# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Miro Hrončok <miro@hroncok.cz> - 3.0.11-5
changelog:
  - Avoid accidentally including bogus *.txt files as documentation
  - Include README.rst and CHANGES.rst instead


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Jerry James <loganjerry@gmail.com> - 2.3.3-23
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Correct License fields from Apache-2.0 to CECILL-C
  - Do configuration steps in %conf


author: Michal Schorm <mschorm@redhat.com> - 3.3.2-3
changelog:
  - Rebuilt for  https://fedoraproject.org/wiki/Changes/switch_distribution_default_MariaDB_from_10.11_to_11.8


author: Packit <hello@packit.dev> - 43.33-1
changelog:
  - Revert "Default to GTK UI when available, fallback to Web UI otherwise"
    (k.koukiou)
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
  - Remove unused Flatpak manager code (jkonecny)


author: Packit <hello@packit.dev> - 43.36-1
changelog:
  - packit: drive jobs from supported_releases per branch; dedupe and group
    targets (k.koukiou)
  - Fix pylint warnings caused by dynamic kickstart command imports (k.koukiou)
  - core: kickstart: implement OS-release based version detection (k.koukiou)
  - build: decouple BASE_CONTAINER from branch configuration (k.koukiou)
  - workflows: remove hardcoded CONTAINER_TAG="lorax" usage (k.koukiou)
  - dracut module requires generic initramfs (jstodola)


author: Packit <hello@packit.dev> - 43.37-1
changelog:
  - Log correct boot option for iSCSI boot without iBFT (jstodola)
  - Get full nevra string from dnf instead of composing it (pkratoch)
  - Add release notes for RDP kickstart support (adamkankovsky)
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
  - storage: devicetree: read VERSION or VERSION_CODENAME for identifying OS from
    os-release (k.koukiou)


author: Packit <hello@packit.dev> - 43.39-1
changelog:
  - Fix setting of kernel console logging level for anaconda (rvykydal)
  - Use new more suitable API for Gtk UI required space check (rvykydal)
  - Add GetFreeSpaceForSystem API (rvykydal)
  - docs: update CONTRIBUTING.rst with new branching approach (k.koukiou)


author: Packit <hello@packit.dev> - 43.41-1
changelog:
  - data: profiles: enable geolocation on Fedora Workstation live image
    (matiwari)
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
  - spec: enable live in ELN (yselkowi)
  - Mark unused variables with a leading underscore (a.badger)


author: Packit <hello@packit.dev> - 43.44-1
changelog:
  - flatpak: enable installation with CDROM source type (bciconel)
  - storage: Improve NotEnoughFreeSpaceError message with specific request
    details (k.koukiou)
  - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)


author: Jerry James <loganjerry@gmail.com> - 4.13.2-3
changelog:
  - Add java-headless dependency to the antlr4 package
  - Simplify swift conditionals
  - Do configuration actions in %conf


author: Mattia Verga <mattia.verga@protonmail.com> - 0.94-10
changelog:
  - Disable build on i686 (fix Fedora#2300567)
  - Switch Tycho index files to upstream provided
  - Switch 42xx index files to 52xx


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Sébastien Le Roux <sebastien.leroux@ipcms.unistra.fr> - 1.1.17-1
changelog:
  - Bug corrections and improvements (see: https://github.com/Slookeur/atomes-GNU/releases/tag/v1.1.17)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.5-2
changelog:
  - obsolete -freeworld package, since it's been a meta-package only
    and currently doesn't pull it any extra packages anymore
  - cleanup: drop old Obs/Conf for -freeworld-mms package


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.43.1-1
changelog:
  - Update to binutils 2.43.1-1
  - Add: binutils-fix-ar-test.patch
  - Update: binutils-riscv-testsuite-fixes.patch
  - Update: binutils-testsuite-fixes.patch
  - Retire: binutils-special-sections-in-groups.patch
  - Retire: binutils-gold-powerpc.patch
  - Retire: binutils-handle-corrupt-version-info.patch
  - Retire: binutils-execstack-error.patch
  - Retire: binutils-BPF-reloc-4.patch
  - Retire: binutils-x86-64-v3.patch
  - Retire: binutils-big-merge.patch
  - Retire: binutils-aarch64-urcbig-bti-programs.patch
  - Retire: i686-AVX10.1-part-1.patch
  - Retire: i686-AVX10.1-part-2.patch
  - Retire: i686-AVX10.1-part-3.patch
  - Retire: i686-AVX10.1-part-4.patch
  - Retire: i686-AVX10.1-part-5.patch
  - Retire: i686-AVX10.1-part-6.patch
  - Retire: binutils-riscv-SUB_ULEB128.patch
  - Retire: binutils-ppc-dt_relr-relocs.patch
  - Retire: binutils-demangler-updates.patch
  - Retire: binutils-Intel-APX-part-1.patch
  - Retire: binutils-power-11.patch
  - Retire: binutils-Intel-APX-part-1-fixes.patch
  - Retire: binutils-multilib.am.patch
  - Retire: binutils-Intel-APX-CODE_6_GOTTPOFF.patch
  - Retire: binutils-archive-DT_SYMTAB.patch


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Kate Hsuan <hpa@redhat.com> - 1.4.0-2
changelog:
  - tuned is the default power profile management daemon in Fedora
  - https://pagure.io/fesco/issue/3222


author: Jerry James <loganjerry@gmail.com> - 10.9.2-9
changelog:
  - Stop building for 32-bit x86
  - Convert the License field to SPDX
  - Add additional licenses found on review of the code


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Than Ngo <than@redhat.com> - 148.0.7778.167-1
changelog:
  - Update to 148.0.7778.167
     * CVE-2026-8509: Heap buffer overflow in WebML
     * CVE-2026-8510: Integer overflow in Skia
     * CVE-2026-8511: Use after free in UI
     * CVE-2026-8512: Use after free in FileSystem
     * CVE-2026-8513: Use after free in Input
     * CVE-2026-8514: Use after free in Aura
     * CVE-2026-8515: Use after free in HID
     * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
     * CVE-2026-8517: Object lifecycle issue in WebShare
     * CVE-2026-8518: Use after free in Blink
     * CVE-2026-8519: Integer overflow in ANGLE
     * CVE-2026-8520: Race in Payments
     * CVE-2026-8521: Use after free in Tab Groups
     * CVE-2026-8522: Use after free in Downloads
     * CVE-2026-8523: Use after free in Mojo
     * CVE-2026-8558: Out of bounds write in Fonts
     * CVE-2026-8524: Out of bounds write in WebAudio
     * CVE-2026-8525: Heap buffer overflow in ANGLE
     * CVE-2026-8526: Out of bounds write in WebRTC
     * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
     * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8529: Heap buffer overflow in Codecs
     * CVE-2026-8530: Use after free in Network
     * CVE-2026-8531: Heap buffer overflow in WebML
     * CVE-2026-8532: Integer overflow in XML
     * CVE-2026-8533: Use after free in Accessibility
     * CVE-2026-8534: Integer overflow in GPU
     * CVE-2026-8535: Out of bounds read in Media
     * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
     * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
     * CVE-2026-8538: Insufficient validation of untrusted input in GPU
     * CVE-2026-8539: Script injection in SanitizerAPI
     * CVE-2026-8540: Type Confusion in V8
     * CVE-2026-8541: Out of bounds read in UI
     * CVE-2026-8542: Use after free in Core
     * CVE-2026-8543: Out of bounds read in FileSystem
     * CVE-2026-8544: Use after free in Media
     * CVE-2026-8545: Object corruption in Compositing
     * CVE-2026-8546: Out of bounds read in GPU
     * CVE-2026-8547: Insufficient policy enforcement in Passwords
     * CVE-2026-8548: Out of bounds write in Media
     * CVE-2026-8549: Use after free in Media
     * CVE-2026-8550: Use after free in Google Lens
     * CVE-2026-8551: Use after free in Downloads
     * CVE-2026-8552: Heap buffer overflow in GPU
     * CVE-2026-8553: Use after free in GPU
     * CVE-2026-8554: Type Confusion in ANGLE
     * CVE-2026-8555: Use after free in GTK
     * CVE-2026-8556: Inappropriate implementation in ANGLE
     * CVE-2026-8557: Use after free in Accessibility
     * CVE-2026-8559: Integer overflow in Internationalization
     * CVE-2026-8560: Heap buffer overflow in SwiftShader
     * CVE-2026-8561: Incorrect security UI in Fullscreen
     * CVE-2026-8562: Side-channel information leakage in Navigation
     * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
     * CVE-2026-8564: Incorrect security UI in Downloads
     * CVE-2026-8565: Inappropriate implementation in Downloads
     * CVE-2026-8566: Insufficient policy enforcement in Payments
     * CVE-2026-8567: Integer overflow in ANGLE
     * CVE-2026-8568: Insufficient policy enforcement in AI
     * CVE-2026-8569: Out of bounds write in Codecs
     * CVE-2026-8570: Type Confusion in V8
     * CVE-2026-8571: Insufficient policy enforcement in GPU
     * CVE-2026-8572: Insufficient policy enforcement in Network
     * CVE-2026-8573: Integer overflow in Codecs
     * CVE-2026-8574: Use after free in Core
     * CVE-2026-8575: Use after free in UI
     * CVE-2026-8576: Inappropriate implementation in CORS
     * CVE-2026-8577: Integer overflow in Fonts
     * CVE-2026-8578: Out of bounds read in GPU
     * CVE-2026-8579: Insufficient validation of untrusted input in Skia
     * CVE-2026-8580: Use after free in Mojo
     * CVE-2026-8581: Use after free in GPU
     * CVE-2026-8582: Object lifecycle issue in Dawn
     * CVE-2026-8583: Insufficient policy enforcement in WebXR
     * CVE-2026-8584: Inappropriate implementation in Views
     * CVE-2026-8585: Inappropriate implementation in Media
     * CVE-2026-8586: Inappropriate implementation in Chromoting
     * CVE-2026-8587: Use after free in Extensions


