# changelog

author: Than Ngo <than@redhat.com> - 117.0.5938.132-1
changelog:
  - update to 117.0.5938.132
  - CVE-2023-5217, heap buffer overflow in vp8 encoding in libvpx.
  - CVE-2023-5186, use after free in Passwords.
  - CVE-2023-5187, use after free in Extensions.
  ￼


author: Than Ngo <than@redhat.com> - 118.0.5993.70-1
changelog:
  - update to 118.0.5993.70
      - CVE-2023-5218: Use after free in Site Isolation.
      - CVE-2023-5487: Inappropriate implementation in Fullscreen.
      - CVE-2023-5484: Inappropriate implementation in Navigation.
      - CVE-2023-5475: Inappropriate implementation in DevTools.
      - CVE-2023-5483: Inappropriate implementation in Intents.
      - CVE-2023-5481: Inappropriate implementation in Downloads.
      - CVE-2023-5476: Use after free in Blink History.
      - CVE-2023-5474: Heap buffer overflow in PDF.
      - CVE-2023-5479: Inappropriate implementation in Extensions API.
      - CVE-2023-5485: Inappropriate implementation in Autofill.
      - CVE-2023-5478: Inappropriate implementation in Autofill.
      - CVE-2023-5477: Inappropriate implementation in Installer.
      - CVE-2023-5486: Inappropriate implementation in Input.
      - CVE-2023-5473: Use after free in Cast.


author: Miroslav Suchý <msuchy@redhat.com> 1.97-1
changelog:
  - update copr keys
  - add script to check all keys
  - remove expired jenkins key
  - update expired intel security key
  - update expired navy linux key
  - update expired bluejeans key
  - add script to check expiration
  - Add the key for pkgs.k8s.io (Kubernetes)


author: Maxwell G <gotmax@e.email> - 8-32
changelog:
  - Explicitly Require python3-rpm-generators
  - Remove %__pythondist_provides from pythondist.attr.
  - Ensure that packages built against alternative python stacks do not have
    python3dist(x) Provides.
  - Related: rhbz#1776941.


author: Miroslav Suchý <msuchy@redhat.com> 1.23-1
changelog:
  - Update public-domain-text.txt
  - Add new file: CECILL-2.1
  - Add new file: TermReadKey
  - Add new file: LicenseRef-Sleepycat-HtDig
  - Add new file: Xfig
  - Add new file: GPL-2.0-or-later WITH WxWindows-exception-3.1
  - Add new file: LicenseRef-Array


author: Miroslav Suchý <msuchy@redhat.com> 1.24-1
changelog:
  - Add new file: Inner-Net-2.0
  - Add Linux-man-pages-copyleft-2-para
  - Add Linux-man-pages-1-para
  - Add Linux-man-pages-copyleft-var
  - Remove AFL-2.0 since it is probably not in Fedora
  - Make REUSE conformant
  - Add GPL-2.0-or-later WITH Bison-exception-2.2
  - Add new file: AFL-2.1


author: Miroslav Suchý <msuchy@redhat.com> 1.25-1
changelog:
  - Add legacy attributes to HP-1986 - variant of legacy MIT license
  - Add dtoa
  - Add MulanPSL-2.0
  - Add Boehm-GC
  - add LLGPL
  - public-domain-text.txt: Add a perl-Barcode-Code128 dedication
  - Add new file: GPL-2.0-only_WITH_Asterisk-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.26-1
changelog:
  - add not-allowed LicenseRef-verbatim
  - Add Apache-2.0 WITH Swift-exception
  - document timing of releases
  - mark HPND-sell-variant as variant of MIT in legacy system
  - Add source-highlight public domain delcarations
  - Add usage note for CC0-1.0 addressing liboqs issue
  - Add gdb/GNU libiberty public domain delcarations
  - Add CFITSIO license
  - add licenses *GPL*WITH Linux-syscall-note


author: Miroslav Suchý <msuchy@redhat.com> 1.27-1
changelog:
  - Add TCGL as not allowed
  - Add GPL-2.0-or-later WITH GCC-exception-2.0
  - Add Soundex License
  - Add HP-1989
  - add GPL-3.0-or-later WITH Autoconf-exception-generic-3.0
  - Add SL license
  - Add check-cvs license
  - add John Walker to ultrapermissive collection
  - Add Artistic-1.0 as not allowed.
  - Add BSD-3-Clause-Clear as not allowed.
  - Add LicenseRef-JasPer as not allowed.
  - Revert "Remove AFL-2.0 since it is probably not in Fedora"
  - Add LicenseRef-rdist-Cooper as not allowed
  - Add public domain license in Ruby
  - add information about license to README


