmware_vmss: support segment registers
  - vmware_guestdump: support segment registers
  - Fix the segfault issue caused by "dis -s" command
  - Add a rustfilt command to demangle a mangled Rust symbol
  - Enable demangling a mangled Rust support
  - Enable resolving mangled Rust symbol in lockless ring buffer
  - Fix a compilation error on the old gcc version 8.5.0
  - Fix for log command printed a couple of empty lines
  - Optimize extensions's compiler from gcc to $(CC)
  - Fix get_pathname() not handling stacked mounts
  - Fix "mount <address>" fail when "super_block.s_files" unavaliable
  - Fix "mount" MNT_CURSOR entries (kernels 5.8-6.7)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.13-1
changelog:
  - Update to release v1.31.13
  - Resolves: rhbz#2333357, rhbz#2398406, rhbz#2398661, rhbz#2399063,
    rhbz#2399337
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.12-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.13-1
changelog:
  - Update to release v1.32.13
  - Final v1.32 release
  - Upstream fix
  - Fix for updated binutils config in rawhide (f44, f45) that blocks cri-o
    build


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.13-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.1-2
changelog:
  - Refresh spec file using go2rpm
  - Update spec file template using go2rpm
  - Use kubernetes-cni instead of containernetworking-plugins
  - Adds addition cni conflist
  - Use gocheck2 for tests


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-1
changelog:
  - Release CRI-Tools v1.35.0
  - Resolves: rhbz#2390054
  - Initial Fedora release
  - Upstream fixes from v1.34


author: Petr Menšík <pemensik@redhat.com> - 1.3.2-2
changelog:
  - New package dependency of dnscap (rhbz#2418607)
  - Modernize upstream RPM spec according to Fedora Packaging Guidelines
  - Provide also lowercase devel package name
  - Remove Group: and ldconfig obsolete features
  - Uploaded new sources
  - Include LICENSE file


author: Vladis Dronov <vdronov@redhat.com> - 15.9-25
changelog:
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors (bz 2279099)
  - Minor edits in the rpm scripts and the changelog


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Günther Deschner <gd@samba.org> - 2:4.23.2-1
changelog:
  - Update to Samba 4.23.2
  - resolves: rhbz#2404204
  - resolves: rhbz#2391698 - Security fix for CVE-2025-9640
  - resolves: rhbz#2394377 - Security fix for CVE-2025-10230


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.1-6
changelog:
  - CUPS restart has to happen after universal filter is gone for good (in posttrans) (fedora#2370978)


author: Jan Macku <jamacku@redhat.com> - 8.14.1-1
changelog:
  - new upstream release
  - drop: 0001-curl-8.14.0-multi-fix-add_handle-resizing.patch (no longer needed)


author: Jan Macku <jamacku@redhat.com> - 8.15.0-6
changelog:
  - fix bad reuse of HTTP Negotiate connection (CVE-2026-1965)
  - fix token leak with redirect and netrc (CVE-2026-3783)
  - fix wrong proxy connection reuse with credentials (CVE-2026-3784)
  - fix use after free in SMB connection reuse (CVE-2026-3805)


author: Packit <hello@packit.dev> - 19.2-1
changelog:
  - Update to version 19.2
  - Resolves: rhbz#2363940
  - Remove 0003-let-dbg_assert-format-the-string.patch
  - Disable s390x again due to several errors in check


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.7-10
changelog:
  - Use the journal for stdout/stderr
  - Move audio levels example to README.fedora
  - Backport upstream PR to use system libraries


author: Petr Pisar <ppisar@redhat.com> - 5.2.18.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.2.18.0-3
changelog:
  - Make a dependency on libcurl-full for dnf5-plugin-automatic optional
    (bug #2322918)
  - Work around a race in rotating system state files (bug #2457408)
  - Respect nocrypto tsflag when setting a transaction per-element verification
    policy (bug #2443503)
  - Require rpm-libs >= 5.99.90 because of rpmteSetVfyLevel()
  - Handle caching unsigned packages in local plugin


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.2-1
changelog:
  - Updated to version 2.5.2
  - Upstream change notes:
    * This patch release fixes compatibility with GNU/Hurd and fixes running
      tests in parallel.
    * Commits:
      ea9c431 GNU/Hurd
      67800d4 Paralell tests take 2
      57dd3e0 Plugins tests
      f5246e4 strptime


author: Sander Hoentjen <shoentjen@antagonist.nl> - 2.0.3-1
changelog:
  - Update to new upstream
  - Fixes #2453419 (CVE-2026-27854)
  - Fixes #2453421 (CVE-2026-27853)
  - Fixes #2453426 (CVE-2026-24030)
  - Fixes #2453427 (CVE-2026-0397)
  - Fixes #2453429 (CVE-2026-24029)
  - Fixes #2453430 (CVE-2026-0396)
  - Fixes #2453431 (CVE-2026-24028)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1
changelog:
  - Update to release v29.4.0
  - Resolves: rhbz#2455894
  - Resolves  CVE-2026-34986: rhbz#2455665
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.0-1
changelog:
  - Update to release v3.1.0
  - Resolves: rhbz#2455529, rhbz#2455654
  - Resolves CVE-2026-35172
  - Resolves CVE-2026-33540
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.1-1
changelog:
  - Update to release v3.1.1
  - Resolves: rhbz#2455529
  - Fixes CVE-2026-41888
  - Upstream fixes and updates
  - Temporary annocheck skip test for broken branch protection test on
    aarch64


author: Than Ngo <than@redhat.com> - 7.5.3-1
changelog:
  - Update to 7.5.3
    * Fix: Exit with non-zero code if the conversion is aborted due to a binary file
    * Fix: Exit with zero code when an unicode conversion error occurs in quiet mode
    * Updated translations


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.0-1
changelog:
  - Update to 3.3.0 (close RHBZ#1684966)
  - Drop obsolete ldconfig_scriptlets macro
  - Drop and Obsolete the static library (-static subpackage)
  - Properly mark the LICENSE file
  - Update License to SPDX


author: Clemens Lang <cllang@redhat.com> - 1.7.17-1
changelog:
  - Rebase to 1.7.17
  - Convert license to SPDX format
  - Drop i686 package, since dovecot is no longer available in i686
  - Do not depend on sqlite and xapian-core manually, rely on library dependency auto-detection instead


author: Than Ngo <than@redhat.com> - 2:1.13.2-3
changelog:
  - Introduce js-doxygen subpackage and unbundle Javascript during RPM builds
  - Use system spdlog and sqlite3


author: Jens Petersen <petersen@redhat.com> - 1.4.5-3
changelog:
  - build with opengl (#2260290, Benson Muite)
  - check: run help command (#2260290, Benson Muite)
  - khrplatform.h is under Khronos License (#2260290, Benson Muite)


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.4.0.5-24
changelog:
  - Remove python-cups build requirement
  - Mention dymo-cups-drivers-lw5xx in description
  - Add additional provides


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.8.1-1
changelog:
  - Update to v0.8.1
  - Drop Patch1 (unbundle picojson - replaced with nlohmann_json upstream)
  - Drop Patch3 (unbundle rang - dependency dropped upstream)
  - Drop Patch4 (libfmt10 compatibility - backport from this release)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-3
changelog:
  - Add calling a little python script in the install stage to revert
    the (upstream) replacing of directories by a symlinks 
    which causes upgrade problems with rpm for the data package.


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-4
changelog:
  - Add a LUA script in a pretrans section to assist in replacing a directory
    by a symlink (this removes the need for the python script added in
    the previous commit)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-5
changelog:
  - Forgot to update the changelog date for the previous commit, so fixed this
    with this update.
  - Also fix a typo in the ghost definitions.