author: Than Ngo <than@redhat.com> - 148.0.7778.178-1
changelog:
  - Update to 148.0.7778.178
    * CVE-2026-9111: Use after free in WebRTC
    * CVE-2026-9110: Inappropriate implementation in UI
    * CVE-2026-9112: Use after free in GPU
    * CVE-2026-9113: Out of bounds read in GPU
    * CVE-2026-9114: Use after free in QUIC
    * CVE-2026-9115: Insufficient policy enforcement in Service Worker
    * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-9117: Type Confusion in GFX
    * CVE-2026-9118: Use after free in XR
    * CVE-2026-9119: Heap buffer overflow in WebRTC
    * CVE-2026-9120: Use after free in WebRTC
    * CVE-2026-9126: Use after free in DOM
    * CVE-2026-9121: Out of bounds read in GPU
    * CVE-2026-9122: Out of bounds read in GPU
    * CVE-2026-9123: Heap buffer overflow in Chromecast
    * CVE-2026-9124: Insufficient validation of untrusted input in Input
  - Backport upstream patches to improve auto dark image inversion logic
  - Update default chromium browser config


author: Than Ngo <than@redhat.com> - 148.0.7778.215-1
changelog:
  - Update to 148.0.7778.215
    * CVE-2026-9872: Out of bounds write in GPU
    * CVE-2026-9873: Use after free in Network
    * CVE-2026-9874: Use after free in Dawn
    * CVE-2026-9875: Out of bounds read in WebGL
    * CVE-2026-9876: Use after free in WebGL
    * CVE-2026-9877: Use after free in ANGLE
    * CVE-2026-9878: Use after free in ANGLE
    * CVE-2026-9879: Out of bounds write in ANGLE
    * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
    * CVE-2026-9881: Use after free in Bluetooth
    * CVE-2026-9882: Integer overflow in ANGLE
    * CVE-2026-9883: Use after free in Base
    * CVE-2026-9884: Use after free in Browser
    * CVE-2026-9885: Insufficient validation of untrusted input in UI
    * CVE-2026-9886: Use after free in Base
    * CVE-2026-9887: Use after free in Proxy
    * CVE-2026-9888: Use after free in WebView
    * CVE-2026-9889: Out of bounds read and write in Dawn
    * CVE-2026-9890: Use after free in XR
    * CVE-2026-9891: Use after free in Extensions
    * CVE-2026-9892: Inappropriate implementation in Skia
    * CVE-2026-9893: Use after free in Skia
    * CVE-2026-9894: Use after free in GPU
    * CVE-2026-9895: Out of bounds read in GPU
    * CVE-2026-9896: Out of bounds write in V8
    * CVE-2026-9897: Use after free in DOM
    * CVE-2026-9898: Insufficient validation of untrusted input in GPU
    * CVE-2026-9899: Use after free in ANGLE
    * CVE-2026-9900: Out of bounds write in ANGLE
    * CVE-2026-9901: Use after free in ANGLE
    * CVE-2026-9902: Use after free in Accessibility
    * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
    * CVE-2026-9904: Use after free in ANGLE
    * CVE-2026-9905: Use after free in Accessibility
    * CVE-2026-9906: Out of bounds write in GPU
    * CVE-2026-9907: Out of bounds read in Dawn
    * CVE-2026-9908: Out of bounds read in ANGLE
    * CVE-2026-9909: Integer overflow in Skia
    * CVE-2026-9910: Out of bounds memory access in ANGLE
    * CVE-2026-9911: Integer overflow in ANGLE
    * CVE-2026-9912: Inappropriate implementation in GPU
    * CVE-2026-9913: Inappropriate implementation in ANGLE
    * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9915: Heap buffer overflow in ANGLE
    * CVE-2026-9916: Out of bounds write in ANGLE
    * CVE-2026-9917: Uninitialized Use in WebGL
    * CVE-2026-9918: Inappropriate implementation in Tint
    * CVE-2026-9919: Out of bounds read in WebGL
    * CVE-2026-9920: Uninitialized Use in GPU
    * CVE-2026-9921: Uninitialized Use in WebGL
    * CVE-2026-9922: Use after free in GPU
    * CVE-2026-9923: Use after free in Skia
    * CVE-2026-9924: Heap buffer overflow in ANGLE
    * CVE-2026-9925: Use after free in ANGLE
    * CVE-2026-9926: Heap buffer overflow in ANGLE
    * CVE-2026-9927: Use after free in ANGLE
    * CVE-2026-9928: Out of bounds read in ANGLE
    * CVE-2026-9929: Inappropriate implementation in WebGL
    * CVE-2026-9930: Out of bounds write in Dawn
    * CVE-2026-9931: Use after free in GPU
    * CVE-2026-9932: Use after free in ANGLE
    * CVE-2026-9933: Use after free in Input
    * CVE-2026-9934: Use after free in Aura
    * CVE-2026-9935: Uninitialized Use in ANGLE
    * CVE-2026-9936: Use after free in GFX
    * CVE-2026-9937: Use after free in UI
    * CVE-2026-9938: Inappropriate implementation in V8
    * CVE-2026-9939: Heap buffer overflow in WebCodecs
    * CVE-2026-9940: Heap buffer overflow in ANGLE
    * CVE-2026-9941: Use after free in ANGLE
    * CVE-2026-9942: Uninitialized Use in ANGLE
    * CVE-2026-9943: Out of bounds read in WebGL
    * CVE-2026-9944: Uninitialized Use in ANGLE
    * CVE-2026-9945: Use after free in Media
    * CVE-2026-9946: Use after free in ANGLE
    * CVE-2026-9947: Use after free in XML
    * CVE-2026-9948: Use after free in Views
    * CVE-2026-9949: Use after free in Core
    * CVE-2026-9950: Insufficient validation of untrusted input in iOS
    * CVE-2026-9951: Use after free in UI
    * CVE-2026-9952: Use after free in WebAudio
    * CVE-2026-9953: Out of bounds read in ANGLE
    * CVE-2026-9954: Use after free in TabStrip
    * CVE-2026-9955: Inappropriate implementation in iOS
    * CVE-2026-9956: Use after free in iOS
    * CVE-2026-9957: Use after free in PDF
    * CVE-2026-9958: Use after free in PDFium
    * CVE-2026-9959: Race in WebRTC
    * CVE-2026-9960: Integer overflow in PDFium
    * CVE-2026-9961: Use after free in SurfaceCapture
    * CVE-2026-9962: Use after free in WebRTC
    * CVE-2026-9963: Uninitialized Use in iOS
    * CVE-2026-9964: Use after free in Bluetooth
    * CVE-2026-9965: Out of bounds write in ANGLE
    * CVE-2026-9966: Integer overflow in XML
    * CVE-2026-9967: Out of bounds write in GPU
    * CVE-2026-9968: Integer overflow in V8
    * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9970: Use after free in WebGL
    * CVE-2026-9971: Inappropriate implementation in iOS
    * CVE-2026-9972: Uninitialized Use in Gamepad
    * CVE-2026-9973: Out of bounds write in V8
    * CVE-2026-9974: Out of bounds write in GPU
    * CVE-2026-9975: Out of bounds read and write in ANGLE
    * CVE-2026-9976: Inappropriate implementation in USB
    * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
    * CVE-2026-9978: Use after free in Glic
    * CVE-2026-9979: Insufficient validation of untrusted input in Input
    * CVE-2026-9980: Insufficient validation of untrusted input in Printing
    * CVE-2026-9981: Inappropriate implementation in Skia
    * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9983: Type Confusion in Skia
    * CVE-2026-9984: Use after free in UI
    * CVE-2026-9985: Insufficient validation of untrusted input in Media
    * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
    * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-9988: Use after free in WebRTC
    * CVE-2026-9989: Inappropriate implementation in Media
    * CVE-2026-9990: Use after free in WebAppInstalls
    * CVE-2026-9991: Inappropriate implementation in Media
    * CVE-2026-9992: Use after free in Network
    * CVE-2026-9993: Use after free in Views
    * CVE-2026-9994: Use after free in Core
    * CVE-2026-9995: Use after free in WebXR
    * CVE-2026-9996: Out of bounds read in WebRTC
    * CVE-2026-9997: Use after free in Input
    * CVE-2026-9998: Integer overflow in Skia
    * CVE-2026-9999: Inappropriate implementation in ANGLE
    * CVE-2026-10000: Use after free in Passwords
    * CVE-2026-10001: Use after free in PerformanceManager
    * CVE-2026-10002: Use after free in PDFium
    * CVE-2026-10003: Use after free in Views
    * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
    * CVE-2026-10005: Use after free in WebAppInstalls
    * CVE-2026-10006: Race in WebAudio
    * CVE-2026-10007: Use after free in SVG
    * CVE-2026-10008: Uninitialized Use in GPU
    * CVE-2026-10009: Integer overflow in Skia
    * CVE-2026-10010: Inappropriate implementation in Input
    * CVE-2026-10011: Inappropriate implementation in Skia
    * CVE-2026-10012: Use after free in Skia
    * CVE-2026-10013: Use after free in WebCodecs
    * CVE-2026-10014: Use after free in WebMIDI
    * CVE-2026-10015: Integer overflow in WTF
    * CVE-2026-10016: Use after free in DOM
    * CVE-2026-10017: Out of bounds read in Headless
    * CVE-2026-10018: Integer overflow in ANGLE
    * CVE-2026-10019: Integer overflow in ANGLE
    * CVE-2026-10020: Insufficient validation of untrusted input in Skia
    * CVE-2026-10021: Insufficient validation of untrusted input in USB
    * CVE-2026-10022: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 149.0.7827.53-1
changelog:
  - Update to 149.0.7827.53
    * CVE-2026-10881: Out of bounds read and write in ANGLE
    * CVE-2026-10882: Use after free in Network
    * CVE-2026-10883: Out of bounds write in ANGLE
    * CVE-2026-10884: Use after free in Chromecast
    * CVE-2026-10885: Use after free in Chrome for iOS
    * CVE-2026-10886: Use after free in FileSystem
    * CVE-2026-10887: Use after free in Chromoting
    * CVE-2026-10888: Use after free in Cast Streaming
    * CVE-2026-10889: Out of bounds read in ANGLE
    * CVE-2026-10890: Use after free in Cast
    * CVE-2026-10891: Use after free in GFX
    * CVE-2026-10892: Out of bounds write in GPU
    * CVE-2026-10893: Use after free in Chromoting
    * CVE-2026-10894: Use after free in Printing
    * CVE-2026-10895: Use after free in Ozone
    * CVE-2026-10896: Use after free in Chrome for iOS
    * CVE-2026-10897: Out of bounds write in GPU
    * CVE-2026-10898: Stack buffer overflow in GPU
    * CVE-2026-10899: Use after free in Ozone
    * CVE-2026-10900: Use after free in Passwords
    * CVE-2026-10901: Use after free in Passwords
    * CVE-2026-10902: Use after free in Ozone
    * CVE-2026-10903: Use after free in WebRTC
    * CVE-2026-10904: Inappropriate implementation in V8
    * CVE-2026-10905: Use after free in Network
    * CVE-2026-10906: Use after free in WebAuthentication
    * CVE-2026-10907: Out of bounds write in ANGLE
    * CVE-2026-10908: Use after free in FullScreen
    * CVE-2026-10909: Use after free in Dawn
    * CVE-2026-10910: Type Confusion in V8
    * CVE-2026-10911: Insufficient validation of untrusted input in Media
    * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
    * CVE-2026-10913: Use after free in ANGLE
    * CVE-2026-10914: Use after free in ANGLE
    * CVE-2026-10915: Use after free in Core
    * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10917: Insufficient validation of untrusted input in Media
    * CVE-2026-10918: Use after free in Viz
    * CVE-2026-10919: Use after free in ANGLE
    * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
    * CVE-2026-10921: Integer overflow in Dawn
    * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10923: Use after free in WebAppInstalls
    * CVE-2026-10924: Integer overflow in Chromecast
    * CVE-2026-10925: Out of bounds write in Skia
    * CVE-2026-10926: Use after free in Cast
    * CVE-2026-10927: Out of bounds read in Dawn
    * CVE-2026-10928: Script injection in Headless
    * CVE-2026-10929: Heap buffer overflow in ANGLE
    * CVE-2026-10930: Out of bounds read in ANGLE
    * CVE-2026-10931: Use after free in FileSystem
    * CVE-2026-10932: Use after free in UI
    * CVE-2026-10933: Use after free in Audio
    * CVE-2026-10934: Use after free in Autofill
    * CVE-2026-10935: Inappropriate implementation in V8
    * CVE-2026-10936: Type Confusion in V8
    * CVE-2026-10937: Inappropriate implementation in Passwords
    * CVE-2026-10938: Insufficient validation of untrusted input in Input
    * CVE-2026-10939: Use after free in WebRTC
    * CVE-2026-10940: Race in Codecs
    * CVE-2026-10941: Out of bounds memory access in Skia
    * CVE-2026-10942: Insufficient validation of untrusted input in UI
    * CVE-2026-10943: Use after free in WebRTC
    * CVE-2026-10944: Insufficient policy enforcement in Autofill
    * CVE-2026-10945: Use after free in PDF
    * CVE-2026-10946: Heap buffer overflow in Media
    * CVE-2026-10947: Use after free in WebRTC
    * CVE-2026-10948: Use after free in WebRTC
    * CVE-2026-10949: Heap buffer overflow in Video
    * CVE-2026-10950: Insufficient policy enforcement in Autofill
    * CVE-2026-10951: Use after free in Autofill
    * CVE-2026-10952: Use after free in Chrome for iOS
    * CVE-2026-10953: Use after free in Core
    * CVE-2026-10954: Use after free in Actor
    * CVE-2026-10955: Type Confusion in ANGLE
    * CVE-2026-10956: Use after free in MimeHandlerView
    * CVE-2026-10957: Use after free in Glic
    * CVE-2026-10958: Use after free in Chrome for iOS
    * CVE-2026-10959: Use after free in Input
    * CVE-2026-10960: Uninitialized Use in Codecs
    * CVE-2026-10961: Use after free in Chrome for iOS
    * CVE-2026-10962: Type Confusion in Media
    * CVE-2026-10963: Integer overflow in V8
    * CVE-2026-10964: Integer overflow in V8
    * CVE-2026-10965: Integer overflow in DevTools
    * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
    * CVE-2026-10967: Use after free in SurfaceCapture
    * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
    * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
    * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
    * CVE-2026-10971: Insufficient validation of untrusted input in Printing
    * CVE-2026-10972: Use after free in Ozone
    * CVE-2026-10973: Uninitialized Use in Dawn
    * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-10975: Use after free in WebRTC
    * CVE-2026-10976: Uninitialized Use in Dawn
    * CVE-2026-10977: Uninitialized Use in Skia
    * CVE-2026-10978: Use after free in Chromoting
    * CVE-2026-10979: Out of bounds read in ANGLE
    * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
    * CVE-2026-10982: Use after free in WebXR
    * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
    * CVE-2026-10984: Inappropriate implementation in Accessibility
    * CVE-2026-10985: Out of bounds read in Skia
    * CVE-2026-10986: Integer overflow in Media
    * CVE-2026-10987: Integer overflow in V8
    * CVE-2026-10988: Use after free in Views
    * CVE-2026-10989: Inappropriate implementation in V8
    * CVE-2026-10990: Use after free in Glic
    * CVE-2026-10991: Use after free in V8
    * CVE-2026-10992: Insufficient data validation in Animation
    * CVE-2026-10993: Heap buffer overflow in Skia
    * CVE-2026-10994: Uninitialized Use in ANGLE
    * CVE-2026-10995: Heap buffer overflow in TabStrip
    * CVE-2026-10996: Inappropriate implementation in Workers
    * CVE-2026-10997: Insufficient policy enforcement in Extensions
    * CVE-2026-10998: Out of bounds read in Media
    * CVE-2026-10999: Out of bounds memory access in ANGLE
    * CVE-2026-11000: Use after free in Fonts
    * CVE-2026-11001: Incorrect security UI in Payments
    * CVE-2026-11002: Use after free in Autofill
    * CVE-2026-11003: Use after free in WebRTC
    * CVE-2026-11004: Out of bounds read in ANGLE
    * CVE-2026-11005: Out of bounds read in ANGLE
    * CVE-2026-11006: Out of bounds read in Dawn
    * CVE-2026-11007: Insufficient validation of untrusted input in WebView
    * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-11009: Use after free in USB
    * CVE-2026-11010: Use after free in WebShare
    * CVE-2026-11011: Insufficient policy enforcement in Password Manager
    * CVE-2026-11012: Use after free in Serial
    * CVE-2026-11013: Insufficient validation of untrusted input in Network
    * CVE-2026-11014: Insufficient policy enforcement in Extensions
    * CVE-2026-11015: Out of bounds read in WebGPU
    * CVE-2026-11016: Insufficient validation of untrusted input in Network
    * CVE-2026-11017: Inappropriate implementation in Link Preview
    * CVE-2026-11018: Insufficient policy enforcement in Actor
