# changelog

author: Simone Caronni <negativo17@gmail.com> - 1.4.23-2
changelog:
  - Remove Thirdparty folder from sources and provide script to recreate tarball.
  - Remove duplicated docs in samples subpackage.


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Frantisek Sumsal <frantisek@sumsal.cz> - 2.2-1
changelog:
  - Bump dfuzzer to v2.2
  - Use a version tag in the source URL instead of a commit by default
  - Run the newly introduced unit tests


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-3
changelog:
  - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
    Latex2e-translated-notice"


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-4
changelog:
  - Fix a heap overread in search_brace/lexi
  - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919)


author: Packit <hello@packit.dev> - 1.2.1-1
changelog:
  - Accept the Clavister OneConnect VPN Android client (#485)
  - No longer require to set device name per vhost (#480)
  - Account the correct number of points when proxyproto is in use (#529)
  - nuttcp tests were replaced with iperf3 that is available
    in more environments
  - occtl: fix duplicate key in `occtl --json show users` output


author: Packit <hello@packit.dev> - 1.2.2-1
changelog:
  - Fix session and accounting data tracking of ocserv. This
    reverts fix for #444 (#541)
  - No longer account ICMP and IGMP data for idle session detection


author: Packit <hello@packit.dev> - 1.2.4-1
changelog:
  - Get connection speed limits (traffic shaping) from RADIUS (#554)
  - Fix logging to stderr: add missing newline.
  - Fixed compatibility with AnyConnect clients on Linux (#544)
  - Detect the new AnyConnect-compatible identifier of OpenConnect clients
  - occtl: Print bit rates as kb/s.