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-aarch64-Recognize-SHT_AARCH64_ATTRIBUTES.patch
    elfutils-0.194-alloc-jobs.patch
    elfutils-0.194-fix-const.patch
    elfutils-0.194-sh_addr-non-zero.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.5.0-1
changelog:
  - Update to 5.5.0 (#2325175)
  - Require util-linux-core to get logger command for logging capabilities


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.6.0-1
changelog:
  - Update to 5.6.0 (#2385838)
  - Add envml(1) man page
  - Use shell completion path macros
  - Install Emacs addon files
  - Use 'vimfiles_root' macro provided by vim-filesystem


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.6.1-1
changelog:
  - Update to 5.6.1 (#2417160)
  - Update-alternatives is now available from _bindir
  - Update URL to https://envmodules.io
  - Add missing command to byte compile Elisp file


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Update to 3.2.0 (fedora#2395772)
  - Add xrizer subpackage for build deps management (fedora#2395971)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Michel Lind <salimma@fedoraproject.org> - 6.2.1-14
changelog:
  - Unbundle cpp-httplib (rhbz#2169585)
  - Eliminate almost all sed usage
  - Use find_package to find cxxopts
  - Use pkg_check_modules to find easylogging++
  - Enable SELinux support
  - Enable unwind support


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.1.0-1
changelog:
  - Update to v2.1.0
  - Drop Patch0 (CXXFLAGS issues) - fixed upstream
  - Drop Patch1 (remove CC0 licensed code) - removed upstream
  - Add a patch to fix endianness issues


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.6-6
changelog:
  - Switch to pkg-config style dependency
  - Use SPDX identifier in License: tag and add licensing break-down
  - update build_ldflags instead of messing with LDFLAGS


author: Packit <hello@packit.dev> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: rhbz#2336848


author: Packit <hello@packit.dev> - 0.5.4-1
changelog:
  * packit: drop centos propose downstream and jobs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/743
   * fix: packit: bring back pkg_tool centpkg by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/744
   * Makefile tarball targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/745
   * chore: describe how to release a new version by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/746
   * chore: allow libcryptsetup-rs >= 0.11.2 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/739
   * chore: bump diesel from 2.2.3 to 2.2.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/728
   * Update to latest version of aws-nitro-enclaves-cose by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/724
   * chore: bump reqwest from 0.12.7 to 0.12.9 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/751
   * chore: bump ring from 0.17.8 to 0.17.13 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/754
   * chore: bump futures from 0.3.30 to 0.3.31 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/753
   * chore: prepare 0.5.4 release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/757


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.3...v0.5.4


author: Packit <hello@packit.dev> - 0.5.5-1
changelog:
  * chore: bump openssl from 0.10.70 to 0.10.72 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/758
   * fix: replace default.target with initrd.target by @lbrabec in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * ci(mergify): upgrade configuration to current format by @mergify in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766
   * chore: bump tokio from 1.36.0 to 1.45.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/769
   * chore: bump actions/upload-artifact from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/593
   * chore: bump actions/checkout from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/551
   * chore: bump regex from 1.10.3 to 1.11.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/752
   * chore: bump tss-esapi crate to 7.6 by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/772
   * chore: fix the container deps by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/775
   * chore: bump for 0.5.5 release by @pcdubs in https://github.com/fdo-rs/fido-device-onboard-rs/pull/771

   * @lbrabec made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * @mergify made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.4...v0.5.5
  - Resolves: rhbz#2369025


author: Neal Gompa <ngompa@fedoraproject.org> - 7.1.1-8
changelog:
  - Reorganize spec to group subpackage definitions together
  - Add freeworld conditional for third-party builds
  - Drop unneeded scriptlets


author: Simone Caronni <negativo17@gmail.com> - 7.1.2-1
changelog:
  - Update to 7.1.2.
  - Enable VANC processing for SDI.
  - Explicitly list all implicitly enabled/disabled options.


author: Miroslav Lichvar <mlichvar@redhat.com> 1.5.0-5
changelog:
  - add back version-specific requirement on libs subpackage
  - set cmake build type to release (#2416751)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-2
changelog:
  - Fix upgrade to Samba 4.23 when there is already established trust
  - Upstream PR: https://github.com/freeipa/freeipa/pull/8046


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-2
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Antonio Torres <antorres@redhat.com> - 3.2.7-4
changelog:
  - Update logrotate postrotate script with `systemctl try-reload-or-restart`
    Resolves: rhbz#2371329


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 1.0.13-1
changelog:
  - Version 1.0.13
  - Add patch to adapt the tests to changed output
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 0.3-3
changelog:
  - Update to git HEAD for bug fixes
  - Drop upstreamed documentation patch
  - Use the GAP declarative buildsystem


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Rename 'gdb-add-rpm-suggestion-script.patch' to
    'gdb-rpm-suggestion-script.patch' and
    'gdb-6.3-rh-testversion-20041202.patch' to
    'gdb-test-show-version.patch'.  The new names better reflect the
    patch contents.


author: Kevin Buettner <kevinb@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
    Deleted: gdb-fix-bg-execution-repeat.patch
  - Backport upstream commit ce106639c20 from Tom de Vries, fixing a
    a gdb.threads/thread-specific-bp.exp failure.
  - Made spec file change to build gdb with --disable-gdb-compile due to
    this feature's brokenness.  With it disabled, failing tests skip
    cleanly without timeouts.  Also reduces binary size and attack
    surface.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 70b66cf338b14336 to fix RH BZ 2402580.
    This backport will not be needed once we rebase to GDB 18.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Jens Petersen <petersen@redhat.com> - 8.10.7-14
changelog:
  - explicit requires binutils-gold
  - ppc64le: NCG fix for ccall target hints (Peter Trommler, #2172771)
  - llvm patch from @stefansf (IBM) to fix alignment in data sections
    which should fix certain runtime crashes (#2248097)


author: Jens Petersen <petersen@redhat.com> - 9.0.2-20
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.3-15
changelog:
  - rebuild with ghc-rpm-macros-2.11
  - add ppc64le arch patches for ghc-platform and rts.cabal (#26870)
  - ppc64le NCG: add an upstream patch for the clrrxi instruction


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20250819-0.3
changelog:
  - pass --no-ar-files to find-debuginfo to workaround long generation times
    with debugedit-5.2 (#2390105)


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20250908-0.4
changelog:
  - 9.14.1 alpha2
  - https://downloads.haskell.org/ghc/9.14.1-alpha2/docs/users_guide/9.14.1-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251007-0.6
changelog:
  - 9.14.1 alpha3
  - https://downloads.haskell.org/ghc/9.14.1-alpha3/docs/users_guide/9.14.1-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251028-0.7
changelog:
  - 9.14.1 rc1
  - https://downloads.haskell.org/ghc/9.14.1-rc1/docs/users_guide/9.14.1-notes.html
  - unix-2.8.8.0
  - adds template-haskell-lift and template-haskell-quasiquoter


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251128-0.10
changelog:
  - Update to 9.14.1 RC3
  - https://downloads.haskell.org/ghc/9.14.1-rc3/docs/users_guide/9.14.1-notes.html


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.05.1-2
changelog:
  - CVE-2025-48708 ghostscript: Ghostscript Argument Sanitization Vulnerability (fedora#2368149, fedora#2368134)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.05.1-6
changelog:
  - security fix for CVE-2025-59798, CVE-2025-59799, CVE-2025-59800 (fedora#2431544, fedora#2431548, fedora#2431546)


author: Milan Crha <mcrha@redhat.com> - 2.86.4-2
changelog:
  - Add patch for CVE-2026-0988 (Integer overflow in
    g_buffered_input_stream_peek() leads to segmentation fault)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-3
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit c5476b7907d01207ede6bf57b26cef151b601f35:
  - hurd: support: Fix running SGID tests
  - Revert "tst-freopen4-main.c: Call support_capture_subprocess with chroot"
  - tst-env-setuid: Delete LD_DEBUG_OUTPUT output
  - tst-freopen4-main.c: Call support_capture_subprocess with chroot
  - tst-fopen-threaded.c: Delete temporary file
  - Delete temporary files in support_subprocess
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Florian Weimer <fweimer@redhat.com> - 2.42-4
changelog:
  - Add marker symbol versions GLIBC_ABI_DT_X86_64_PLT, GLIBC_ABI_GNU2_TLS,
    GLIBC_ABI_GNU_TLS, following upstream.
  - Auto-sync with upstream branch release/2.42/master,
    commit 7a8f3c6ee4b565a02da4ba0dad9aaeaeed4639ce:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - malloc: Fix checking for small negative values of tcache_key
  - malloc: Make sure tcache_key is odd enough
  - malloc: Fix MAX_TCACHE_SMALL_SIZE
  - malloc: Remove redundant NULL check


author: Frédéric Bérat <fberat@redhat.com> - 2.42-5
changelog:
  - Auto-sync with upstream branch master,
    commit b11411fe2ee7a8f3c3a2c1ee99c1729adb9a0efe:
  - posix: Fix invalid flags test for p{write,read}v2 (Yury Khrustalev)
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nptl: Fix MADV_GUARD_INSTALL logic for thread without guard page (BZ 33356) (Adhemerval Zanella)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - libio: Define AT_RENAME_* with the same tokens as Linux (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129] (H.J. Lu)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-6
changelog:
  - Auto-sync with upstream branch master,
    commit f122d0b4d145814869bf10c56db1d971bcba55c5:
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704) (Sunil K Pandey)
  - support: Exit on consistency check failure in resolv_response_add_name (Florian Weimer)
  - support: Fix FILE * leak in check_for_unshare_hints in test-container (Florian Weimer)
  - sprof: fix -Wformat warnings on 32-bit hosts (Collin Funk)
  - sprof: check pread size and offset for overflow (DJ Delorie)


