# changelog

author: Jerry James <loganjerry@gmail.com> - 1.6.15-1
changelog:
  - Verion 1.6.15
  - Drop upstreamed const patch
  - Force use of environment-modules in Rawhide until Lmod is fixed


author: josef radinger <cheese@nosuchhost.net> - 1:3.6.5-2
changelog:
  - bump version
  - add patch https://github.com/GreycLab/CImg/commit/94f00eb0302a9db7aa8ea4034fb48a8a4dbbbb8e.patch
    and https://github.com/GreycLab/CImg/commit/50674b2dcfe004673f629bbb37bc9c960f2ae614.patch (modified)
    to fix compile error for i686 https://github.com/GreycLab/CImg/issues/471


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.55-1
changelog:
  - Update to 3.1.55: Fixes GHSA-2f96-g7mh-g2hx, GHSA-v396-v7q4-x2qj,
    GHSA-956x-8gvw-wg5v, GHSA-rwj8-pgh3-r573, GHSA-3rp5-jjmw-4wv2,
    GHSA-r9mr-m37c-5fr3, GHSA-fjr4-x663-mwxc, GHSA-6p8h-3wgx-97gf, and
    GHSA-94p4-4cq8-9g67


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Packit <hello@packit.dev> - 44.17-1
changelog:
  - rescue: Change 'immutable' to 'atomic' in warning message (k.koukiou)
  - Only show compatible translations in text mode (mkolman)
  - Add instructions for externally build boot iso updates (mkolman)


author: Packit <hello@packit.dev> - 44.18-1
changelog:
  - Always restorecon user home directory after creating it (awilliam)
  - Replace direct inst call with DRACUT_NO_XATTR=1 workaround (k.koukiou)
  - Restructure readthedocs documentation with audience-based organization
    (k.koukiou)
  - dracut: Include systemd-sysroot-fstab-check binary in initramfs (k.koukiou)


author: Packit <hello@packit.dev> - 44.20-1
changelog:
  - Don't pass `-R /` to shadow commands (awilliam)
    Resolves: rhbz#2435621
  - chore: Support multiple console= kernel entries (ppolawsk)
  - Include JS files to translations (baurthefirst)
  - glib: Fix TypeError in timeout callback (k.koukiou)
  - flatpak: tests: fix unreachable code (fsouza.bruno)
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
  - flatpak: Make installation failures non-blocking (bciconel)
  - Allow manual trigger for container-rebuild-action workflow (k.koukiou)


author: Packit <hello@packit.dev> - 44.21-1
changelog:
  - anaconda.conf: Add clk_ignore_unused, pd_ignore_unused to preserved_arguments
    (johannes.goede)
  - storage/bootloader/utils: Make create_bls_entries() work with kernel-uki-
    dtbloader (johannes.goede)
  - data/profile.d/fedora-kde-mobile: Set the correct payload settings (neal)


author: Packit <hello@packit.dev> - 44.24-1
changelog:
  - Fix crash when org.freedesktop.ScreenSaver Inhibit is unavailable (k.koukiou)
    Resolves: rhbz#2440367


author: Packit <hello@packit.dev> - 44.25-1
changelog:
  - Workaround rsync xattr errors on KIWI boxed-build ISOs (adamkankovsky)
  - Make --enable-vt-switch backwards compatible with older gnome-kiosk
    (k.koukiou)
  - Add --enable-vt-switch when running gnome-kiosk (mkolman)
  - Fix asyncio deprecation warnings flooding logs in text mode (bciconel)
  - Hub: Fix grid layout alignment in Hub (yueyuankun)
  - liveinst: prevent launching multiple installer instances (k.koukiou)
    Resolves: rhbz#2440264
  - doc: update documentation for webui boot.iso build and PR inclusion
    (rvykydal)


author: Packit <hello@packit.dev> - 60-1
changelog:
  - components: implement new Software selection page
   - components: payload: software selection: implement package group selection
   - Bring gnome-control-center window to front when already open (rhbz#2415043)


author: Packit <hello@packit.dev> - 62-1
changelog:
  - components: localization: fix TypeError with undefined locale
    (Resolves: rhbz#2422032)
  - Remove hardcoded window size from Firefox launch
  - Remove 'WebUI' from bug report titles and description
  - Set Bugzilla component to anaconda-webui only when bug is a front end exception
  - Enhance frontend exception reporting
  - components: localization: enable more than keyboard selection in Workstation


author: Packit <hello@packit.dev> - 64-1
changelog:
  * Tue Jan 27 2026 Packit <hello@packit.dev> - 63-1
  - Disable Firefox password manager popup in password fields (Resolves: rhbz#2400443)
  - Use python-bugzilla API for bug creation and attachments
  - spec: require system-logos instead of fedora-logos (Resolves: rhbz#2433186)


author: Packit <hello@packit.dev> - 65-1
changelog:
  - Enable crash-reporting dialog (Resolves: rhbz#2431541)
  - Embed cockpit-networkmanager for future usage in boot.iso (hidden in Live)
  - docs: add customization documentation
  - license: Convert license headers to SPDX format


author: Packit <hello@packit.dev> - 66-1
changelog:
  - Add show/hide toggle for Bugzilla API key field (Resolves: rhbz#2442575)
  - Fix user description not being sent to Bugzilla (Resolves: rhbz#2442593)


author: Packit <hello@packit.dev> - 67-1
changelog:
  - error reporting: add optional 'Restrict access to the report' via Bugzilla groups (Resolves: rhbz#2443308)
  - error reporting: Fix 'Cannot parse given Error object' crash in error handler (Resolves: rhbz#2444078)


author: Packit <hello@packit.dev> - 68-1
changelog:
  - Log Bugzilla bug number when crash report is created (Resolves: rhbz#2443015)
  - storage: fixe the UI flipping Reformat to YES on next/back (Resolves: rhbz#2443812)
  - Fix duplicate environment section in manual error reporting
  - Remove WebUI prefix from bug report short description
  - Revert "Launch slitherer as XWayland app to address the autoclose issue"
  - network: prevent closing modal when configuration is in progress (not relevant for Live ISO)


author: Nick Clifton <nickc@redhat.com> - 13.08-1
changelog:
  - Rebase sources and rebuild against the latest version of gcc.  (#2445165)
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.5
    - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.6-1
changelog:
  - Update to version 1.14.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.6
    - Fix CA certificates iteration in ipaclient role


author: Thomas Woerner <twoerner@redhat.com> - 1.14.7-1
changelog:
  - Update to version 1.14.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.7
    - ipaclient: Second hotfix for dns_over_tls


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - DNS over TLS support for ipaserver, ipareplica and ipaclient deployment
      roles
    - ipaidrange: Enforce requirement of baserid and secondarybaserid for ID
      ranges
    - Fix ipaserver and ipareplica deployment roles for use in Mitogen


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - ipaclient: client_dns has new statestore arg with IPA change e6445b8


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    - Add support for passkey management
    - Add support for sysaccount management
    - ipadnsrecord: Allow to set any IP address if create_reverse is false
    - Add support for ansible-core 2.19


author: Thomas Woerner <twoerner@redhat.com> - 1.17.0-1
changelog:
  - Update to version 1.17.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.17.0
    - New ipauser query state
    - New ipagroup query state


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Rasmus Ory Nielsen <ron@ron.dk> - 1.23-1
changelog:
  - Updated to 1.23
  - Removed obsolete vcf_plugin_tests patch
  - Remove invalid `-errors` from PERL_LIBS to fix linker warnings


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260306-1.eb3ee43
changelog:
  - Update to latest firmware
  - Split out RPi5 bits to a new sub-package
  - Update sub package license details
  - Initial No RTC service for no RTC systems


author: Dalibor Pospisil <dapospis@redhat.com> - 1.31.4-1
changelog:
  - fixed getting base arch on Fedora and c10s
  - rlReport support SKIP result, by chuhu
  - fixed rlIsRHELLike on systems without /etc/os-release, e.g. RHEL-6
  - some minor updates


author: Dalibor Pospisil <dapospis@redhat.com> - 1.32
changelog:
  - introduction of the new way to foist the os-relase and thus present
    different system to the tests, including the version, by KwisatzHaderach


author: Dominik Mierzejewski <dominik@greysector.net> - 122-1
changelog:
  - update to 122 (resolves rhbz#2342841)
  - rebase patch for using system GTest
  - fix setting the RPATH to private shared library
  - skip v8 tests (not available in Fedora)


author: Dominik Mierzejewski <dominik@greysector.net> - 126-1
changelog:
  - update to 126 (resolves rhbz#2439791)
  - backport upstream fix for https://github.com/WebAssembly/binaryen/issues/8360


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0 (rhbz#2435810)
    - Bluefish 2.4.0 has some new features and many small improvements; it is no
      longer  a 2.2 release because backwards compatibility with the 2.0 series
      of Bluefish has been removed
    - If you upgrade from 2.0 straight to 2.4, your config files and project
      files are no longer 100% correctly loaded
    - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
      - On Linux it will be ~/.config and ~/.local/
      - On Windows it will be LocalAppData and RoamingAppData
      - On OSX it will be ~/Library/Application Support
    - The biggest new feature, still experimental, is that you can edit two
      documents side-by-side
    - You can change opening and ending tags in XML or HTML simultaneously if you
      hit [ctrl][t]
    - You can more easily save the current contents to a template
    - For new users, and also active in new projects, is a UI selection dialog,
      where you can choose between a UI optimised for web development,
      programming or just have everything enabled or disabled; this will help
      new Bluefish users to customize Bluefish in an easier way
    - There are a few fixes as well:
      - Selecting lines by dragging in the margin works more reliably
      - Paste special works more reliably
      - Line comments in Python are better detected, which is visible in the
        syntax highlighting
      - The toggle comment function is improved
      - The Windows build has better error messages when starting external
        commands fails


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
    - The experimental "side by side" feature that was introduced in 2.4.0 is no
      longer experimental and is fully stable now
    - A new feature is that Bluefish will automatically adjust the text colours
      for people that use a dark desktop theme
    - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
      renewed
    - A critical bug and a regression in the split view function has been fixed
    - The windows build has some minor improvements
    - Several translations are updated


author: Paul Howarth <paul@city-fan.org> - 2.4.2-1
changelog:
  - Update to 2.4.2 (rhbz#2501999)
    - Bluefish 2.4.2 has a few new features and a few fixes
    - The most visible change is that Bluefish detects icon themes, and has
      built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
      improvement for the visual integration of Bluefish on a KDE desktop
    - The most important fix is for a segfault that could occur if a filename on
      disk has a specific broken UTF-8 encoding
    - Some small improvements are reduced memory usage when working with 100+
      files simultaneously, some translation improvements, and the <meta>
      author field is now configurable


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Jonathan Wakely <jwakely@fedoraproject.org> - 1.90.0-1
changelog:
  - Rebase to 1.90.0
  - See https://fedoraproject.org/wiki/Changes/F44Boost189
  - Drop boost-system subpackage and libboost_thread.so linker script
  - Add new boost-charconv, boost-cobalt, and boost-process subpackages


author: Jonathan Wakely <jwakely@fedoraproject.org> - 1.90.0-7
changelog:
  - Add workaround for failing regex tests (#2430541)
  - Add BR:which as needed by the bootstrap.sh script
  - Add additional SPDX tags


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.0-3
changelog:
  - Update circular-buffer dependency to version 2
  - Update License field based on a current build in Rawhide


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.1^20250418.947f7ab-1
changelog:
  - Update to 0.0.1^20250418.947f7ab
  - Change snapshot information field format
  - Rebuild for c4core 0.2.9


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-6
changelog:
  - Change: Dropping of cert.pem file (Resolves: rhbz#2360110)
    https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Remove the following symlinks:
  -    # /etc/pki/tls/cert.pem
  -    # /etc/pki/tls/certs/ca-certificates.crt
  -    # /etc/pki/tls/certs/ca-bundle.trust.crt
  -    # /etc/pki/tls/certs/ca-bundle.crt
  -    # /etc/ssl/cert.pem
  -    # /etc/ssl/certs/ca-certificates.crt
  -    # /etc/ssl/certs/ca-bundle.trust.crt
  -    # /etc/ssl/certs/ca-bundle.crt
  - Directory /etc/pki/ca-trust/extracted/openssl is being deprecated,
    it is removed upon updating unless there are files present inside it.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-8
changelog:
  - update-ca-trust: Added a temporary, compatibility option `--rhbz2387674` to
    the `extract` command. This flag restores legacy certificate
    symlinks (e.g., `/etc/ssl/cert.pem`) to address issues with older software
    that has not yet adapted to their removal. This essentially provides a
    temporary way to revert the "Dropping of cert.pem file".


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.304-2
changelog:
  - Update to CKBI 2.80_v9.0.304 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"


author: Jens Petersen <petersen@redhat.com> - 3.10.3.0-1
changelog:
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.1.0.md
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.2.0.md
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.2.1.md
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.3.0.md


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Than Ngo <than@redhat.com> - 144.0.11^chromium144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
  - * CVE-2026-1861: Heap buffer overflow in libvpx
  - * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
  - * CVE-2026-2313: Use after free in CSS
  - * CVE-2026-2314: Heap buffer overflow in Codecs
  - * CVE-2026-2315: Inappropriate implementation in WebGPU
  - * CVE-2026-2316: Insufficient policy enforcement in Frames
  - * CVE-2026-2317: Inappropriate implementation in Animation
  - * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  - * CVE-2026-2319: Race in DevTools
  - * CVE-2026-2320: Inappropriate implementation in File input
  - * CVE-2026-2321: Use after free in Ozone
  - * CVE-2026-2322: Inappropriate implementation in File input
  - * CVE-2026-2323: Inappropriate implementation in Downloads
  - Hoshino Lina: Update to cef-145.0.25+g265860d