author: Miroslav Suchý <msuchy@redhat.com> 1.28-1
changelog:
  - Add TU-Berlin-2.0 license
  - Add HPLIP nonfree licenses
  - Add LicenseRef-libzmq
  - Add CCLP content licenses
  - add LicenseRef-Waqf as not-allowed
  - Add LicenseRef-Bacula as allowed
  - Add some allowed licenses
  - Reformat REUSE licenses
  - Add autoconf public domain declaration
  - Update MIT-testregex.toml to delete [fedora] block
  - add MIT-testregex license
  - add GPL-3.0-or-later WITH Texinfo-exception
  - add usage notes to LicenseRef-TCGL
  - Add hpcdtoppm as not allowed
  - add Zeeff license


author: Miroslav Suchý <msuchy@redhat.com> 1.29-1
changelog:
  - Add byacc public domain declaration
  - recognize and allow MPL-2.0+ license
  - public-domain-text.txt: Add a dedication found in zpaq
  - New license: MMIXware
  - not allowed license LicenseRef-Iozone
  - new license: Utah Raster Toolkit Run Length Encoded License
  - add license GPL-2.0-only WITH x11vnc-openssl-exception
  - not allowed license LicenseRef-Misti-Fonts
  - new license TTYP0
  - add license GPL-2.0-or-later WITH stunnel-exception
  - Add GPL-2.0-or-later WITH SANE-exception
  - Fix man-pages public-domain and UltraPermissive locations
  - generate additional grammar with all licenses inluding not allowed ones
  - cleanup: remove mkdsv.py


author: Miroslav Suchý <msuchy@redhat.com> 1.30-1
changelog:
  - new license: LGPL-3.0-or-later WITH openvpn-openssl-exception
  - new license: BSD-3-Clause-Sun
  - new license: BSD-Systemics
  - new license: FBM
  - new license: LGPL-2.0-or-later WITH Libtool-exception
  - new license: Ferguson-Twofish
  - Add Public Domain for varnish
  - new license: MPEG-SSG
  - Add cursor-misc from xorg-x11-fonts to UltraPermissive
  - new not allowed license: MPEG-4 Audio
  - new license: pnmstitch
  - Add snprintf as allowed
  - Add xlock as allowed
  - Add BSD-4.3RENO as allowed
  - Add public domain entry for winitzki-cyrillic X11 font
  - Public Domain: Add mobile-broadband-provider-info
  - Add public domain entry used by some xorg-x11-fonts
  - Add Volatility Software License 1.0 to Not Allowed Licenses
  - Add misc-cyrillic from xorg-x11-fonts to UltraPermissive
  - Add public domain entry for aopalliance
  - Add public domain entry for plexus-utils
  - not allowed license LicenseRef-pgplot
  - Fix a typo in xz-java package name


author: Miroslav Suchý <msuchy@redhat.com> 1.31-1
changelog:
  - new license: GPL-2.0-or-later WITH Autoconf-exception-macro
  - new license: LGPL-3.0-or-later WITH Autoconf-exception-macro
  - new license: HPND-export-US-modify
  - Add a public domain dedication from the SWORD Project
  - Add LPPL-1.2 as not-allowed, add LPPL-1.3a+ as allowed
  - new license: LGPL-2.1-only WITH Qt-LGPL-exception-1.1
  - new license: SGI-OpenGL
  - Add jhash public domain dedication for QEMU
  - Add QEMU to the rijndael (AES) public domain license reference
  - new license: SSH-short
  - new license: GPL-2.0-or-later WITH UBDL-exception
  - new license: McPhee-slideshow
  - new license: HPND-DEC
  - new license: magaz
  - new license: ulem
  - new license: fwlw
  - new license: Kastrup
  - Fix names of Linux-syscall-note TOML files
  - Add reference to EDK2 package public domain code
  - new license: HPND-sell-regexpr
  - new license: Cronyx
  - new license: Lucida-Bitmap-Fonts
  - new license: LPPL-1.3c
  - new license: swrule
  - new license: BSD-Inferno-Nettverk
  - Some code in OpenSSH has a Public Domain license
  - new license: ssh-keyscan
  - new license: HPND-Pbmplus
  - Add public domain text from mingw-headers/mingw-winpthreads packages
  - Add public domain test from Augeas project
  - new license: BSD-Attribution-HPND-disclaimer
  - new not allowed license: LicenseRef-Tyrian
  - Add public domain entry for squid