author: Florian Weimer <fweimer@redhat.com> - 2.42-8
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit cbf39c26b25801e9bc88499b4fd361ac172d4125:
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
  - memalign: reinstate alignment overflow check (CVE-2026-0861)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-10
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit ebd45473f5421e0fced5ba2cde0f1aaa36e79b61:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)
  - Remove patches already applied upstream:
    - glibc-rh2429016.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.42-11
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit a56a2943d2ce541102c630142c2eae0fbfc5886b:
  - tests: fix tst-rseq with Linux 7.0 (Michael Jeanson)
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso (Xi Ruoyao)
  - resolv: Check hostname for validity (CVE-2026-4438) (Carlos O'Donell)
  - resolv: Count records correctly (CVE-2026-4437) (Carlos O'Donell)
  - posix: Run tst-wordexp-reuse-mem test (Florian Weimer)
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module (Florian Weimer)


author: Florian Weimer <fweimer@redhat.com> - 2.42-12
changelog:
  - Add downstream patches with fixes for vulnerabilities.
  - Fix buffer overflow in scanf %mc (CVE-2026-5450)
  - Fix ns_sprintrrf buffer overreads (CVE-2026-6238)
  - Fix ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435)
  - Fix memory corruption in ungetwc (CVE-2026-5928)
  - Auto-sync with upstream branch release/2.42/master,
    commit f13c1bb0f97fbc12a6ba1ab5669ce561ea32b80a:
  - iconv: Use pending character state in IBM1390, IBM1399 character sets
    (CVE-2026-4046)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.4-1
changelog:
  - New GCT release v6.2.20251212
  - Drop patches included in the release
  - Drop old system V init scripts


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.9-1
changelog:
  - New GCT release v6.2.202660123
  - Drop patch globus-gsi-proxy-core-gcc16-lto.patch (included in the release)


author: Carl George <carlwgeorge@fedoraproject.org> - 2.1.2-1
changelog:
  - Update to version 2.1.2 rhbz#2457076
  - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160


author: josef radinger <cheese@nosuchhost.net> - 3.4.2-5
changelog:
  - missed the release being still on -4
  - Patch3: 0003-Host-Gimp-convert-to-new-GimpProcedureConfig-APIs.patch no longer needed


author: josef radinger <cheese@nosuchhost.net> - 3.5.0-2
changelog:
  - try to fix compilation
  - switch to new git-repo (https://github.com/GreycLab/gmic-qt
    instead of https://github.com/c-koi/gmic-qt)


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2.4.8-4
changelog:
  - add a root certificate bundle due to changes in ca-certificates (#2380121)
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Clemens Lang <cllang@redhat.com> - 2.4.9-1
changelog:
  - New upstream release 2.4.9
  - Fixes CVE-2025-68973 (https://gpg.fail/memcpy)
  - Fixes https://gpg.fail/sha1
  - Fixes https://gpg.fail/detached


author: Marcus Müller <mueller_fedora@hostalia.de> - 3.10.12.0-1
changelog:
  - New version
  - Corrected stated license to actually be GPLv3 (or later)
  - Remove unused python3-click-plugins dependency (GNU Radio now only needs python3-click)
  - Add python3-jsonschema dependency, needed for JSON configuration blocks
  - Include the shell completion scripts for gr_modtool in the installed files


author: Emir Akdag <infraw.linux@proton.me> - 3.8.2-1
changelog:
  - Unretire package and update to 3.8.2
  - Fix CVE-2025-58188
  - Switch to modern go-vendor-tools packaging


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.1.94-1
changelog:
  - Update to 1.1.94 and adopt Go Vendor Tools - Closes rhbz#2247447
    rhbz#2333252 rhbz#2340458 rhbz#2352242 rhbz#2359396rhbz#2360599
    rhbz#2360639


author: Christian Krause <chkr@fedoraproject.org> - 4.3-1
changelog:
  - Fix FTBFS (#2261207)
  - Update to latest upstream release 4.3
  - Update patch for linking lua dynamically
  - Add patch to avoid using deprecated Python modules


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.4-16
changelog:
  - Handle test issues related to libfpm / perf counters
  - Skip perf counter tests on s390x
  - Serialize the multi-threaded perf counter test


author: Jerry James <loganjerry@gmail.com> - 0.0.14-8
changelog:
  - Minor packaging enhancements
  - BR gpgverify instead of gnupg2
  - Add a VCS field
  - Run pdflatex in nonstop mode


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-6
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - fix CVE-2025-30204
  - fix CVE-2024-47875
  - move grafana home directory from /usr/share/grafana to /var/lib/grafana


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Added selinux rules for ldap and other observed selinux denials
  - Reworked the spec file selinux sections
  - Fixed the priority of the selinux policy


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 13.1.2-3
changelog:
  - Temporarily disable gdk plugin in Fedora 43 (and later),
    due to undiagnosed issues with GDKPixbuf 2.44.
    Ref: rhbz#2395533
  - Also disable GTK2 with GDKPixbuf, and obsolete graphviz-gtk2
    to provide up/downgrade paths.
  - Add GDKPixbuf as an explicit build dependency (when enabled)


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Felix Kaechele <felix@kaechele.ca> - 6.2.0-1
changelog:
  - Update to 6.2.0
  - clean up spec file
  - use forge macros
  - use cmake to build
  - fix License tag
  - use rpmautospec


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 2.12-39
changelog:
  - kernel-install: Suppress warnings about missing /etc/default/grub
    file when attempting to grep its contents


author: Josue Hernandez <josherna@redhat.com> - 2.12-41
changelog:
  - verifiers: Allocate EFI pages instead of grub_malloc for verified buffer
  - Resolves: #2427945
  - Resolves: #2263643


author: Leo Sandoval <lsandova@redhat.com> - 2.12-43
changelog:
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2453022
  - Resolves: #2451630
  - Resolves: #2450672
  - Related: #2427945
  - Related: #2263643


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.1-1
changelog:
  - New upstream development version 1.55.1
  - Ensure minimum libguestfs is 1.57.1 (for guestfs_setfiles)


author: Andrea Musuruane <musuruan@gmail.com> - 2.6.1-3
changelog:
  - Rebuilt for SDL3 >= 3.4.2 (fixes BZ #2434639)
  - Added missing dependency for gobject-introspection


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.2-3
changelog:
  - hp-plugin failed checksum due usage of different hashes (fedora#2361230)
  - output is not seen after installing plugin (fedora#2361230)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Christoph Junghans <junghans@votca.org> - 1.10.0-8
changelog:
  - Fix build with Ninja
  - Drop s390x and ppc64le build - unsupported by upstream
  - Fixes: rhbz#2381020


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33~rc2-1
changelog:
  - Fix memory leak in Wayland IM protocol
  - Fix reset signal w/ GTK_IM_MODULE=ibus and GTK3, GTK4 in Wayland
  - Update gdm bits based on new gdm changes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33~rc2-2
changelog:
  - Rebuild for cldr-emoji-annotation-48~beta1-1.fc43 and
    gnome-shell-extension-no-overview-49-1.fc43


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-2
changelog:
  - Resolves: #2413790 - Load EN compose file in pt-BR locale
  - Update simple.xml with xkeyboard-config 2.46


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-3
changelog:
  - Resolves: #2237664 Fix mouse position in Emojier category list
  - Resolves: #2326455 Free IBusInputContext in input_method_activate()
  - Resolves: #2346033 Fix SEGV with allocation fail in _Xi18nChangeIC()
  - Resolves: #2392358 Refer QT_IM_MODULES to check Wayland
  - don't build in parallel in ui/gtk3
  - Fix GCC `-Wunused-but-set-variable` flag
  - '--enable-wayland-im' option without daemon
  - Fix memory leaks with fail safe
  - Fix memory leaks #2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-4
changelog:
  - Resolves: #2321990#c10 Keep xinit postun in ibus for back compatibility
  - Resolves: #2418564 Do not install ibus-xinit in COSMIC desktop
  - Resolves: #2418670 Disable X11 display in GTK3 Wayland with hibernation
  - Fix GTK3 build in src/tests/ibus-keypress
  - Add warning to clean VALA files in configure