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.75-1
changelog:
  - Update to 145.0.7632.75
  - * CVE-2026-2441: Use after free in CSS
  - Fix FTFS on aarch64/ppc64le caused by missing include file (el9)
  - Enable rustc_nightly_capability


author: Than Ngo <than@redhat.com> - 149.0.7827.155-1
changelog:
  - Update to 149.0.7827.155
    * CVE-2026-12437: Use after free in WebShare
    * CVE-2026-12438: Inappropriate implementation in WebView
    * CVE-2026-12439: Use after free in Digital Credentials
    * CVE-2026-12440: Use after free in DigitalCredentials
    * CVE-2026-12441: Use after free in File Input
    * CVE-2026-12442: Use after free in Passwords
    * CVE-2026-12443: Use after free in Web Authentication
    * CVE-2026-12444: Out of bounds read in Chromoting
    * CVE-2026-12445: Use after free in Extensions
    * CVE-2026-12446: Insufficient data validation in Passwords
    * CVE-2026-12447: Heap buffer overflow in WebRTC
    * CVE-2026-12448: Inappropriate implementation in WebView
    * CVE-2026-12449: Use after free in Chromoting
    * CVE-2026-12450: Inappropriate implementation in Media
    * CVE-2026-12451: Use after free in DigitalCredentials
    * CVE-2026-12452: Use after free in Downloads
    * CVE-2026-12453: Insufficient validation of untrusted input in Input
    * CVE-2026-12454: Race in Safe Browsing
    * CVE-2026-12455: Use after free in Tab Strip
    * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
    * CVE-2026-12457: Insufficient data validation in Extensions
    * CVE-2026-12458: Incorrect security UI in Passwords
    * CVE-2026-12459: Inappropriate implementation in Serial
    * CVE-2026-12460: Insufficient policy enforcement in File System Access
    * CVE-2026-12461: Out of bounds read in WebRTC
    * CVE-2026-12462: Use after free in Media
    * CVE-2026-12463: Inappropriate implementation in Views
    * CVE-2026-12464: Use after free in Browser
    * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
    * CVE-2026-12466: Heap buffer overflow in WebRTC
    * CVE-2026-12467: Use after free in Extensions
    * CVE-2026-12468: Inappropriate implementation in Updater
    * CVE-2026-12469: Uninitialized Use in GPU


author: Than Ngo <than@redhat.com> - 149.0.7827.196-1
changelog:
  - Update to 149.0.7827.196
    * CVE-2026-13028: Use after free in WebGL
    * CVE-2026-13032: Use after free in WebGL
    * CVE-2026-13033: Out of bounds read in Blink>InterestGroups
    * CVE-2026-13038: Use after free in Autofill
    * CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials
    * CVE-2026-13022: Inappropriate implementation in Autofill
    * CVE-2026-13023: Uninitialized Use in GPU
    * CVE-2026-13024: Insufficient validation of untrusted input in Navigation
    * CVE-2026-13025: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13026: Use after free in Digital Credentials
    * CVE-2026-13027: Use after free in FileSystem
    * CVE-2026-13029: Use after free in Web Authentication
    * CVE-2026-13030: Uninitialized Use in GPU
    * CVE-2026-13031: Use after free in Blink
    * CVE-2026-13034: Inappropriate implementation in Passwords
    * CVE-2026-13035: Use after free in Bluetooth
    * CVE-2026-13036: Use after free in Blink
    * CVE-2026-13037: Use after free in WebView
  - Upstream patch, Make dark mode apply filter to images irrespective of layout zoom


author: Than Ngo <than@redhat.com> - 149.0.7827.200-1
changelog:
  - Update to 149.0.7827.200
     CVE-2026-13281: Integer overflow in Mojo
     CVE-2026-13282: Use after free in Payments
     CVE-2026-13283: Use after free in AdFilter


author: Than Ngo <than@redhat.com> - 150.0.7871.46-1
changelog:
  - Update to 150.0.7871.46
    * CVE-2026-13774: Use after free in Extensions
    * CVE-2026-13775: Use after free in GPU
    * CVE-2026-13776: Type Confusion in Dawn
    * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
    * CVE-2026-13778: Use after free in WebUSB
    * CVE-2026-13779: Use after free in Chromoting
    * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-13781: Insufficient validation of untrusted input in Skia
    * CVE-2026-13782: Use after free in Browser
    * CVE-2026-13783: Use after free in Views
    * CVE-2026-13784: Use after free in Views
    * CVE-2026-13785: Use after free in Bluetooth
    * CVE-2026-13786: Use after free in Ozone
    * CVE-2026-13787: Use after free in Chromoting
    * CVE-2026-13788: Use after free in Fullscreen
    * CVE-2026-13789: Use after free in GPU
    * CVE-2026-13790: Side-channel information leakage in Scroll
    * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
    * CVE-2026-13792: Use after free in Touchbar
    * CVE-2026-13793: Insufficient policy enforcement in SVG
    * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-13796: Integer overflow in Chromecast
    * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-13798: Heap buffer overflow in Chromecast
    * CVE-2026-13799: Use after free in QUIC
    * CVE-2026-13800: Inappropriate implementation in Updater
    * CVE-2026-13801: Integer overflow in Chromecast
    * CVE-2026-13802: Use after free in Views
    * CVE-2026-13803: Type Confusion in Chrome Tabs
    * CVE-2026-13804: Use after free in Chromecast
    * CVE-2026-13805: Use after free in GFX
    * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
    * CVE-2026-13807: Use after free in Import
    * CVE-2026-13808: Insufficient data validation in Chrome for iOS
    * CVE-2026-13809: Side-channel information leakage in Safe Browsing
    * CVE-2026-13810: Inappropriate implementation in Input
    * CVE-2026-13811: Use after free in IME
    * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13814: Use after free in Views
    * CVE-2026-13815: Use after free in Blink
    * CVE-2026-13816: Insufficient validation of untrusted input in File Input
    * CVE-2026-13817: Insufficient validation of untrusted input in Glic
    * CVE-2026-13818: Inappropriate implementation in Passwords
    * CVE-2026-13819: Out of bounds read in ANGLE
    * CVE-2026-13820: Out of bounds read in Skia
    * CVE-2026-13821: Use after free in Canvas
    * CVE-2026-13822: Inappropriate implementation in Extensions
    * CVE-2026-13823: Use after free in Glic
    * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
    * CVE-2026-13825: Uninitialized Use in Dawn
    * CVE-2026-13826: Inappropriate implementation in Autofill
    * CVE-2026-13827: Use after free in Updater
    * CVE-2026-13828: Inappropriate implementation in Enterprise
    * CVE-2026-13829: Insufficient validation of untrusted input in Settings
    * CVE-2026-13830: Use after free in Chromoting
    * CVE-2026-13831: Use after free in GPU
    * CVE-2026-13832: Use after free in Headless
    * CVE-2026-13833: Uninitialized Use in ANGLE
    * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-13835: Inappropriate implementation in XML
    * CVE-2026-13836: Inappropriate implementation in CSS
    * CVE-2026-13837: Inappropriate implementation in CSS
    * CVE-2026-13838: Inappropriate implementation in CSS
    * CVE-2026-13839: Inappropriate implementation in CSS
    * CVE-2026-13840: Insufficient policy enforcement in Canvas
    * CVE-2026-13841: Integer overflow in Skia
    * CVE-2026-13842: Incorrect security UI in Chrome for iOS
    * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13844: Use after free in Updater
    * CVE-2026-13845: Use after free in DOM
    * CVE-2026-13846: Use after free in USB
    * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13848: Use after free in Forms
    * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13853: Use after free in Journeys
    * CVE-2026-13854: Use after free in Ozone
    * CVE-2026-13855: Use after free in Ozone
    * CVE-2026-13856: Insufficient validation of untrusted input in Speech
    * CVE-2026-13857: Inappropriate implementation in Geometry
    * CVE-2026-13858: Out of bounds read in FFmpeg
    * CVE-2026-13859: Inappropriate implementation in ANGLE
    * CVE-2026-13860: Incorrect security UI in Autofill
    * CVE-2026-13861: Use after free in Core
    * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys)
    * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
    * CVE-2026-13864: Insufficient policy enforcement in WebHID
    * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
    * CVE-2026-13866: Insufficient validation of untrusted input in Input
    * CVE-2026-13867: Inappropriate implementation in Geolocation
    * CVE-2026-13868: Inappropriate implementation in Network
    * CVE-2026-13869: Use after free in Device
    * CVE-2026-13870: Use after free in WebView
    * CVE-2026-13871: Insufficient data validation in GuestView
    * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13873: Out of bounds memory access in Layout
    * CVE-2026-13874: Inappropriate implementation in DataTransfer
    * CVE-2026-13875: Insufficient validation of untrusted input in GPU
    * CVE-2026-13876: Inappropriate implementation in Network
    * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-13878: Use after free in Bluetooth
    * CVE-2026-13879: Use after free in Bluetooth
    * CVE-2026-13880: Use after free in USB
    * CVE-2026-13881: Insufficient data validation in WebAppInstalls
    * CVE-2026-13882: Inappropriate implementation in USB
    * CVE-2026-13883: Type Confusion in ANGLE
    * CVE-2026-13884: Heap buffer overflow in Chromecast
    * CVE-2026-13885: Use after free in Skia
    * CVE-2026-13886: Policy bypass in Isolated Web Apps
    * CVE-2026-13887: Insufficient policy enforcement in NFC
    * CVE-2026-13888: Use after free in Extensions
    * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
    * CVE-2026-13890: Out of bounds read in Chromecast
    * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
    * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
    * CVE-2026-13894: Insufficient policy enforcement in Network
    * CVE-2026-13895: Inappropriate implementation in Autofill
    * CVE-2026-13896: Insufficient policy enforcement in Glic
    * CVE-2026-13897: Insufficient policy enforcement in Chromecast
    * CVE-2026-13898: Use after free in Cast Receiver
    * CVE-2026-13899: Use after free in HTML
    * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-13901: Insufficient validation of untrusted input in Serial
    * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
    * CVE-2026-13904: Incorrect security UI in Safe Browsing
    * CVE-2026-13905: Incorrect security UI in Chrome for iOS
    * CVE-2026-13906: Out of bounds read in Codecs
    * CVE-2026-13907: Inappropriate implementation in iOSWeb
    * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
    * CVE-2026-13909: Insufficient policy enforcement in DevTools
    * CVE-2026-13910: Insufficient policy enforcement in WebXR
    * CVE-2026-13911: Insufficient data validation in Spellcheck
    * CVE-2026-13912: Incorrect security UI in Safe Browsing
    * CVE-2026-13913: Insufficient policy enforcement in Autofill
    * CVE-2026-13914: Inappropriate implementation in Passwords
    * CVE-2026-13915: Use after free in Chrome for iOS
    * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13918: Use after free in Chrome for iOS
    * CVE-2026-13919: Insufficient data validation in Extensions
    * CVE-2026-13920: Insufficient validation of untrusted input in Media
    * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
    * CVE-2026-13922: Side-channel information leakage in Paint
    * CVE-2026-13923: Uninitialized Use in GPU
    * CVE-2026-13924: Insufficient validation of untrusted input in WebView
    * CVE-2026-13925: Inappropriate implementation in Downloads
    * CVE-2026-13926: Insufficient validation of untrusted input in Network
    * CVE-2026-13927: Insufficient validation of untrusted input in UI
    * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
    * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13930: Insufficient policy enforcement in Actor
    * CVE-2026-13931: Inappropriate implementation in Media
    * CVE-2026-13932: Inappropriate implementation in Sharing
    * CVE-2026-13933: Insufficient policy enforcement in Passwords
    * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
    * CVE-2026-13935: Side-channel information leakage in ComputePressure
    * CVE-2026-13936: Inappropriate implementation in Passwords
    * CVE-2026-13937: Insufficient policy enforcement in Passwords
    * CVE-2026-13938: Integer overflow in Fonts
    * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
    * CVE-2026-13940: Uninitialized Use in Cast
    * CVE-2026-13941: Inappropriate implementation in SiteSettings
    * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
    * CVE-2026-13943: Uninitialized Use in CSS
    * CVE-2026-13944: Inappropriate implementation in DataTransfer
    * CVE-2026-13945: Insufficient policy enforcement in Extensions
    * CVE-2026-13946: Inappropriate implementation in ScriptInjections
    * CVE-2026-13947: Uninitialized Use in XR
    * CVE-2026-13948: Insufficient policy enforcement in Extensions
    * CVE-2026-13949: Insufficient policy enforcement in Payments
    * CVE-2026-13950: Uninitialized Use in GPU
    * CVE-2026-13951: Policy bypass in USB
    * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
    * CVE-2026-13953: Inappropriate implementation in SplitView
    * CVE-2026-13954: Insufficient policy enforcement in XML
    * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
    * CVE-2026-13956: Incorrect security UI in PageInfo
    * CVE-2026-13957: Incorrect security UI in Extensions
    * CVE-2026-13958: Uninitialized Use in Codecs
    * CVE-2026-13959: Insufficient validation of untrusted input in Blink
    * CVE-2026-13960: Inappropriate implementation in Passwords
    * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13962: Insufficient data validation in PDF
    * CVE-2026-13963: Inappropriate implementation in DevTools
    * CVE-2026-13964: Insufficient policy enforcement in WebView
    * CVE-2026-13965: Use after free in Oilpan
    * CVE-2026-13966: Inappropriate implementation in History
    * CVE-2026-13967: Type Confusion in V8
    * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13969: Uninitialized Use in UI
    * CVE-2026-13970: Uninitialized Use in Media
    * CVE-2026-13971: Uninitialized Use in Skia
    * CVE-2026-13972: Inappropriate implementation in Paint
    * CVE-2026-13973: Inappropriate implementation in UI
    * CVE-2026-13974: Integer overflow in Safe Browsing
    * CVE-2026-13975: Out of bounds read in ANGLE
    * CVE-2026-13976: Heap buffer overflow in Storage
    * CVE-2026-13977: Inappropriate implementation in HTMLParser
    * CVE-2026-13978: Insufficient policy enforcement in PageInfo
    * CVE-2026-13979: Inappropriate implementation in Paint
    * CVE-2026-13980: Incorrect security UI in Chrome for iOS
    * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13982: Incorrect security UI in Passwords
    * CVE-2026-13983: Incorrect security UI in Chrome for iOS
    * CVE-2026-13984: Incorrect security UI in TabStrip
    * CVE-2026-13985: Inappropriate implementation in MediaCapture
    * CVE-2026-13986: Inappropriate implementation in Media UI
    * CVE-2026-13987: Incorrect security UI in Mobile
    * CVE-2026-13988: Inappropriate implementation in Paint
    * CVE-2026-13989: Insufficient policy enforcement in PageInfo
    * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
    * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13992: Inappropriate implementation in UI
    * CVE-2026-13993: Incorrect security UI in WebAppInstalls
    * CVE-2026-13994: Inappropriate implementation in Credential Management
    * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
    * CVE-2026-13996: Incorrect security UI in Permissions
    * CVE-2026-13997: Incorrect security UI in Extensions
    * CVE-2026-13998: Incorrect security UI in File Input
    * CVE-2026-13999: Inappropriate implementation in Extensions
    * CVE-2026-14000: Inappropriate implementation in XML
    * CVE-2026-14001: Inappropriate implementation in Network
    * CVE-2026-14002: Inappropriate implementation in Geolocation
    * CVE-2026-14003: Insufficient policy enforcement in Extensions
    * CVE-2026-14004: Inappropriate implementation in CSS
    * CVE-2026-14005: Use after free in Omnibox
    * CVE-2026-14006: Use after free in Navigation
    * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
    * CVE-2026-14008: Uninitialized Use in WebXR
    * CVE-2026-14009: Insufficient data validation in Passwords
    * CVE-2026-14010: Uninitialized Use in Codecs
    * CVE-2026-14011: Out of bounds read in SurfaceCapture
    * CVE-2026-14012: Side-channel information leakage in CSS
    * CVE-2026-14013: Inappropriate implementation in SVG
    * CVE-2026-14014: Inappropriate implementation in Paint
    * CVE-2026-14015: Inappropriate implementation in WebRTC
    * CVE-2026-14016: Insufficient policy enforcement in SVG
    * CVE-2026-14017: Inappropriate implementation in Navigation
    * CVE-2026-14018: Use after free in Updater
    * CVE-2026-14019: Inappropriate implementation in Passwords
    * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
    * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
    * CVE-2026-14022: Insufficient validation of untrusted input in Network
    * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
    * CVE-2026-14024: Use after free in Ozone
    * CVE-2026-14025: Use after free in Views
    * CVE-2026-14026: Incorrect security UI in SplitView
    * CVE-2026-14027: Use after free in SignIn
    * CVE-2026-14028: Incorrect security UI in Chrome for iOS
    * CVE-2026-14030: Incorrect security UI in SplitView
    * CVE-2026-14031: Incorrect security UI in File Input
    * CVE-2026-14032: Use after free in Bluetooth
    * CVE-2026-14033: Insufficient policy enforcement in Media
    * CVE-2026-14034: Inappropriate implementation in WebXR
    * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
    * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
    * CVE-2026-14037: Insufficient policy enforcement in GPU
    * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
    * CVE-2026-14040: Use after free in BrowserTag
    * CVE-2026-14041: Insufficient policy enforcement in Serial
    * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-14043: Use after free in GetUserMedia
    * CVE-2026-14044: Use after free in ANGLE
    * CVE-2026-14045: Insufficient validation of untrusted input in Network
    * CVE-2026-14046: Inappropriate implementation in CustomTabs
    * CVE-2026-14047: Insufficient policy enforcement in Extensions
    * CVE-2026-14048: Use after free in Chromecast
    * CVE-2026-14049: Inappropriate implementation in GPU
    * CVE-2026-14050: Insufficient policy enforcement in Passwords
    * CVE-2026-14051: Uninitialized Use in GamepadAPI
    * CVE-2026-14052: Insufficient policy enforcement in FileSystem
    * CVE-2026-14053: Insufficient policy enforcement in Extensions
    * CVE-2026-14054: Insufficient policy enforcement in Network
    * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
    * CVE-2026-14056: Insufficient validation of untrusted input in Media
    * CVE-2026-14057: Insufficient policy enforcement in FedCM
    * CVE-2026-14058: Policy bypass in Parser
    * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
    * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-14061: Inappropriate implementation in Dawn
    * CVE-2026-14062: Inappropriate implementation in Views
    * CVE-2026-14063: Out of bounds memory access in Chromecast
    * CVE-2026-14064: Use after free in PageInfo
    * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
    * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-14067: Use after free in Chrome for iOS
    * CVE-2026-14068: Inappropriate implementation in Omnibox
    * CVE-2026-14069: Integer overflow in WebNN
    * CVE-2026-14070: Uninitialized Use in WebNN
    * CVE-2026-14071: Side-channel information leakage in WebAudio
    * CVE-2026-14072: Incorrect security UI in SplitView
    * CVE-2026-14073: Insufficient policy enforcement in WebXR
    * CVE-2026-14074: Side-channel information leakage in WebAuthentication
    * CVE-2026-14075: Policy bypass in Chrome for iOS
    * CVE-2026-14076: Policy bypass in Network
    * CVE-2026-14077: Incorrect security UI in Select
    * CVE-2026-14078: Policy bypass in WebRTC
    * CVE-2026-14079: Policy bypass in Network
    * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
    * CVE-2026-14081: Insufficient policy enforcement in DevTools
    * CVE-2026-14082: Race in Storage
    * CVE-2026-14083: Insufficient validation of untrusted input in HTML
    * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-14085: Side-channel information leakage in CSS
    * CVE-2026-14086: Insufficient policy enforcement in HID
    * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
    * CVE-2026-14088: Uninitialized Use in Canvas
    * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
    * CVE-2026-14090: Out of bounds read in CameraCapture
    * CVE-2026-14091: Use after free in DevTools
    * CVE-2026-14092: Insufficient policy enforcement in Privacy
    * CVE-2026-14093: Use after free in Cast
    * CVE-2026-14094: Use after free in Installer
    * CVE-2026-14095: Insufficient validation of untrusted input in Browser
    * CVE-2026-14096: Object lifecycle issue in Input
    * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
    * CVE-2026-14098: Inappropriate implementation in CSS
    * CVE-2026-14099: Use after free in Chrome for iOS
    * CVE-2026-14100: Insufficient data validation in NetworkCache
    * CVE-2026-14101: Insufficient policy enforcement in Sandbox
    * CVE-2026-14102: Use after free in Passwords
    * CVE-2026-14103: Use after free in SSL
    * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-14105: Insufficient policy enforcement in Speech
    * CVE-2026-14106: Insufficient validation of untrusted input in Text
    * CVE-2026-14107: Use after free in Scheduling
    * CVE-2026-14108: Use after free in PDFium
    * CVE-2026-14109: Insufficient policy enforcement in Mojo
    * CVE-2026-14110: Inappropriate implementation in DarkMode
    * CVE-2026-14111: Use after free in WebProtect
    * CVE-2026-14112: Inappropriate implementation in Enterprise
    * CVE-2026-14113: Use after free in Updater
    * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
    * CVE-2026-14115: Insufficient validation of untrusted input in Cast
    * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
    * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
    * CVE-2026-14118: Insufficient data validation in DevTools
    * CVE-2026-14119: Type Confusion in Bluetooth
    * CVE-2026-14120: Inappropriate implementation in DevTools
    * CVE-2026-14121: Use after free in Chromoting
    * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-14123: Incorrect security UI in Chrome for iOS
    * CVE-2026-14124: Inappropriate implementation in CredentialProvider
    * CVE-2026-14125: Uninitialized Use in ANGLE
    * CVE-2026-14126: Incorrect security UI in UI
    * CVE-2026-14127: Inappropriate implementation in Printing
    * CVE-2026-14128: Insufficient data validation in Chrome for iOS
    * CVE-2026-14129: Incorrect security UI in PreviewTab
    * CVE-2026-14130: Incorrect security UI in Omnibox
    * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-14132: Inappropriate implementation in WebXR
    * CVE-2026-14133: Race in History Embeddings
    * CVE-2026-14134: Inappropriate implementation in Autofill
    * CVE-2026-14135: Insufficient validation of untrusted input in Network
    * CVE-2026-14136: Incorrect security UI in Chrome for iOS
    * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
    * CVE-2026-14139: Inappropriate implementation in TabStrip
    * CVE-2026-14140: Insufficient validation of untrusted input in Input
    * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
    * CVE-2026-14142: Inappropriate implementation in Extensions
    * CVE-2026-14143: Incorrect security UI in Passwords
    * CVE-2026-14144: Incorrect security UI in Views
    * CVE-2026-14145: Inappropriate implementation in CSS
    * CVE-2026-14146: Inappropriate implementation in CSS
    * CVE-2026-14147: Inappropriate implementation in CSS
    * CVE-2026-14148: Type Confusion in CSS
    * CVE-2026-14149: Use after free in Audio
    * CVE-2026-14150: Insufficient validation of untrusted input in Speech
    * CVE-2026-14151: Inappropriate implementation in AI
    * CVE-2026-14152: Out of bounds write in ANGLE
    * CVE-2026-14153: Inappropriate implementation in Glic
    * CVE-2026-14154: Inappropriate implementation in DevTools
    * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
    * CVE-2026-14156: Policy bypass in StorageAccessAPI
  - Remove Darkmode patches, which are already included in v150
  - Refresh patches for v150
  - Fix FTBFS with system ffmpeg
  - Backport upstream patches to fix FTBFS


