# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: Than Ngo <than@redhat.com> - 120.0.6099.199-1
changelog:
  - new gn update, drop workaround for broken gn on epel 8/9
  - update to 120.0.6099.199
     * CVE-2024-0222: Use after free in ANGLE
     * CVE-2024-0223: Heap buffer overflow in ANGLE
     * CVE-2024-0224: Use after free in WebAudio
     * CVE-2024-0225: Use after free in WebGPU


author: Than Ngo <than@redhat.com> - 120.0.6099.224-1
changelog:
  - update to 120.0.6099.224
    * High CVE-2024-0517: Out of bounds write in V8
    * High CVE-2024-0518: Type Confusion in V8
    * High CVE-2024-0519: Out of bounds memory access in V8


author: Jiri Kastner - 8.2.1-7
changelog:
  - removed old systemd snippets and dependencies (BZ#850068)
  - changed dependency on openssl to compat-openssl10 for newer fedoras (BZ#1423307)
  - removed tcp_wrappers dependency (BZ#1518757)


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 3.7.0-5
changelog:
  - Ensure /usr/bin/animalsay file mode is 0755
  - Use "install" command for installing dirs and files
  - Change name of bash completion file to just "cowsay"
  - Define and use macro for cows directory
  - Install empty site-cows directory for site specific cows
  - Fix bash completion to look in actual cows/ directory


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Miroslav Suchý <msuchy@redhat.com> 1.30-1
changelog:
  - new license: LGPL-3.0-or-later WITH openvpn-openssl-exception
  - new license: BSD-3-Clause-Sun
  - new license: BSD-Systemics
  - new license: FBM
  - new license: LGPL-2.0-or-later WITH Libtool-exception
  - new license: Ferguson-Twofish
  - Add Public Domain for varnish
  - new license: MPEG-SSG
  - Add cursor-misc from xorg-x11-fonts to UltraPermissive
  - new not allowed license: MPEG-4 Audio
  - new license: pnmstitch
  - Add snprintf as allowed
  - Add xlock as allowed
  - Add BSD-4.3RENO as allowed
  - Add public domain entry for winitzki-cyrillic X11 font
  - Public Domain: Add mobile-broadband-provider-info
  - Add public domain entry used by some xorg-x11-fonts
  - Add Volatility Software License 1.0 to Not Allowed Licenses
  - Add misc-cyrillic from xorg-x11-fonts to UltraPermissive
  - Add public domain entry for aopalliance
  - Add public domain entry for plexus-utils
  - not allowed license LicenseRef-pgplot
  - Fix a typo in xz-java package name


author: Miroslav Suchý <msuchy@redhat.com> 1.31-1
changelog:
  - new license: GPL-2.0-or-later WITH Autoconf-exception-macro
  - new license: LGPL-3.0-or-later WITH Autoconf-exception-macro
  - new license: HPND-export-US-modify
  - Add a public domain dedication from the SWORD Project
  - Add LPPL-1.2 as not-allowed, add LPPL-1.3a+ as allowed
  - new license: LGPL-2.1-only WITH Qt-LGPL-exception-1.1
  - new license: SGI-OpenGL
  - Add jhash public domain dedication for QEMU
  - Add QEMU to the rijndael (AES) public domain license reference
  - new license: SSH-short
  - new license: GPL-2.0-or-later WITH UBDL-exception
  - new license: McPhee-slideshow
  - new license: HPND-DEC
  - new license: magaz
  - new license: ulem
  - new license: fwlw
  - new license: Kastrup
  - Fix names of Linux-syscall-note TOML files
  - Add reference to EDK2 package public domain code
  - new license: HPND-sell-regexpr
  - new license: Cronyx
  - new license: Lucida-Bitmap-Fonts
  - new license: LPPL-1.3c
  - new license: swrule
  - new license: BSD-Inferno-Nettverk
  - Some code in OpenSSH has a Public Domain license
  - new license: ssh-keyscan
  - new license: HPND-Pbmplus
  - Add public domain text from mingw-headers/mingw-winpthreads packages
  - Add public domain test from Augeas project
  - new license: BSD-Attribution-HPND-disclaimer
  - new not allowed license: LicenseRef-Tyrian
  - Add public domain entry for squid


