# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Miro Hrončok <miro@hroncok.cz> - 3.0.11-5
changelog:
  - Avoid accidentally including bogus *.txt files as documentation
  - Include README.rst and CHANGES.rst instead


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Jerry James <loganjerry@gmail.com> - 2.3.3-23
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Correct License fields from Apache-2.0 to CECILL-C
  - Do configuration steps in %conf


author: Packit <hello@packit.dev> - 43.33-1
changelog:
  - Revert "Default to GTK UI when available, fallback to Web UI otherwise"
    (k.koukiou)
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
  - Remove unused Flatpak manager code (jkonecny)


author: Packit <hello@packit.dev> - 43.36-1
changelog:
  - packit: drive jobs from supported_releases per branch; dedupe and group
    targets (k.koukiou)
  - Fix pylint warnings caused by dynamic kickstart command imports (k.koukiou)
  - core: kickstart: implement OS-release based version detection (k.koukiou)
  - build: decouple BASE_CONTAINER from branch configuration (k.koukiou)
  - workflows: remove hardcoded CONTAINER_TAG="lorax" usage (k.koukiou)
  - dracut module requires generic initramfs (jstodola)


author: Packit <hello@packit.dev> - 43.37-1
changelog:
  - Log correct boot option for iSCSI boot without iBFT (jstodola)
  - Get full nevra string from dnf instead of composing it (pkratoch)
  - Add release notes for RDP kickstart support (adamkankovsky)
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
  - storage: devicetree: read VERSION or VERSION_CODENAME for identifying OS from
    os-release (k.koukiou)


author: Packit <hello@packit.dev> - 43.39-1
changelog:
  - Fix setting of kernel console logging level for anaconda (rvykydal)
  - Use new more suitable API for Gtk UI required space check (rvykydal)
  - Add GetFreeSpaceForSystem API (rvykydal)
  - docs: update CONTRIBUTING.rst with new branching approach (k.koukiou)


author: Packit <hello@packit.dev> - 43.41-1
changelog:
  - data: profiles: enable geolocation on Fedora Workstation live image
    (matiwari)
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
  - spec: enable live in ELN (yselkowi)
  - Mark unused variables with a leading underscore (a.badger)


author: Packit <hello@packit.dev> - 43.44-1
changelog:
  - flatpak: enable installation with CDROM source type (bciconel)
  - storage: Improve NotEnoughFreeSpaceError message with specific request
    details (k.koukiou)
  - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)


author: Mattia Verga <mattia.verga@protonmail.com> - 0.94-10
changelog:
  - Disable build on i686 (fix Fedora#2300567)
  - Switch Tycho index files to upstream provided
  - Switch 42xx index files to 52xx


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.5-2
changelog:
  - obsolete -freeworld package, since it's been a meta-package only
    and currently doesn't pull it any extra packages anymore
  - cleanup: drop old Obs/Conf for -freeworld-mms package


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.43.1-1
changelog:
  - Update to binutils 2.43.1-1
  - Add: binutils-fix-ar-test.patch
  - Update: binutils-riscv-testsuite-fixes.patch
  - Update: binutils-testsuite-fixes.patch
  - Retire: binutils-special-sections-in-groups.patch
  - Retire: binutils-gold-powerpc.patch
  - Retire: binutils-handle-corrupt-version-info.patch
  - Retire: binutils-execstack-error.patch
  - Retire: binutils-BPF-reloc-4.patch
  - Retire: binutils-x86-64-v3.patch
  - Retire: binutils-big-merge.patch
  - Retire: binutils-aarch64-urcbig-bti-programs.patch
  - Retire: i686-AVX10.1-part-1.patch
  - Retire: i686-AVX10.1-part-2.patch
  - Retire: i686-AVX10.1-part-3.patch
  - Retire: i686-AVX10.1-part-4.patch
  - Retire: i686-AVX10.1-part-5.patch
  - Retire: i686-AVX10.1-part-6.patch
  - Retire: binutils-riscv-SUB_ULEB128.patch
  - Retire: binutils-ppc-dt_relr-relocs.patch
  - Retire: binutils-demangler-updates.patch
  - Retire: binutils-Intel-APX-part-1.patch
  - Retire: binutils-power-11.patch
  - Retire: binutils-Intel-APX-part-1-fixes.patch
  - Retire: binutils-multilib.am.patch
  - Retire: binutils-Intel-APX-CODE_6_GOTTPOFF.patch
  - Retire: binutils-archive-DT_SYMTAB.patch