author: Than Ngo <than@redhat.com> - 150.0.7871.114-1
changelog:
  - Update to 150.0.7871.114
    * CVE-2026-15112: Use after free in Ozone
    * CVE-2026-15129: Use after free in Views
    * CVE-2026-15132: Uninitialized Use in V8
    * CVE-2026-15133: Use after free in InterestGroups
    * CVE-2026-15108: Integer overflow in Extensions API
    * CVE-2026-15109: Uninitialized Use in ANGLE
    * CVE-2026-15110: Use after free in Extensions
    * CVE-2026-15111: Use after free in Views
    * CVE-2026-15113: Use after free in Autofill
    * CVE-2026-15114: Out of bounds read and write in Codecs
    * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-15116: Use after free in Actor
    * CVE-2026-15117: Use after free in Payments
    * CVE-2026-15118: Use after free in Input
    * CVE-2026-15119: Inappropriate implementation in GetUserMedia
    * CVE-2026-15120: Use after free in Core
    * CVE-2026-15121: Use after free in WebRTC
    * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
    * CVE-2026-15123: Insufficient data validation in DOM
    * CVE-2026-15124: Insufficient policy enforcement in Passwords
    * CVE-2026-15125: Inappropriate implementation in Forms
    * CVE-2026-15126: Use after free in Forms
    * CVE-2026-15127: Inappropriate implementation in WebGL
    * CVE-2026-15128: Inappropriate implementation in Forms
    * CVE-2026-15130: Insufficient policy enforcement in Navigation
    * CVE-2026-15107: Use after free in IndexedDB
    * CVE-2026-15131: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 150.0.7871.124-1
changelog:
  - Update to 150.0.7871.124
    * CVE-2026-15764: Use after free in Ozone
    * CVE-2026-15765: Use after free in Ozone
    * CVE-2026-15766: Uninitialized Use in Skia
    * CVE-2026-15767: Heap buffer overflow in libyuv
    * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
    * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
    * CVE-2026-15770: Uninitialized Use in V8
    * CVE-2026-15771: Insufficient validation of untrusted input in Media
    * CVE-2026-15772: Use after free in GPU
    * CVE-2026-15773: Use after free in Core
    * CVE-2026-15774: Use after free in Skia
    * CVE-2026-15775: Insufficient policy enforcement in V8
    * CVE-2026-15776: Type Confusion in V8
    * CVE-2026-15777: Use after free in UI
    * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
  - Backport patches to improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.128-1
changelog:
  - Update to 150.0.7871.128
    * CVE-2026-15899: Use after free in CameraCapture
    * CVE-2026-15900: Use after free in GPU
    * CVE-2026-15901: Use after free in Network
    * CVE-2026-15902: Use after free in Cast
    * CVE-2026-15903: Out of bounds read and write in V8
    * CVE-2026-15904: Use after free in Ozone
    * CVE-2026-15905: Use after free in Aura
  - Fix rhbz#2501811, Drop AI policy which breaks DoH settings
  - Improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.181-1
changelog:
  - Update to 150.0.7871.181
    * CVE-2026-16413: Out of bounds write in ANGLE
    * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
    * CVE-2026-16416: Integer overflow in Chromecast
    * CVE-2026-16417: Uninitialized Use in Skia
    * CVE-2026-16418: Stack buffer overflow in V8
    * CVE-2026-16419: Out of bounds read and write in ANGLE
    * CVE-2026-16420: Type Confusion in WebAudio
    * CVE-2026-16421: Inappropriate implementation in WebAudio
    * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
    * CVE-2026-16423: Use after free in UI
    * CVE-2026-16424: Use after free in GPU


author: Stephane Thiell <sthiell@stanford.edu> - 1.9.3-6
changelog:
  - Migrate from deprecated setup.py build/install to pyproject macros
  - Switch Source0 to PyPI archive for canonical tree naming


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-1
changelog:
  - Update to release v2.3.0
  - Refreshed spec file using go2rpm
  - Build now using gobuild macro for most binaries.
  - 'go build' is used for containerd-shim-runc-v2 to emulate makefile static
    build


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-2
changelog:
  - Build shim as static-pie
  - Build shim as static using static-pie to retain pie benefits and static
    build. See https://github.com/containerd/containerd/discussions/13340#dis
    cussioncomment-16883392 for additional information.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.1-1
changelog:
  - Update to release v2.3.1
  - Resolves: rhbz#2464270
  - Upstream feature enhancements and fixes
  - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
  - Resolves CVE-2026-35469: rhbz#2467593


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.2-1
changelog:
  - Update to release v2.3.2
  - Resolves: rhbz#2464270
  - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
  - Resolves CVE-2026-35469: rhbz#2467593
  - Resolves CVE-2026-50195
  - Resolves CVE-2026-53488
  - Resolves CVE-2026-53492
  - Resolves CVE-2026-53489
  - Resolves CVE-2026-47262
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.8-1
changelog:
  - rebase to latest upstream release (rhbz#2397467)
  - remove downstream patch for selinux options deprecated since 2009


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-1
changelog:
  - rebase to the latest upstream release (rhbz#2436690)
  - enable manual URLs in --help
  - use glibc-all-langpacks to make sure that all locale data required by tests
    will be always present


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-2
changelog:
  - enable the execution of the downstream df/direct.sh test
  - temporarily disable test-getaddrinfo on RHEL builds


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-3
changelog:
  - fix possible hangups during testsuite execution
  - rewrite (un)expand multibyte support using the mbbuf module (rhbz#2443041)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Vladis Dronov <vdronov@redhat.com> - 15.9-25
changelog:
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors (bz 2279099)
  - Minor edits in the rpm scripts and the changelog


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Paul Howarth <paul@city-fan.org> - 1.7.3-1
changelog:
  - Update to 1.7.3 (rhbz#2447065)
    - Add musl support
    - Fix macro-substitution in manual pages
    - Remove hardcoded neon versions from configure.ac
  - Consider AUTHORS as a license file rather than just documentation


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.2.0-1
changelog:
  - Update to 4.2.0 (close RHBZ#2412720)
  - App ID changes from com.github.cassidyjames.dippi to
    com.cassidyjames.dippi


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.0.2-1
changelog:
  - Update to 5.0.2
  - Correct/update License from GPL-3.0-only AND CC0-1.0 to GPL-3.0-or-later
    AND CC0-1.0
  - Add new Croatian translations for Summary and description


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Miroslav Suchý <msuchy@redhat.com> 1.119-1
changelog:
  - update copr keys
  - add: ultramarine repository keys
  - add: terra repository keys
  - update Google key block


author: Pavel Raiskup <pavel@raiskup.cz> 1.120-1
changelog:
  - Update RPM-GPG-KEY-openSUSE-2022
  - add Teams for Linux repository key
  - add Oracle Linux 10 key
  - Add NetBSD security officer key
  - update copr keys
  - Added EndeavourOS, Tuxedo OS, and Linux Mint keys


author: Evan Goode <egoode@redhat.com> - 4.10.1-1
changelog:
  - reposync: Avoid multiple downloads of duplicate packages
  - doc: needs-restarting uses UnitsLoadStartTimestamp boot time
  - debuginfo-install: Fix missing dnf.cli import
  - copr Fix missing dnf.cli import
  - tests: Fix missing dnf.cli imports


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-3
changelog:
  - Fix a crash when formatting an RPM scriptlet output containing a non-ASCII
    character in C locale (bug #2443774)


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.2-1
changelog:
  - Updated to version 2.5.2
  - Upstream change notes:
    * This patch release fixes compatibility with GNU/Hurd and fixes running
      tests in parallel.
    * Commits:
      ea9c431 GNU/Hurd
      67800d4 Paralell tests take 2
      57dd3e0 Plugins tests
      f5246e4 strptime


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1
changelog:
  - Update to release v0.31.0
  - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.2-1
changelog:
  - Update to release v0.31.2
  - Upstream security fixes (including ones in v0.31.1)
  - GHSA-hw3h-2gp9-cxpv
  - GHSA-qx3x-mv6r-52p6
  - GHSA-32pv-7hq5-qhwq
  - GHSA-g2h8-426c-7976
  - GHSA-388v-wmr2-g2v2
  - GHSA-7236-3392-c5c6
  - GHSA-72x6-4j93-7w86
  - Additional fixes`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241216git660795b-1
changelog:
  - Update to 0^20241216git660795b
  - dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve
    detection of ARM64EC.
  - dr_mp3 0.6.40: Improve detection of ARM64EC
  - dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded
    files. Improve detection of ARM64EC.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250722git80bc891-1
changelog:
  - Update to 0^20250722git80bc891
  - New CMake build system for tests, and redesigned tests overall
  - dr_flac 0.13.0: BREAKING API CHANGES and fixes
  - dr_mp3 0.7.0: BREAKING API CHANGES and fixes
  - dr_wav 0.14.0: BREAKING API CHANGES and fixes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251201.877b096-1
changelog:
  - Update to 0^20251201.80bc891
  - dr_flac 0.13.2
  - dr_mp3 0.7.2
  - dr_wav 0.14.2
  - Change snapshot information field format in Release


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.8.1-1
changelog:
  - Update to v0.8.1
  - Drop Patch1 (unbundle picojson - replaced with nlohmann_json upstream)
  - Drop Patch3 (unbundle rang - dependency dropped upstream)
  - Drop Patch4 (libfmt10 compatibility - backport from this release)


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.28.0-1
changelog:
  - Update to 1.28.0
  - Fix FTBFS by forcing std17
  - Close: rhbz#2337186
  - Fix: rhbz#2340116
  - Rebuild for jpegxl (libjxl) 0.11.1