author: Miroslav Suchý <msuchy@redhat.com> 1.32-1
changelog:
  - new not allowed license LicenseRef-Riverbank-SIP
  - new license: LGPL-2.1-only_WITH_Linux-syscall-note
  - new license: LicenseRef-Fedora-Logos
  - new license: GPL-3.0-or-later WITH GNU-compiler-exception
  - new license: HPND-doc-sell
  - new license: BSD-3-Clause-flex
  - new license: HPND-doc
  - new license: LGPL-2.1-or-later WITH GCC-exception-2.0
  - Add GPL-2.0-or-later WITH GPL-3.0-linking-source-exception
  - new license: BSD-3-Clause-HP
  - new license: GFDL-1.3-no-invariants-only
  - new license: OLDAP-2.7
  - new license: Adobe-Utopia
  - new license: python-ldap
  - new license: lsof


author: Miroslav Suchý <msuchy@redhat.com> 1.33-1
changelog:
  - add packages_with_exceptions to JSON schema
  - document packages_with_exceptions for LicenseRef-Fedora-Logos
  - document packages_with_exceptions for LicenseRef-TCGL
  - document packages_with_exceptions for FDK-AAC
  - include packages_with_exceptions field in json and in toml validation
  - Template - document exception of not-allowed license
  - not allowed license LicenseRef-novint


author: Miroslav Suchý <msuchy@redhat.com> 1.35-1
changelog:
  - add argon2 as known exception to CC0-1.0
  - new license: LicenseRef-BSD-3-Clause-Clear-WITH-AdditionRef-AOMPL-1.0
  - new license: LicenseRef-BSD-2-Clause-WITH-AdditionRef-AOMPL-1.0
  - new license: GCR-docs
  - new license: AML-glslang
  - new license: Pixar


author: Miroslav Suchý <msuchy@redhat.com> 1.36-1
changelog:
  - new license: TCP-wrappers
  - new license: LicenseRef-Not-Copyrightable
  - new license: SAX-PD-2.0
  - new license: radvd


author: Miroslav Suchý <msuchy@redhat.com> 1.37-1
changelog:
  - add license HPND-Kevlin-Henney
  - add license FSFAP-no-warranty-disclaimer
  - add not allowed license LicenseRef-Nikto
  - add LicenseRef-Fedora-Firmware


author: Miroslav Suchý <msuchy@redhat.com> 1.38-1
changelog:
  - add GPL-2.0-or-later WITH Bison-exception-1.24
  - Add Unicode-3.0 license
  - Add ISC-Veillard license
  - Add mailprio license
  - Add BSD-Systemics-W3Works license
  - Modify .reuse/dep5
  - Add UltraPermissive notices for libmtp
  - public domain dedication for rwhoisd
  - public domain dedication for openshadinglanguage
  - public domain dedication for remind


author: Miroslav Suchý <msuchy@redhat.com> 1.39-1
changelog:
  - add LicenseRef-docbook-dtds
  - public domain dedication for iw
  - add HPND-MIT-disclaimer
  - add Caldera-no-preamble
  - Delete TOML files for licenses that cannot be found
  - Add xkeyboard-config-Zinoviev
  - Add Adobe-Display-Postscript
  - Add DEC-3-Clause
  - Add HPND-sell-MIT-disclaimer-xserver
  - add not allowed license LicenseRef-sph2pipe
  - add LGPL-2.1-or-later WITH GNU-compiler-exception
  - GNU-compiler-exception: GPL-3.0 -> GPL-2.0
  - firmware.txt: add license for microcode_ctl
  - firmware.txt: remove trailing whitespace
  - public domain dedication for jansson


author: Christoph Erhardt <fedora@sicherha.de> - 2.0.0-1
changelog:
  - Bump version to 2.0.0
  - Change license from AGPL-3.0-or-later to MIT
  - Update version number of bundled tbb package to 2021.9
  - Remove `ExcludeArch` as mold now supports MIPS64