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Kate Hsuan <hpa@redhat.com> - 1.4.0-2
changelog:
  - tuned is the default power profile management daemon in Fedora
  - https://pagure.io/fesco/issue/3222


author: Jerry James <loganjerry@gmail.com> - 10.9.2-9
changelog:
  - Stop building for 32-bit x86
  - Convert the License field to SPDX
  - Add additional licenses found on review of the code


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Petr Pisar <ppisar@redhat.com> - 1.2.1-1
changelog:
  - 1.2.1 bump
  - Fix building against rpm-5.99.91 (bug #2382611)
  - Fix lzma link argument in pkg-config file
  - Fix building with CMake 4 (bug #2380521)
  - Fix defining STDOUT_FILENO
  - Fix building with cmake and ninja (bug #2380983)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.5-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-1
changelog:
  - Update to release v1.34.11
  - Resolves: rhbz#2510870
  - Resolves CVE-2026-34986: rhbz#2455652
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.1-2
changelog:
  - Refresh spec file using go2rpm
  - Update spec file template using go2rpm
  - Use kubernetes-cni instead of containernetworking-plugins
  - Adds addition cni conflist
  - Use gocheck2 for tests


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.0-7
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.1.0-2
changelog:
  - Support re-generating C++ sources before building them
  - Enable C++ source re-generation by default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.2.0-1
changelog:
  - Update to 27.2.0 (close RHBZ#2343202)
  - Upstream added a Python implementation, packaged as python3-cucumber-
    messages


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Than Ngo <than@redhat.com> - 7.5.3-1
changelog:
  - Update to 7.5.3
    * Fix: Exit with non-zero code if the conversion is aborted due to a binary file
    * Fix: Exit with zero code when an unicode conversion error occurs in quiet mode
    * Updated translations


author: François Kooman <fkooman@tuxed.net> - 20250606-3
changelog:
  - update `dumpasn1.cfg`
  - use manpage directly from official repository
  - confirmed with author upstream moved to GitHub


author: Peter Lemenkov <lemenkov@gmail.com> - 26.2.5.21-4
changelog:
  - Backport fix for CVE-2026-48858, CVE-2026-48860, CVE-2026-49759,
    CVE-2026-54886, CVE-2026-54891, CVE-2026-55952


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.30.5618.102^gitc0ed34e-1
changelog:
  - Put the snapshot info in the version field instead of release
  - Fix forge macros creating a massive release tag including snapshot info
    for secondary/bundled sources


author: Alexey Kurov <nucleo@fedoraproject.org> - 10.2.1-4
changelog:
  - Removed unrecognized options enable-systemd and disable-exampledir
  - Fixed sysconfdir option warning
  - Added option for support of PCRE2
  - Own local state file dir
  - Minimum libyang version 2.1.128


author: Terje Rosten <terjeros@gmail.com> - 3.7.2-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.0.5-1
changelog:
  - Version 1.0.5
  - Drop upstreamed set_unexpected patch
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.3.7-1
changelog:
  - Version 1.3.7
  - Change from C++11 to C++14 has been upstreamed
  - Setting LC_ALL is no longer necessary


author: Benjamin Gilbert <bgilbert@backtick.net> - 2.43.5-1
changelog:
  - Update to 2.43.5
  - Drop BMP, ICO, PNM, and TGA loaders; these are now supported via Glycin
  - Drop thumbnailer config, since gdk-pixbuf dropped the thumbnailer