    * CVE-2026-11019: Inappropriate implementation in Payments
    * CVE-2026-11020: Inappropriate implementation in Extensions
    * CVE-2026-11021: Insufficient validation of untrusted input in GPU
    * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-11024: Stack buffer overflow in Skia
    * CVE-2026-11025: Insufficient policy enforcement in Navigation
    * CVE-2026-11026: Insufficient policy enforcement in Extensions
    * CVE-2026-11027: Insufficient validation of untrusted input in Glic
    * CVE-2026-11028: Use after free in Media
    * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
    * CVE-2026-11030: Use after free in Network
    * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11032: Insufficient data validation in Password Manager
    * CVE-2026-11033: Uninitialized Use in WebML
    * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
    * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
    * CVE-2026-11036: Inappropriate implementation in DOM
    * CVE-2026-11037: Out of bounds write in Codecs
    * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
    * CVE-2026-11039: Uninitialized Use in Skia
    * CVE-2026-11040: Use after free in ANGLE
    * CVE-2026-11041: Insufficient validation of untrusted input in Media
    * CVE-2026-11042: Use after free in Views
    * CVE-2026-11043: Out of bounds write in ANGLE
    * CVE-2026-11044: Integer overflow in ANGLE
    * CVE-2026-11045: Insufficient validation of untrusted input in GPU
    * CVE-2026-11046: Insufficient validation of untrusted input in Media
    * CVE-2026-11047: Insufficient validation of untrusted input in Base
    * CVE-2026-11048: Inappropriate implementation in Extensions
    * CVE-2026-11049: Use after free in Password Manager
    * CVE-2026-11050: Use after free in V8
    * CVE-2026-11051: Out of bounds read in ANGLE
    * CVE-2026-11052: Type Confusion in GPU
    * CVE-2026-11053: VULNERABILITY in WebRTC
    * CVE-2026-11054: Use after free in WebRTC
    * CVE-2026-11055: Use after free in ANGLE
    * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
    * CVE-2026-11057: Uninitialized Use in Skia
    * CVE-2026-11058: Integer overflow in CredentialProvider
    * CVE-2026-11059: Use after free in Blink
    * CVE-2026-11060: Use after free in Media
    * CVE-2026-11061: Out of bounds read in ANGLE
    * CVE-2026-11062: Insufficient policy enforcement in Extensions
    * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
    * CVE-2026-11064: Uninitialized Use in GPU
    * CVE-2026-11065: Use after free in ANGLE
    * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-11067: Uninitialized Use in Dawn
    * CVE-2026-11068: Use after free in WebSockets
    * CVE-2026-11069: Insufficient validation of untrusted input in Cast
    * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11071: Use after free in Base
    * CVE-2026-11072: Use after free in WebView
    * CVE-2026-11073: Use after free in WebGL
    * CVE-2026-11074: Use after free in WebRTC
    * CVE-2026-11075: Out of bounds read in V8
    * CVE-2026-11076: Type Confusion in CSS
    * CVE-2026-11077: Out of bounds read in Dawn
    * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
    * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11080: Use after free in WebView
    * CVE-2026-11081: Policy bypass in Canvas
    * CVE-2026-11082: Use after free in GPU
    * CVE-2026-11083: Inappropriate implementation in Password Manager
    * CVE-2026-11084: Inappropriate implementation in Password Manager
    * CVE-2026-11085: Integer overflow in GPU
    * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11087: Uninitialized Use in ANGLE
    * CVE-2026-11088: Integer overflow in ANGLE
    * CVE-2026-11089: Uninitialized Use in Media
    * CVE-2026-11090: Uninitialized Use in ANGLE
    * CVE-2026-11091: Inappropriate implementation in Dawn
    * CVE-2026-11092: Insufficient policy enforcement in DevTools
    * CVE-2026-11093: Insufficient validation of untrusted input in Printing
    * CVE-2026-11094: Use after free in Codecs
    * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11096: Out of bounds read in WebRTC
    * CVE-2026-11097: Inappropriate implementation in WebView
    * CVE-2026-11098: Insufficient validation of untrusted input in GPU
    * CVE-2026-11099: Vulnerability in Skia
    * CVE-2026-11100: Use after free in File Input
    * CVE-2026-11101: Uninitialized Use in Dawn
    * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-11103: Inappropriate implementation in Installer
    * CVE-2026-11104: Uninitialized Use in ANGLE
    * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
    * CVE-2026-11106: Inappropriate implementation in Media
    * CVE-2026-11107: Inappropriate implementation in Downloads
    * CVE-2026-11108: Inappropriate implementation in NFC
    * CVE-2026-11109: Uninitialized Use in ANGLE
    * CVE-2026-11110: Uninitialized Use in ANGLE
    * CVE-2026-11111: Out of bounds read in ANGLE
    * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-11114: Use after free in Device Trust
    * CVE-2026-11115: Use after free in Updater
    * CVE-2026-11116: Use after free in Chromoting
    * CVE-2026-11117: Use after free in Views
    * CVE-2026-11118: Use after free in WebRTC
    * CVE-2026-11119: Insufficient validation of untrusted input in GPU
    * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
    * CVE-2026-11121: Insufficient validation of untrusted input in Skia
    * CVE-2026-11122: Inappropriate implementation in Keyboard
    * CVE-2026-11123: Uninitialized Use in ANGLE
    * CVE-2026-11124: Heap buffer overflow in Skia
    * CVE-2026-11125: Use after free in Compositing
    * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11127: Inappropriate implementation in WebAPKs
    * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
    * CVE-2026-11129: Inappropriate implementation in Extensions
    * CVE-2026-11130: Use after free in Media
    * CVE-2026-11131: Use after free in Autofill
    * CVE-2026-11132: Policy bypass in Paint
    * CVE-2026-11133: Insufficient policy enforcement in Paint
    * CVE-2026-11134: Insufficient data validation in Media
    * CVE-2026-11135: Insufficient policy enforcement in Autofill
    * CVE-2026-11136: Use after free in Canvas
    * CVE-2026-11137: Uninitialized Use in ANGLE
    * CVE-2026-11138: Uninitialized Use in ANGLE
    * CVE-2026-11139: Policy bypass in Paint
    * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-11141: Uninitialized Use in Audio
    * CVE-2026-11142: Policy bypass in Paint
    * CVE-2026-11143: Heap buffer overflow in Extensions
    * CVE-2026-11144: Use after free in Media
    * CVE-2026-11145: Race in Geolocation
    * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11147: Use after free in WebML
    * CVE-2026-11148: Inappropriate implementation in Payments
    * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11150: Inappropriate implementation in XML
    * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11152: Object lifecycle issue in Dawn
    * CVE-2026-11153: Side-channel information leakage in Forms
    * CVE-2026-11154: Use after free in Dawn
    * CVE-2026-11155: Insufficient policy enforcement in CSS
    * CVE-2026-11156: Inappropriate implementation in CSS
    * CVE-2026-11157: Script injection in Accessibility
    * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
    * CVE-2026-11159: Uninitialized Use in Skia
    * CVE-2026-11160: Out of bounds read in Input
    * CVE-2026-11161: Insufficient data validation in DataTransfer
    * CVE-2026-11162: Insufficient policy enforcement in CSS
    * CVE-2026-11163: Use after free in Messages
    * CVE-2026-11164: Use after free in Blink
    * CVE-2026-11165: Use after free in WebMIDI
    * CVE-2026-11166: Inappropriate implementation in SVG
    * CVE-2026-11167: Inappropriate implementation in WebView
    * CVE-2026-11168: Insufficient policy enforcement in Extensions
    * CVE-2026-11169: Inappropriate implementation in XML
    * CVE-2026-11170: Inappropriate implementation in Chromoting
    * CVE-2026-11171: Integer overflow in Blink
    * CVE-2026-11172: Incorrect security UI in Contact Picker
    * CVE-2026-11173: Out of bounds write in V8
    * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
    * CVE-2026-11175: Incorrect security UI in Messages
    * CVE-2026-11176: Inappropriate implementation in Media
    * CVE-2026-11177: Use after free in Omnibox
    * CVE-2026-11178: Policy bypass in WebView
    * CVE-2026-11179: Inappropriate implementation in ORB
    * CVE-2026-11180: Policy bypass in SVG
    * CVE-2026-11181: Inappropriate implementation in Media Session
    * CVE-2026-11182: Inappropriate implementation in SVG
    * CVE-2026-11183: Out of bounds read in GWP-ASan
    * CVE-2026-11184: Insufficient policy enforcement in Actor
    * CVE-2026-11185: Use after free in V8
    * CVE-2026-11186: Inappropriate implementation in CSS
    * CVE-2026-11187: Insufficient policy enforcement in Glic
    * CVE-2026-11188: Use after free in USB
    * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11190: Insufficient policy enforcement in Extensions
    * CVE-2026-11191: Out of bounds memory access in ANGLE
    * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11193: Insufficient policy enforcement in Password Manager
    * CVE-2026-11194: Inappropriate implementation in Network
    * CVE-2026-11195: Inappropriate implementation in MHTML
    * CVE-2026-11196: Type Confusion in XML
    * CVE-2026-11197: Insufficient policy enforcement in Workers
    * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
    * CVE-2026-11200: Inappropriate implementation in WebRTC
    * CVE-2026-11201: Use after free in ServiceWorker
    * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-11203: Policy bypass in GPU
    * CVE-2026-11204: Inappropriate implementation in Signin
    * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-11206: Policy bypass in ServiceWorker
    * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
    * CVE-2026-11208: Use after free in Codecs
    * CVE-2026-11209: Insufficient policy enforcement in Passwords
    * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
    * CVE-2026-11211: Integer overflow in V8
    * CVE-2026-11212: Insufficient policy enforcement in DevTools
    * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
    * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
    * CVE-2026-11215: Inappropriate implementation in Cronet
    * CVE-2026-11216: Incorrect security UI in File Input
    * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
    * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
    * CVE-2026-11219: Insufficient data validation in Navigation
    * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
    * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
    * CVE-2026-11222: Incorrect security UI in Tab Strip
    * CVE-2026-11223: Insufficient validation of untrusted input in Network
    * CVE-2026-11224: Use after free in Chromoting
    * CVE-2026-11225: Incorrect security UI in WebUI
    * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
    * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
    * CVE-2026-11228: Incorrect security UI in File Input
    * CVE-2026-11229: Insufficient policy enforcement in Enterprise
    * CVE-2026-11230: Use after free in Extensions
    * CVE-2026-11231: Inappropriate implementation in Safe Browsing
    * CVE-2026-11232: Inappropriate implementation in TabGroups
    * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
    * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
    * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
    * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
    * CVE-2026-11237: Insufficient validation of untrusted input in Media
    * CVE-2026-11238: Inappropriate implementation in DevTools
    * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11240: Insufficient validation of untrusted input in Loader
    * CVE-2026-11241: Insufficient validation of untrusted input in Cast
    * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
    * CVE-2026-11243: Incorrect security UI in Downloads
    * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
    * CVE-2026-11245: Inappropriate implementation in Payments
    * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
    * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
    * CVE-2026-11248: Policy bypass in Google Lens
    * CVE-2026-11249: Use after free in Network
    * CVE-2026-11250: Inappropriate implementation in DevTools
    * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11252: Policy bypass in Content Settings
    * CVE-2026-11253: Race in Permissions
    * CVE-2026-11254: Inappropriate implementation in Permissions
    * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
    * CVE-2026-11256: Out of bounds read in GPU
    * CVE-2026-11257: Inappropriate implementation in Browser
    * CVE-2026-11258: Inappropriate implementation in File System Access
    * CVE-2026-11259: Insufficient validation of untrusted input in Cast
    * CVE-2026-11260: Policy bypass in Permissions
    * CVE-2026-11261: Insufficient validation of untrusted input in PDF
    * CVE-2026-11262: Use after free in TabStrip
    * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
    * CVE-2026-11264: Policy bypass in Content Security Policy
    * CVE-2026-11265: Insufficient data validation in Autofill
    * CVE-2026-11266: Policy bypass in SafeBrowsing
    * CVE-2026-11267: Insufficient policy enforcement in Extensions
    * CVE-2026-11268: Uninitialized Use in ANGLE
    * CVE-2026-11269: Inappropriate implementation in Extensions
    * CVE-2026-11270: Inappropriate implementation in UI
    * CVE-2026-11271: Incorrect security UI in Passwords
    * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
    * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
    * CVE-2026-11274: Inappropriate implementation in DOM Distiller
    * CVE-2026-11275: Insufficient policy enforcement in Page Info
    * CVE-2026-11276: Inappropriate implementation in Cast
    * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11278: Inappropriate implementation in CustomTabs
    * CVE-2026-11279: Out of bounds read in DevTools
    * CVE-2026-11280: Insufficient validation of untrusted input in Signin
    * CVE-2026-11281: Integer overflow in Chromoting
    * CVE-2026-11282: Policy bypass in Sandbox
    * CVE-2026-11283: Policy bypass in Shortcuts
    * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
    * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
    * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
    * CVE-2026-11288: Policy bypass in CSS
    * CVE-2026-11289: Side-channel information leakage in Paint
    * CVE-2026-11290: Integer overflow in WebView
    * CVE-2026-11291: Policy bypass in Android Autofill
    * CVE-2026-11292: Policy bypass in Blink
    * CVE-2026-11293: Use after free in Input
    * CVE-2026-11294: Inappropriate implementation in Passwords
    * CVE-2026-11295: Inappropriate implementation in WebView
    * CVE-2026-11296: Inappropriate implementation in ImageCapture
    * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
    * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11299: Out of bounds read in Fonts
    * CVE-2026-11300: Inappropriate implementation in Permissions
    * CVE-2026-11301: Out of bounds read in LiveCaption
    * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11303: Use after free in PDFium
    * CVE-2026-11304: Use after free in PDFium
    * CVE-2026-11305: Use after free in PDFium
    * CVE-2026-11306: Use after free in PDFium
    * CVE-2026-11307: Use after free in PDFium
    * CVE-2026-11308: Inappropriate implementation in Extensions
    * CVE-2026-11309: Insufficient policy enforcement in History