author: Miroslav Suchý <msuchy@redhat.com> 1.32-1
changelog:
  - new not allowed license LicenseRef-Riverbank-SIP
  - new license: LGPL-2.1-only_WITH_Linux-syscall-note
  - new license: LicenseRef-Fedora-Logos
  - new license: GPL-3.0-or-later WITH GNU-compiler-exception
  - new license: HPND-doc-sell
  - new license: BSD-3-Clause-flex
  - new license: HPND-doc
  - new license: LGPL-2.1-or-later WITH GCC-exception-2.0
  - Add GPL-2.0-or-later WITH GPL-3.0-linking-source-exception
  - new license: BSD-3-Clause-HP
  - new license: GFDL-1.3-no-invariants-only
  - new license: OLDAP-2.7
  - new license: Adobe-Utopia
  - new license: python-ldap
  - new license: lsof


author: Xavier Bachelot <xavier@bachelot.org> - 2.16.2-2
changelog:
  - Improve Summary:
  - Drop updates-alternatives from %post
  - Split long line
  - Drop useless comments
  - Add provides for bundled javascript libraries and adapt License tag accordingly
  - Add provides for bundled font and adapt License tag accordingly
  - Make use of %lm_sharedir instead of plain path
  - Add BR: for uglify-js
  - Move examples to %_docdir
  - Fix perms on %lm_vardir/captcha and %_rundir/llng-fastcgi-server
  - Drop redundant dirs creation and perms change
  - Conditionalize test that needs network access


author: Morten Stevens <mstevens@fedoraproject.org> - 2.28.0-2
changelog:
  - Ensure ELF binary dependency generation and -debug{info,source} packages
  - Remove deprecated PolarSSL dependency


author: Pavel Raiskup <praiskup@redhat.com> 3.2-1
changelog:
  - Fix the docker environment check for cgroupv2 (achal.velani@oracle.com)
  - mock-scm: recommend rpkg-util
  - don't use rpmbuild --noclean option if not supported
  - do only one fork() while reading --list-chroots configs
  - Error() (exceptions) code rewritten and simplified
  - dropped mock SGID from /var/{lib,cache}/mock dirs
  - change license to spdx (msuchy@redhat.com)
  - podman.py: don't let podman warnings taint container id (micho@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.4-1
changelog:
  - make device mapper control device available if supported (neal@gompa.dev)
  - check for target specific qemu-user-static (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.5-1
changelog:
  - check for qemu-user-static raises InvalidArchitecture()
  - forcearch: map armv7hl to the /usr/bin/qemu-arm-static binary
  - more pedantic check for the qemu-*-static binaries


author: Pavel Raiskup <praiskup@redhat.com> 4.0-1
changelog:
  - cleanup the bootstrap image logic so it works if Mock is run in container
  - rebuild: kill orphans when mounted
  - bootstrap: delay the buildroot-in-bootstrap recursive mount
  - use shlex instead of pipes
  - fix bootstrap_* prefixed config_opts options
  - manual page: fix the "how to fill an issue" info
  - support for DNF5 added
  - use -N instead of -n for useradd (msuchy@redhat.com)
  - mock: don't use distutils copy_tree()


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Pavel Raiskup <praiskup@redhat.com> 5.2-1
changelog:
  - Fix '~' user source expansion for --copyout
  - Compatibility fix with EL 8
  - Log out the command-line arguments
  - Make sure that 'state' is always finished
  - README.md: cleaning up
  - Post-release administrivia