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-5
changelog:
  - Resolves: #2419469 Fix SEGV with double bus_name_acquired_cb()
  - Resolves: #2424256 Delete Requires desktop-file-utils in spec
  - Resolves: #2425585 Separate lxqt-wayland-session and lxqt-x11-session in spec
  - Resolves: #2428238 Add awesome in spec
  - Rebase: #1797120 Fix assertion in panel_binding_construct()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.34-1
changelog:
  - Update to 1.4.34
  - Add the “S-” prefix to msymbols for non-ASCII characters only if the
    character “is not graph”. “is not graph” is the same as “is space or is
    not printable”. (Resolves: https://github.com/ibus/ibus-m17n/issues/90)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.35-1
changelog:
  - Update to 1.4.35
  - Generate translations into metainfo.xml files with autotools Related:
    https://github.com/mike-fabian/ibus-m17n/issues/2
  - Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml
    (Resolves: https://github.com/mike-fabian/ibus-m17n/issues/2)
  - Fix match pattern for layout for inscript
  - Fix match pattern for rank for inscript2


author: Mike FABIAN <mfabian@redhat.com> - 1.4.37-1
changelog:
  - Update to 1.4.37
  - Port UI to GTK4 (Resolves: github-issue#99). Configure option for Gtk4
    added: “--with-gtk=2.0|3.0|4.0|no” (default: 4.0)
  - Translation update from Weblate (cs 100%, de 100%, el 100%, es 100%,
    new: fi 100%, fr 100%, ja 100%, ka 100%, kab 100%, lt 100%, pt_BR
    100%, ro 96%, ru 100%, sv 100%, tr 100%, uk 100%, zh_CN 100%,
    zh_TW 28%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.38-1
changelog:
  - Update to 1.4.38
  - Convert png icons from 16-bit to 8-bit color (Resolves:
    https://github.com/ibus/ibus-m17n/issues/107)


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.2-1
changelog:
  - Update to 2.2
  - Close: rhbz#2352408
  - Refresh license field (analysed with scancode-toolkit and manually reviewed)


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.3-4
changelog:
  - Panthor lacks big-endian support and has no Meson toggle, strip it from
    build files for BE archs


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.4-1
changelog:
  - update igt-gpu-tools to 2.4 - removed json-c old dependency - added
    jansson and pciutils-devel new dependencies - disabled tests/amdgpu for
    unsupported arches s390x ppc64 ppc64le aarch64 - updated upstream bug
    with current details at [1] [1] https://gitlab.freedesktop.org/drm/igt-
    gpu-tools/-/work_items/171


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Packit <hello@packit.dev> - 53-1
changelog:
  Changes with 53
  ----------------
    - chore: bump dependencies via gobump (#475)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: allow specifying AWS credentials profile (#443)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: bump images to 0.248.0 (#479)
      - Author: Simon de Vlieger, Reviewers: Nobody
    - docs: update COPR command for RHEL (#477)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: bump ISO timeout (#469)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-03-13


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Packit <hello@packit.dev> - 57-1
changelog:
  Changes with 57
  ----------------
    - deps: update `images` to 0.254.0 (#489)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-06


author: Packit <hello@packit.dev> - 58-1
changelog:
  Changes with 58
  ----------------
    - deps: bump images to 0.256.0 (#491)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-07


author: Packit <hello@packit.dev> - 60-1
changelog:
  Changes with 60
  ----------------
    - Support --in-vm in image-builder (#485)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump images to 0.258.0 (#495)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-04-14


author: Packit <hello@packit.dev> - 63-1
changelog:
  Changes with 63
  ----------------
    - deps: bump images to 0.259.0 (#501)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - docs: update satellite info (#503)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: `--version` -> `version` subcommand (#505)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - many: Generate rpmlist as an output of manifestgen (#502)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 64-1
changelog:
  Changes with 64
  ----------------
    - cmd: drop "bootc is experimental" (#510)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump osbuild/images dependency (#507)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: update dependencies (w/o osbuild/images) (#508)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: fix broken link (#509)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal
    - doc: introduce advanced bootc (#462)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - docs: generate manpages (#504)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: hide `--use-librepo` (#513)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: hide `--with-rpmlist` (#512)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 65-1
changelog:
  Changes with 65
  ----------------
    - deps: bump images to 0.266.0 (#520)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#515)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: default to XDG cache directory for non-root users (#511)
      - Author: Guillermo N. Leiro Arroyo, Reviewers: Brian C. Lane, Lukáš Zapletal

  osbuild/images changes (v0.262.0 -> v0.266.0):

    - Add bootc-foundry boot test infrastructure (HMS-10336) (#2335)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update RHEL 9 and 10 OCI image definitions [HMS-10328, HMS-10472] (#2333)
      - Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß, Simon de Vlieger
    - Update osbuild dependency commit ID (#2321)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild dependency commit ID (#2328)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260504 (#2323)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - boot-azure: switch machine type (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß
    - ci: include flatpaks (#2349)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - ci: use f43 for cross-arch (#2322)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - defs/bootc: set XBOOTLDR GUID (#2325)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - disk: partition table policies (#2330)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/rhel-9: fix OCI partitioning (#2351)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    - experimental: use yamlplus (#2319)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - fedora: remove vc4 module blacklist from ostree kernel options (#2331)
      - Author: Paul Whalen, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - flatpak: use container resolver to resolve flatpak refs (#2334)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - import ELN (HMS-10620, HMS-10621, HMS-10623) (#2318)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - many: bootc sealed images (composefs, and bootloader) (HMS-10628) (#2326)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - pkg/bootc/resolver: handle missing 'bootc container inspect' (#2342)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhel: enable sshd service for WSL images (#2332)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - schutzbot: update terraform commit ID (#2341)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - test: close filesystem/disk customization coverage gaps with osbuild-composer (#2329)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-21


author: Mikhail Medvedev 1.5.3-1
changelog:
  - Last version of QHexEdit used
  - Hex-functions optimised
  - Added support GIANTEC, DOSILICON NOR FLASH chips
  - Fix: incorrect uninstall script
  - Fix: i2C 128K size is repeated twice
  - Fix: error calculating file size


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7    
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikhail Medvedev 1.8.1-1
changelog:
  - Fix: increased interface speed
  - Fix: increased SPI NOR Flash operations speed
  - Fix: incorrect chip page sizes values removed
  - Fix: unused files removed
  - Added: support for the CH347T programmer


author: Mikhail Medvedev 1.8.2-1
changelog:
  - Fix: error reading/writing data from I2C chips on the CH347T version 5.44
  - Fix: bit error during NOR/NAND operations in the CH347V1.1 programmer
  - Added: showing the programmer revision function
  - Added: erase check function
  - Added: filling code function


author: Mikhail Medvedev 1.8.3-1
changelog:
  - Fixed: If no chip is selected, the programmer was not detected
  - Fixed: MACOS library compatibility
  - Fixed: MACOS invalid pathes
  - Fixed: libusb detection
  - Fixed: udev rules install
  - Added: 2.5v VCC item
  - SPI NOR FLASH writing speed increased
  - Changed chip database update bash script to Qt app
  - The Zenity package is no longer used


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Jan Macku <jamacku@redhat.com> - 10.26-1
changelog:
  - Translated using Weblate (Turkish)
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - Translated using Weblate (Turkish)


author: Jan Macku <jamacku@redhat.com> - 10.27-1
changelog:
  - spec: add missing license files
  - build(deps): bump actions/checkout from 5 to 6
  - build(deps): bump actions/upload-artifact from 4 to 5
  - build(deps): bump github/codeql-action from 3 to 4
  - ci: fix issues with missing base commit
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Turkish)
  - man: add ifdown.8
  - build(deps): bump actions/checkout from 4 to 5
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Portuguese (Brazil))
  - Translated using Weblate (Polish)
  - Translated using Weblate (Greek)
  - Translated using Weblate (Greek)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Greek)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Chinese (Traditional) (zh_TW))
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Finnish)
  - retry arping one more time in ifup-eth when sendto failed
  - Translated using Weblate (French)
  - ci: add dependency glib-2.0
  - network-functions: Fix a bug in is_nm_handling()


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-3
changelog:
  - Fix CVE-2026-6846.
    https://sourceware.org/bugzilla/show_bug.cgi?id=34049
    https://bugzilla.redhat.com/show_bug.cgi?id=2460525


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 1.8.11-9
changelog:
  - Reapply the change to keep symlinks managed by alternatives under /usr/bin,
    this time with a scriptlet create symlinks if /usr/sbin is unmerged.


author: Patrick Monnerat <patrick@monnerat.net> 4.3.2-2
changelog:
  - Include shared library info in debuginfo subpackage.
  - Require proper Tcl ABI version.
    https://bugzilla.redhat.com/show_bug.cgi?id=2337721