author: Jens Petersen <petersen@redhat.com> - 9.10.1-3
changelog:
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - note prof subpackages currently have incomplete deps
    due to metadata generation issue


author: Jens Petersen <petersen@redhat.com> - 9.10.1-7
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.5.11-1
changelog:
  - Update to 0.5.11
  - Fix compatibility with Mercurial 6.4 (rhbz#2259038)
  - Fix access to ssh remotes with absolute path in no-mercurial mode
  - Fix missing `distutils` error messages with Python 3.12


author: Dominik Mierzejewski <dominik@greysector.net> - 45~20250512gitf7501bc-1
changelog:
  - update to 20250512 git snapshot
  - remove rpaths with a patch
  - make file lists more explicit
  - filter out private plugin Provides:
  - bytecompile Python code and use appropriate macro in file list
  - correct License: tag
  - fix version
  - drop unused dependency


author: Florian Weimer <fweimer@redhat.com> - 2.42-8
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit cbf39c26b25801e9bc88499b4fd361ac172d4125:
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
  - memalign: reinstate alignment overflow check (CVE-2026-0861)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-10
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit ebd45473f5421e0fced5ba2cde0f1aaa36e79b61:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)
  - Remove patches already applied upstream:
    - glibc-rh2429016.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.42-11
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit a56a2943d2ce541102c630142c2eae0fbfc5886b:
  - tests: fix tst-rseq with Linux 7.0 (Michael Jeanson)
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso (Xi Ruoyao)
  - resolv: Check hostname for validity (CVE-2026-4438) (Carlos O'Donell)
  - resolv: Count records correctly (CVE-2026-4437) (Carlos O'Donell)
  - posix: Run tst-wordexp-reuse-mem test (Florian Weimer)
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module (Florian Weimer)


author: Florian Weimer <fweimer@redhat.com> - 2.42-12
changelog:
  - Add downstream patches with fixes for vulnerabilities.
  - Fix buffer overflow in scanf %mc (CVE-2026-5450)
  - Fix ns_sprintrrf buffer overreads (CVE-2026-6238)
  - Fix ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435)
  - Fix memory corruption in ungetwc (CVE-2026-5928)
  - Auto-sync with upstream branch release/2.42/master,
    commit f13c1bb0f97fbc12a6ba1ab5669ce561ea32b80a:
  - iconv: Use pending character state in IBM1390, IBM1399 character sets
    (CVE-2026-4046)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-13
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit 4ebd33dd77eabe8d4c45232bed4b42a31d2f9edc:
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (Rocket Ma)
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (Rocket Ma)
  - abilist.awk: Handle weak unversioned defined symbols (H.J. Lu)
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921) (Florian Weimer)
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h (DJ Delorie)
  - Remove applied or redundant patches:
    - glibc-RHEL-172420.patch
    - glibc-RHEL-172421.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.42-14
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit 6cebb0b80fd783e442a8ad27c3f52cde52a9cac7:
  - stdio-common: Allow partially-filled %mc buffers [BZ #12701] (DJ Delorie)
  - stdio-common: Reject insufficient character data in scanf [BZ #12701] (Maciej W. Rozycki)
  - support: Implement 'xfmemopen' for seamless 'fmemopen' use (Maciej W. Rozycki)