author: Pavel Raiskup <praiskup@redhat.com> 37.8-1
changelog:
  - openEuler 22.03 configs added (yikunkero@gmail.com)
  - openEuler 20.03 configs added (yikunkero@gmail.com)
  - Oracle Linux 9 configs added (a.samets@gmail.com)
  - change license to spdx (msuchy@redhat.com)
  - Update to AlmaLinux Quay.io repo (srbala@gmail.com)
  - EPEL Koji repo not exposed when we are on EPEL Next (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 37.9-1
changelog:
  - missmatching gpg key and rpms in openEuler 20.03 LTS (pkwarcraft@gmail.com)
  - drop unneccessary module docs from configuration files (nkadel@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 38.1-1
changelog:
  - update openEuler gpg key (pkwarcraft@gmail.com)
  - Branch Fedora 38 (miro@hroncok.cz)
  - disable fastestmirror on almalinux (jonathan@almalinux.org)
  - openEuler 22.03-SP1 released, use the latest repo url (pkwarcraft@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 38.3-1
changelog:
  - new URL for CenOS Stream 8 koji (msuchy@redhat.com)
  - Make --enablerepo=local work with centos-stream chroots (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 38.5-1
changelog:
  - drop includepkgs=devtoolset* from centos-{6,7} (orion@nwra.com)
  - Fedora 35 and 36 is EOL
  - remove useradd specific changes in configs - it is not needed for Mock 4+
  - openSUSE i586 has been moved out of the main repo into a port (f_krull@gmx.de)


author: Pavel Raiskup <praiskup@redhat.com> 38.6-1
changelog:
  - use python3 macro for post scriptlet (mroche@omenos.dev)
  - openEuler: use metalinks instead of baseurls (chenzeng2@huawei.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.1-1
changelog:
  - Add openSUSE Leap 15.5 (neal@gompa.dev)
  - Move openSUSE Leap 15.3 to EOL (neal@gompa.dev)
  - Mageia 9 branched, Mageia Cauldron retargeted to Mageia 10 (neal@gompa.dev)


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:3.1.16-1
changelog:
  - autoconf, automake, and libtool are no longer required
  - force gnu99 cflag on el7 builds
  - 3.1.16 release


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:3.1.17-2
changelog:
  - buildrequire mariadb-connector-c-devel for all but el7
  - minor changes to other specfile conditionals


author: Christoph Erhardt <fedora@sicherha.de> - 2.8.3-3
changelog:
  - Build `powerline` binary with correct linker flags
  - Make Fontconfig symlink relative
  - Change fontconfig dependency to fontpackages-filesystem (#2093167)


author: Christoph Erhardt <fedora@sicherha.de> - 2.8.3-11
changelog:
  - Review SPDX license identifier; `MIT` is correct
  - Make summary and description of `fonts` subpackage more precise (rhbz#2232553)


author: Packit <hello@packit.dev> - 0.3.0-1
changelog:
  - Made `Sources` a `MutableSequence` (#36)
  - Started using consistent terminology for source numbers and added the option to insert a source with a specific number (#47)
  - Added support for implicit source numbering (#48)
  - Documented sources and `%prep` macros in README (#49)
  - Implemented high-level manipulation of version and release (#54)
  - Added support for `* Mon May 16 2022 John Doe <packager@example.com> - 0.3.0-1.fc35
  - local build` (#56)
  - Added `remote` property to sources and enabled addition of `Sources` (#59)
  - Implemented mid-level manipulation of `%prep` section, including modification of `%prep` macros (#37, #52)


author: Packit <hello@packit.dev> - 0.4.0-1
changelog:
  - Added convenience properties for most used tags (#63)
  - Hardened linting by ignoring only specific mypy errors (#64)
  - Fixed list of valid tag names and ensured newly added tags are not part of a condition block (#66)
  - Initial patch number and its default number of digits are now honored (#66)
  - Fixed a bug in `%prep` macro stringification (#67)


author: Packit <hello@packit.dev> - 0.5.0-1
changelog:
  - Strict optional typing is now enforced (#68)
  - Fixed deduplication of tag names (#69)
  - Sources and patches can now be removed by number (#69)
  - Number of digits in a source number is now expressed the same way as packit does it (#69)
  - Empty lines are now compressed when deleting tags (#69)
  - Added convenience property for getting texts of tag comments (#69)
  - Added convenience method for adding a patch (#69)


author: Packit <hello@packit.dev> - 0.5.1-1
changelog:
  - Added new `%conf` section (#74)
  - Switched to rpm-py-installer (#75)
  - Fixed detecting extended timestamp format in `%changelog` (#77, #81)


author: Packit <hello@packit.dev> - 0.6.0-1
changelog:
  - Switched to our own implementation of working with `%changelog` timestamps and removed dependency on arrow (#88)
  - Fixed requires of EPEL 8 rpm (#86)


author: Packit <hello@packit.dev> - 0.7.0-1
changelog:
  - It is now possible to filter changelog entries by specifying lower bound EVR, upper bound EVR or both. (#104)
  - Added support for filenames specified in source URL fragments, for example: `https://example.com/foo/1.0/download.cgi#/python-specfile-0.22.1.tar.gz` (#100)