author: Christoph Erhardt <fedora@sicherha.de> - 2.4.0-2
changelog:
  - Don't build-require files outside of permitted directories
  - Drop upstreamed tbb patch
  - Build against system-provided tbb where available
  - Update version number of bundled tbb package to 2021.10
  - Skip broken unit tests on s390x


author: Tibor Dudlák <tdudlak@redhat.com> - 1.14.0-1
changelog:
  - e319b73 refactor(AWS): change variable name typo in get_ip_addresses (Tibor Dudlák)
  - d95e65f fix(OpenStack): Add missing await for self._load_limits() method call (Tibor Dudlák)
  - d0c2d8f refactor: Update supported providers (Tibor Dudlák)
  - 13ad3df fix(outputs): remove config section from pytest-multihost (Tibor Dudlák)
  - d3da251 feat(outputs): allow to overwrite ansible layout (Tibor Dudlák)
  - d3ac20d feat(outputs): allow to choose which outputs should be generated (Tibor Dudlák)
  - 66f2877 feat(outputs): add support for pytest-mh (Tibor Dudlák)
  - db633b7 feat(utils): relax condition in get_fqdn (Tibor Dudlák)
  - 0735e36 fix(outputs): add host to correct group in layout (Tibor Dudlák)
  - b1f5318 feat(utils): add get_os_type (Tibor Dudlák)
  - 0ab88e6 refactor(black): reformat code (Tibor Dudlák)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.14.1-1
changelog:
  - a9c4e62 fix: mrack not re-provisioning hosts which were destroyed (Tibor Dudlák)
  - 17b45e4 fix: Replace coroutines with tasks to avoid RuntimeError (David Pascual)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.15.0-1
changelog:
  - f9f0e33 test: Add missing strategy_retry test (Tibor Dudlák)
  - 121c5db refactor(provider): take max_utilization out to method to ease mocking (Tibor Dudlák)
  - dc74ced test: Add missing tests for fixed code from https://github.com/neoave/mrack/pull/245 (Tibor Dudlák)
  - 86393ab feat(outputs): preset username and password for windows host in pytest-mh (Tibor Dudlák)
  - 4c26b5f feat(outputs): merge nested dictionary instead of overriding it (Tibor Dudlák)
  - 4dde2e5 feat(utils): add merge_dict (Tibor Dudlák)
  - 5440be1 refactor: fixes _openstack_gather_responses test warnings and exec time (David Pascual)
  - e29031b fix: Handle 403 AuthError (out of quota) in openstack provisioning (David Pascual)
  - a4e5075 feat: configurable ssh options (Petr Vobornik)
  - e9d716e chore: fix docs dependencies in tox run (Petr Vobornik)
  - 6f1943b chore: add Markdown support to docs and add design section (Petr Vobornik)
  - 88458e1 docs: SSH options design (Petr Vobornik)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.15.1-1
changelog:
  - 608c763 chore(Packit): Use yaml magic to run same internal tests for PRs and commits to main (Tibor Dudlák)
  - 8062a20 refactor: more verbose output when (re)provisioning (Tibor Dudlák)
  - 19b52f8 test(OpenStack): Add reprovision with dynamic result tests (Tibor Dudlák)
  - fd111f5 fix: Do not reprovision all hosts when server error is detected (Tibor Dudlák)
  - 6e499f6 fix: Use lower cooldown time to not be too slow in re-provisioning (Tibor Dudlák)
  - e03793c chore(Packit): Add internalt tests per pull request (Tibor Dudlák)
  - 44023eb chore(Packit): add missing build job(s) to Packit config (Tibor Dudlák)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.16.0-1
changelog:
  - 278d1b1 chore(release): Add PyPI action & extract copr step (Tibor Dudlák)
  - 9bbd987 chore: Bump python-semantic-release to v7.34.4 (Tibor Dudlák)
  - d6b7298 feat: Add new dependecies to mrack.spec file (David Pascual)
  - 7bbda34 feat(OpenStack): Add clouds.yaml as an authentication method (David Pascual)
  - a5b32e3 feat(OpenStack): Import publick key on provision (David Pascual)
  - 1a29d86 test: fix pylint issues and use isinstance (Tibor Dudlák)
  - db74ae0 fix(Beaker): Exception has been thrown as raise missed argument (Tibor Dudlák)
  - de027fa docs(Beaker): Add hostRequires documentation section to guides (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.16.0-1
changelog:
  - e8e20f1 chore(ci): Fix release workflow build step checking out wrong commit (David Pascual)
  - 97a7cd0 chore: Bump asyncopenstackclient dependency version (David Pascual)
  - 41b12e7 chore: Release version 1.16.0 (github-actions)
  - 278d1b1 chore(release): Add PyPI action & extract copr step (Tibor Dudlák)
  - 9bbd987 chore: Bump python-semantic-release to v7.34.4 (Tibor Dudlák)
  - d6b7298 feat: Add new dependecies to mrack.spec file (David Pascual)
  - 7bbda34 feat(OpenStack): Add clouds.yaml as an authentication method (David Pascual)
  - a5b32e3 feat(OpenStack): Import publick key on provision (David Pascual)
  - 1a29d86 test: fix pylint issues and use isinstance (Tibor Dudlák)
  - db74ae0 fix(Beaker): Exception has been thrown as raise missed argument (Tibor Dudlák)
  - de027fa docs(Beaker): Add hostRequires documentation section to guides (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.17.0-1
changelog:
  - 5251d90 chore(ci): Temporarely remove packit tests (David Pascual)
  - 3a59761 feat(openstack): Append API version to auth_url in credentials (David Pascual)
  - 97a5355 chore(release): Update semantic release action name and version (David Pascual)
  - 6d6cdc6 chore(release): Upload distribution package to release assets (David Pascual)