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Jens Petersen <petersen@redhat.com> - 1.7.1-29
changelog:
  - merging now prompts even with --merge (--no-prompt) when branch unmergeable
  - parallel: restore package header output for merge
  - parallel: fix error for -F/-E when run outside dist-git
  - createKojiSidetag: needs krbTicket


author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Jens Petersen <petersen@redhat.com> - 1.8-35
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.8/changelog
  - new 'branch-log' command
  - 'build','parallel': can now merge --from a particular branch
  - 'commit': requires -b option to confirm non-rawhide commit
  - 'compare-tarballs': new command to diff source tarballs
  - 'copr --failures': fetches tails of failed build logs
  - new 'repoquery' command which wraps fedora-repoquery
  - 'update-sources': prep in tmpdir; compares tarballs; improved ver-rel logic
  - `FBRNCH_KOJI_PROFILE` provides experimental Koji profile support (eg riscv)
  - merge handling improvements
  - tries to setup git upstream branch tracking


author: Jens Petersen <petersen@redhat.com> - 1.8.1-38
changelog:
  - new native watchtask implementation and command
  - local build.log's now generated with 'script' tool instead of tee pipe
  - some web API calls now retry to help with connection issues
  - update-sources try to take "sources" changes into account now
  - merge tries to rebase if origin ahead
  - more details: https://hackage.haskell.org/package/fbrnch-1.8.1/changelog


author: Miroslav Suchý <msuchy@redhat.com> 41.2-1
changelog:
  - remove-retired-packages: detect removed subpackages
  - no need to check if F41 is prerelease
  - add new line to repoquery to make remove-retired-packages work with dnf5


author: Miroslav Suchý <msuchy@redhat.com> 41.3-1
changelog:
  - correctly detect tmux
  - requires sudo
  - add reverence to `dnf history` in man page
  - add old gpg keys
  - group minimal install does not exist anymore
  - move rawhide version


author: Miroslav Suchý <msuchy@redhat.com> 42.3-1
changelog:
  - add upgrade to Fedora 43
  - remove upgrade to F40 that is EOL
  - typo
  - dnf5 uses /var/cache/libdnf5


author: Miroslav Suchý <msuchy@redhat.com> 42.4-1
changelog:
  - migrate from python3-dnf to python-libdnf5
  - use spdx id as license name
  - update link to documentation
  - add upgrade to F44
  - do not check if F43 is prerelease
  - simplify spec - remove f40- code


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-2
changelog:
  - Fix upgrade to Samba 4.23 when there is already established trust
  - Upstream PR: https://github.com/freeipa/freeipa/pull/8046


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-3
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-8
changelog:
  - Fix SELinux policy for SSSD MFA helpers
  - Fix cases when passkey child was crashing when called from ipa-otpd


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-9
changelog:
  - Ensure proper error code return in case MS-PAC generator not yet enabled
  - Resolves: rhbz#2448253
  - Rebuild against Samba 4.24.0 final release
  - Related: rhbz#2448612


author: Tom Callaway <spot@fedoraproject.org> - 3.18.2-1
changelog:
  - update to 3.18.2
  - make explicit Requires also arch specific to prevent weird multilib combinations


author: Jerry James <loganjerry@gmail.com> - 0.4.1-4
changelog:
  - Rebuild for gap 4.16.0
  - Drop unnecessary BuildRequires
  - Use gap(...) symbols in dependencies
  - Add patch to avoid undefined behavior due to signed integer overflow


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.1
changelog:
  - update from trunk
    - PRs c++/81337, c++/115163, c++/123526, fortran/77415, ipa/122458,
  	ipa/123543, libfortran/123012, middle-end/123175,
  	rtl-optimization/123523, target/123415, testsuite/121752,
  	testsuite/123129, tree-optimization/122824, tree-optimization/122830,
  	tree-optimization/123417, tree-optimization/123528


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.2
changelog:
  - update from trunk
    - PRs fortran/91960, fortran/112460, libstdc++/123396,
  	rtl-optimization/123444, rtl-optimization/123501, target/117581,
  	target/123484, testsuite/123098, tree-optimization/122843,
  	tree-optimization/122845, tree-optimization/123301,
  	tree-optimization/123525, tree-optimization/123539


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.3
changelog:
  - update from trunk
    - PRs c/123309, c++/120775, c++/122634, c++/123081, c++/123551,
  	debug/121045, driver/108865, driver/123504, ipa/122852, ipa/123542,
  	middle-end/123115, middle-end/123392, middle-end/123573,
  	rtl-optimization/123312, rtl-optimization/123544, target/38118,
  	target/114528, target/120250, target/121240, target/123092,
  	testsuite/122522, tree-optimization/119402, tree-optimization/120322,
  	tree-optimization/123109, tree-optimization/123190,
  	tree-optimization/123530


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/68179, ada/123589, algol68/123007, algol68/123653, algol68/123734,
  	analyzer/123145, analyzer/123540, c/123437, c++/122391, c++/123601,
  	c++/123627, c++/123639, c++/123677, c++/123692, c++/123694,
  	diagnostics/122622, fortran/94377, fortran/109512, fortran/123375,
  	ipa/123412, libgcc/123650, libgomp/88707, libgomp/122314,
  	libgomp/122356, libstdc++/114153, middle-end/123697,
  	middle-end/123744, modula2/123739, pch/110746,
  	rtl-optimization/121787, rtl-optimization/122215,
  	rtl-optimization/123380, rtl-optimization/123585, sarif-replay/123056,
  	target/71340, target/113666, target/117575, target/122781,
  	target/122869, target/123279, target/123460, target/123521,
  	target/123584, target/123603, target/123607, target/123626,
  	target/123631, target/123724, target/123742, testsuite/123175,
  	testsuite/123751, tree-optimization/113524, tree-optimization/123061,
  	tree-optimization/123314, tree-optimization/123513,
  	tree-optimization/123602, tree-optimization/123636,
  	tree-optimization/123645, tree-optimization/123656,
  	tree-optimization/123729, tree-optimization/123731,
  	tree-optimization/123736, tree-optimization/123741,
  	tree-optimization/123745, tree-optimization/123753,
  	tree-optimization/123755, tree-optimization/123756


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.5
changelog:
  - update from trunk
    - PRs algol68/123733, algol68/123785, c++/101140, c++/122494, c++/122609,
  	c++/123354, c++/123404, c++/123578, c++/123597, c++/123620,
  	c++/123663, c++/123667, c++/123676, c++/123684, c++/123737,
  	c++/123814, d/122800, fortran/118955, fortran/123772,
  	libstdc++/123758, middle-end/122348, middle-end/123703,
  	middle-end/123709, middle-end/123775, other/67300,
  	rtl-optimization/80357, rtl-optimization/94014,
  	rtl-optimization/123144, target/123780, target/123791, target/123792,
  	tree-optimization/106883, tree-optimization/120258,
  	tree-optimization/121347, tree-optimization/122474,
  	tree-optimization/122749, tree-optimization/123628,
  	tree-optimization/123657, tree-optimization/123767,
  	tree-optimization/123771, tree-optimization/123776,
  	tree-optimization/123778, tree-optimization/123794,
  	tree-optimization/123799, tree-optimization/123803,
  	tree-optimization/123820


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.6
changelog:
  - update from trunk
    - PRs ada/89159, ada/121316, ada/123580, ada/123832, ada/123857, ada/123861,
  	ada/123867, ada/123902, algol68/123959, analyzer/98447,
  	analyzer/116228, analyzer/116865, analyzer/117491, analyzer/122623,
  	analyzer/123880, c/101312, c/102846, c/123500, c/123583, c/123882,
  	c++/38612, c++/102613, c++/102846, c++/110871, c++/110872, c++/113968,
  	c++/114450, c++/121832, c++/122169, c++/122785, c++/123557,
  	c++/123611, c++/123614, c++/123659, c++/123695, c++/123738,
  	c++/123752, c++/123790, c++/123818, c++/123825, c++/123837,
  	c++/123845, c++/123866, c++/123871, c++/123913, c++/123918,
  	c++/123920, c++/123934, c++/123964, c++/123977, c++/124002,
  	cobol/119332, d/116975, d/120096, d/121477, d/122817, d/123046,
  	d/123263, d/123264, d/123349, d/123407, d/123419, d/123422, d/123798,
  	debug/110885, debug/123376, debug/123886, diagnostics/110522,
  	fortran/117303, fortran/123868, fortran/123941, fortran/123952,
  	gcov-profile/121084, gcov-profile/121123, gcov-profile/121409,
  	gcov-profile/123855, ipa/106260, ipa/111036, ipa/116296, ipa/123226,
  	ipa/123416, ipa/123619, libffi/117635, libgomp/113213, libgomp/121813,
  	libitm/69018, libstdc++/86164, libstdc++/114865, libstdc++/117404,
  	libstdc++/120567, libstdc++/123921, middle-end/49330,
  	middle-end/97898, middle-end/118608, middle-end/121661,
  	middle-end/122689, middle-end/123447, middle-end/123575,
  	middle-end/123826, middle-end/123869, middle-end/123876,
  	middle-end/123887, middle-end/123892, middle-end/123978, other/123841,
  	rtl-optimization/106859, rtl-optimization/119982,
  	rtl-optimization/122170, rtl-optimization/123294,
  	rtl-optimization/123322, rtl-optimization/123833,
  	rtl-optimization/123922, target/36503, target/117048, target/121571,
  	target/122097, target/122343, target/123016, target/123206,
  	target/123245, target/123548, target/123604, target/123766,
  	target/123779, target/123806, target/123807, target/123824,
  	target/123870, target/123910, target/123969, target/123971,
  	testsuite/123559, testsuite/123936, translation/89915,
  	tree-optimization/109410, tree-optimization/110043,
  	tree-optimization/114274, tree-optimization/114969,
  	tree-optimization/116747, tree-optimization/121104,
  	tree-optimization/121726, tree-optimization/122197,
  	tree-optimization/122537, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123672,
  	tree-optimization/123849, tree-optimization/123864,
  	tree-optimization/123897, tree-optimization/123898,
  	tree-optimization/123925, tree-optimization/123940,
  	tree-optimization/123958, tree-optimization/123983,
  	tree-optimization/123986


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.7
changelog:
  - update from trunk
    - PRs ada/121576, ada/124025, c++/123616, c++/123640, c++/123823,
  	c++/123889, c++/123984, d/123995, d/124026, fortran/85547,
  	fortran/122949, fortran/123545, fortran/123673, fortran/123961,
  	rtl-optimization/123796, target/123911, target/123926,
  	testsuite/124036, tree-optimization/117217, tree-optimization/123225,
  	tree-optimization/124034


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/124016, ada/124054, ada/124106, ada/124179, ada/124192,
  	ada/124201, ada/124224, ada/124226, ada/124282, ada/124285,
  	algol68/124028, algol68/124049, algol68/124115, analyzer/108400,
  	analyzer/111099, analyzer/113496, analyzer/117369, analyzer/121928,
  	analyzer/123973, analyzer/123981, analyzer/124055, analyzer/124073,
  	analyzer/124104, analyzer/124116, analyzer/124139, analyzer/124188,
  	analyzer/124195, analyzer/124232, c/87591, c/105555, c/119651,
  	c/123365, c/123472, c/123716, c++/98939, c++/101670, c++/102397,
  	c++/119756, c++/120685, c++/120974, c++/121500, c++/121822,
  	c++/122318, c++/122621, c++/123143, c++/123440, c++/123608,
  	c++/123612, c++/123641, c++/123642, c++/123660, c++/123661,
  	c++/123662, c++/123989, c++/124012, c++/124045, c++/124070,
  	c++/124096, c++/124119, c++/124150, c++/124153, c++/124173,
  	c++/124184, c++/124204, c++/124215, c++/124227, cobol/119455,
  	cobol/121499, cobol/122839, cobol/123238, demangler/106641,
  	diagnostics/122001, diagnostics/124014, fortran/78187, fortran/80012,
  	fortran/88076, fortran/99250, fortran/108663, fortran/120505,
  	fortran/121360, fortran/121429, fortran/122491, fortran/123943,
  	fortran/123947, fortran/123949, fortran/124071, fortran/124080,
  	fortran/124208, fortran/124235, fortran/124286, ipa/122856,
  	ipa/123229, ipa/123629, libfortran/88076, libfortran/123366,
  	libstdc++/105580, libstdc++/113450, libstdc++/119745,
  	libstdc++/121402, libstdc++/121771, libstdc++/123176,
  	libstdc++/123875, libstdc++/123908, libstdc++/123991,
  	libstdc++/124015, libstdc++/124024, libstdc++/124124,
  	middle-end/113436, middle-end/123386, middle-end/124056,
  	middle-end/124250, middle-end/124280, other/88472,
  	rtl-optimization/116053, rtl-optimization/116600,
  	rtl-optimization/120169, rtl-optimization/121191,
  	rtl-optimization/123048, rtl-optimization/123381,
  	rtl-optimization/123994, rtl-optimization/124062,
  	rtl-optimization/124079, target/57261, target/80881, target/112400,
  	target/113453, target/115042, target/119979, target/120233,
  	target/120234, target/120241, target/120888, target/122448,
  	target/123137, target/123195, target/123285, target/123556,
  	target/123624, target/124048, target/124094, target/124098,
  	target/124134, target/124136, target/124138, target/124147,
  	target/124162, target/124167, target/124194, target/124236,
  	target/124294, testsuite/103515, testsuite/115827, testsuite/123191,
  	testsuite/124064, translation/118988, tree-optimization/90036,
  	tree-optimization/95825, tree-optimization/99959,
  	tree-optimization/107690, tree-optimization/110091,
  	tree-optimization/114375, tree-optimization/117935,
  	tree-optimization/121103, tree-optimization/122297,
  	tree-optimization/124038, tree-optimization/124068,
  	tree-optimization/124086, tree-optimization/124099,
  	tree-optimization/124108, tree-optimization/124130,
  	tree-optimization/124132, tree-optimization/124142,
  	tree-optimization/124288