author: Than Ngo <than@redhat.com> - 149.0.7827.102-1
changelog:
  - Update to 149.0.7827.102
    * CVE-2026-11628: Use after free in Ozone
    * CVE-2026-11629: Use after free in Ozone
    * CVE-2026-11630: Use after free in File Input
    * CVE-2026-11631: Use after free in Aura
    * CVE-2026-11632: Use after free in TabStrip
    * CVE-2026-11633: Use after free in Bluetooth
    * CVE-2026-11634: Use after free in Gamepad
    * CVE-2026-11635: Use after free in Bluetooth
    * CVE-2026-11636: Use after free in Autofill
    * CVE-2026-11637: Use after free in Views
    * CVE-2026-11638: Use after free in Printing
    * CVE-2026-11639: Use after free in Compositing
    * CVE-2026-11640: Integer overflow in libyuv
    * CVE-2026-11641: Use after free in Bluetooth
    * CVE-2026-11642: Use after free in Web Apps
    * CVE-2026-11643: Use after free in Proxy
    * CVE-2026-11644: Use after free in Views
    * CVE-2026-11645: Out of bounds memory access in V8
    * CVE-2026-11646: Use after free in ViewTransitions
    * CVE-2026-11647: Use after free in Printing
    * CVE-2026-11648: Use after free in FullScreen
    * CVE-2026-11649: Use after free in V8
    * CVE-2026-11650: Use after free in V8
    * CVE-2026-11651: Use after free in Network
    * CVE-2026-11652: Use after free in Extensions
    * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11654: Use after free in CameraCapture
    * CVE-2026-11655: Integer overflow in Media
    * CVE-2026-11656: Use after free in ServiceWorker
    * CVE-2026-11657: Use after free in Payments
    * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11659: Insufficient validation of untrusted input in UI
    * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-11661: Use after free in Views
    * CVE-2026-11662: Type Confusion in Bindings
    * CVE-2026-11663: Use after free in Skia
    * CVE-2026-11664: Use after free in Payments
    * CVE-2026-11665: Out of bounds read in Dawn
    * CVE-2026-11666: Insufficient validation of untrusted input in Input
    * CVE-2026-11667: Out of bounds read in WebRTC
    * CVE-2026-11668: Uninitialized Use in Codecs
    * CVE-2026-11669: Integer overflow in Media
    * CVE-2026-11670: Use after free in PDF
    * CVE-2026-11671: Use after free in Navigation
    * CVE-2026-11672: Out of bounds write in GPU
    * CVE-2026-11673: Use after free in InterestGroups
    * CVE-2026-11674: Use after free in Guest View
    * CVE-2026-11675: Insufficient validation of untrusted input in Skia
    * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11677: Race in Network
    * CVE-2026-11678: Integer overflow in libyuv
    * CVE-2026-11679: Use after free in Codecs
    * CVE-2026-11680: Use after free in Media
    * CVE-2026-11681: Use after free in Ozone
    * CVE-2026-11682: Insufficient validation of untrusted input in Views
    * CVE-2026-11683: Use after free in WebCodecs
    * CVE-2026-11684: Insufficient policy enforcement in Network
    * CVE-2026-11685: Insufficient data validation in MediaCapture
    * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11687: Use after free in Dawn
    * CVE-2026-11688: Object lifecycle issue in SVG
    * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
    * CVE-2026-11690: Out of bounds read and write in Media
    * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-11692: Use after free in Read Anything
    * CVE-2026-11693: Inappropriate implementation in Plugins
    * CVE-2026-11694: Use after free in ServiceWorker
    * CVE-2026-11695: Inappropriate implementation in Passwords
    * CVE-2026-11696: Uninitialized Use in Video
    * CVE-2026-11697: Insufficient validation of untrusted input in UI
    * CVE-2026-11698: Use after free in Bluetooth
    * CVE-2026-11699: Use after free in Bluetooth
    * CVE-2026-11700: Use after free in Tracing
    * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
  - Refresh ppc64le patches