author: Radu Rendec <radu@rendec.net> - 0.1-4
changelog:
  - Update license tag to use SPDX identifiers
  - Use the newer autosetup macro
  - Do not call the 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS macro explicitly


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Paul Howarth <paul@city-fan.org> - 2.10.1-1
changelog:
  - Update to 2.10.1
    - CVE-2022-24302: Creation of new private key files using
      '~paramiko.pkey.PKey' subclasses was subject to a race condition between
      file creation and mode modification, which could be exploited by an
      attacker with knowledge of where the Paramiko-using code would write out
      such files; this has been patched by using 'os.open' and 'os.fdopen' to
      ensure new files are opened with the correct mode immediately (we've left
      the subsequent explicit 'chmod' in place to minimize any possible
      disruption, though it may get removed in future backwards-incompatible
      updates)
    - Add support for the '%C' token when parsing SSH config files (GH#1976)
    - Add support for OpenSSH's Windows agent as a fallback when Putty/WinPageant
      isn't available or functional (GH#1509, GH#1837, GH#1868)
    - Significantly speed up low-level read/write actions on
      '~paramiko.sftp_file.SFTPFile' objects by using 'bytearray'/'memoryview'
      (GH#892); this is unlikely to change anything for users of the higher level
      methods like 'SFTPClient.get' or 'SFTPClient.getfo', but users of
      'SFTPClient.open' will likely see orders of magnitude improvements for
      files larger than a few megabytes in size
    - Add 'six' explicitly to install-requires; it snuck into active use at some
      point but has only been indicated by transitive dependency on 'bcrypt'
      until they somewhat-recently dropped it (GH#1985); this will be short-lived
      until we drop Python 2 support


author: Paul Howarth <paul@city-fan.org> - 2.10.2-1
changelog:
  - Update to 2.10.2
    - Fix Python 2 compatibility breakage introduced in 2.10.1 (GH#2001)
  - Re-enable sftp tests, no longer failing under mock