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.9
changelog:
  - update from trunk
    - PRs c/122572, c++/123408, c++/123665, c++/123810, c++/124229, c++/124306,
  	c++/124324, c++/124368, cobol/119456, fortran/124330, ipa/60674,
  	libfortran/124330, libstdc++/117402, libstdc++/119197,
  	libstdc++/122217, libstdc++/124363, middle-end/45273,
  	rtl-optimization/123786, rtl-optimization/124041,
  	rtl-optimization/124351, target/64835, target/124165, target/124315,
  	target/124335, target/124336, target/124341, target/124349,
  	target/124366, target/124367, testsuite/122961, testsuite/124320,
  	testsuite/124359, tree-optimization/119568
    - fix -flto -g handling of aarch64 AEABI attributes
      (#2439677, PR target/124365)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.10
changelog:
  - update from trunk
    - PRs ada/107475, ada/120669, ada/124369, ada/124376, algol68/124322,
  	algol68/124372, analyzer/107646, analyzer/124375, analyzer/124433,
  	analyzer/124451, bootstrap/124406, bootstrap/124547, c/97991,
  	c/122866, c/123461, c/123856, c/124230, c++/39057, c++/109521,
  	c++/115852, c++/118482, c++/120039, c++/120285, c++/122559,
  	c++/122786, c++/123618, c++/123622, c++/124118, c++/124145,
  	c++/124154, c++/124200, c++/124297, c++/124307, c++/124309,
  	c++/124311, c++/124331, c++/124388, c++/124389, c++/124390,
  	c++/124397, c++/124399, c++/124404, c++/124417, c++/124425,
  	c++/124431, c++/124440, c++/124447, c++/124456, c++/124459,
  	c++/124466, c++/124472, c++/124474, c++/124478, c++/124483,
  	c++/124485, c++/124489, c++/124493, c++/124494, c++/124496,
  	c++/124575, d/123202, d/124158, driver/69367, driver/69849,
  	fortran/82721, fortran/84779, fortran/93832, fortran/95338,
  	fortran/97818, fortran/102333, fortran/102459, fortran/102596,
  	fortran/103139, fortran/105168, fortran/106946, fortran/110877,
  	fortran/115316, fortran/120286, fortran/120723, fortran/121043,
  	fortran/121743, fortran/122696, fortran/122902, fortran/124161,
  	fortran/124450, fortran/124482, gcov-profile/123923,
  	gcov-profile/124075, ipa/124291, ipa/124462, libfortran/124371,
  	libstdc++/116110, libstdc++/118030, libstdc++/118341,
  	libstdc++/119794, libstdc++/120527, libstdc++/121790,
  	libstdc++/122300, libstdc++/122567, libstdc++/124268,
  	libstdc++/124290, libstdc++/124443, libstdc++/124444,
  	libstdc++/124463, libstdc++/124513, libstdc++/124568,
  	middle-end/120030, middle-end/121159, middle-end/124435,
  	middle-end/124491, middle-end/124552, objc/124260, other/124508,
  	preprocessor/105412, rtl-optimization/121649, rtl-optimization/123094,
  	rtl-optimization/123822, rtl-optimization/124078,
  	rtl-optimization/124439, rtl-optimization/124452,
  	rtl-optimization/124454, rtl-optimization/124476, target/117182,
  	target/122000, target/122925, target/122953, target/123271,
  	target/123749, target/124044, target/124126, target/124333,
  	target/124403, target/124407, target/124409, target/124436,
  	target/124461, target/124565, target/124566, testsuite/112520,
  	testsuite/119930, testsuite/124066, testsuite/124484,
  	translation/124422, tree-optimization/80006, tree-optimization/98064,
  	tree-optimization/120987, tree-optimization/122380,
  	tree-optimization/124037, tree-optimization/124135,
  	tree-optimization/124358, tree-optimization/124528,
  	tree-optimization/124555, tree-optimization/124578


author: Marek Kasik <mkasik@redhat.com> - 3.12.1-4
changelog:
  - Rebuild (poppler)
  - Statically link stdc++ due to undefined references
  -   Assisted-by: Claude Code


author: Jens Petersen <petersen@redhat.com> - 9.6.6-146
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Jens Petersen <petersen@redhat.com> - 9.8.4-147
changelog:
  - rebase to 9.8.4 from ghc9.8
  - https://downloads.haskell.org/~ghc/9.8.1/docs/users_guide/9.8.1-notes.html
  - https://downloads.haskell.org/~ghc/9.8.2/docs/users_guide/9.8.2-notes.html
  - https://downloads.haskell.org/~ghc/9.8.3/docs/users_guide/9.8.3-notes.html
  - https://downloads.haskell.org/~ghc/9.8.4/docs/users_guide/9.8.4-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.8.4-148
changelog:
  - revert Unique Word64 on i686 to avoid compilation crashes
    https://gitlab.haskell.org/ghc/ghc/-/issues/25904
  - disable haddock for ix86 and make doc-index arch


author: Jens Petersen <petersen@redhat.com> - 9.10.3-150
changelog:
  - rebase to ghc-9.10.3 from ghc9.10
  - https://downloads.haskell.org/~ghc/9.10.1/docs/users_guide/9.10.1-notes.html
  - https://downloads.haskell.org/~ghc/9.10.2/docs/users_guide/9.10.2-notes.html
  - https://downloads.haskell.org/~ghc/9.10.3/docs/users_guide/9.10.3-notes.html
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - add openSUSE's backport of riscv64 NCG
  - drop --hash-unit-ids


author: Jens Petersen <petersen@redhat.com> - 9.10.3-152
changelog:
  - obsolete ghc9.10
  - reenable building hadrian
  - ppc64le NCG: add an upstream patch for the clrrxi instruction
  - boot again from Rawhide (#2435862)


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-19
changelog:
  - Auto-sync with upstream branch master,
    commit 755798985d0dc2438c546851f926087158955614:
  - aarch64: Fix PT_GNU_PROPERTY checks for static exe (BZ 33713)
  - tst-sig-redzone: Decorate assembly function
  - hurd: check that signal processing does not hurt the x86_64 redzone
  - hurd: also test mmx state restoration
  - mach/hurd: add `bits/in.h`
  - Better terminology for ‘long double’ in manual
  - Update copyright dates not handled by scripts/update-copyrights
  - Update copyright dates with scripts/update-copyrights
  - Pass glibc pre-commit checks
  - malloc_info: fix closing </sizes> tag typo
  - LoongArch: Use generic __builtin_trap in abort.
  - malloc: Fix clang build after 1c588a2187
  - elf: Fix elf/tst-decorate-maps on aarch64 after 321e1fc73f
  - misc: Enable tst-atomic for clang
  - math: Use math_opt_barrier on ldbl-128 powl underflow/overflow handling
  - stdio: Fix tst-vfprintf-user-type on clang
  - x86: Do not use __builtin_isinf_sign for _Float64x/long double
  - x86: Do not use __builtin_fpclassify for _Float64x/long double
  - resolv: Add test for NOERROR/NODATA handling [BZ #14308]


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-21
changelog:
  - Auto-sync with upstream branch master,
    commit e539a269990dac3ff4d2432c0eb6966a5ee4f274:
  - hurd: Fix sigreturn clobbering some xmm registers (Samuel Thibault)
  - Linux: test sizes larger than UINT_MAX for copy_file_range (Xi Ruoyao)
  - Update the bundled <linux/fuse.h> userspace header from Linux 6.18 (Xi Ruoyao)
  - Linux: fix copy_file_range test on Linux >= 6.18 (Xi Ruoyao)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 7b543dcdf97d07fd4346feb17916e08fe83ad0ae:
  - elf: Ignore LD_PROFILE if LD_PROFILE_OUTPUT is not set (bug 33797) (Florian Weimer)
  - hurd: make __thread_set_pcsptp align stack (Samuel Thibault)
  - Update advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0861 (Siddhesh Poyarekar)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915) (Carlos O'Donell)
  - memalign: reinstate alignment overflow check (CVE-2026-0861) (Siddhesh Poyarekar)
  - malloc: Add tst-mallocfork to tests-exclude-threaded exception list (Arjun Shankar)
  - aarch64: Fix LD_AUDIT with GCS in permissive mode (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for GCS handling (Adhemerval Zanella)
  - aarch64: Add LD_AUDIT tests for BTI handling (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for BTI handling (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_fpclassify for _Float64x/long double" (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_isinf_sign for _Float64x/long double" (Adhemerval Zanella)
  - aarch64: update NEWS for 2.43 release (Yury Khrustalev)
  - aarch64: Add LD_DEBUG=security to log BTI and GCS warnings (Yury Khrustalev)
  - tst-if_nameindex.c: Fix minimum buffer size (Samuel Thibault)
  - ldbl-128ibm-compat: Add local aliases for printf family symbols (Sachin Monga)
  - math: Fix powerpc64le -Os build after 6b7067460f (Adhemerval Zanella)
  - x86: Fix x86_64 build failure with -Os (BZ 33367) (Adhemerval Zanella)
  - math: Sync acosh from CORE-MATH (Adhemerval Zanella)
  - math: Sync atanh from CORE-MATH (Adhemerval Zanella)
  - math: Sync asinh from CORE-MATH (Adhemerval Zanella)
  - aarch64: Fix error messages for GCS and BTI incompatible modules (Yury Khrustalev)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-1
changelog:
  - Auto-sync with upstream branch master,
    commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc:
  - po: Incorporate translatins (nl updated, ar new) (Andreas K. Hüttel)
  - Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling (Aurelien Jarno)
  - NEWS: add new section 2.43.1 (Andreas K. Hüttel)
  - Replace advisories directory with file ADVISORIES (Andreas K. Hüttel)
  - Create ChangeLog.old/ChangeLog.32 (Andreas K. Hüttel)
  - version.h, include/features.h: Increase version number (Andreas K. Hüttel)
  - contrib.texi: Add missing accent (Andreas K. Hüttel)
  - tst-cond23: add <support/test-driver.h> include (Aurelien Jarno)
  - install.texi, INSTALL: update versions (Andreas K. Hüttel)
  - contrib.texi: Updates (Andreas K. Hüttel)
  - NEWS: Insert list of fixed security advisories (Andreas K. Hüttel)
  - NEWS: Mention build issues due to const-preserving macros (Andreas K. Hüttel)
  - NEWS: Insert list of fixed bugs (Andreas K. Hüttel)
  - NEWS: Editorial changes (Andreas K. Hüttel)
  - NEWS: Additional items and minor consolidation (Andreas K. Hüttel)
  - NEWS: Group ISO C23 related changes (Andreas K. Hüttel)
  - po: Incorporate translations (Andreas K. Hüttel)
  - Update advisory text for GLIBC-SA-2026-0003 (Adhemerval Zanella)
  - Add advisory text for CVE-2025-15281 (Carlos O'Donell)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814) (Adhemerval Zanella)
  - libc.pot: regenerate (Andreas K. Hüttel)
  - Linux: fix tst-copy_file_range-large failure in 32-bit glibc build on 64-bit kernel [BZ 33790] (Xi Ruoyao)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-2
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 48f5a05a7a1eeb9e0567ab429f654648f831307f:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Don't include <bits/openat2.h> directly (bug 33848) (Andreas Schwab)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2:56-1
changelog:
  - Update spec to comply with the latest packaging guidelines
  - Drop recommends for unrelated tools
  - Trim description


author: Milan Crha <mcrha@redhat.com> - 50~beta-7
changelog:
  - dnf5-plugin: Update the dnf5 plugin with the recent upstream fixes
  - reload package information after repository is enabled
  - change when repository GPG keys are auto-accepted
  - show fedora-third-party repositories in their section


author: Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
changelog:
  - Update on 2025-12-23
  - Use stable branch instead of master
  - Add next generation of Gnulib the python release of Gnulib
  - Fix building tests
  - Re-struct for gnulib ng with python base
  - Update dependencies


author: Sérgio Basto <sergio@serjux.com> - 0-78.20260302git4a3650d
changelog:
  - Update to git4a3650d branch stable-202601 with ISO C23 fixes
  - The git-merge-changelog binary has been removed from the source and is now maintained in a separate repository.


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Josue Hernandez <josherna@redhat.com> - 2.12-54
changelog:
  - verifiers: Allocate EFI pages instead of grub_malloc for verified buffer
  - Resolves: #2427945
  - Resolves: #2263643


author: Leo Sandoval <lsandova@redhat.com> - 2.12-56
changelog:
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2453022
  - Resolves: #2451630
  - Resolves: #2450672
  - Related: #2427945
  - Related: #2263643


author: Rolv Apneseth <rapneset@redhat.com> - 2.12-60
changelog:
  - mdraid: fix metadata 1.0 detection in userspace utilities on IEEE1275
  - grub-install: use search.fs_uuid for RAID1 on IEEE1275


author: Leo Sandoval <lsandova@redhat.com> - 8.40-83
changelog:
  - grubby-bls: in s390* systems, run zipl on grub cfg update event
    Fixes previous commit and formats better the conditions that trigger grub cfg updates


author: Milan Crha <mcrha@redhat.com> - 4.22.1-2
changelog:
  - Add a patch "gtkapplication-wayland: Add a missing NULL check when
    forgetting a window"
  - Resolves: rhbz#2450986


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~alpha1-3
changelog:
  - Resolves: #2321990#c10 Keep xinit postun in ibus for back compatibility
  - Resolves: #2418564 Do not install ibus-xinit in COSMIC desktop
  - Resolves: #2418670 Disable X11 display in GTK3 Wayland with hibernation
  - Resolves: #2418908 Delete Python2 and subpackage python3-ibus
  - Fix GTK3 build in src/tests/ibus-keypress
  - Add warning to clean VALA files in configure
  - Order locale compose and user compose


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~alpha1-4
changelog:
  - Resolves: #2419469 Fix SEGV with double bus_name_acquired_cb()
  - Resolves: #2424256 Delete Requires desktop-file-utils in spec
  - Resolves: #2425585 Separate lxqt-wayland-session and lxqt-x11-session in spec
  - Resolves: #2428238 Add awesome in spec
  - Rebase: #1797120 Fix assertion in panel_binding_construct()
  - Connect delete surrounding text in ibus-wayland
  - Fix Backspace after commit-text in Ghostty in ibus-wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~rc1-1
changelog:
  - Bump to 1.5.34-rc1
  - Update translations
  - Fix "no memory" error with focus changes in Sway
  - Resolves #2444009 Latch key in Latvian(tilde) keymap
  - Fix only GTK3 builds
  - Close leaked keymap fd on early return in ibus-wayland


author: Akira TAGOH <tagoh@redhat.com> - 1.8.10-1
changelog:
  - New upstream release.
  - Reflect correct environment variables to input method process.
    Resolves: rhbz#2324342
  - Correct DBus service filename
    Resolves: rhbz#2322097


author: Akira TAGOH <tagoh@redhat.com> - 1.8.11-1
changelog:
  - New upstream release.
  - Fix D-Bus session lifetime issue.
    Resolves: rhbz#2402652
  - Reset gtk-im-module gsettings key if no actions required for imsettings
    Resolves: rhbz#2402681


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.31-1
changelog:
  - New upstream release
  - Fix lzo1x decompress call to use safe version of the API
  - Lower log levels of messages generated for each packet


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.32-1
changelog:
  - New upstream release
  - IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.
  - Fix potential thread race condition in libnozzle close.
  - Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11).
  - Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces.
  - New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO.
  - Bump soname to reflect new API call.
  - Improve OpenSSL error handling.
  - Add support for OpenIndiana.
  - Documentation updates.
  - Fix several tests to better deal with execution timing.
  - Handle some new coverity errors.
  - Create and refine STYLE_GUIDE.md for project contributions.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.33-1
changelog:
  - New upstream release
  - Build fixes for gcc-15
  - Build fixes for rust coreutils
  - Coverity tests cleanup
  - Release: ship all files for completeness


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.34-1
changelog:
  - New upstream release (Resolves rhbz#2494753)
  - Important bugfixes:
    Fix critical defragmentation buffer reclamation logic
    Fix sequence number wraparound calculation in defragmentation
    Add decompression buffer size validation
    Fix SCTP reconnect thread race condition
    Build fixes for int_decompress_bufsize without zlib
  - New features:
    Add unique names to all threads for better debugging
    Add Wireshark dissector plugin for kronosnet protocol analysis
    Add API to enumerate supported cipher modes and hash algorithms
    libnozzle: Platform-specific refactoring and native ioctl implementations
    libnozzle: Add input validation for network prefixes
    libnozzle: Portable type and macro abstractions for BSD/Solaris
    Improve OpenSSL error logging to print entire error stack
    Add CLAUDE.md documentation for AI-assisted development
  - Test suite improvements:
    Add comprehensive defragmentation and sequence wraparound test suites
    Improve test infrastructure with unified logging and injection helpers
    libnozzle: Introduce test macros similar to libknet
    Comprehensive test suite improvements and C99 compliance fixes
    Test suite now supports parallel execution with "make -j check" on systems with sufficient resources


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.35-1
changelog:
  - New upstream release
  - CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
  - CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
  - CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
  - tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
  - libnozzle: Introduce test macros similar to libknet
  - docs: convert README to markdown format


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.4-2
changelog:
  - Skip unicode test in annocheck
  - unicode test fails in packit ci rpminspect on kubectl and kubeadm
  - failing symbol is 'go:(*struct { io.Reader; io.WriterTo }).Read' but
    looks correct