author: Than Ngo <than@redhat.com> - 149.0.7827.114-1
changelog:
  - Update to 149.0.7827.114
    * CVE-2026-12007: Use after free  Core
    * CVE-2026-12008: Use after free  DigitalCredentials
    * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
    * CVE-2026-12010: Heap buffer overflow  GPU
    * CVE-2026-12011: Use after free  WebMIDI
    * CVE-2026-12012: Use after free  Network
    * CVE-2026-12013: Use after free  Media
    * CVE-2026-12014: Use after free  Cast
    * CVE-2026-12015: Use after free  Autofill
    * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
    * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
    * CVE-2026-12018: Inappropriate implementation  Mojo
    * CVE-2026-12019: Out of bounds write  Codecs
    * CVE-2026-12020: Use after free  Autofill
    * CVE-2026-12022: Race  Safe Browsing
    * CVE-2026-12023: Use after free  GPU
    * CVE-2026-12024: Insufficient policy enforcement  DevTools
    * CVE-2026-12025: Insufficient validation of untrusted input  Network
    * CVE-2026-12026: Out of bounds read  Video
    * CVE-2026-12027: Insufficient policy enforcement  Headless
    * CVE-2026-12028: Use after free  GPU
    * CVE-2026-12029: Use after free  Video
    * CVE-2026-12030: Heap buffer overflow  GPU
    * CVE-2026-12031: Inappropriate implementation  Views
    * CVE-2026-12032: Inappropriate implementation  Passwords
    * CVE-2026-12033: Out of bounds read  VideoCapture
    * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
    * CVE-2026-12035: Use after free  Views
  - Disable AI Mode settings


author: Than Ngo <than@redhat.com> - 149.0.7827.155-1
changelog:
  - Update to 149.0.7827.155
    * CVE-2026-12437: Use after free in WebShare
    * CVE-2026-12438: Inappropriate implementation in WebView
    * CVE-2026-12439: Use after free in Digital Credentials
    * CVE-2026-12440: Use after free in DigitalCredentials
    * CVE-2026-12441: Use after free in File Input
    * CVE-2026-12442: Use after free in Passwords
    * CVE-2026-12443: Use after free in Web Authentication
    * CVE-2026-12444: Out of bounds read in Chromoting
    * CVE-2026-12445: Use after free in Extensions
    * CVE-2026-12446: Insufficient data validation in Passwords
    * CVE-2026-12447: Heap buffer overflow in WebRTC
    * CVE-2026-12448: Inappropriate implementation in WebView
    * CVE-2026-12449: Use after free in Chromoting
    * CVE-2026-12450: Inappropriate implementation in Media
    * CVE-2026-12451: Use after free in DigitalCredentials
    * CVE-2026-12452: Use after free in Downloads
    * CVE-2026-12453: Insufficient validation of untrusted input in Input
    * CVE-2026-12454: Race in Safe Browsing
    * CVE-2026-12455: Use after free in Tab Strip
    * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
    * CVE-2026-12457: Insufficient data validation in Extensions
    * CVE-2026-12458: Incorrect security UI in Passwords
    * CVE-2026-12459: Inappropriate implementation in Serial
    * CVE-2026-12460: Insufficient policy enforcement in File System Access
    * CVE-2026-12461: Out of bounds read in WebRTC
    * CVE-2026-12462: Use after free in Media
    * CVE-2026-12463: Inappropriate implementation in Views
    * CVE-2026-12464: Use after free in Browser
    * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
    * CVE-2026-12466: Heap buffer overflow in WebRTC
    * CVE-2026-12467: Use after free in Extensions
    * CVE-2026-12468: Inappropriate implementation in Updater
    * CVE-2026-12469: Uninitialized Use in GPU


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.12
changelog:
  - update from trunk
    - PRs ada/119571, analyzer/113253, bootstrap/119680, c/78008, c/81831,
  	c/101440, c/114957, c/117689, c/118118, c/119173, c/119582, c/119612,
  	c++/60972, c++/64500, c++/90468, c++/99546, c++/106976, c++/109961,
  	c++/113925, c++/116285, c++/116960, c++/117336, c++/117530,
  	c++/117849, c++/118249, c++/118626, c++/118629, c++/118698,
  	c++/118982, c++/119303, c++/119383, c++/119387, c++/119401,
  	c++/119462, c++/119518, c++/119551, c++/119563, c++/119564,
  	c++/119574, c++/119608, c++/119652, cobol/119283, cobol/119295,
  	cobol/119364, cobol/119414, cobol/119521, cobol/119682, d/117002,
  	d/117832, d/118309, driver/58973, fortran/101602, fortran/119460,
  	fortran/119656, gcov-profile/119535, gcov-profile/119553,
  	gcov-profile/119618, ipa/119599, libfortran/119460, libstdc++/109162,
  	libstdc++/110498, libstdc++/114758, libstdc++/114945,
  	libstdc++/115046, libstdc++/119517, libstdc++/119545,
  	libstdc++/119550, libstdc++/119593, libstdc++/119620,
  	libstdc++/119642, libstdc++/119671, middle-end/78874,
  	middle-end/101018, middle-end/112589, middle-end/116595,
  	middle-end/118965, middle-end/119442, middle-end/119482,
  	middle-end/119537, middle-end/119541, middle-end/119559,
  	middle-end/119613, middle-end/119662, preprocessor/118674,
  	preprocessor/119391, rtl-optimization/119291, rtl-optimization/119594,
  	rtl-optimization/119672, rtl-optimization/119689, target/117759,
  	target/119308, target/119369, target/119473, target/119539,
  	target/119549, target/119556, target/119572, target/119573,
  	target/119645, target/119664, target/119678, testsuite/116398,
  	testsuite/118597, tree-optimization/80331, tree-optimization/87502,
  	tree-optimization/103827, tree-optimization/113281,
  	tree-optimization/118924, tree-optimization/119491,
  	tree-optimization/119493, tree-optimization/119532,
  	tree-optimization/119534, tree-optimization/119586,
  	tree-optimization/119614, tree-optimization/119616,
  	tree-optimization/119640, web/119227
    - fix up LTO opts handling (##2356219, PR lto/119625)