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.4-0]
changelog:
  - wifi: mt76: mt7925: fix incorrect TLV length in CLC command (Quan Zhou)
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams (Mark Brown)
  - Turn on DVB_PT3 for Fedora at user request (Justin M. Forbes)
  - Enable MEDIA_TUNER_MXL301RF for Fedora (Justin M. Forbes)
  - mfd: bcm2835-pm: Add BCM2712 PM device support (Phil Elwell)
  - mfd: bcm2835-pm: Introduce SoC-specific type identifier (Phil Elwell)
  - Linux v7.0.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.6-0]
changelog:
  - net: skbuff: propagate shared-frag marker through pskb_copy() (Hyunwoo Kim)
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - Add BugsFixed for 7.0.7 (Justin M. Forbes)
  - ovl: fix verity lazy-load guard broken by fsverity_active() semantic change (Colin Walters)
  - Revert rxrpc dirtyfrag fix in favor of version which landed upstream (Justin M. Forbes)
  - Re-enable Intel MEI for Fedora x86 (Justin M. Forbes)
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim)
  - Linux v7.0.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.7-0]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert old fragnesia fixes in favor of more complete solution (Justin M. Forbes)
  - Revert old fragnesia fixes in favor of more complete solution (Justin M. Forbes)
  - Change version in Bugsfixed due to build (Justin M. Forbes)
  - Linux v7.0.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.8-0]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert v3 of the fragnesia fixes as v4 covers an additional case (Justin M. Forbes)
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Pauli Virtanen)
  - Linux v7.0.8


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - Turn on XFS_ONLINE_REPAIR for Fedora (Justin M. Forbes)
  - Enable SND_DESIGNWARE for Fedora x86 (Justin M. Forbes)
  - Enable HID_SENSOR_PROX for Fedora x86 (Justin M. Forbes)
  - drm/i915/dp_tunnel: Don't update tunnel state during system resume (Imre Deak)
  - Linux v7.0.9


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert fragnesia for so I can replace it with the newer one (Justin M. Forbes)
  - net/sched: act_pedit: extend the writable skb range per key (Zhang Cen)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-4]
changelog:
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-5]
changelog:
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - xfrm: esp: restore combined single-frag length gate (Jingguo Tan)
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)
  - Revert "v3 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Aaron Ma)
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Syed Saba Kareem)
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Mark Pearson)
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Vijendar Mukunda)
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Vijendar Mukunda)


author: Jerry James <loganjerry@gmail.com> - 4.0.4-1
changelog:
  - Version 4.0.4
  - Add patch to fix bitwise NOTs that should be logical NOTs
  - BR 7zip instead of p7zip-plugins


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Julien Rische <jrische@redhat.com> - 1.21.3-5
changelog:
  - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    Resolves: rhbz#2342798
  - Support PKCS11 EC client certs in PKINIT
    Resolves: rhbz#2341962
  - kdb5_util: fix DB entry flags on modification
    Resolves: rhbz#2336555
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: rhbz#2214326
  - Remove dependency of krb5-libs on gawk and sed
    Resolves: rhbz#2323859


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: rhbz#2370259
  - PKINIT: implement paChecksum2 from MS-PKCA v20230920
    Resolves: rhbz#2357215
  - Disallow RC4 HMAC-MD5 session keys by default (CVE-2025-3576)
    Resolves: rhbz#2359705


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Julien Rische <jrische@redhat.com> - 1.22.2-4
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  - resolves: rhbz#2463398
  - resolves: rhbz#2463395
  - Add upstream patches to build against openssl 4.0
  - Make configure.ac work with autoconf 2.73


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Richard Berger <richard.berger@outlook.com> - 20260330-1
changelog:
  - Version bump to 20260330
  - Add patches to avoid unit test failures
  - Bump Kokkos requirement to 5.0


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Michal Hlavinka <mhlavink@redhat.com> - 692-4
changelog:
  - update lesspipe to 2.23
  - dont use html to process xml files, the result isnt usable (rhbz#2451451)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Hans de Goede <hdegoede@redhat.com> - 0.5.2-4
changelog:
  - Add upstream patch to enable IPU7 (Lunar Lake) support (rhbz#2333383)
  - Add upstream patches to fix AGC oscillation (rhbz#2368538)
  - Add upstream patches to fix various swstats problems including
    a reproducable divide by zero crash in the AGC code


author: Germano Massullo <germano.massullo@gmail.com> - 3.17.1-1
changelog:
  - 3.17.1 release
  - Replaced Add-zlib-header.patch and Increase_version_control.patch with minizip.patch
  - Removed CONTRIBUTING.md in the spec file


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Kate Hsuan <hpa@redhat.com> - 1.94.9-1
changelog:
  - Update to the upstream version 1.94.9
  - Update to version 1.94.9
  - Add openssl-devel dependency
  - Add a file /usr/share/metainfo/org.freedesktop.libfprint.metainfo.xml


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.4-2
changelog:
  - Require passt
  - https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/YDHKKQSDURTMSKSN6GW3QGQI43DTFXNH/


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.0-1
changelog:
  - New upstream stable version 1.58.0
  - Require qemu >= 7.2.0 and passt.
  - Libvirt >= 11.10.0 is needed but don't hard require it for F43


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Ondrej Holy <oholy@redhat.com> - 1.1.22-2
changelog:
  - Use 
  %setup        -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-doc-Don-t-document-internal-endian-macros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-disabled-foxconn-487-e111-id.-https-github.com-libmt.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: Jerry James <loganjerry@gmail.com> - 2.8.9-1
changelog:
  - Version 2.8.9
  - Drop upstreamed or irrelevant patches: autoconf, autotoolization,
    includes, noreturn
  - Drop tool-prefix patch; ship binaries with upstream names
  - Add shared patch to link shared libraries with Fedora linker flags
  - Use zlib-ng directly instead of via the compatibility interface
  - Minor spec file simplifications


author: Richard W.M. Jones <rjones@redhat.com> - 1.23.9-1
changelog:
  - New upstream development version 1.23.9
  - Fixes security issue with nbd+ssh URIs
    https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/YZMBF3SJRWTRVT5L3KWSNHITFTRMQNTT/


author: Packit <hello@packit.dev> - 2.0.0-1
changelog:
  - Update to version 2.0.0
  - License changed to Apache-2.0 by upstream in version 2.0.0
  - Upstream moved to https://github.com/OpenIDC/liboauth2
  - Resolves: rhbz#2307691


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.1-1
changelog:
  - Update to v7.10.1
    Fixes rhbz#2357284
  - Add patch to fix deprecation of the <ciso646> header for C++17


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.3-1
changelog:
  - Update to v7.10.3
    Fixes rhbz#2401105
  - Drop patch to fix deprecation of the <ciso646> header for C++17,
    solved upstream


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation
  - Refactor parse_entitlement_data()
  - Fix relocating certificate paths to /etc/rhsm-host


author: Remi Collet <remi@remirepo.net> - 0.18.1-1
changelog:
  - update to 0.18.1 for CVE-2025-13402
  - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64


author: Petr Písař <ppisar@redhat.com> - 0.7.36-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (upstream GH#616)


author: Milan Crha <mcrha@redhat.com> - 3.6.6-2
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Jakub Jelen <jjelen@redhat.com> - 0.11.3-1
changelog:
  - New upstream release fixing the following security weaknesses:
    - CVE-2025-8114: Fix NULL pointer dereference after allocation failure
    - CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX


author: Jakub Jelen <jjelen@redhat.com> - 0.11.4-1
changelog:
  - New upstream release fixing following security issues:
    - CVE-2025-14821: libssh loads configuration files from the C:\etc directory on Windows
    - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request()
    - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files
    - CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input
    - CVE-2026-0967: Specially crafted patterns could cause DoS
    - CVE-2026-0968: OOB Read in sftp_parse_longname()


author: Simone Caronni <negativo17@gmail.com> - 1.01^20250317git3e6edf1-1
changelog:
  - Update to latest snapshot.
  - Update to latest snapshot for libsurvive-extras-data that now is properly
    licensed.
  - cnmatrix and cnkalman are now part of the source.
  - Unconditionally enable tests.
  - Drop soon to be removed python bindings from cnkalman.
  - Move all licensing information in one place.
  - Sort libraries being bundled.
  - Enable sciplot for build.