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.5-1
changelog:
  - Update to release v1.34.5
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-5
changelog:
  - Drop deprecated --fail-swap-on=false flag
  - Drop flag from kubeadm systemd drop-in file
  - Remove deprecated flags and comment out EnvironmentFiles


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.2-1
changelog:
  - Update to release v1.35.2
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)


author: Parag Nemade <pnemade AT redhat DOT com> - 4.1-2
changelog:
  - zh_TW: change default inputmethod to ibus-chewing
    https://fedoraproject.org/wiki/Changes/IBusChewingForZhTW


author: Akira TAGOH <tagoh@redhat.com> - 4.1-3
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Mike FABIAN <mfabian@redht.com> - 4.2-2
changelog:
  - Resolves: rhbz#2310426 Add ibus-cangjie-engine-cangjie and ibus-cangjie-engine-quick as recommends for zh_HK


author: Kalev Lember <kalevlember@gmail.com> - 1:1.41.0-1
changelog:
  - Update to 1.41.0
  - Build with llvm 20
  - Re-bootstrap on ppc64le to switch to 128-bit IEEE long double ABI


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.5-1
changelog:
  - Update to version 6.5.5
  - Drop soname patch, use new configure option --enable-librelease instead
  - Unbundle yaml-cpp, using new configure option --with-yaml-cpp
  - EPEL 7 EOL specfile cleanup


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Python Maint <python-maint@redhat.com> - 21.0.0-3
changelog:
  - Rebuilt for Python 3.14.0rc2 bytecode
  - Plus rebuild w/ liborc-2.2.0 + orc-format-1.1.1 (i.e. liborc-2.2.0-2)


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Remi Collet <remi@remirepo.net> - 1.1.4-8
changelog:
  - fix test suite with memcached 1.6.40
    reported as https://github.com/awesomized/libmemcached/issues/161
    using fix from https://github.com/awesomized/libmemcached/pull/162


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 7.2-4
changelog:
  - ntirpc-7.2, ntirpc did not tag/release required updates for
    ganesha-8.1 and later (nfs-ganesha-9.15)


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 7.2-5
changelog:
  - ntirpc-7.2, ntirpc did not tag/release required updates for
    ganesha-8.1 and later (nfs-ganesha-9.16)


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Davide Cavalca <dcavalca@fedoraproject.org> - 23-8
changelog:
  - Convert license tag to SPDX
  - Update spec to the latest packaging guidelines
  - Disable broken test on ppc64le; Fixes: RHBZ#2261345


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.7.0-5
changelog:
  - Install the Fortran modules into %{_fmoddir} via CMake instead of moving
    them after the fact, fixing the non-existent include directory in the
    exported wignernj::wignernj_f03 target and in libwignernj_f03.pc.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.14.0-1
changelog:
  - Update to v1.14.0
  - Drop Patch0 (test failures - backported from this release)
  - Drop Patch1 (kernel 6.11+ issues - backported from this release)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Brian C. Lane <bcl@redhat.com> 43.10-1
changelog:
  - executils: Remove binary_output flag (bcl@redhat.com)
  - logging: Set encoding=UTF-8 on FileHandler (bcl@redhat.com)
  - executils: Set encoding to UTF-8 for _run_program (bcl@redhat.com)
  - tests: Add template runcmd unicode test (bcl@redhat.com)
  - tests: Add some unicode to the executils tests (bcl@redhat.com)
  - templates: Remove explicit installation of anaconda-widgets (k.koukiou@gmail.com)


author: Brian C. Lane <bcl@redhat.com> 44.0-1
changelog:
  - maint: Switch default platform to F44 (bcl@redhat.com)
  - Drop all installs of shim-ia32 (it no longer exists) (awilliam@redhat.com)
  - templates: Support product version to contain blank character in
    templates.d/99-generic (songmingliang@uniontech.com)


author: Brian C. Lane <bcl@redhat.com> 44.1-1
changelog:
  - runtime-install: skip qcom-accel-firmware (awilliam@redhat.com)
  - executils: decoding after deserialization (oleg.sviridov@red-soft.ru)
  - mkksiso: make ISO reproducible with SOURCE_DATE_EPOCH (e.champetier@ateme.com)


author: Brian C. Lane <bcl@redhat.com> 44.2-1
changelog:
  - Add mac80211_hwsim for wifi testing to installer image (rvykydal@redhat.com)
  - runtime-install: drop tigervnc (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.4-1
changelog:
  - Exclude build on the i686 architecture (berrange@redhat.com)
  - runtime-cleanup: mesa no longer includes gallium-pipe drivers (yselkowi@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.5-1
changelog:
  - runtime-cleanup: don't strip /usr/share from gdb-headless (awilliam@redhat.com)
  - runtime-cleanup: keep policycoreutils /usr/bin for load_policy and setfiles (k.koukiou@gmail.com)
  - executils: Ignore utf-8 decode errors (bcl@redhat.com)
  - mkksiso: Add a --tmp argument to set temporary directory (bcl@redhat.com)


author: Michel Lind <salimma@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to version 0.6.0
  - Resolves: rhbz#2428411
  - Enable Packit
  - Convert to use rpmautospec
  - Clean up spec to drop EL < 8 conditionals


author: Jonathan Wright <jonathan@almalinux.org> - 4.3-6
changelog:
  - fix FTBFS on gcc15 rhbz#2340833
  - fix permissions on /usr/share/mdadm to be world-readable rhbz#2322402


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-65
changelog:
  - Update to upstream 2.1-45. 20240910
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1e
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).
  - Addresses CVE-2024-23984, CVE-2024-24968
  - Added the documentation directory to the list of files owned by the package
  - Resolves RHBZ#2283214, RHBZ#2311299


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-66
changelog:
  - Update to upstream 2.1-46. 20241029
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b.
  - Resolves RHBZ#2324127


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-67
changelog:
  - Update to upstream 2.1-47. 20241112
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.
  - Addresses CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-69
changelog:
  - Update to upstream 2.1-48. 20250211
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000390;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode at revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-08/0xe0 microcode at revision 0x4123;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x100 up to 0x102;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.
  - Addresses CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-70
changelog:
  - Update to upstream 2.1-49. 20250512
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Removal of 06-55-06/0xbf (CLX-SP B0) microcode at revision 0x4003605;
    - Removal of 06-cf-01/0x87 (EMR-SP A0) microcode at revision 0x21000291;
    - Removal of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000291;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb8 up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfc up to 0x100;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x102 up to 0x104;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9.
    - Addresses CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-20012,
      CVE-2025-20054, CVE-2025-20103, CVE-2025-20623, CVE-2025-24495


author: Denys Vlasenko <dvlasenk@redhat.com> 2:2.1-72
changelog:
  - Update to upstream 2.1-50. 20250812
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
      up to 0xd000410;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
      up to 0x10002e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
      up to 0x25;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa0000d1 up to 0xa000100;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003a2 up to 0x10003d0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
      up to 0x3000362;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4128 up to 0x4129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
      up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4128 up to 0x4129;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
      to 0x123;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
      to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x118 up to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
      up to 0x210002b3.


author: Eugene Syromiatnikov <evgsyr@gmail.com> 2:2.1-74
changelog:
  - Update to upstream 2.1-51. 20260210
    - Addition of 06-ae-01/0x97 (GNR-D B0/B1) microcode at revision
      0x10002f3;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000410
      up to 0xd000421;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002e0
      up to 0x10002f1;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xca
      up to 0xcc;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xbc up to 0xbe;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x56 up
      to 0x58;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000643 up to 0x2b000661;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000421;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000401 up to 0x2c000421;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000421;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000661;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000401 up to 0x2c000421;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000643 up to 0x2b000661;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x3a up to 0x3e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x3a up to 0x3e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3e;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3e;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x3a up to 0x3e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x3a
      up to 0x3e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3e;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3e;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x437 up to 0x43b;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x437 up to 0x43b;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x437 up to 0x43b;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0xa up
      to 0xc;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x437
      up to 0x43b;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x64 up
      to 0x65;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x25
      up to 0x28;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa000100 up to 0xa000133;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003d0 up to 0x1000405;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000362
      up to 0x3000382;
    - Update of 06-b5-00/0x80 (ARL-U A1) microcode from revision 0xa up
      to 0xd;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12f up
      to 0x133;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12f up to 0x133;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4129 up to 0x6134;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4129 up to 0x6134;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4129 up to 0x6134;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4129 up to 0x6134;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4129
      up to 0x6134;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4129 up to 0x6134;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x123 up
      to 0x125;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1d up
      to 0x21;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x3a up to 0x3e;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3e;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x3a up to 0x3e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3e;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3e;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3e;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x119 up
      to 0x11b;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x119 up to 0x11b;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11b;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11b;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x119 up to 0x11b;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x119 up to 0x11b;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11b;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11b;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002b3 up to 0x210002d3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002b3
      up to 0x210002d3.
  - Resolves RHBZ#2431378


author: Sandro Mani <manisandro@gmail.com>
changelog:
  - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082,
    CVE-2025-11081, CVE-2025-11083


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.0-1
changelog:
  - Update to release v29.5.0
  - Resolves: rhbz#2467552
  - Resolves CVE-2026-32288
  - Resolves CVE-2026-31431
  - Upstream new features, fixes, and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.1-1
changelog:
  - Update to release v29.5.1
  - Resolves: rhbz#2467552
  - Resolves: CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.0-1
changelog:
  - Update to release v29.6.0
  - Resolves: rhbz#2490590
  - Resolves CVE-2026-39828: rhbz#2489945
  - Resolves CVE-2026-39829: rhbz#2490099
  - Resolves CVE-2026-39830: rhbz#2490466
  - Upstream fixes and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.1-1
changelog:
  - Update to release v29.6.1
  - Resolves: rhbz#2493405
  - Upstream security fixes for: GHSA-mjcv-p78q-w5fw GHSA-jpcc-p29g-p8mq
    GHSA-72x6-4j93-7w86 GHSA-7236-3392-c5c6


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.2-1
changelog:
  - Update to release v29.6.2
  - Resolves: rhbz#2496437
  - Upstream security fixes
  - - GHSA-hw3h-2gp9-cxpv
  - - GHSA-qx3x-mv6r-52p6
  - - GHSA-32pv-7hq5-qhwq
  - - GHSA-g2h8-426c-7976
  - - GHSA-388v-wmr2-g2v2


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - mock: Use umask 0022 instead of 0002 to avoid strange permissions (ngompa@velocitylimitless.com)
  - expand_spec plugin: generating expanded-spec.txt in postdeps hook (yzhu@redhat.com)
  - do not fail (not just) hermetic builds for missing resolv.conf
  - use skopeo for hermetic bootstrap images (tkopecek@redhat.com)
  - support yum for hermetic build (tkopecek@redhat.com)
  - allow access to the buildroot binary RPMs even in hermetic builds (tkopecek@redhat.com)
  - adapt mock to Changes/droppingOfCertPemFile
  - file_util: improve rmtree performance (#1672) (Gerasimov.N.V)
  - disable traceLog() wrapper (will be removed)
  - `mock --scrub=all` now correctly backs up successful builds from the buildroot (sergio@serjux.com)
  - update subscription-manager instructions (msuchy@redhat.com)
  - configs: Switch openSUSE Tumbleweed to DNF5 (ngompa@opensuse.org)
  - depend on DNF5 for EL11+ distributions (ngompa@centosproject.org)
  - depend on DNF5 for Mageia 10+ and Cauldron (ngompa@mageia.org)
  - select personality for RISC-V DNF transactions
  - document --scrub=bootstrap (negativo17@gmail.com)
  - unbreq supports `--isolation=simple` and `--no-bootstrap-chroot` (marian.koncek@mailbox.org)
  - unbreq plugin no longer crashes for `(foo if bar)` build deps (marian.koncek@mailbox.org)
  - unbreq performance has been significantly improved through caching (marian.koncek@mailbox.org)
  - unbreq logs standard outputs of failed commands (mkoncek@users.noreply.github.com)


author: Tomas Halman <thalman@redhat.com> - 2.4.16.11-1
changelog:
  Rebase to version 2.4.16.11
  - Resolves: rhbz#2357672 - mod_auth_openidc-2.4.16.11 is available
  - Resolves: CVE-2025-31492 mod_auth_openidc allows
              OIDCProviderAuthRequestMethod POSTs to leak protected data


author: Tomas Halman <thalman@redhat.com> - 2.4.17.2
changelog:
  Rebase to new version, opt in for autorelease and autochangelog
  - Resolves: rhbz#2361581 - mod_auth_openidc-2.4.17.2 is available


author: Remi Collet <remi@remirepo.net> - 1.30.6-2
changelog:
  - temporarily drop man pages on Fedora 44 as FTBFS
    reported as https://jira.mongodb.org/browse/CDRIVER-6210


author: Sérgio Basto <sergio@serjux.com> - 0.40.0-1
changelog:
  - Update mpv to 0.40.0
  - filesystem package owns completions folders, no need to co-own
    these directories anymore


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Timothée Ravier <tim@siosm.fr> - 2.23.0-4
changelog:
  - Fix macro expansion in description
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use SPDX identifiers for license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_3


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.23.0-9
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - [MIDI] loading files would cause crash (null dereference) if ~/.timidity.cfg not present


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-2
changelog:
  - [MIDI] Add patch to prefer /etc/timidity++.cfg to /etc/timidity.cfg
  - [MIDI] Add upstream patch to set comment to .pat filename without full path
  - Recommends: fluid-soundfont-gm


author: Marcin Juszkiewicz - 1.17.0-11
changelog:
  - skip 3 tests on riscv64: test_float8_e4m3fn_negative_nan,
    test_float8_e5m2_negative_nan, test_maxpool_2d_uint8_cpu


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.26.2-6
changelog:
  - clean up spec file formatting
  - Separate `%generate_buildrequires` after %prep section
  - Consolidate %doc directives into single line
  - Remove %license directive (already handled by %pyproject_save_files -l)


author: Dominik Mierzejewski <dominik@greysector.net> - 0.2.0.4-1
changelog:
  - update to 0.2.0.4 (resolves rhbz#2399635)
  - generate SO version from release version automatically


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2331728)
  - Convert STI tests to FMF (rhbz#2382998)


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-6
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 173-1
changelog:
  Changes with 173
  ----------------
    - Revert "test_objectstore: add time.sleep(0.1) to solve flaky tests" (#2340)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: disable tests that tend to fail during rpmbuild in Koji (HMS-9796) (#2338)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2341)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260208 (#2335)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/module-config: postfix with `.module` (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Packit <hello@packit.dev> - 181-1
changelog:
  Changes with 181
  ----------------
    - stages/bootc.install-to-fs: remount /dev (#2440)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-11


author: Packit <hello@packit.dev> - 183-1
changelog:
  Changes with 183
  ----------------
    - .gitlab-ci.yml: add 9.8-ga and 10.2-ga (#2457)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    - Optimize osbuild-depsolve-dnf memory and runtime performance (HMS-10526) (#2456)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update images dependency ref to latest (#2461)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - mounts/ddi: mounting of DDIs (#2459)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - runners: `eln11` (HMS-10652, HMS-10652) (#2453)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - test: update container IDs for manifest-list-test (#2455)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-27


author: Packit <hello@packit.dev> - 185-1
changelog:
  Changes with 185
  ----------------
    - Update snapshots to 20260531 (#2466)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - ci: fix `test_qemu` (#2483)
      - Author: Simon de Vlieger, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - org.osbuild.ovf: support setting virtual hardware version (HMS-3248) (#2468)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - runners: Add Oracle Linux 9 runner symlinked to CentOS9 (#2476)
      - Author: Laurence Rochfort, Reviewers: Brian C. Lane, Simon de Vlieger
    - sources/librepo: accept SHA1 (#2477)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-17


author: Packit <hello@packit.dev> - 187-1
changelog:
  Changes with 187
  ----------------
    - Update images dependency ref to latest (#2497)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update osbuild-ci container images (#2493)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260705 (#2496)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - containers-storage: Handle missing `storage.conf` values (#2501)
      - Author: Joel Capitao, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/bootc.install-to-fs: remount /dev/shm in addition to /dev/shm (#2494)
      - Author: Alexander Larsson, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/org.osbuild.bfb: BFB boot grub shims (#2471)
      - Author: Eli Elgaev, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages: add org.osbuild.grub2.d (#2473)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - utils: add utils.makeefi library (#2499)
      - Author: Dusty Mabe, Reviewers: Achilleas Koutsou, Renata Ravanelli, Simon de Vlieger