  - stdio-common: Allow partially-filled %mc buffers [BZ #12701] (DJ Delorie)
  - stdio-common: Reject insufficient character data in scanf [BZ #12701] (Maciej W. Rozycki)
  - support: Implement 'xfmemopen' for seamless 'fmemopen' use (Maciej W. Rozycki)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-15
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit 0be5a6a72a4a3132bc211720d2b6949a84f54dc3:
  - hppa: Fix missing call to __feraiseexcept (BZ 34306) (John David Anglin)
  - arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792) (Adhemerval Zanella)
  - iconv: Suppress intermediate errors with //TRANSLIT (bug 34236) (Florian Weimer)
  - elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210] (Sam James)
  - stdio-common: Allow partially-filled %mc buffers [BZ #12701] (DJ Delorie)
  - stdio-common: Reject insufficient character data in scanf [BZ #12701] (Maciej W. Rozycki)
  - support: Implement 'xfmemopen' for seamless 'fmemopen' use (Maciej W. Rozycki)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-16
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit 54929540335ef339ac66a8c28e3f4c22ebae2630:
  - rtld: cache cpuid results on the stack for intel (Fabian Rast)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2437^20260630.5223a47630df-1
changelog:
  - Update to version 2437
  - Correct and improve License expressions and license text file handling
  - Deal with upstream vendoring of a header from the Rust cxx crate
  - Invoke ninja via the %ninja_build macro


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.48.4-45
changelog:
  - Skip test_service_config, which times out
  - This appears to be due to an unsafe combination of death tests and
    threads


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.2-2
changelog:
  - Move aom, curl, openal, openjpeg to main package
  - Move lv2 to separate subpackage (rhbz#1731750)
  - Enable dvdspu, faad, qsv (x86_64 only)
  - Enable dc1394 and zxing in extras subpackage


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.29.5111.102-7
changelog:
  - Don’t link the top-level absl_flags library; it is not required in
    absl-cpp-20230802, and not present in absl-cpp-20240116
  - Add #include directives for compatibility with absl-cpp-20240116


author: Peter Bieringer <pb@bieringer.de> - 4.2.2-1
changelog:
  - include databases/registries/lisp/site-db as no longer reachable for download
  - add additional Perl requirements


author: Peter Bieringer <pb@bieringer.de> - 4.3.0-1
changelog:
  - Final release 4.3.0
  - Update recommend IP2Location >= 8.6.0
  - Remove ipv6calc.sgml from doc
  - Use now only releases from GitHub


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.7.0-2
changelog:
  - Patch kamelion-qmk-helper for qmk-via-api 0.8
  - Account for licenses of statically-linked Rust dependencies


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Xavier Bachelot <xavier@bachelot.org> - 2.8.2-16
changelog:
  - Drop EL7/python2 support
  - Set min_hash_algo to sha256 for f42+
  - Fix conditional around JAVA_HOME export
  - Add patch to fix build with gcc15


author: Adam Williamson <awilliam@redhat.com> - 0.3.4-1
changelog:
  - Update to 0.3.4, drop merged and no-longer-needed patches
  - Fix Python build/install so Python subpackage works
  - Fix build on EPEL 8 and 9
  - Include latest database from upstream


author: Evan Goode <egoode@redhat.com> - 0.74.0-1
changelog:
  - Update to 0.74.0
  - Update ko.po
  - Split $releasever to $releasever_major and $releasever_minor in the C API
  - Merge `bootc` branch to master
  - ConfigParser: make splitReleasever public
  - C API: Detect releasever_major, releasever_minor from provides
  - C API: support shell-style variable substitution
  - module: Warn if module config file is inaccessible
  - Enable automatic PR reviews


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Ales Nezbeda <anezbeda@redhat.com> - 16.3-5
changelog:
  - Disable openssl ENGINE_API
  - Fedora change: https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - BZ: 2300910


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Michal Schmidt <mschmidt@redhat.com> - 9.8.60-3
changelog:
  - Remove redundant %setup invocation.
  - Replace custom patch files with "git format-patch" from upstream git.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sérgio Basto <sergio@serjux.com> - 2.5.3-3
changelog:
  - Update provides and obsoletes for openjpeg2 of Fedora 40
  - Also add a more agressive way to remove old openjpeg-libs (1.x)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.2-9
changelog:
  - switch to tar.gz source to avoid manual build
  - build using CMake (use upstream SONAME)
  - ship pkg-config and CMake files (resolves rhbz#2378931)
  - fix build with CMake 4.0
  - use dos2unix instead of sed