author: Packit <hello@packit.dev> - 0.20.2-1
changelog:
  - Fixed Packit config to work properly with `propose-downstream` and `pull-from-upstream` jobs. (#261)


author: Nikola Forró <nforro@redhat.com> - 0.21.0-1
changelog:
  - `specfile` no longer tracebacks when some sources are missing and can't be _emulated_. In such case the spec file is parsed without them at the cost of `%setup` and `%patch` macros potentially expanding differently than with the sources present. (#271)
  - Specfile's license in RPM spec file is now confirmed to be SPDX compatible. (#269)


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Start work on the 1.4 release
  - Trim git commit summary prefix from changelog lines
  - Report the program version number in the results (#309)
  - Handle compressed but otherwise empty man pages (#308)
  - Flake8 fixes for test_manpage.py
  - s/self.rpm/self.after_rpm/ in two test_manpage.py tests
  - Disable broken ELF heurisitic and size limit in libclamav
  - Modify dump_cfg() to write valid YAML to stdout (#306)
  - Migrate more code off hsearch and to uthash
  - Replace hsearch() with uthash in the kmod inspection
  - Update TEST_METADATA status in TODO and MISSING
  - Restrict style checks to specific directories
  - Replace hsearch() with uthash in the abidiff inspection
  - Change tsearch/twalk use to uthash
  - Correct misuse of entry with hentry variables (#321)
  - Normalize copyright boilerplates in source files
  - Use hentry->key over hentry->value in pathmigration
  - Adjust lib/meson.build for Fedora rawhide
  - Drop gate.yml and begin non-x86_64 arches in ci.yml
  - Add armv7, aarch64, and s390x to the other_arches job
  - Change init.c error reporting over to err/warn functions
  - Modify file triggers and matrix use in ci.yml
  - Split 32-bit osdeps out to post.sh scripts in osdeps/
  - Split style.yml in to shellcheck.yml and python.yml
  - Rewrite extra-ci.yml to use the matrix strategy method for GHA
  - Move the emulated CI jobs to extra-ci.yml
  - s/pkg/pki/ for the centos jobs
  - Debian and Ubuntu fixes for CI
  - Python pip on Debian is called pip
  - Try to fix just debian:stable
  - Enable debian:testing in extra-ci.yml
  - Enable centos8 in extra-ci.yml again
  - Enable centos7 in extra-ci.yml again
  - Enable opensuse-leap and gentoo in extra-ci.yml again
  - Run each test script individually on emulated targets
  - Try a different syntax for the emulated matrix jobs
  - Install s390 glibc headers on s390x fedora systems
  - Detect 32-bit and musl presence in test_elf.py
  - Skip lost -fPIC tests if gcc lacks -m32 support
  - Add stretch and buster to the emulated targets list
  - Drop Debian buster from the emulated targets
  - Install gcc-multilib only on Debian x86_64 and s390x systems
  - libc-dev:i386 -> libc6-dev:i386
  - Disable Debian targets in extra-ci temporarily
  - s/AUR/git/g in osdeps/arch/post.sh
  - In read_cfgfile(), keep track of block depth correctly (#329)
  - A few more yaml parsing fixes for block vs group
  - Recommend or Require libabigail >= 1.8.2
  - Finish normalizing all the error reporting statements
  - Advertise of rpminspect-report in the contrib README.
  - Report libclamav version and CVD versions (#258)
  - Ensure first argument of warn(3) is a format string.
  - Enable werror=true and warning_level=3 in default_options
  - Update the translation template file
  - Get rid of invalid free() in get_product_release()
  - Add inspection_id() to librpminspect
  - Update the po/rpminspect.pot template
  - Improve mkannounce.sh to handle stable and devel releases