  — Somewhere on the Internet, 2026-07-10


author: Carl Byington <carl@five-ten-sg.com> - 1.24.0-4
changelog:
  - Include fixes after the official 1.24.0 release.
  - Add context menu to copy the custom field values.
  - The report files are now always bom-less utf-8 encoded.
  - Text input for custom fields value is now resizeable.
  - Allow import from Gorilla password safe V2 files including URL fields.
  - Add browse + autotype feature.
  - Add 1.24.0 changelog entries from upstream.
  - Custom fields can now be added to each entry. That is, fields with
    user-defined names and values.
  - Changing the height of the Add/Edit dialog will cause a vertical
    scrollbar to be added.
  - In the "Flattened List" view, sorting by time columns (e.g., entry
    creation time) now works correctly.


author: Carl Byington <carl@five-ten-sg.com> - 1.25.0-1
changelog:
  - update to 1.25.0
  - (regression) Clicking on a row in the "conflicting items" grid in the
    comparison dialog no longer hangs the app.
  - Don't clear a non-recurring expiry when the password is changed.


author: Filipe Rosset <filiperosset@fedoraproject.org> - 5.4.3-1
changelog:
  - update to 5.4.3 fixes rhbz#2492868
  - a bunch of other bugs were fixed and will be backported to all supported
    Fedora / EPEL versions


author: Paul Howarth <paul@city-fan.org> - 2.150011-1
changelog:
  - Update to 2.150011 (rhbz#2432163)
    - Improved example of testing a minimum prerequisite version of a module
    - Remove some code meant to handle running on pre-v5.8 perl, even though v5.8
      was already a requirement
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.150012-1
changelog:
  - Update to 2.150012 (rhbz#2432714)
    - Distribution metadata update
  - Add workaround for test issues with CPAN::Meta::Requirements ≥ 2.144
    https://github.com/Perl-Toolchain-Gang/CPAN-Meta/issues/145


author: Paul Howarth <paul@city-fan.org> - 2.150013-1
changelog:
  - Update to 2.150013 (rhbz#2441425)
    - Fix an incompatibility with newer CPAN::Meta::Requirements (GH#145, GH#147)
  - Drop obsoletion of perl-Parse-CPAN-Meta introduced in 2016


author: Paul Howarth <paul@city-fan.org> - 0.48-1
changelog:
  - Update to 0.48
    - Performance: Optimize hot paths in Clone.xs
    - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
    - Fix: Don't require MGf_DUP flag for ext magic duplication
    - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
    - Fix t/10-deep_recursion.t for Windows
    - Fix C89 declaration-after-statement violations in Clone.xs
    - Fix deep recursion stack overflow on Windows
    - Fix cloning of Math::BigInt::GMP objects (GH#16)
    - Fix cloning of threads::shared data structures (GH#18)
    - Add thread safety test for Class::DBI-like patterns (GH#14)
    - Add comprehensive documentation with examples and limitations
    - Improve README.md structure and installation instructions
    - Add DBI + DBD::SQLite as recommended test dependencies
    - Fix weakened reference cloning via deferred weakening (GH#15)
    - Fix memory leak when cloning non-existent hash values (GH#42)
    - Fix segfault when cloning DBI database handles (GH#27)
    - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
    - Replace static recursion_depth with stack parameter
    - Fix C++ style comments in Clone.xs for C89 portability
    - Fix memory leak in Clone.xs (GH#42)
    - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
    - Rename tests with more readable names
    - Remove TODO from CoW test
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.219-1
changelog:
  - Update to 2.219
    - Add PERL_UNUSED_DECL for trace to silence clang warning
    - Fix indentation in Lzma.xs that triggers a clang warning
    - Remove vestigial references to Pod::Markdown (GH#14)
    - Fix POD typo
    - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
      (GH#16)
    - Remove unused constants (GH#17)
    - Documentation improvements (GH#15)


author: Paul Howarth <paul@city-fan.org> - 0.115-1
changelog:
  - Update to 0.115 (rhbz#2324463)
    - Cope with the user forgetting the first argument, generally "%c %o", to
      'describe_options', by assuming they meant that value exactly


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116 (rhbz#2335016)
    - Do not leave Getopt::Long configuration in an altered state after getting
      options


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117 (rhbz#2441109)
    - Add experimental generation of bash/zsh completion scripts for GLD-powered
      programs; this code might go away or change or break in the future, don't
      rely on it


author: Paul Howarth <paul@city-fan.org> - 2.033000-1
changelog:
  - Update to 2.033000
    - Remove backpan_directory option (GH#127)
  - Switch upstream source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 2.037000-1
changelog:
  - Update to 2.037000
    - Fix es_filter to merge into query (GH#132)
    - More ES 8 related fixes (GH#133)
    - Updated scripts in examples/ (GH#133)


author: Paul Howarth <paul@city-fan.org> - 2.039000-1
changelog:
  - Update to 2.039000
    - Add more types that can be scrolled (GH#134)
    - Fix 'all' fetching from CVE and example scripts (GH#135)


author: Paul Howarth <paul@city-fan.org> - 2.040000-1
changelog:
  - Update to 2.040000
    - Use a boolean in reverse_deps term (GH#136)
    - Allow JSON->true and JSON->false (GH#137)


author: Paul Howarth <paul@city-fan.org> - 0.63-1
changelog:
  - Update to 0.63
    - Remove the non-portable tests for Perl's "super" code points; testing
      values beyond 0x7FFF_FFFF isn’t necessary
    - Documentation typo corrections


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Unicode::UTF8 now allows noncharacters; they receive no special handling
      and are processed like any other code point
    - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
      (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
      reserved but should be allowed in interchange:
      https://www.unicode.org/versions/corrigendum9.html


author: Paul Howarth <paul@city-fan.org> - 0.65-1
changelog:
  - Update to 0.65
    - C99-compliant compiler is now required for Unicode::UTF8
    - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
      validation for non-ASCII input; this approach resulted in a 900% throughput
      improvement on English text and a 200% improvement on Swedish text compared
      with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Rewrote the UTF-8 validator using a shift-based DFA from
      https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
      up to 10x faster decoding compared with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.68-1
changelog:
  - Update to 0.68
    - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
      builds
    - Use Dist::Zilla for the distro
  - Package new LICENSE file
  - Drop hacks related to use of Module::Install, no longer needed


author: Remi Collet <remi@remirepo.net> - 6.0.1-1
changelog:
  - update to 6.0.1
  - rename to php-phpdocumentor-reflection-docblock6
  - move to /usr/share/php/phpDocumentor/Reflection/DocBlock6
  - raise dependency on phpdocumentor/type-resolver 2.0
  - raise dependency on phpstan/phpdoc-parser 2.0


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-phpdocumentor-type-resolver1
  - move to /usr/share/php/phpDocumentor/Reflection/TypeResolver2


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-environment8
  - move to /usr/share/php/SebastianBergmann/Environment8


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - re-license spec file to CECILL-2.1
  - raise dependency on php 7.2
  - switch to phpunit11


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Drop upstreamed C23 patch
  - Add patch to properly detect the secure_getenv function
  - Figure the License fields out all over again
  - Rename swi-prolog-nox to swi-prolog-cli
  - Combine swi-prolog-x into swi-prolog-win


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.9b-1
changelog:
  - Update to 1.3.9b
    - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
      CVE-2026-44331)
    - Additional fix for session management with OpenSSL 3.2.x or later, when
      using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
    - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
      expected (GH#2098)
    - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
      in mod_sftp (GH#2102)
    - SSH packet with empty payload triggered null pointer dereference in
      mod_sftp (GH#2104)
    - Bad DSA signatures could lead to out-of-bounds read of heap memory in
      mod_sftp (GH#2106)
    - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
      mod_sftp (GH#2108)
    - SFTP request payload length underflow calculation in mod_sftp
      (GH#2115, CVE-2026-53994)
    - Several modules failed to build using OpenSSL 4.0 (GH#2120)
  - Update mod_proxy to 0.9.7
    - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
    - Set the payload_len field before checking its value (GH#292)
    - Keep the SSH packet reading code in mod_proxy more in line with what is
      done in mod_sftp, for legibility (GH#294)
    - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
      (GH#295, GH#296)
    - Correct misspellings noted by codespell (GH#297)
    - Use clang-tidy to start polishing the codebase (GH#298)
    - Disable the Nagle algorithm by default on our TCP connections to back-end
      servers (GH#299)
    - Require OpenSSL for building (GH#249, GH#300)
    - Documentation fixes
    - Implement a limit on the number of EXT_INFO extensions we'll be willing to
      accept (GH#303)
    - Comparison of expected/provided MAC data should be done in a constant-time
      manner
    - Support PKCS11-stored private keys
    - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
      post-quantum SSH key exchange mechanisms (GH#306)
    - Add sanity check for SRV record lengths
    - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
      does not underflow
    - If we detect a bad DSA signature length, properly error out
    - Ensure that RSA/DSA signatures match their expected algorithm types, and
      avoid null pointer dereferences
    - Update to build against OpenSSL 4.x (GH#313)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-1
changelog:
  - Update to 1.3.9c
    - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
    - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
    - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
    - AdminControlsACLs for config, get actions not honored as they should be
      (GH#2163)
    - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
      buffers without bounds checking (GH#2166)
    - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
      to reject illegal characters (GH#2173)
    - SQL group name lookup concatenates client-provided group names without
      escaping (GH#2188)
    - Authenticated SFTP sessions can overflow the SFTP packet buffer
      (GH#2190, CVE-2026-63090)
    - Default Controls socket ACLs unintentionally allow all users access for
      sending Controls requests (GH#2210)
    - Exercise caution when reading the client-provided file size for SCP
      uploads, as it could possibly overflow our size type (CVE-2026-63091)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-3
changelog:
  - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
    /proc/self/root path prefix); this module disallows file accesses via procfs
    filesystems


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Brian C. Lane <bcl@redhat.com> - 3.65-1
changelog:
  - workflows: Add python 3.14 to the test matrix (bcl)
  - Add support for RDP (jkonecny)
  - Deprecate VNC (jkonecny)
  - docs: Fix chapter numbering after adding certificate (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.66-1
changelog:
  - workflows: Use py3.14 beta.4 (bcl)
  - pylint: Ignore files in .git (bcl)
  - pyproject: Bump setuptools to 77 or later (bcl)
  - Makefile: Stop running setup.py directly (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.67-1
changelog:
  - spec: Add python3-pytest to BuildRequires (bcl)
  - tests: Use pytest module instead of unittest (bcl)
  - workflows: Use py3.14 rc.1 (bcl)
  - Add Fedora 44 support (bcl)
  - spec: drop python3-build dependency (yselkowi)


author: Brian C. Lane <bcl@redhat.com> - 3.68-1
changelog:
  - rhsm: Add Flatpak registry option for RHEL10 (bciconel)
  - commands: bootc: remove 'experimental' warning (k.koukiou)


author: Brian C. Lane <bcl@redhat.com> - 3.69-1
changelog:
  - Makefile: Drop coverage-report.log (bcl)
  - Add Fedora 45 support (bcl)
  - tests: Use pytest-cov to support coverage of parallel tests from pytest-xdist (bcl)
  - workflows: Use latest released py3.14 and py3.12 (bcl)
  - test: Use pytest-xdist to run tests in parallel (bcl)
  - tests: Use ThreadingHTTPServer and threads for load and include tests (bcl)
  - tests: Mark helper classes as not tests (bcl)
  - bootc: Add bootc command to the RHEL10 handler (bcl)
  - rdp: Add rdp support to the RHEL10 handler (bcl)
  - raid: Update RHEL10 handler to match rhel10-branch (bcl)
  - Fix handling filesystem labels with spaces (marmarek)


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-2
changelog:
  - Security fixes for CVE-2025-47273, CVE-2024-47081 and CVE-2025-50181
  - Fixes: rhbz#2367430, rhbz#2372476, rhbz#2373817


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-11
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431977


author: Miro Hrončok <miro@hroncok.cz> - 7.3.19-1
changelog:
  - Fork pypy3.11 from pypy3.10
  - Make this the main pypy3 on Fedora 42+
  - Obsolete the removed pypy3.9 packages


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 1.1.0~b1-2
changelog:
  - Apply suggested changes from package review
  - Add -l to the %pyproject_save_files macro to enforce the license is
    installed
  - Drop the note about Python 3.8 from the description


author: Miro Hrončok <miro@hroncok.cz> - 2024.08.30-4
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337319


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.0-1
changelog:
  - Update to 6.0.0
  - Switch from PyPI sdist to GitHub archive as basis for filtered source
    archive, since the PyPI sdist now contains pre-generated HTML docs and is
    harder to audit


author: Michel Lind <salimma@fedoraproject.org> - 6.0.0-1
changelog:
  - Update to 6.0.0 upstream release
  - Resolves: rhbz#1445556
  - Stop using deprecated macros; Resolves: rhbz#2377653
  - Drop old obsoletes, no longer needed
  - SPDX license audit; license is BSD-3-Clause
  - Run import checks; prepare to run unit tests


author: Michel Lind <salimma@fedoraproject.org> - 3.16.1-1
changelog:
  - Update to 3.16.1 upstream release
  - Resolves: rhbz#2386912
  - Enable Packit integration
  - Add import check


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 5.0.1-2
changelog:
  - Update python version validation (resolves rhbz#2424298)
    Upstream has indicated that python 3.8.1+ should all be supported


author: Major Hayden <major@redhat.com> - 2.33.0-2
changelog:
  - ci: add Packit configuration for automated updates
  - Add pull_from_upstream job to open dist-git PRs on new releases


author: Miro Hrončok <miro@hroncok.cz> - 7.0.0-8
changelog:
  - python3-psutil-tests: Add dependencies, don't package test_scripts
  - pytest is Recommended as it is optional but preferred
  - procps-ng is needed to run some tests


author: Michel Lind <salimma@fedoraproject.org> - 7.2.2-1
changelog:
  - Update to 7.2.2 upstream release
  - Resolves: rhbz#2396273
  - Refactor test runs
  - Drop the tests subpackage, removed in 7.2.0
  - Enforce that license file is shipped


author: Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
changelog:
  - Update to 0.6.4
  - Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
  - Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
  - Fixed excessive resource use in Real.__float__() (CVE-2026-59886)


author: Jerry James <loganjerry@gmail.com> - 0.9.1-6
changelog:
  - Remove old pep621 obsoletes
  - Use the pyproject declarative buildsystem
  - Fix building with the doc conditional
  - Remove redundant LICENSE installation
  - Minor spec file cleanups


author: Michel Lind <salimma@fedoraproject.org> - 4.12.0-1
changelog:
  - Update to 4.12.0 upstream release
  - Resolves: rhbz#2344661
  - Enable Packit
  - License audit: fix the old Callaway license to BSD-3-Clause