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: RPM Fusion Release Engineering <sergiomb@rpmfusion.org> - 2.2.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add GCC-15 patch from upstream


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.28.0-7
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add mini patch for GCC 15
  - Drop BR gtk2-devel
  - Fix conditionals for epel9+


author: Sandro <devel@penguinpee.nl>
changelog:
  - Add python3-ninja sub package providing metadata for Python packages
    depending on ninja to facilitate automatic dependency resolution.


author: Jerry James <loganjerry@gmail.com> - 2.16.0-1
changelog:
  - Version 2.16.0
  - Remove the deprecated ocaml-atdgen-devel package
  - New ocaml-atdcpp package for generating C++


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-13
changelog:
  - Clean up spec file from pre-systemd times
  - Use systemd services to initiate oddjobd configuration reload
  - Resolves: rhbz#2248817


author: Pavol Sloboda <psloboda@redhat.com> - 0.07.18-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively. Also
    it was mentioned in the spec file twice as a BuildRequires.


author: Aaron Rainbolt <arraybolt@fedoraproject.org> - 1:1.9.0-33
changelog:
  - Set minimum CMake version to 3.5 (rhbz#2381472)
  - Set non-standard CMake variables back to expected values (rhbz#2381665)
  - Migrate InstallMgr test to tmt framework (rhbz#2383081)


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Julio Faracco <jfaracco@redhat.com> - 3.5.2-1
changelog:
  - Adds .NET counter integration (3.5.2)
  - Adds a custom core dumper (corex) (3.5.2)
  - Add support for RHEL10, Debian 13, Ubuntu 26.04, Fedora 43 and updated dependencies (3.5.1)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.19.6-13
changelog:
  - Temporarily use GCC 14 to workaround FTBFS on i686 and s390x
  - Don’t build Python extension with C++ on Python 3.14+


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Miro Hrončok <miro@hroncok.cz> - 1.4.1-8
changelog:
  - Remove unused BuildRequires for deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.1-33
changelog:
  - F41+: Use the provisional pyproject declarative buildsystem
  - Since this is only for F41+, drop EPEL conditionals
  - Always run an import-only smoke test; add a bcond vtk_dep for optionally
    including VTK integration modules in this


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.4.0-1
changelog:
  - Update to 5.4.0 (close RHBZ#2368139)
  - Drop the plotly dependency from the “vis” extra until the python-plotly
    package can be updated


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Sandro <devel@penguinpee.nl> - 2.10.2-1
changelog:
  - Update to 2.10.2
  - Add NumPy 2.x support (since 2.10.0)
  - Drop patches (appear to be no longer required)
  - Close RHBZ#2332471


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Pavol Sloboda <psloboda@redhat.com> - 1.00.14-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively.


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-1
changelog:
  - Version 2022.0.0
  - Drop unnecessary Werror patch
  - Drop unnecessary python shebang mangling
  - Let pkgconfig specify the version of hwloc to use


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-3
changelog:
  - Add patch to fix linking tbbmalloc with GCC 15
  - Update %giturl for the uxlfoundation change
  - Fix intersphinx_mapping to use local objects.inv


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-8
changelog:
  - Added the line '/usr/lib/sysusers.d/smf-spf.conf' in %files.
  - Added the line 'install -m0644 -D /builddir/build/SOURCES/smf-spf.sysusers /builddir/build/BUILD/smf-spf-2.5.1_20220423g061e937-build/BUILDROOT/usr/lib/sysusers.d/smfs.conf'.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Peter Czanik <peter@czanik.hu> - 4.9.0-1
changelog:
  - update to 4.9.0
  - add destination drivers for ClickHouse and PubSub
  - add missing Python dependencies