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-5
changelog:
  - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#2383827)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
changelog:
  - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
  - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


author: Stefan Berger <stefanb@linux.ibm.com> - 0.9.6-8
changelog:
  - Apply patch for fixing build without engine.h
  - Apply patch for returning proper error code upon RSA decryption failure


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Jerry James <loganjerry@gmail.com> - 3.6.2-1
changelog:
  - Version 3.6.2
  - Use zlib-ng directly instead of via the compatibility interface
  - Temporarily disable one failing test on ppc64le


author: Jerry James <loganjerry@gmail.com> - 3.6.2-2
changelog:
  - Work around a test failure
  - The failure appears to be due to changes in bsearch behavior in newer
    glibc builds


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-4
changelog:
  - Omit build-time license auditing on i686
  - This keeps llhttp from blocking licensecheck’s dependencies or askalono-
    cli from dropping i686 support.


author: Timm Bäder <tbaeder@redhat.com> - 18.1.8-6
changelog:
  - Fix missing cstdint include that broke the build.
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2338982


author: Milan Crha <mcrha@redhat.com> - 3.10.2-2
changelog:
  - Add patch for several CVE-s:
  - CVE-2026-1764 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor
  - CVE-2026-1765 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor
    (TXXX Tags)
  - CVE-2026-1766 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor
    (ID3v2.3 COMM Tags)
  - CVE-2026-1767 - Heap Buffer Overflow in GNOME localsearch MP3 Extractor


author: Jerry James <loganjerry@gmail.com> - 7.3-1
changelog:
  - Version 7.3
  - Use environment modules instead of modifying binary names
  - Stop building for 32-bit x86


author: Terje Rosten <terjeros@gmail.com> - B.02.20-10
changelog:
  - Improve cmake patch to get all required flags added
  - Increase required cmake version
  - Update to latest commit 209f83


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.8-4
changelog:
  - Move the license file to lua-libs, so it is always present if any combination of subpackages is installed
  - Fixes: rhzb#2418960


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Wolfgang Ulbrich <raveit65.sun@gmail.com> - 1.28.0-5
changelog:
  - use some upstream commits
  - tabpopup: Report the window as active to a11y when it's showing
  - tabpopup: Stop spamming the ATs with label changes at startup
  - fix Firejail/Flatpak applications display "as superuser" on window title


author: Pavol Sloboda <psloboda@redhat.com> - 3.2.6-3
changelog:
  - [Fedora Change] [tmt] Migrated from STI test format to tmt as specified
    in this fedora change: https://fedoraproject.org/wiki/Changes/DisableSTI


author: Michal Schorm <mschorm@redhat.com> - 3.2.6-6
changelog:
  - [bugfix] Fix debug builds
  - transform the bcond macro to the modern form
  - move the debug build flags to the CMake argument
  - enable listing the cmake cache (LAH), but add the "N" option to make the
    cache read-only


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sandro Mani <manisandro@gmail.com>
changelog:
  - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082,
    CVE-2025-11081, CVE-2025-11083


author: Sandro Mani <manisandro@gmail.com> - 2.45.1-2
changelog:
  - Backport fixes CVE-2025-11839, CVE-2025-11840, CVE-2025-69644, CVE-2025-69646,
    CVE-2025-69649, CVE-2025-69652, CVE-2026-4647


author: Sandro Mani <manisandro@gmail.com> - 2.86.3-3
changelog:
  - Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489
  - Remove ancient, obsolete downstream patch from 2012 (RHBZ#2431179)


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Tomas Halman <thalman@redhat.com> - 2.4.16.11-1
changelog:
  Rebase to version 2.4.16.11
  - Resolves: rhbz#2357672 - mod_auth_openidc-2.4.16.11 is available
  - Resolves: CVE-2025-31492 mod_auth_openidc allows
              OIDCProviderAuthRequestMethod POSTs to leak protected data


author: Tomas Halman <thalman@redhat.com> - 2.4.19.2-1
changelog:
  - Resolves: rhbz#2437328 - mod_auth_openidc in f43 is older than in f42
  - Resolves: rhbz#2390264 - mod_auth_openidc-2.4.19.2 is available


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.8-2
changelog:
  - Fix memleak in XmString from:
    https://sourceforge.net/p/motif/code/merge-requests/10/
  - Add NET_WORKAREA and GTK_WORKAREAS support from:
    https://sourceforge.net/p/motif/code/merge-requests/11/


author: Antonio Trande <sagitter@fedoraproject.org.com> - 20240319-9
changelog:
  - Make Jacop conditionally required (rhbz#2343005)
  - Disable Jacop (currently unmaintained)
  - Fix packaging of installed files


author: Link Dupont <link@sub-pop.net> - 0.2.8-1
changelog:
  - Update to 0.2.8 (RHBZ#2423020, RHBZ#2423010, RHBZ#2411647, RHBZ#2410751,
    RHBZ#2409801, RHBZ#2408328)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-4
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - rebase to 1.27.1 (rhbz#2412002)
  - changes to mutool run to bring it into sync with WASM library
  - improvements for text extraction
  - improved HTML+CSS support
  - mutool grep: new tool to search for text in documents
  - various bugfixes


author: Jerry James <loganjerry@gmail.com> - 4.6.2-27
changelog:
  - Version 4.6.2
  - Rework which license/doc file is installed in which package
  - Add %lang markings to translation files


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.16-4
changelog:
  - Change private key cipher to aes-256-cbc
  - Remove obsolete system V conditionals in the specfile
  - Move user/group creation logic to sysusers.d fragments


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Andreas Schneider <asn@redhat.com> - 0.11.4-1
changelog:
  - Update to version 0.11.4
  - https://github.com/neovim/neovim/releases/tag/v0.11.4
  - resolves: rhbz#2392274


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-4
changelog:
  - Fix RHEL 8 & 9 compatibility
  - Fix SSL passphrase dialog patch when used with OpenSSL < 3 (EL8 w/o EPEL)
  - Build now works with and without EPEL enabled


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Jens Petersen <petersen@redhat.com> - 2.31.2-33
changelog:
  - ghost /nix/var/nix/* and sockets
  - add builds/ ghost back to daemon (since it creates it)
  - db/ and gcroots/auto/ remain after uninstalling


author: Jens Petersen <petersen@redhat.com> - 2.31.2-36
changelog:
  - trivial spec changes
  - list nix-daemon files without glob
  - commented TEST_ROOT: doesn't actually work


author: Jens Petersen <petersen@redhat.com> - 2.31.3-2
changelog:
  - sync readme/gating/tests improvements from rawhide/f44
  - document nixGL
  - enable gating on tier0 and install CI tests


author: Jens Petersen <petersen@redhat.com> - 2.31.5-1
changelog:
  - update to 2.31.5: fixes GHSA-vh5x-56v6-4368
  - https://discourse.nixos.org/t/security-advisory-local-privilege-
    escalation-in-lix-and-nix/77407
  - https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368


author: Jan Staněk <jstanek@redhat.com> - 1:22.22.0-2
changelog:
  - Fix c-ares unbundling bits
  - gate %check section behind a conditional
  - gate ./configure flag behind a conditional


author: Jan Staněk <jstanek@redhat.com> - 1:20.20.0-3
changelog:
  - Convert to next-gen packaging
  - Use packaging scripts and spec file structure from current nodejs24


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Michael J Gruber <mjg@fedoraproject.org> - 0.40-1
changelog:
  - rebase with upstream release 0.40 (rhbz#2432525)
  - additions to C and python API
  - generate Emacs autoload file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.3-4
changelog:
  - Patch for gcc-15 "error: expected identifier or '(' before 'false'"
  - Use gcc -std=gnu17 to avoid md5wrap.c:48:5: error: too many arguments to function ‘MD5Init’


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - [MIDI] loading files would cause crash (null dereference) if ~/.timidity.cfg not present


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-2
changelog:
  - [MIDI] Add patch to prefer /etc/timidity++.cfg to /etc/timidity.cfg
  - [MIDI] Add upstream patch to set comment to .pat filename without full path
  - Recommends: fluid-soundfont-gm


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.0^20241204git8ac191c-1
changelog:
  - Update to last git commit
  - Add 0001-fix-qt6-arg-format.patch
  - Add 0002-fix-qt6-arg-sampleformat.patch


author: Marcin Juszkiewicz - 1.17.0-11
changelog:
  - skip 3 tests on riscv64: test_float8_e4m3fn_negative_nan,
    test_float8_e5m2_negative_nan, test_maxpool_2d_uint8_cpu


author: John Wolfe <john.wolfe@broadcom.com> - 12.4.0-1
changelog:
  - Package a new upstream version of open-vm-tools-12.4.0-23259341.
    - A number of Coverity reported issues have been addressed.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.2.0.4-1
changelog:
  - update to 0.2.0.4 (resolves rhbz#2399635)
  - generate SO version from release version automatically


author: Peng Wu <pwu@redhat.com> - 1.1.9-4
changelog:
  - Update for https://fedoraproject.org/wiki/Changes/CMake_drop_install_vars
  - Resolves: RHBZ#2381327