author: Paul Howarth <paul@city-fan.org> - 2.10.3-1
changelog:
  - Update to 2.10.3
    - Certificate-based pubkey auth was inadvertently broken when adding SHA2
      support in version 2.9.0 (GH#1963, GH#1977)
    - Switch from module-global to thread-local storage when recording thread IDs
      for a logging helper; this should avoid one flavor of memory leak for
      long-running processes (GH#2002, GH#2003)


author: Paul Howarth <paul@city-fan.org> - 2.10.4-1
changelog:
  - Update to 2.10.4
    - Update 'camelCase' method calls against the 'threading' module to be
      'snake_case'; this and related tweaks should fix some deprecation warnings
      under Python 3.10 (GH#1838, GH#1870, GH#2028)
    - '~paramiko.pkey.PKey' instances' '__eq__' did not have the usual safety
      guard in place to ensure they were being compared to another 'PKey' object,
      causing occasional spurious 'BadHostKeyException', among other things
      (GH#1964, GH#2023, GH#2024)
    - Servers offering certificate variants of hostkey algorithms (e.g.
      'ssh-rsa-cert-v01@openssh.com') could not have their host keys verified by
      Paramiko clients, as it only ever considered non-cert key types for that
      part of connection handshaking (GH#2035)


author: Paul Howarth <paul@city-fan.org> - 2.11.0-1
changelog:
  - Update to 2.11.0
    - Align signature verification algorithm with OpenSSH re: zero-padding
      signatures that don't match their nominal size/length; this shouldn't
      affect most users, but will help Paramiko-implemented SSH servers handle
      poorly behaved clients such as PuTTY (GH#1933)
    - OpenSSH 7.7 and older has a bug preventing it from understanding how to
      perform SHA2 signature verification for RSA certificates (specifically
      certs - not keys), so when we added SHA2 support it broke all clients using
      RSA certificates with these servers; this has been fixed in a manner similar
      to what OpenSSH's own client does - a version check is performed and the
      algorithm used is downgraded if needed (GH#2017)
    - Recent versions of Cryptography have deprecated Blowfish algorithm support;
      in lieu of an easy method for users to remove it from the list of
      algorithms Paramiko tries to import and use, we've decided to remove it
      from our "preferred algorithms" list, which will both discourage use of a
      weak algorithm, and avoid warnings (GH#2038, GH#2039)
    - Windows-native SSH agent support as merged in 2.10 could encounter
      'Errno 22' 'OSError' exceptions in some scenarios (e.g. server not cleanly
      closing a relevant named pipe); this has been worked around and should be
      less problematic (GH#2008, GH#2010)
    - Add SSH config token expansion (eg '%h', '%p') when parsing 'ProxyJump'
      directives (GH#1951)
    - Apply unittest 'skipIf' to tests currently using SHA1 in their critical
      path, to avoid failures on systems starting to disable SHA1 outright in
      their crypto backends (e.g. RHEL 9) (GH#2004, GH#2011)