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Eduardo Echeverria <echevemaster@gmail.com> - 1.9.0-1
changelog:
  - Update to 1.9.0 (added Python 3.14 support, dropped Python 3.9/PyPy 3.10)
  - Correct license tag to BSD-3-Clause


author: Miro Hrončok <miro@hroncok.cz> - 2.32.4-2
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337320


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-8
changelog:
  - %python_extras_subpkg: Add -v option to specify the required version(-release)
  - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package)


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-9
changelog:
  - %python_extras_subpkg: Only %ghost the egg-info/dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-11
changelog:
  - %python_wheel_inject_sbom: Add more metadata to the SBOM
  - %python_wheel_inject_sbom: Rename the SBOM file to limit the possibility of clashes


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-12
changelog:
  - %python_wheel_inject_sbom: Hardcode the purl of this tool instead of constructing it at runtime
  - %py3_build, %py3_install, etc.: Bump the Fedora version in the deprecation message


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.0-1
changelog:
  - Create simple CLI tool to examine keycache in Python and refresh all entries in keycache
  - Verify Thread-safe + Unwritable Cache + Negative Cache
  - Revamp Sphinx documentation
  - Patch Enforcer to validate against multiple issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.6-1
changelog:
  - Fix SQL injection risk in KeyCache by using parameterized SQLite queries
  - Prevent sibling-path authorization bypass in Enforcer scope checks


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.7-1
changelog:
  - Remove legacy parent SciToken chaining behavior from token initialization and claim handling
  - Harden Enforcer scope path traversal validation (including encoded traversal checks)
  - Clean up documentation references to parent/chained SciTokens


author: Packit <hello@packit.dev> - 1.19.4-1
changelog:
  - Update to 1.19.4 upstream release
  - Resolves: rhbz#2374311
  - Remove upstream’s upper-bound on the version of python-packaging
  - Add bootstrap conditional to break new snakemake circular dep.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.0^20251001git4dd90dd-1
changelog:
  - Temporarily package a post-release snapshot
  - For compatibility with snakemake-interface-logger-plugins 2.0.0


author: Michel Lind <salimma@fedoraproject.org> - 2.8.5-1
changelog:
  - Update to 2.8.5 upstream release
  - Resolves: rhbz#2413751
  - Run tests with verbose output
  - Enable Packit


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.12.2-4
changelog:
  - Python bindings for manifold are now packaged
  - Introduce a bootstrap bcond for breaking a dep. cycle via manifold


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.0-1
changelog:
  - Update to 0.23.0 (close RHBZ#2438834)
  - Drop and Obsolete python3-typer-slim/python3-typer-cli subpackages


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-4
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-5
changelog:
  - Major spec file overhaul for Fedora packaging compliance
  - Added compatibility wrapper for xdg import
  - Improved Qt resource and manpage generation logic
  - Refined file and symlink handling, .pth and compat modules
  - Cleaned up excludes, bytecode, and manual packaging


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-6
changelog:
  - Add xdg-wrapper.py and raysession_xdg_compat.py as packaged Sources
  - Reference those files using their Source4 and Source5 macros in the spec
  - Upload sources to distgit and adjust install logic to use Source macros


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-7
changelog:
  - Refactor install section: introduce DATADIR, PY_SITELIB, PY_LEGACY variables
  - Consolidate .pth and compat shim installation into loops
  - Clean up bytecode removal and DRY repeated paths
  - Fix rpmlint warnings and rebuild SRPM/RPM


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-9
changelog:
  - Improve resource handling: ensure Qt resources and fonts are
    correctly compiled/installed so icons and application fonts load
    at runtime (fix rcc detection and safe regeneration behavior).


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)
  - add a sshd helper to rescue, otherwise sshd does not start, PR 3510


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-7
changelog:
  - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218)
  - fix duplicate execution of automated recovery (RHEL-110659)
  - fix sorting of stage scripts (RHEL-132181)
  - add support for dbus-broker (RHEL-134213)


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: John Kacur <jkacur@redhat.com> - 3.11-1
changelog:
  - Upgrade to rteval-3.11
  - rteval: cyclictest: Improve handling of truncated histogram output
  - rteval: timerlat: Improve handling of truncated histogram output


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-1
changelog:
  - Version 0.7.0
  - linkdupes subpackage is added. It is required by build-reproducibility-
    srpm-macros, so it'll be pulled into buildroots.
  - redhat-rpm-config needs to be updated to call
    %__os_install_post_hardlink in %__os_install_post for the helper to
    actually be used in builds.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-1
changelog:
  - Version 0.7.1
  - This implements https://fedoraproject.org/wiki/Changes/Hardlink_identical
    _files_in_packages_by_default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-5
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Zdenek Pytela <zpytela@redhat.com> - 42.20-1
changelog:
  - Support cockpit privileged access for the staff user
  - Update su_domain_type policy for kerberized su
  - Allow sshd-session inherit limits from its parent process
  - Allow systemd-machined read virtd process state
  - Allow kl2tpd create and use netlink_generic_socket
  - Update policy for redfish-finder
  - Label the greetd login manager framework as a display manager
  - Allow sshd-auth get attributes of sshd vsock socket
  - Confine redfish_finder - host api discovery service
  - Allow iptables read firewalld process state
  - Allow tuned_t use its private tmpfs files
  - The commit addresses the following AVC denials:


author: Zdenek Pytela <zpytela@redhat.com> - 42.21-1
changelog:
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  - Allow sshd-session read, write, and map ica tmpfs files
  - Allow aide get attributes of a filesystem with extended attributes
  - Set correct label for glycin fontconfig (bsc#1253682)
  - Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  - Logwatch zz-runtime uses uptime (bsc#1255862)
  - Add auth_login_pgm_signull interface (bsc#1255862)
  - Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  - Allow l2tpd_t access to netlink and sysfs
  - Label miscellaneous /dev/papr-* devices
  - Allow qemu-ga to skip authentication
  - Revert "Allow systemd-coredump signull containers"
  - Allow systemd-coredump signull containers
  - Allow virtqemud setattr dri devices
  - Allow irqbalance create and use netlink generic socket
  - Allow thumb_t connect to XDM over a unix domain stream socket
  - Allow systemd-homework to remove ~/.identity-blob
  - Revert "Allow kl2tpd create and use netlink_generic_socket"


author: Zdenek Pytela <zpytela@redhat.com> - 42.22-1
changelog:
  - Allow thumb_t stream connect to systemd-machined
  - Allow thumb_t stream connect to systemd-homed
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  - Allow sshd noatsecure on sshd-session execution
  - Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  - Allow kernel_t to read/write all domains' pipes
  - Allow domain read sysfs files
  - allow abrt_dump_oops to write to init sockets
  - Add insights_client service interfaces
  - Allow plasma login manager stop login services
  - Allow NM nvme dispatcher script start systemd services


author: Zdenek Pytela <zpytela@redhat.com> - 42.23-1
changelog:
  - Allow thumbnailer mount on fonts cache directories
  - Support confined users usage of bubblewrap
  - Allow vdagent get attributes of the pidfs filesystem
  - Allow sshd-session inherit limits from its parent sshd process
  - Revert "Allow sshd-session inherit limits from its parent process"
  - Allow sshd-session read network sysctls
  - Add the fs_write_tmpfs_files() interface
  - Update gpg policy for interactions with rhc-playbook-verifier
  - Allow rhc_playbook_verifier_t stream connect to itself
  - Update policy for rhc-worker-playbook
  - Allow sudodomain connect to gkeyringd over a unix stream socket
  - Allow tlshd communication to unconfined_t over a tcp socket
  - Allow tlshd write generic certificates
  - Allow thumbnailer connect to abrt over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.24-1
changelog:
  - Allow mdadm to use CAP_BPF during RAID monitoring
  - Allow rhsmcertd read anaconda run files
  - Allow rpc.mountd setuid and setgid capabilities
  - Use kernel_dgram_send() for systemd_notify_t
  - Allow lttng-sessiond to use sd_notify
  - Label /etc/aliases.cdb with etc_aliases_t
  - Add aliases.lmdb to mta_filetrans_named_content()
  - Update gpg_role() interface with unix_stream_socket permissions
  - Allow systemd-hostnamed to create its Varlink socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.25-1
changelog:
  - Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  - TLP uses ps aux to check for different services (bsc#1257527)
  - Introduce separate types for generic systemd generators.
  - Confine system generator nm-initrd-generator.sh (bsc#1257754)
  - Allow rtkit-daemon dbus chat with systemd-logind
  - ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  - Dontaudit tlshd write generic certificate dirs
  - Allow systemd-coredump the kill capability in the user namespace
  - Allow NetworkManager list bpf directories
  - Allow virtnodedevd the dac_read_search capability
  - Allow pkcsslotd read files in /proc and /sys
  - Allow pkcsslotd map its private tmpfs files
  - Allow dovecoth-auth to connect to systemd-logind over a unix socket
  - Allow tlshd write generic certificate dirs


author: Zdenek Pytela <zpytela@redhat.com> - 43.1-1
changelog:
  - Allow redis_t to create netlink_rdma_socket
  - Allow systemd create symlinks in /run/varlink/registry
  - Support hooks in /run/systemd/resolve.hook
  - Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  - Allow mdadm use modprobe (bsc#1257793)
  - Allow systemd-mountfsd the perfmon capability
  - Allow lttng tracing in default configuration
  - Allow rtkit-daemon write systemd inhibit pipes
  - Apply the systemd system generator template to the kdump-dep generator
  - Apply the systemd system generator template to the anaconda generator


author: Zdenek Pytela <zpytela@redhat.com> - 43.2-1
changelog:
  - Allow fedoratp_exec_t be an entrypoint of unconfined_t
  - Allow rasdaemon_t to list pstore (bsc#1259742)
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  - Allow virtqemud_t get priority of a svirt_t process
  - Allow sysadm user connect to lvm over a unix stream socket
  - Allow staff user delete thump_tmp_t files
  - Allow staff user connect to systemd-logind over a unix stream socket
  - Allow staff user mount /proc
  - Allow virtqemud map vhost net device
  - Dontaudit ps to read proc (bsc#1257527)
  - Allow dovecot_deliver_t map its private tmp files
  - Allow rpcbind get attributes of the pidfs filesystem
  - Fix names in mysql.if
  - Allow create kerberos files in mysql db home
  - Allow systemd-resolved connect to systemd-networkd over a unix stream socket


author: Marcel Metz <me@marcel-metz.net> - 1.2-1
changelog:
  - Updated upstream: Project was moved to https://github.com/aklomp/shrinkpdf
  - New upstream release 1.2


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Josue Hernandez <josherna@redhat.com> - 6.04-0.36
changelog:
  - Update zlib version to zlib-1.2.11
  - Resolves: CVE-2022-37434 CVE-2018-25032 CVE-2016-9840 CVE-2016-9843


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Peter Czanik <peter@czanik.hu> - 4.10.2-1
changelog:
  - update to 4.10.2
  - disable SNMP support temporarily
  - remove patches made redundant by the version update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 259.4-1
changelog:
  - Version 259.4
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Tom Callaway <spot@fedoraproject.org> - 12:20250308-99
changelog:
  - time to land this big bird in rawhide. hold on to your butts.
  - oh and we're also forcing -std=gnu++17. Thanks icu.

  - Historical notes from my TL2025 out-of-band changes are below
  - * Tue Oct 21 2025 Tom Callaway <spot@fedoraproject.org>
    - strip the scripts out of bibtexperllibs to avoid conflicts
  - * Fri Oct 17 2025 Tom Callaway <spot@fedoraproject.org>
    - fix typos in explicit perl module dependencies
  - * Tue Oct  7 2025 Tom Callaway <spot@fedoraproject.org>
    - update crossrefware to r76407 to fix typo which was causing invalid perl(IO::file) (should be IO::File) dependency
    - add Provides for texlive-xelatex-dev (we don't actually package this)
  - * Mon Sep 22 2025 Tom Callaway <spot@fedoraproject.org>
    - add more obsoletes, make the ms one more accurate
  - * Fri Sep 19 2025 Tom Callaway <spot@fedoraproject.org>
    - obsolete texlive-ms/ms-doc
  - * Thu Sep 18 2025 Tom Callaway <spot@fedoraproject.org>
    - bootstrap off
  - * Thu Sep 18 2025 Tom Callaway <spot@fedoraproject.org>
    - remove all Requires on old "tex-" names, we don't use those anymore
      and it was causing old packages to be pulled in
    - bootstrap still on
  - * Tue Sep 16 2025 Tom Callaway <spot@fedoraproject.org>
    - fix dep issue
  - * Wed Jun 11 2025 Tom Callaway <spot@fedoraproject.org>
    - TeXLive 2025


author: Tom Callaway <spot@fedoraproject.org> - 12:20250308-101
changelog:
  - update git-latexdiff to svn75878 (bz2435847)
  - fix texlive-git-latexdiff to be noarch package (it is just shell)


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77598-3
changelog:
  - Update to svn77598
  - update tagpdf starray numspell moderncv latex-tagging-status latex-lab-dev jsonparse beamer-reveal amsaddr


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78352-4
changelog:
  - Update to svn78352
  - new packages: aliascnt, beamertheme-westlake, elegantbook, elegantnote,
                  elegantpaper, fixtounicode, fox-listings, memoize-ext,
                  metacapture, milestonetimeline, pyjupyter, realscripts,
                  simplex, spotxcolor, tokglobalstack, tokgroupmark, xstix2
  - lots of existing packages updated
  - fix Obsoletes on newcommand-doc (bz2447035)


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Adam Williamson <awilliam@redhat.com> - 1:10.1.46-2
changelog:
  - Drop now-unnecessary version bounds in java requirements
  - Specify java-25-headless, not java-headless (#2398212)


author: Dimitris Soumis <dsoumis@redhat.com> - 1:2.0.14-2
changelog:
  - The old description is from the 1.x era when tomcat-native provided broad
    APR integration. In 2.x it's focused solely on TLS/OpenSSL.


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
      resolves: RHEL-61801
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Remi Collet <remi@remirepo.net> - 9.0.2-1
changelog:
  - Valkey 9.0.2 - February 3, 2026
  - Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.


author: Remi Collet <remi@remirepo.net> - 9.0.4-1
changelog:
  - Valkey 9.0.4 - May 5, 2026
  - Upgrade urgency SECURITY: This release includes security fixes.
    CVE-2026-23479 CVE-2026-25243 CVE-2026-23631


author: Remi Collet <remi@remirepo.net> - 9.0.5-1
changelog:
  - Valkey 9.0.5 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.0-0.1.beta1
changelog:
  - Update to 0.9.0-0.1.beta1
  - Add python3dist(setuptools-gettext)
  - Fixed icon installation
  - Fixed desktop validation
  - Fixed setuptools discovery warnings


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: psklenar@redhat.com <psklenar@redhat.com> - 5.8.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Michael Young <m.a.young@durham.ac.uk>
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-1
changelog:
  - update to xen 4.21.0
    rebase mini-os
    use .xz xen tarball instead of .gz
    fix quotes around sed command
    update libxenstore version
    package libxenmanage and xen-watchdog-sleep.sh files
    add a new package for test files
    renumber patches
    use json-c instead of yajl
  - fix bug in xen code when using json-c
  - fix code issues detected by gcc16


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-5
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.45-1
changelog:
  - xkeyboard-config 2.45
    xkeyboard-config changed from /usr/share/X11/xkb to /usr/share/xkeyboard-config-2/,
    with the same contents and the old location symlinked to the new one.
    Add a pretrans script to move the old location to the new one to stick with the
    upstream packaging approach.


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