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Update to 3.25.0
  - Drop patches which are included in upstream
  - Adapt p11sak patch
  - Fix RPM build warnings
  - Add jq and openssl in Build Requirement, required for testcases


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Require openssl >= 3.5.1
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
  - Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Fix the image mode issue again as bootc expects to use /run/lock


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2392068)
  - Convert STI tests to FMF (rhbz#2392069)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.0p1-2
changelog:
  - Provide better diagnostics for non-supported private keys
    (https://github.com/openssh/openssh-portable/pull/564)
  - Ignore too short hostkeys in known_hosts file
    (https://github.com/openssh/openssh-portable/pull/567)
  - Switch to systemd-socket activation for ssh-agent
    Resolves: rhbz#2181353


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.0p1-4
changelog:
  - Update sshd@.service to follow upstream, mostly support ephemeral sshd keys
    Submitted by Allison Karlitskaya (https://src.fedoraproject.org/rpms/openssh/pull-request/101)
    Needs a SELinux counterpart.
    Related: rhbz#2374928


author: Zoltan Fridrich <zfridric@redhat.com> - 10.0p1-7
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: rhbz#2447290
  - remove obsolete patch for ssh manual page
    Resolves: rhbz#2442505


author: Zoltan Fridrich <zfridric@redhat.com> - 10.0p1-9
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: rhbz#2454941
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: rhbz#2454951
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: rhbz#2454944
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: rhbz#2454943
  - CVE-2025-61985: Reject URL-strings with NULL characters
  - CVE-2025-61984, CVE-2026-35386: Reject usernames with control characters
    Resolves: rhbz#2454961


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Rebase to OpenSSL 3.5 final release, sync patches with RHEL. Restoring POWER8 support
    Resolves: rhbz#2359082


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.4-2
changelog:
  - Resolves: CVE-2025-15467
  - Resolves: CVE-2025-15468
  - Resolves: CVE-2025-15469
  - Resolves: CVE-2025-66199
  - Resolves: CVE-2025-68160
  - Resolves: CVE-2025-69418
  - Resolves: CVE-2025-69420
  - Resolves: CVE-2025-69421
  - Resolves: CVE-2025-69419
  - Resolves: CVE-2026-22795
  - Resolves: CVE-2026-22796
  - Resolves: CVE-2025-11187


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.4-3
changelog:
  - Backport security patches from OpenSSL 3.5.6
    Resolves: CVE-2026-2673
    Resolves: CVE-2026-28387
    Resolves: CVE-2026-28388
    Resolves: CVE-2026-28389
    Resolves: CVE-2026-28390
    Resolves: CVE-2026-31789
    Resolves: CVE-2026-31790


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-1
changelog:
  - Update to latest git
  - Backport #2727 to fix multi-machine script on Fedora
  - Backport #2728 to fix tests without Inline::Lua


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-3
changelog:
  - Backport PR #2750 to allow slow typing with (assert_)script_run
  - Backport PR #2751 to fix tests with IPC::Run 20250809.0


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add end-to-end functional test for bootc composes in a service deployment (HMS-10008) (#5098)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    - Enable all bootc-supported disk image types for bootc composes, not just qcow2 (HMS-10508) (#5102)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    - SPEC: add explicit Requires on podman for worker subpackage (#5099)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update for RHEL 9.9 and 10.3 nightlies (#5095)
      - Author: Justin Sherrill, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260419 (#5105)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - build(deps): bump actions/github-script from 8 to 9 (#5090)
      - Author: {}, Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5104)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: bump go-jose to 4.1.4 (#5107)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump grpc to 1.79.3 (RHEL-160720) (#5106)
      - Author: Anna Vítová, Reviewers: Florian Schüller, Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update github.com/openshift-online/ocm-sdk-go to v0.1.499 (#5103)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-22


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Add optional container image cleanup to bootc info resolve job and enable it for the service (HMS-10446) (#5108)
      - Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - Enable bootc installer ISO builds via Cloud API (HMS-10568) (#5112)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20260426 (#5114)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore(deps): update konflux references (#5113)
      - Author: {}, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cicd: split gobump into two jobs (#5109)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Tomáš Hozza
    - test/old-worker-new-composer: skip v168 release due to buggy SPEC (#5111)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - weldr: Use the job id instead of creating a new one (#5110)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: use require.Eventually for the flaky test (#5074)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - Schutzfile: drop minor versions from bootc-foundry (#5134)
      - Author: Lukáš Zapletal, Reviewers: Simon Steinbeiß, Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add default target for bootc iso (#5125)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - go.mod: update osbuild/images to v0.261.0 (#5115)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Lukáš Zapletal, Sanne Raymaekers
    - test/repositories: switch RHEL 9.7 and 10.1 test repos to GA (#5122)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: drop ubi-wsl.sh test (#5130)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-13


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Dumitru Ceara <dceara@redhat.com> - 26.03.3-10
changelog:
  - Updated the OVN sources to upstream release v26.03.1 with the
    commit 0cc1ea5bb71d29b91244f5368ecbbda8837bc542 and picked up
    the commits from v26.03.1 till the tip of branch-26.03
    a1482006410f09dfe471c6aec76de3902327f1ad (2 commits) in
    ovn.patch.
  - Updated the OVS sources to the branch-26.03 ovs submodule
    commit bdb95cc1920d4ab66fe062a9470eeb33a51d33e2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.3.rc1
changelog:
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook
  - Enable fencing regression tests again


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - seems as if pre-tasks need to have tags to be executed
    at least that worked on a pull request via pagure


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-11
changelog:
  - Convert STI tests to TMT (rhbz#2383013)
  - Update for new upstream release tarball: Pacemaker-3.0.1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1
  - now you can add a new revision
    rpmdev-bumpspec -c "test" pacemaker.spec
  - or run tests locally
    tmt run discover provision prepare execute --how tmt --verbose -v -v --debug
  - Removed tier1 test again as it was just for investigation of a CI issue


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.0-1
changelog:
  - Rebase to release 1.7.0 (#2321512)
  - Rebase to pam-redhat-1.2.0
  - build: update to meson build system
  - doc: disable build for i686


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.1-2
changelog:
  - FSWC: Migrate to lastlog2
    Link: <https://fedoraproject.org/wiki/Changes/Migrate_to_lastlog2>
    Resolves: #2361594


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Sam Feifer <sfeifer@redhat.com> - 7.0.2-2
changelog:
  - Update selinux policy to fix pmda-hdb selinux issue
  - Patch pmda-hdb to fail gracefully when connection fails


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-3
changelog:
  - Add BR: gcc
  - Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
  - Unset test envars


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-5
changelog:
  - Drop conditional around ExcludeArch, no i686 valkey build anywhere
  - Directly BR: valkey rather than valkey-compat-redis
  - Drop duplicate BR:


author: Paul Howarth <paul@city-fan.org> - 1.57-1
changelog:
  - Update to 1.57 (rhbz#2325504)
    - Add on_error callback to csv()
    - Retain runtime error from csv()


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58 (rhbz#2334923)
    - Add strict_eol (warnings default in csv())
    - Add XS line number in errors
    - Add streaming support (not set in stone)


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 8.4.15-2
changelog:
  - Fix GH-20528 regression breaks mysql connexion using an IPv6 address enclosed
    in square brackets (upstream patch)


author: Remi Collet <remi@remirepo.net> - 2.2.0-1
changelog:
  - update to 2.2.0
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@fedoraproject.org> - 4.2.4-8
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add upstream patch for libcurl 8.9
  - Fix build with PHP 8.4 using patch from
    https://github.com/m6w6/ext-http/pull/135


author: Remi Collet <remi@fedoraproject.org> - 4.2.6-3
changelog:
  - fix incompatible pointer type FTBFS #2341063
    using patch from https://github.com/m6w6/ext-http/pull/143
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@fedoraproject.org> - 3.7.0-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/Imagick/imagick/pull/690


author: Remi Collet <remi@remirepo.net> - 3.2.0-9
changelog:
  - build out of sources tree
  - fix incompatible pointer types using patch from
    https://github.com/php-memcached-dev/php-memcached/pull/555


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.2.3-4
changelog:
  - fix incompatible-pointer-types using patch from
    https://github.com/php/pecl-file_formats-yaml/pull/74