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Begin work on version 1.5
  - Use llabs() instead of labs() in the filesize inspection
  - Improve has invalid execstack flags reporting
  - Use long unsigned int to report size changes in patches
  - Fix some errors in the changedfiles inspection
  - Update the changedfiles test cases
  - Check DT_SONAME in is_elf_shared_library()
  - Skip debuginfo and debugsource files in abidiff
  - Make sure abidiff test cases add a DT_SONAME to the test lib
  - Report INFO level for patches findings by default
  - Python black fixes in test/test_abidiff.py
  - Update the test/test_patches.py cases for patches changes
  - Generate regular changelog in utils/srpm.h
  - Skip branches without targets in submit-koji-builds.sh
  - Fedora and CentOS systems in ci need diffstat
  - opensuse-leap CI job requires diffstat
  - Fix the Debian CI jobs in GitHub Actions
  - Fix and enable the Ubuntu extra-ci job in GitHub Actions
  - Use pip instead of pip3 for the Ubuntu command
  - Use apt-get -y install in
  - Enable the opensuse-tumbleweed GHA job again
  - Make sure the Gentoo GHA job has diffstat
  - Get the Arch Linux GHA job working again
  - Use ubuntu:latest for the ubuntu GHA image
  - Simplify the utils/determine-os.sh script
  - Update license table in README.md
  - Allow any number of builds specified for fetch only mode
  - Handle old or broken versions of libmagic in changedfiles
  - Update GitHub Action status badges in README.md
  - Fix $(OS) check in the Makefile
  - Fix the ubuntu GitHub Actions extra-ci job
  - Make sure the centos8 job has git available before cloning
  - Change strappend() to work as a variadic function
  - Use json_tokener_parse_ex() to get better error reporting
  - Fix reading of the javabytecode block in the config file
  - Catch missing/losing -fPIC correctly on .a ELF objects (#352)
  - Refactor elf_archive_tests() and its helper functions
  - Followup fix for find_no_pic, find_pic, and find_all
  - Install cpp-coveralls using pacman on Arch Linux
  - Install cpp-coveralls using pip on Arch Linux
  - Install cpp-coveralls in pre.sh on Arch Linux
  - Install required Python modules in pre.sh on Arch Linux
  - Do not upgrade pip on Arch Linux, go back to using pip.txt
  - Drop DEBUG_PRINT from source generated by pic_bits.sh
  - Do not run apt-get update as a second time on Debians systems
  - The lost PIC tests need to invoke gcc with -fno-PIC
  - Update the OpenSUSE Tumbleweed files, but disable it anyway
  - Define inspection_ignores in struct rpminspect
  - Clean up the config file section reading code
  - Add add_ignore() to init.c
  - Fix fetch only mode download directory
  - Stub out libcurl download progress callback function
  - Perform symbolic owner and group matching in ownership (#364)
  - Restrict download_progress() to systems with CURLOPT_XFERINFOFUNCTION
  - Read per-inspection ignore lists from the config file.
  - Add commented out per-inspection ignore blocks
  - Implement per-inspection path ignore support (#351)
  - Report annocheck failures correctly in librpminspect.
  - Note all regular expression settings use regex(7) syntax
  - Allow size_threshold: info in the config file (#261)
  - Check ignore list in files for path prefixes to ignore (#360)
  - Support a list of expected empty RPMs in the config file (#355)
  - Call mparse_reset() before mparse_readfd()
  - Do not crash with the -c option specifies a non-existent file
  - Update TODO list
  - Make sure brp-compress is disabled in test_manpage.py
  - Require/Recommend /usr/bin/annocheck
  - Note size_threshold can be the keyword info
  - Ensure ctxt->lastError.message is not NULL before strdup (#382)
  - Handle corrupt compressed files in changedfiles (#382)
  - Disable debugging output for the ignore lists in init.c
  - Drop debugging output in the xml inspection
  - Remove what working directories we can
  - Correctly find icons for desktop files in subpackages (#367)
  - Followup to the Icon= check in the desktop inspection (#367)
  - BuildRequires libmandoc-devel >= 1.14.5
  - Manually install mandoc on centos7 for now


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Update to 8b5f1f3
  - The stb_perlin-devel subpackage has been restored, as upstream believes
    all relevant patents are now expired.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.20.20220908git8b5f1f3
changelog:
  - Patch in a candidate fix for ossfuzz issue 24232
  - Improves handling of certain invalid PNGs by stb_image


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.21.20230129git6199bf7
changelog:
  - Update to 6199bf7 (stb_image 2.28)
  - Security-related patches for stb_image have been merged upstream, and
    there are other bugfixes.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.27.20231009gitc4bbb6e
changelog:
  - Update to 0^20231009gitc4bbb6e
  - A new stb_image_resize2 library is introduced
  - Upstream has deprecated stb_image_resize, but we still package it


author: Jered Floyd <jered@redhat.com> 9.1.3-1
changelog:
  - Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150,
    CVE-2022-28129, CVE-2022-31780
  - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