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.13
changelog:
  - update from trunk and releases/gcc-14 branch
    - PRs ada/119643, c/88382, c/119717, c++/99214, c++/101180, c++/106618,
  	c++/111075, c++/112288, c++/113360, c++/113835, c++/114772,
  	c++/114970, c++/115639, c++/116416, c++/116954, c++/119175,
  	c++/119345, c++/119687, c++/119692, c++/119755, c++/119807,
  	cobol/119217, cobol/119302, cobol/119694, cobol/119759, cobol/119776,
  	cobol/119777, d/109023, d/119758, d/119761, d/119799, d/119817,
  	d/119826, driver/90465, driver/119727, fortran/106948, fortran/119669,
  	ipa/113203, ipa/119318, ipa/119803, libfortran/119502, libgcc/101075,
  	libgcc/119796, libgomp/119849, libstdc++/21334, libstdc++/119725,
  	libstdc++/119748, libstdc++/119840, lto/119792, middle-end/14708,
  	middle-end/105548, middle-end/119706, middle-end/119808,
  	modula2/119735, modula2/119779, rtl-optimization/118502,
  	rtl-optimization/119785, rust/119341, rust/119342, sanitizer/119801,
  	target/42683, target/97106, target/97585, target/106445,
  	target/108134, target/113633, target/116827, target/118794,
  	target/119298, target/119386, target/119533, target/119547,
  	target/119673, target/119784, target/119834, testsuite/117706,
  	translation/119684, tree-optimization/71094, tree-optimization/87909,
  	tree-optimization/112822, tree-optimization/116093,
  	tree-optimization/118476, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119718,
  	tree-optimization/119722, tree-optimization/119757,
  	tree-optimization/119778


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
  	c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
  	c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
  	fortran/102900, fortran/119928, fortran/119986, fortran/120049,
  	fortran/120107, fortran/120139, fortran/120163, fortran/120179,
  	fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
  	libfortran/120152, libfortran/120153, libfortran/120158,
  	libfortran/120196, libstdc++/118260, libstdc++/119427,
  	libstdc++/119714, libstdc++/120029, libstdc++/120114,
  	libstdc++/120159, libstdc++/120187, libstdc++/120190,
  	libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
  	modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
  	preprocessor/120061, target/119610, testsuite/119909,
  	tree-optimization/111873, tree-optimization/119712,
  	tree-optimization/120043, tree-optimization/120048,
  	tree-optimization/120074, tree-optimization/120089,
  	tree-optimization/120143, tree-optimization/120211


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Petr Pisar <ppisar@redhat.com> - 1.2.1-1
changelog:
  - 1.2.1 bump
  - Fix building against rpm-5.99.91 (bug #2382611)
  - Fix lzma link argument in pkg-config file
  - Fix building with CMake 4 (bug #2380521)
  - Fix defining STDOUT_FILENO
  - Fix building with cmake and ninja (bug #2380983)


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.0-7
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.1.0-2
changelog:
  - Support re-generating C++ sources before building them
  - Enable C++ source re-generation by default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.2.0-1
changelog:
  - Update to 27.2.0 (close RHBZ#2343202)
  - Upstream added a Python implementation, packaged as python3-cucumber-
    messages


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Packit <hello@packit.dev> - 19.2-1
changelog:
  - Update to version 19.2
  - Resolves: rhbz#2363940
  - Remove 0003-let-dbg_assert-format-the-string.patch
  - Disable s390x again due to several errors in check


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1
changelog:
  - Update to release v0.31.0
  - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1
changelog:
  - Update to release v0.35.0
  - Resolves: rhbz#2487819
  - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
  - Upstream enhancements, new features, and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1
changelog:
  - Update to release v29.4.0
  - Resolves: rhbz#2455894
  - Resolves  CVE-2026-34986: rhbz#2455665
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.0-1
changelog:
  - Update to release v29.5.0
  - Resolves: rhbz#2467552
  - Resolves CVE-2026-32288
  - Resolves CVE-2026-31431
  - Upstream new features, fixes, and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.1-1
changelog:
  - Update to release v29.5.1
  - Resolves: rhbz#2467552
  - Resolves: CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.0-1
changelog:
  - Update to release v29.6.0
  - Resolves: rhbz#2490590
  - Resolves CVE-2026-39828: rhbz#2489945
  - Resolves CVE-2026-39829: rhbz#2490099
  - Resolves CVE-2026-39830: rhbz#2490466
  - Upstream fixes and enhancements


author: François Kooman <fkooman@tuxed.net> - 20250606-3
changelog:
  - update `dumpasn1.cfg`
  - use manpage directly from official repository
  - confirmed with author upstream moved to GitHub


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.30.5618.102^gitc0ed34e-1
changelog:
  - Put the snapshot info in the version field instead of release
  - Fix forge macros creating a massive release tag including snapshot info
    for secondary/bundled sources


author: Ondrej Holy <oholy@redhat.com> - 2:3.27.1-1
changelog:
  - Update to 3.27.1 (CVE-2026-55191, CVE-2026-55192, CVE-2026-55193,
    CVE-2026-55194, CVE-2026-55648, CVE-2026-55827)
    Resolves: rhbz#2488900


author: Alexey Kurov <nucleo@fedoraproject.org> - 10.2.1-4
changelog:
  - Removed unrecognized options enable-systemd and disable-exampledir
  - Fixed sysconfdir option warning
  - Added option for support of PCRE2
  - Own local state file dir
  - Minimum libyang version 2.1.128


author: Terje Rosten <terjeros@gmail.com> - 3.7.2-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.0.5-1
changelog:
  - Version 1.0.5
  - Drop upstreamed set_unexpected patch
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.3.7-1
changelog:
  - Version 1.3.7
  - Change from C++11 to C++14 has been upstreamed
  - Setting LC_ALL is no longer necessary


author: Benjamin Gilbert <bgilbert@backtick.net> - 2.43.5-1
changelog:
  - Update to 2.43.5
  - Drop BMP, ICO, PNM, and TGA loaders; these are now supported via Glycin
  - Drop thumbnailer config, since gdk-pixbuf dropped the thumbnailer


author: Jens Petersen <petersen@redhat.com> - 9.10.1-3
changelog:
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - note prof subpackages currently have incomplete deps
    due to metadata generation issue


author: Jens Petersen <petersen@redhat.com> - 9.10.1-7
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.5.11-1
changelog:
  - Update to 0.5.11
  - Fix compatibility with Mercurial 6.4 (rhbz#2259038)
  - Fix access to ssh remotes with absolute path in no-mercurial mode
  - Fix missing `distutils` error messages with Python 3.12


author: Dominik Mierzejewski <dominik@greysector.net> - 45~20250512gitf7501bc-1
changelog:
  - update to 20250512 git snapshot
  - remove rpaths with a patch
  - make file lists more explicit
  - filter out private plugin Provides:
  - bytecompile Python code and use appropriate macro in file list
  - correct License: tag
  - fix version
  - drop unused dependency


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.48.4-45
changelog:
  - Skip test_service_config, which times out
  - This appears to be due to an unsafe combination of death tests and
    threads


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.2-2
changelog:
  - Move aom, curl, openal, openjpeg to main package
  - Move lv2 to separate subpackage (rhbz#1731750)
  - Enable dvdspu, faad, qsv (x86_64 only)
  - Enable dc1394 and zxing in extras subpackage


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-2
changelog:
  - Modernize spec: use %make_install and add %check section
  - Use %make_install instead of manual make install
  - Move validation to %check
  - Remove deprecated %ldconfig_scriptlets
  - Fix trailing whitespace in Summary


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-3
changelog:
  - Modernize macros and paths
  - Use %{_metainfodir} for metainfo
  - Sort BuildRequires and change Source0 to Source
  - Clean up %prep chmod calls
  - Add %license to doc subpackage


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-4
changelog:
  - Convert BuildRequires to pkgconfig style
  - Use pkgconfig() for atk, cairo, gtk+-3.0, libofx, and libsoup-3.0


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-5
changelog:
  - Final cleanup of spec file
  - Add -p1 to %autosetup
  - Use trailing slashes for directories in %files
  - Consistent use of %{_metainfodir}


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Maxwell G <maxwell@gtmx.me> - 0.6.0^git4407164-1
changelog:
  - Update to new upstream https://git.sr.ht/~xenrox/hut
  - Use 0.6.0 post-release snapshot commit 4407164
  - Use vendored dependencies
  - Fixes: rhbz#2368037


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.29.5111.102-7
changelog:
  - Don’t link the top-level absl_flags library; it is not required in
    absl-cpp-20230802, and not present in absl-cpp-20240116
  - Add #include directives for compatibility with absl-cpp-20240116


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Packit <hello@packit.dev> - 57-1
changelog:
  Changes with 57
  ----------------
    - deps: update `images` to 0.254.0 (#489)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-06


author: Packit <hello@packit.dev> - 58-1
changelog:
  Changes with 58
  ----------------
    - deps: bump images to 0.256.0 (#491)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-07


author: Packit <hello@packit.dev> - 60-1
changelog:
  Changes with 60
  ----------------
    - Support --in-vm in image-builder (#485)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump images to 0.258.0 (#495)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-04-14


author: Packit <hello@packit.dev> - 63-1
changelog:
  Changes with 63
  ----------------
    - deps: bump images to 0.259.0 (#501)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - docs: update satellite info (#503)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: `--version` -> `version` subcommand (#505)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - many: Generate rpmlist as an output of manifestgen (#502)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 64-1
changelog:
  Changes with 64
  ----------------
    - cmd: drop "bootc is experimental" (#510)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump osbuild/images dependency (#507)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: update dependencies (w/o osbuild/images) (#508)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: fix broken link (#509)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal
    - doc: introduce advanced bootc (#462)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - docs: generate manpages (#504)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: hide `--use-librepo` (#513)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: hide `--with-rpmlist` (#512)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 65-1
changelog:
  Changes with 65
  ----------------
    - deps: bump images to 0.266.0 (#520)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#515)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: default to XDG cache directory for non-root users (#511)
      - Author: Guillermo N. Leiro Arroyo, Reviewers: Brian C. Lane, Lukáš Zapletal

  osbuild/images changes (v0.262.0 -> v0.266.0):