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Peter Robinson <pbrobinson@gmail.com> - 2.5.12-1
changelog:
  - Update to 2.5.12
  - Enable aarch64 support
  - Drop (and obsolete) monitor subpackage (removed upstream)
  - Minor associated cleanups


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1:2025.10-1
changelog:
  - Update to 2025.10 GA (rhbz#2401964)
  - Fix booting when using FW device-tree (rhbz#2402498)
  - Fix for some variants of Raspberry Pi
  - Fixes for Jetson device booting


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.30-4
changelog:
  - Disable perl-Coro for rawhide, as this blocks rebuilding
    for perl 5.42 (see https://bugzilla.redhat.com/show_bug.cgi?id=2379448)


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1
changelog:
  - update to 1.37.1 rhbz#2510094
  - Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
  - Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Michel Lind <salimma@centosproject.org> - 0.4-1
changelog:
  - Update to version 0.4
  - Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
    querying KASLR


author: Michel Lind <salimma@centosproject.org> - 0.5-1
changelog:
  - Update to version 0.5
  - Apply build flags consistently
  - Update licenses to account for bundled dependencies


author: Michel Lind <salimma@centosproject.org> - 0.5-2
changelog:
  - fix to show SHA commit in help text
  - also ensure `make install` uses the right build flags
  - include all bundled projects' licenses


author: Michel Lind <salimma@fedoraproject.org> - 0.5-3
changelog:
  - Drop rust_arches; no longer needed. But limit builds to the architectures
    strobelight-libs supports


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
changelog:
  - Patch "pastekey" fixes a crash pasting an encrypted private key.
    https://github.com/chris2511/xca/commit/d29d55a
  - Patch "revokedel" fixes a freeze when deleting a certificate.
    https://github.com/chris2511/xca/commit/43e1b33
  - Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
    https://bugzilla.redhat.com/show_bug.cgi?id=2259477


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-7
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434046)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434048)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-4
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.3-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
          [XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.3-4
changelog:
  [ never submitted as update ]
  - x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487]
  - domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490]
  - Arm: Completion of memory accesses not guaranteed by completion of a TLBI
  	 [XSA-493, CVE-2025-10263]
  - x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.4-1
changelog:
  - update to xen 4.20.4
  - includes security fixes
    x86 shadow paging is deprecated [XSA-495, CVE-2026-42493]
    vIRQ event channel binding may break Xenstore [XSA-496, CVE-2026-42492]
    buffer overruns in libfsimage iso9660 handling [XSA-497, CVE-2026-42494,
  	CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425]
    sysctl and platform-op locks open to abuse [XSA-499, CVE-2026-62426,
  	CVE-2026-62427]
    grant-table: type confusion in grant-copy [XSA-500, CVE-2026-62428]
    grant-table: version change racing with other operations [XSA-501,
  	CVE-2026-62435, CVE-2026-62436]
    vNUMA domain cleanup may race other operations [XSA-502, CVE-2026-62429]
    x86: Out-of-bounds read in vRTC emulation [XSA-503, CVE-2026-62430]
    Viridian STIMER division by zero [XSA-504, CVE-2026-62431]
    evtchn: Race between FIFO expand and reset [XSA-505, CVE-2026-62432]
    correct buffer checks for DM_OP hypercalls [XSA-506, CVE-2026-62433]
    PoD: Don't try to reclaim special pages [XSA-507, CVE-2026-62434]
    pygrub is only supported in de-privileged mode [XSA-508]


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Richard W.M. Jones <rjones@redhat.com> - 4.5.2-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-13
changelog:
  - Regenerate C source from Vala source and enable
    -Werror=incompatible-pointer-types again
    (Thanks to Florian Weimer <fweimer@redhat.com>)


author: Neil Hanlon <neil@shrug.pw> - 1.9.1-4
changelog:
  - switch to pure cmake (1.9.0 turned configure into a wrapper which dropped options)
  - resolve ftbfs, fti, new version (#226393 #2301380 #2292226)
  - resolve CVE-2024-39844 (#2295622)