author: Paul Howarth <paul@city-fan.org> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2140281)
    - Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
      to gain more control over early Transport setup and manipulation (GH#2054,
      GH#2125)
    - Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
      socket object upon encountering socket errors at connection time; this
      should help somewhat with certain classes of memory leaks, resource
      warnings, and/or errors (though we hasten to remind everyone that Client
      and Transport have their own '.close()' methods for use in non-error
      situations!) (GH#1822)
    - Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
      key data is loaded, instead of the natural result of 'IndexError'; this
      should help more bits of Paramiko or Paramiko-adjacent codebases to
      correctly handle this class of error (GH#1599, GH#1637)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.12.0-2
changelog:
  - Address CVE 2023-48795 (a.k.a. the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    - The vulnerability only impacts encrypt-then-MAC digest algorithms in tandem
      with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko currently only
      implements ``hmac-sha2-(256|512)-etm`` in tandem with 'AES-CBC'
    - As the fix for the vulnerability requires both ends of the connection to
      cooperate, the below changes will only take effect when the remote end is
      OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
      patch version) and configured to use the new "strict kex" mode
    - Paramiko will always attempt to use "strict kex" mode if offered by the
      server, unless you override this by specifying 'strict_kex=False' in
      'Transport.__init__'
    - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
      when protocol messages are received in unexpected order; this includes
      situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
      exchange, which are no longer allowed during strict mode
    - Key (re)negotiation, i.e. 'MSG_NEWKEYS', whenever it is encountered, now
      resets packet sequence numbers (this should be invisible to users during
      normal operation, only causing exceptions if the exploit is encountered,
      which will usually result in, again, 'MessageOrderError')
    - Sequence number rollover will now raise 'SSHException' if it occurs during
      initial key exchange (regardless of strict mode status)
  - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the original
    implementation made assumptions based on an OpenSSH implementation detail
  - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
    packet-handler class used internally; this is mostly for testing, but advanced
    users may find this useful when doing deep hacks
  - A handful of lower-level classes (notably 'paramiko.message.Message' and
    'paramiko.pkey.PKey') previously returned 'bytes' objects from their
    implementation of '__str__', even under Python 3, and there was never any
    '__bytes__' method; these issues have been fixed by renaming '__str__' to
    '__bytes__' and relying on Python's default "stringification returns the
    output of '__repr__'" behavior re: any real attempts to 'str()' such objects


author: Packit <hello@packit.dev> - 0.5.1-1
changelog:
  - Added new `%conf` section (#74)
  - Switched to rpm-py-installer (#75)
  - Fixed detecting extended timestamp format in `%changelog` (#77, #81)


author: Packit <hello@packit.dev> - 0.6.0-1
changelog:
  - Switched to our own implementation of working with `%changelog` timestamps and removed dependency on arrow (#88)
  - Fixed requires of EPEL 8 rpm (#86)


author: Packit <hello@packit.dev> - 0.7.0-1
changelog:
  - It is now possible to filter changelog entries by specifying lower bound EVR, upper bound EVR or both. (#104)
  - Added support for filenames specified in source URL fragments, for example: `https://example.com/foo/1.0/download.cgi#/python-specfile-0.27.0.tar.gz` (#100)


author: Packit <hello@packit.dev> - 0.20.2-1
changelog:
  - Fixed Packit config to work properly with `propose-downstream` and `pull-from-upstream` jobs. (#261)


author: Nikola Forró <nforro@redhat.com> - 0.21.0-1
changelog:
  - `specfile` no longer tracebacks when some sources are missing and can't be _emulated_. In such case the spec file is parsed without them at the cost of `%setup` and `%patch` macros potentially expanding differently than with the sources present. (#271)
  - Specfile's license in RPM spec file is now confirmed to be SPDX compatible. (#269)


author: Packit <hello@packit.dev> - 0.23.0-1
changelog:
  - Sources now have a `valid` property that indicates whether a source is valid in the current context, meaning it is not present in a false branch of any condition. (#295)


author: Packit <hello@packit.dev> - 0.24.0-1
changelog:
  - Improved type annotations for `UserList` subclasses. (#299)
  - Macro definitions gained a new `commented_out` property indicating that a macro definition is commented out. Another new property, `comment_out_style`, determines if it is achieved by using a `%dnl` (discard next line) directive (e.g. `%dnl %global prerelease beta2`) or by replacing the starting `%` with `#` (e.g. `#global prerelease beta2`). (#298)


author: Packit <hello@packit.dev> - 0.25.0-1
changelog:
  - There is a new method, `Specfile.update_version()`, that allows updating spec file version even if it is a pre-release. (#317)


author: Packit <hello@packit.dev> - 0.27.0-1
changelog:
  - Improved handling of commented-out macro definitions and fixed related logic in `Specfile.update_value()`. (#338)


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.1-1
changelog:
  - Update to version 5.6.1
  - Add --use-pep517 --no-build-isolation to pip options for Fedora and EPEL 9+


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.10.50-1
changelog:
  - Update to 1.10.50
  - Enable GNOME Flashback applet
  - Support GNOME Shell 42 (#2132504) and 43 (#2132507)