    - Add bootc-foundry boot test infrastructure (HMS-10336) (#2335)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update RHEL 9 and 10 OCI image definitions [HMS-10328, HMS-10472] (#2333)
      - Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß, Simon de Vlieger
    - Update osbuild dependency commit ID (#2321)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild dependency commit ID (#2328)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260504 (#2323)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - boot-azure: switch machine type (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß
    - ci: include flatpaks (#2349)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - ci: use f43 for cross-arch (#2322)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - defs/bootc: set XBOOTLDR GUID (#2325)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - disk: partition table policies (#2330)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/rhel-9: fix OCI partitioning (#2351)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    - experimental: use yamlplus (#2319)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - fedora: remove vc4 module blacklist from ostree kernel options (#2331)
      - Author: Paul Whalen, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - flatpak: use container resolver to resolve flatpak refs (#2334)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - import ELN (HMS-10620, HMS-10621, HMS-10623) (#2318)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - many: bootc sealed images (composefs, and bootloader) (HMS-10628) (#2326)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - pkg/bootc/resolver: handle missing 'bootc container inspect' (#2342)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhel: enable sshd service for WSL images (#2332)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - schutzbot: update terraform commit ID (#2341)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - test: close filesystem/disk customization coverage gaps with osbuild-composer (#2329)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-21


author: Packit <hello@packit.dev> - 66-1
changelog:
  Changes with 66
  ----------------
    - cmd: introduce profiling options (#516)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#524)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - packit: enable ELN (HMS-10701) (#521)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  osbuild/images changes (v0.266.0 -> v0.267.0):

    - Add osbuild stages for mounting erofs and squashfs compressed filesystems (#2348)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - arch: map OCI platform architecture to GOARCH (#2315)
      - Author: Zephyr Lykos, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bootloaders: Move the iso bootloader setup into its own struct (#2347)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - container: resolve containers using skopeo [RHEL-56367] (#2346)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - fedora: Update IoT arm images with newer RPi dtbs (#2358)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Koscielniak
    - many: upgrade deps with deprecated APIs (HMS-10702) (#2356)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-25


author: Packit <hello@packit.dev> - 68-1
changelog:
  Changes with 68
  ----------------
    - Containerfile*: correct base image reference in tag (#531)
      - Author: Zephyr Lykos, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#533)
      - Author: SchutzBot, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#538)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: mention additional requirements (#530)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `--force-defs-dir` (#534)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `bootc inspect` (#529)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#535)
      - Author: Florian Schüller, Reviewers: Lukáš Zapletal, Simon de Vlieger

  osbuild/images changes (v0.267.0 -> v0.270.0):

    - Break down imgtestlib module and  use log sections (#2383)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - CI: run tests on Fedora 44 (#2343)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Make EFIPartitionTable function public, move it into disk (#2354)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Repos: Add/update AlmaLinux repository definitions (#2376)
      - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-05-25 (#2368)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc: assert non-nil kernel info (#2370)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - cicd: run gobump per commit (#2352)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - container: guess at mime type (#2372)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - depsolver: catch all errors from the child process (#2365)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - distro/loader: expand installerConfig template by copying (HMS-10718) (#2373)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - distro: Make isoCustomizations usable by bootcImageType (#2360)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - fedora: drop no_timer_check leftover (#2282)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: exit with error code when manifests fail to validate (#2374)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - install-dependencies: Add a note about it being used by image-builder-cli workflows (#2353)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - loader: allow custom path (#2378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - many: fix non-determistic manifest generation (#2381)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#2386)
      - Author: Florian Schüller, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stage/grub2: allow VFAT for boot fs (#2371)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-04


author: Packit <hello@packit.dev> - 69-1
changelog:
  Changes with 69
  ----------------
    - deps: bump osbuild/images dependency (#548)
      - Author: SchutzBot, Reviewers: Nobody
    - deps: bump osbuild/images dependency (#551)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump osbuild/images dependency (#552)
      - Author: SchutzBot, Reviewers: Simon de Vlieger
    - deps: images 0.273.0 (#549)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lucas Garfield
    - main: `system` subcommand (#537)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane

  osbuild/images changes (v0.270.0 -> v0.274.0):

    - Add BootcRootFS pipeline and use it for bootc pxe-tar-xz (#2361)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Add Custom menus to X86 and PPC64 ISO bootloaders (#2394)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test: stop testing EOL RHEL releases (#2415)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update dependencies 2026-05-31 (#2391)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - Update dependencies 2026-06-07 (#2402)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - config-list: narrow down the matrix (#2366)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - data/repositories: add PQC keys to rolling distros (#2411)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: drop `golang.org/x/exp/slices` (#2399)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - distro/eln: clean up part 1 (HMS-10764) (#2384)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/eln: installers use erofs (HMS-10634) (#2398)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora-42: eol (#2385)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - imgtestlib: support bootc-foundry image types (#2393)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: use boot root for fix bls (#2412)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    - many: copy boot files from build (#2410)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - many: initial `systemd-boot` support (#2392)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - oscap: drop dead code (#2409)
      - Author: Simon de Vlieger, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - test/imgtestlib: boot test network installer on RHEL 10.2 (#2387)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-17


author: Peter Bieringer <pb@bieringer.de> - 4.2.2-1
changelog:
  - include databases/registries/lisp/site-db as no longer reachable for download
  - add additional Perl requirements


author: Peter Bieringer <pb@bieringer.de> - 4.3.0-1
changelog:
  - Final release 4.3.0
  - Update recommend IP2Location >= 8.6.0
  - Remove ipv6calc.sgml from doc
  - Use now only releases from GitHub


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.7.0-2
changelog:
  - Patch kamelion-qmk-helper for qmk-via-api 0.8
  - Account for licenses of statically-linked Rust dependencies


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert fragnesia for so I can replace it with the newer one (Justin M. Forbes)
  - net/sched: act_pedit: extend the writable skb range per key (Zhang Cen)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-4]
changelog:
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-5]
changelog:
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - xfrm: esp: restore combined single-frag length gate (Jingguo Tan)
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)
  - Revert "v3 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Aaron Ma)
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Syed Saba Kareem)
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Mark Pearson)
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Vijendar Mukunda)
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Vijendar Mukunda)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.10-1]
changelog:
  - ata: libata-scsi: do not needlessly defer commands when using PMP with FBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT (Niklas Cassel)
  - ata: libata-scsi: improve readability of ata_scsi_qc_issue() (Niklas Cassel)
  - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)
  - ksmbd: close durable scavenger races against m_fp_list lookups (DaeMyung Kang)
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Eder Zulian)
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Guanghui Feng)
  - drm/i915/cx0: Rename intel_clear_response_ready flag (Suraj Kandpal)
  - drm/i915/cx0: Clear response ready & error bit (Suraj Kandpal)
  - drm/i915/pps: Enable panel power earlier (Mika Kahola)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.11-1]
changelog:
  - Revert "crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - Linux v7.0.11


author: Augusto Caringi <acaringi@redhat.com> [7.0.12-1]
changelog:
  - Revert "xfrm: esp: restore combined single-frag length gate" (Justin M. Forbes)
  - Revert "ipv6: preserve insertion order for same-scope addresses" (Justin M. Forbes)
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Alexandru Hossu)
  - Linux v7.0.12


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.12-1]
changelog:
  - New config setting for ARM64 Erratum (Justin M. Forbes)
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Shanker Donthineni)
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)
  - arm64: cputype: Add C1-Premium definitions (Mark Rutland)
  - arm64: cputype: Add C1-Ultra definitions (Mark Rutland)


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Xavier Bachelot <xavier@bachelot.org> - 2.8.2-16
changelog:
  - Drop EL7/python2 support
  - Set min_hash_algo to sha256 for f42+
  - Fix conditional around JAVA_HOME export
  - Add patch to fix build with gcc15


author: Adam Williamson <awilliam@redhat.com> - 0.3.4-1
changelog:
  - Update to 0.3.4, drop merged and no-longer-needed patches
  - Fix Python build/install so Python subpackage works
  - Fix build on EPEL 8 and 9
  - Include latest database from upstream


author: Evan Goode <egoode@redhat.com> - 0.74.0-1
changelog:
  - Update to 0.74.0
  - Update ko.po
  - Split $releasever to $releasever_major and $releasever_minor in the C API
  - Merge `bootc` branch to master
  - ConfigParser: make splitReleasever public
  - C API: Detect releasever_major, releasever_minor from provides
  - C API: support shell-style variable substitution
  - module: Warn if module config file is inaccessible
  - Enable automatic PR reviews


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Michel Lind <salimma@fedoraproject.org> - 0.5.5-1
changelog:
  - Update to version 0.5.5; Fixes: RHBZ#2334136
  - Drop deprecated Python bindings on Fedora >= 42 and EL >= 10


author: Steve Dickson <steved@redhat.com> 2.8.7-3
changelog:
  - libnfsidmap: avoid malloc(0) for empty Local-Realms
  - Removed warnings in nfs_sockaddr2universal()


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.2.4-3
changelog:
  - Initial pathrs release
  - Pathrs v0.2.4
  - Provides libpathrs used by runc and other packages
  - Exclude i686 arch


author: Ales Nezbeda <anezbeda@redhat.com> - 16.3-5
changelog:
  - Disable openssl ENGINE_API
  - Fedora change: https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - BZ: 2300910


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Michal Schmidt <mschmidt@redhat.com> - 9.8.60-3
changelog:
  - Remove redundant %setup invocation.
  - Replace custom patch files with "git format-patch" from upstream git.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sérgio Basto <sergio@serjux.com> - 2.5.3-3
changelog:
  - Update provides and obsoletes for openjpeg2 of Fedora 40
  - Also add a more agressive way to remove old openjpeg-libs (1.x)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.2-9
changelog:
  - switch to tar.gz source to avoid manual build
  - build using CMake (use upstream SONAME)
  - ship pkg-config and CMake files (resolves rhbz#2378931)
  - fix build with CMake 4.0
  - use dos2unix instead of sed