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Hans de Goede <hdegoede@redhat.com> - 24.004.60-17
changelog:
  - Fix Dvorak layout icon not showing when the evdev keyboard driver is used
    (rhbz#2341810)
  - Fix label plugin not finding fonts
  - Add UseSimpledrm setting support to configfile (rhbz#2346150)


author: Hans de Goede <hdegoede@redhat.com> - 24.004.60-18
changelog:
  - Update simpledrm hiDPI scaling heuristics (rhbz#2347519)
  - Ignore simpledrm when EFI fb is running at 1024x768/800x600
    (rhbz#2347519)
  - Update spinner theme to match latest libadwaita spinner (rhbz#2325399)


author: Hans de Goede <hansg@kernel.org> - 24.004.60-19
changelog:
  - Don't use simpledrm together with LUKS (rhbz#2359283, rhbz#2339072)
  - Fix crash when using 2 GPUs with displays attached (rhbz#2368186)
  - Fix crash caused by calling ply_event_loop_watch_fd () with a -1 fd
    (rhbz#2370979)
  - Fix /usr/lib64/plymouth/tribar dir not being owned (rhbz#2279776)
  - Fix keymap and capslock icons not shown on monitor on second GPU
    (rhbz#2375854)
  - Make the prompt on the diskunlock screen look a bit better (rhbz#2356893)
  - Add patches from upstream to fix messages being logged twice on serial
    consoles


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 24.004.60-22
changelog:
  - Fix crash in drm plugin close_input_source() (rhbz#2416551)
  - Fix wrong KBD layout when a user has configured multiple layouts
    (rhbz#2416197)
  - Fix race in fb_device_has_drm_device () causing frame-buffer plugin to
    sometimes load while drm plugin is already handling the display


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-7
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
  - sepolicy: Fix detection of writeable locations


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Fixes for C23 compatibility
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-3
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866
  - Add explicit BR: libxcrypt-devel


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-1
changelog:
  - Update to 1.3.9 (see RELEASE_NOTES for details)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Tom spot Callaway <spotaws@amazon.com> - 2.9.4-2
changelog:
  - only run the tests on architectures where this app is likely to be
    actually used, due to itenerant failures on the other architectures


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.81-1
changelog:
  - New version
    Resolves: rhbz#2275179
  - Fixed vulnerability allowing recovery of NIST P-521 private keys
    Resolves: CVE-2024-31497


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: José Matos <jamatos@fedoraproject.org> - 2.4.0-2
changelog:
  - All the changes below come from Jerry James <loganjerry@gmail.com> (from Fri Feb 23 2024)
  - Use virtual Provides instead of empty packages
  - Link with flexiblas instead of gslcblas
  - Move documentation into a doc subpackage
  - Various minor spec file cleanups
  - Add patch to fix FTBFS on big endian systems


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jerry James <loganjerry@gmail.com> - 2.6.4-1
changelog:
  - Version 2.6.4
  - Drop upstreamed remove-redundant-ref patch
  - Drop upstreamed workaround for swig 4.3
  - Add patch for incompatible pointer types
  - Add patch for incompatible format specifiers


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-11
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431977


author: Jerry James <loganjerry@gmail.com> - 1.5.0-1
changelog:
  - Version 1.5.0
  - Stop building for 32-bit x86
  - Update the License field to BSD-2-Clause
  - Use the pyproject declarative buildsystem
  - Do not build documentation for RHEL


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.4-1
changelog:
  - Update to new upstream release 1.26.4 (rhbz#2390816)
  - adjust to mupdf 1.26.7 (and 8)
  - various bugfixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.5-1
changelog:
  - Update to new upstream release 1.26.5 (rhbz#2403129)
  - adjust to mupdf 1.26.9 (and 10)
  - improve the Python type annotations
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - Update to new upstream release 1.27.1 (rhbz#2412929)
  - compatibility with mupdf 1.27.1
  - new method `Document.repair()`
  - various fixes


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 46.0.3-1
changelog:
  - Update to v46.0.3
  - Removed the deprecated get_attribute_for_oid method on
    CertificateSigningRequest. Users should use get_attribute_for_oid()
    instead.
  - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the
    cipher module. These are still available in Decrepit cryptography.
  - In X.509, when performing a PSS signature with a SHA-3 hash, it is now
    encoded with the official NIST SHA3 OID.
  - Added support for free-threaded Python 3.14.


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Jerry James <loganjerry@gmail.com> - 0.9-39.20231204.a6987c8
changelog:
  - Rebuild for polymake 4.15
  - Add patch to fix polymake shell usage
  - Add patches to fix compiler warnings
  - Use the pyproject declarative buildsystem


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-21
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - Use pytest instead when built with tests
  - The tests still fail (numpy incompatibility, using the imp module, ...)


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Sandro <devel@penguinpee.nl> - 2.3.3-2
changelog:
  - limit number of tests
  - patch tests accomodating changes in dependencies
  - drop pytz and xarray as BRs (both optional)
  - Close RHBZ#2332196


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Martin Kutlak <mkfedora@outlook.com> - 1.3.14-1
changelog:
  - Update to upstream version 1.3.14 rhbz#2273502 rhbz#2261617
  - Fix build with -Wincompatible-pointer-types PR#5


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.32.0-5
changelog:
  - Unretirement request: pagure.io/releng/issue/12906 Revert "Retired: Fails
    to install: https://pagure.io/releng/issue/12871"


author: Manish Tiwari <matiwari@redhat.com> - 1.4.0-1
changelog:
  - Update to 1.4.0 version
  - Bundled whisper.cpp
  - Remove pybind11 to use system available pybind11-devel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 25.08-20
changelog:
  - Backport several OpenEXRCore security fixes
  - Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493
  - Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534
  - Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505
  - Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501
  - Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-11
changelog:
  - Convert License tag to SPDX format
  - Convert to autosetup
  - Use relative symlinks from /usr/bin/* to ../libexec/rancid/*
  - Remove doc files that were duplicated in /usr/share/rancid


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-12
changelog:
  - Enable git as default VCS for new installs
  - Remove extraneous BuildRequires
  - Requires /usr/sbin/sendmail and cronie for crontabs
  - Requires openssh-clients and git
  - Suggests telnet


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc license
  - Add COPYING to rauc-doc license
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Aaron Merey <amerey@redhat.com> - 5.9.0-8
changelog:
  - Backport upstream fix for MADV_GUARD_INSTALL/REMOVE (kernel >= 6.13)
    to unbreak recording of multi-threaded programs (upstream commit 34ff3a70).


author: Aaron Merey <amerey@redhat.com> - 5.9.0-9
changelog:
  - Fix FTBFS on rawhide (gcc 16, glibc 2.43+) by including <limits.h>
    in src/test/util.h, which several test files rely on for INT_MAX
    and other limit macros.


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-6
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-2
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0-2
changelog:
  - Expand dependency bounds downward rather than requiring old versions
  - Improve documentation for the metadata patch


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f43-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 258.2-1
changelog:
  - Version 258.2
  - A bunch of fixes in many components.
  - Stop creating user namespace for system services (rhbz#2391343)
  - Systemd trigger scriptlets are updated


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 258.6-1
changelog:
  - Version 258.6
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@fedoraproject.org> - 8.1.3-3
changelog:
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@fedoraproject.org> - 8.1.6-1
changelog:
  - Valkey 8.1.6 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Remi Collet <remi@remirepo.net> - 8.1.7-1
changelog:
  - Valkey 8.1.7 - Tue 05 May 2026
  - Upgrade urgency SECURITY: This release includes security fixes.
    CVE-2026-23479 CVE-2026-25243 CVE-2026-23631


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.17.1-1
changelog:
  - Update to 8.17.1
  - Resolves: rhbz#2351373
  - Migrate API documentation to gi-docgen
  - Drop dependency on python3-cairo (due to vipsprofile removal)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.3-1
changelog:
  - New upstream development version 2.9.3
  - Ensure minimum libguestfs is 1.57.1 (for guestfs_setfiles)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.5-1
changelog:
  - New upstream development version 2.9.5
  - Use new ./configure --disable/--enable flags for excluding RHEL features


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.7-1
changelog:
  - New upstream development version 2.9.7
  - Backport non-upstream patch to improve Windows conversions


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - fix fd leak (probably #2290715)
  - enable lz4 compression by default
  - add supprt for av1 software encoding/decoding
  - add support for vsock transport
  - fix build with gcc-14


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - don't abort on double-^C (#2262447)
  - fix for compositors using drm_syncobj protocol


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - New release: 36.1 (bcl)
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (49699333+dependabot[bot])
  - test: iot-qcow2-image does not support packages (bcl)
  - test: qcow2 renamed to server-qcow2 (bcl)
  - build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 4 to 5 (49699333+dependabot[bot])
  - tests: Use current host arch in info and list tests (bcl)


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-5
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
  	CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
  	CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-7
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434046)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434048)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-4
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.3-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
          [XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