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: RPM Fusion Release Engineering <sergiomb@rpmfusion.org> - 2.2.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add GCC-15 patch from upstream


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.28.0-7
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add mini patch for GCC 15
  - Drop BR gtk2-devel
  - Fix conditionals for epel9+


author: Jerry James <loganjerry@gmail.com> - 0.9.0-4
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Richard Russon <rich@flatcap.org> - 20260616-1
changelog:
  - Security
    - #4900 bcache: sanitize mailbox names that escape the cache dir
    - #4901 auth_gss: fix out-of-bounds read of GSS security token
  - Bug Fixes
    - #4866 Fix broken message-hook in the pager
    - #4869 Fix duplicate "no mail" message
    - #4874 Restore the `-C` command-line flag
    - #4882 Refresh notmuch tag completion cache, and fix a tag completion crash
    - #4893 Fix index-format-hook parsing
    - #4897 Allow `<entire-thread>` from any mailbox type, and fix a related crash
    - email: fix header rewind after mbox separator
    - imap: retry login after a failure
    - maildir/notmuch: fix memory leak
    - config: fix inherited has_been_set
    - main: fix inverted condition in init_nntp
  - Code
    - test: fix conddate after 2038


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Sandro <devel@penguinpee.nl>
changelog:
  - Add python3-ninja sub package providing metadata for Python packages
    depending on ninja to facilitate automatic dependency resolution.


author: Jerry James <loganjerry@gmail.com> - 2.16.0-1
changelog:
  - Version 2.16.0
  - Remove the deprecated ocaml-atdgen-devel package
  - New ocaml-atdcpp package for generating C++


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-13
changelog:
  - Clean up spec file from pre-systemd times
  - Use systemd services to initiate oddjobd configuration reload
  - Resolves: rhbz#2248817


author: Pavol Sloboda <psloboda@redhat.com> - 0.07.18-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively. Also
    it was mentioned in the spec file twice as a BuildRequires.


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.3.rc1
changelog:
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook
  - Enable fencing regression tests again


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - seems as if pre-tasks need to have tags to be executed
    at least that worked on a pull request via pagure


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-11
changelog:
  - Convert STI tests to TMT (rhbz#2383013)
  - Update for new upstream release tarball: Pacemaker-3.0.1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1
  - now you can add a new revision
    rpmdev-bumpspec -c "test" pacemaker.spec
  - or run tests locally
    tmt run discover provision prepare execute --how tmt --verbose -v -v --debug
  - Removed tier1 test again as it was just for investigation of a CI issue


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.2-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.2


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Aaron Rainbolt <arraybolt@fedoraproject.org> - 1:1.9.0-33
changelog:
  - Set minimum CMake version to 3.5 (rhbz#2381472)
  - Set non-standard CMake variables back to expected values (rhbz#2381665)
  - Migrate InstallMgr test to tmt framework (rhbz#2383081)


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.19.6-13
changelog:
  - Temporarily use GCC 14 to workaround FTBFS on i686 and s390x
  - Don’t build Python extension with C++ on Python 3.14+


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: José Matos <jamatos@fedoraproject.org> - 2.4.0-2
changelog:
  - All the changes below come from Jerry James <loganjerry@gmail.com> (from Fri Feb 23 2024)
  - Use virtual Provides instead of empty packages
  - Link with flexiblas instead of gslcblas
  - Move documentation into a doc subpackage
  - Various minor spec file cleanups
  - Add patch to fix FTBFS on big endian systems


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Miro Hrončok <miro@hroncok.cz> - 1.4.1-8
changelog:
  - Remove unused BuildRequires for deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.1-33
changelog:
  - F41+: Use the provisional pyproject declarative buildsystem
  - Since this is only for F41+, drop EPEL conditionals
  - Always run an import-only smoke test; add a bcond vtk_dep for optionally
    including VTK integration modules in this


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.4.0-1
changelog:
  - Update to 5.4.0 (close RHBZ#2368139)
  - Drop the plotly dependency from the “vis” extra until the python-plotly
    package can be updated


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Sandro <devel@penguinpee.nl> - 2.10.2-1
changelog:
  - Update to 2.10.2
  - Add NumPy 2.x support (since 2.10.0)
  - Drop patches (appear to be no longer required)
  - Close RHBZ#2332471


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.1-1
changelog:
  - Update to version 0.6.1; Fixes RHBZ#2386831
  - Automate patching the path-based safetensors crate dependency
  - A patch fixing several failing tests has been merged upstream


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Pavol Sloboda <psloboda@redhat.com> - 1.00.14-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively.


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-1
changelog:
  - Version 2022.0.0
  - Drop unnecessary Werror patch
  - Drop unnecessary python shebang mangling
  - Let pkgconfig specify the version of hwloc to use


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-3
changelog:
  - Add patch to fix linking tbbmalloc with GCC 15
  - Update %giturl for the uxlfoundation change
  - Fix intersphinx_mapping to use local objects.inv


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-6
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-2
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-8
changelog:
  - Added the line '/usr/lib/sysusers.d/smf-spf.conf' in %files.
  - Added the line 'install -m0644 -D /builddir/build/SOURCES/smf-spf.sysusers /builddir/build/BUILD/smf-spf-2.5.1_20220423g061e937-build/BUILDROOT/usr/lib/sysusers.d/smfs.conf'.


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Clark Williams <williams@redhat.com> - 1.28.1-1
changelog:
  - stalld: bump version to 1.28.1
  - tests: Fix journal flush race in logging destinations test
  - Merge remote-tracking branch 'wander/dev' into devel
  - stalld: fix format string type mismatch in set_cpu_affinity
  - stalld: fix error return in queue_track_get_cpu
  - stalld: fix snprintf truncation check in is_runnable
  - stalld: fix missing null-termination in is_runnable
  - stalld: guard nextline() returns in sched_debug parsing
  - stalld: remove NULL deref in fill_waiting_task error handler
  - stalld: fix type mismatches in detect_task_format
  - stalld: fix format string type mismatch for time_t
  - stalld: use CLOCK_MONOTONIC for starvation detection
  - stalld: remove async-signal-unsafe calls from signal handler
  - stalld: fix data race on config_buffer_size
  - stalld: fix signed integer overflow in set_reservation
  - stalld: check pthread_create return in conservative_main
  - stalld: check pthread_create return in aggressive_main
  - stalld: fix buffer underflow in sched_debug_get
  - stalld: fix buffer underflow in read_proc_stat
  - stalld: fix uninitialized buffer use in find_debugfs_mount_point
  - stalld: fix inverted DAEMON_UMASK value
  - stalld: fix data race on thread_running
  - bpf: Replace linear task scan with hash map
  - tests: Fix async-signal-unsafe handler
  - tests: Reduce timing and replace sleeps with event waits
  - tests: Remove redundant sleeps after start_stalld
  - tests: Drop redundant sleeps in test_pidfile
  - tests: Replace init sleeps in test_affinity
  - tests: Reduce starvation_gen durations
  - tests: Reduce default wait timeouts
  - tests: Extract wait_for_process_exit helper
  - tests: Introduce and adopt process helpers
  - tests: Remove dead code after making fail() fatal
  - tests: Abort immediately on test failure
  - tests: Remove if-wrappers around assert calls
  - tests: Replace wait conditionals with asserts
  - tests: Introduce and adopt assert_success() helper
  - tests: Remove weak, redundant, and assertion-free test blocks
  - tests: Introduce and adopt assert_log_contains() helper
  - tests: Remove redundant pkill from cleanup
  - tests: Add idle CPU skipping assertion
  - tests: Fix CPU selection grep substring matches
  - tests: Add assertions to SCHED_OTHER restoration test
  - chore: Remove legacy test infrastructure and stale docs
  - tests: Fix repeated log match finding same line
  - tests: Fix subshell swallowing test results
  - tests: Fix boost verification in runtime and duration tests
  - tests: Introduce assert_stalld_rejects() helper
  - tests: Consolidate and adopt init_functional_test()
  - tests: Fix task exit timing in test_boost_restoration
  - tests: Introduce find_starved_child() helper
  - tests: Introduce starvation and boost asserts
  - tests: Introduce cleanup_scenario() helper
  - tests: Introduce test_section() helper
  - stalld: Reject --force_fifo in single-threaded mode


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Peter Czanik <peter@czanik.hu> - 4.9.0-1
changelog:
  - update to 4.9.0
  - add destination drivers for ClickHouse and PubSub
  - add missing Python dependencies


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-4
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259
          CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
          CVE-2026-50264


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1:2025.10-1
changelog:
  - Update to 2025.10 GA (rhbz#2401964)
  - Fix booting when using FW device-tree (rhbz#2402498)
  - Fix for some variants of Raspberry Pi
  - Fixes for Jetson device booting


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.30-4
changelog:
  - Disable perl-Coro for rawhide, as this blocks rebuilding
    for perl 5.42 (see https://bugzilla.redhat.com/show_bug.cgi?id=2379448)


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
changelog:
  - Patch "pastekey" fixes a crash pasting an encrypted private key.
    https://github.com/chris2511/xca/commit/d29d55a
  - Patch "revokedel" fixes a freeze when deleting a certificate.
    https://github.com/chris2511/xca/commit/43e1b33
  - Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
    https://bugzilla.redhat.com/show_bug.cgi?id=2259477


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Richard W.M. Jones <rjones@redhat.com> - 4.5.2-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-13
changelog:
  - Regenerate C source from Vala source and enable
    -Werror=incompatible-pointer-types again
    (Thanks to Florian Weimer <fweimer@redhat.com>)


author: Neil Hanlon <neil@shrug.pw> - 1.9.1-4
changelog:
  - switch to pure cmake (1.9.0 turned configure into a wrapper which dropped options)
  - resolve ftbfs, fti, new version (#226393 #2301380 #2292226)
  - resolve CVE-2024-39844 (#2295622)