author: Packit <hello@packit.dev> - 0.1.3-0
changelog:
  - 0.1.3 (Jan Rodak)
  - Change license tag (Jan Rodak)
  - Enable propose downstream (Jan Rodak)
  - Add test for Full text parser (Jan Rodak)
  - Add reproducer file for testing (Jan Rodak)
  - Fix sub-element references that do not exist (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.0-0
changelog:
  - 0.2.0 (Jan Rodak)
  - Add JSON validator tool (Jan Rodak)
  - Create tests (Jan Rodak)
  - Update issue templates (Jan Rodák)
  - Impruve run time of unit tests (Jan Rodak)
  - Add funtion for filtering JSON (Jan Rodak)
  - Filter JSON keys (Jan Rodak)
  - Adapt the tests and create a new test that tests the validation (Jan Rodak)
  - Add an unsupported XML format to the result (Jan Rodak)
  - Create validation of XCCDF files (Jan Rodak)
  - Add XCCDF schemas (Jan Rodak)
  - Fix typo in variable name (Jan Rodak)
  - Fix problem that was spotted with new test and create test case (Jan Rodak)
  - Add testcase of the crash when is used XCCDF result (Jan Rodak)
  - Impruve raised expection info (Jan Rodak)
  - Hide empty info about profile when isnt anvalible (Jan Rodak)
  - Add missing else branch for if condition if is cpe_platform not defined in jinja (Jan Rodak)
  - Add unit tests for SharedStaticMethodsOfParser (Jan Rodak)
  - Add check and check_existence atributes to report (Jan Rodak)
  - Add information about OVAL state to report (Jan Rodak)
  - Decompose OVALTestInfoParser class (Jan Rodak)
  - Parse OVAL state (Jan Rodak)
  - Add OVAL state class (Jan Rodak)
  - Add info about comparison of endpoint values in OVAL test (Jan Rodak)
  - Ignore deprecated settings of pylint (Jan Rodak)
  - Update tests (Jan Rodak)
  - Add category to report (Jan Rodak)
  - Parse category of warning (Jan Rodak)
  - Add Warning dataclass (Jan Rodak)
  - Update pylint config (Jan Rodak)
  - Reduce external dependencies of test suite (Jan Rodak)
  - Fix data type (Jan Rodak)
  - Change label of OVAL definition for CPE (Jan Rodak)
  - Add HTML generation of CPE AL trees (Jan Rodak)
  - Add css for CPE AL (Jan Rodak)
  - Create place for graph with CPE AL (Jan Rodak)
  - Integrate CPE AL parser (Jan Rodak)
  - Create CPE AL parser (Jan Rodak)
  - Add expection (Jan Rodak)
  - Add imports to __init__ (Jan Rodak)
  - Create cpe platform (Jan Rodak)
  - Add cpe logical test (Jan Rodak)
  - Create evaluation of CPE logical test (Jan Rodak)
  - Use a more elegant way to copy dictionary (Jan Rodak)
  - Disable automatic character escaping in jinja (Jan Rodak)
  - Remove duplicite CPE trees for fedora platforms (Jan Rodak)
  - Fix the classification of tests (Jan Rodak)
  - Present new infromation in HTML report (Jan Rodak)
  - Update test suite (Jan Rodak)
  - Update jinja macros for new dataclasses (Jan Rodak)
  - Replace jinja filter with methode call that use diffrent informations (Jan Rodak)
  - Implement usage of TestResultOfScan and ProfileInfo dataclasses (Jan Rodak)
  - Add parser of performed scan information (Jan Rodak)
  - Create parser of profile information (Jan Rodak)
  - Use new dataclasses in Report (Jan Rodak)
  - Create ProfileInfo and TestResultOfScan dataclasses (Jan Rodak)
  - Regenerate docs modules (Jan Rodak)
  - Ignore old xslt codes for generating old style report for backwards compatibility (Jan Rodak)
  - Fix CWE-79 (Jan Rodak)
  - Fix overwrite attribute get_report_dict, which was previously defined in superclass (Jan Rodak)
  - Explicitly import stdout, stdin with prefix sys (Jan Rodak)
  - Close file after usage (Jan Rodak)
  - Fix empty expections (Jan Rodak)
  - Fix missing OVAL definitions in reports when is not present OVAL CPE checks (Jan Rodak)
  - Fix key error platfrom without OVAL definition (Jan Rodak)
  - Fix missing CPE checks (Jan Rodak)
  - Update README.md (Evgeny Kolesnikov)
  - Update README.md (Evgeny Kolesnikov)
  - Fix parsing of checking engine result (Jan Rodak)
  - Rename master branch to main in github action configs TODO : LINKS IN README etc. (Jan Rodak)
  - Rename master branch to main in realase script (Jan Rodak)
  - Move comment of OVAL nodes behind result label (Jan Rodak)
  - Display OVAL definitions details in the HTML report (Jan Rodak)
  - Display comments in OVAL graphs (Jan Rodak)
  - Replace the empty rule title with the rule id (Jan Rodak)
  - Add srpm_build_deps (Jan Rodak)
  - Update nodejs actions (Jan Rodak)
  - Add CodeQL workflow for GitHub code scanning (LGTM Migrator)
  - Add tests for oval definition (Jan Rodak)
  - Reduce run time of test suite (Jan Rodak)
  - Switch using oval_tree to oval_definition (Jan Rodak)
  - Implement usage of OVAL definition parser (Jan Rodak)
  - Create OVAL definition parser (Jan Rodak)
  - Create OVAL reference (Jan Rodak)
  - Create OVAL definition (Jan Rodak)
  - Rename clases TestInfoParser to OVALTestInfoParser and OVALDefinitionParser to OVALResultParser (Jan Rodak)
  - Add Read the Docs configuration file (Jan Rodak)
  - Improve readme (Jan Rodak)
  - Update chapter layout (Jan Rodak)
  - Add usage chapter to documentation (Jan Rodak)
  - Add installation chapter to documentation (Jan Rodak)
  - Regenerate modules (Jan Rodak)
  - Add link to readthedocs (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add instalation and basic usage to readme (Jan Rodak)
  - Fix mixing of Rule class and rule XML element (Jan Rodak)
  - Rename groupe_parser to group_parser and info_of_test_parser to test_info_parser (Jan Rodak)
  - Create output format JSON-EVERYTHING (Jan Rodak)
  - Use filter for generation JSON (Jan Rodak)
  - Rename directory (Jan Rodak)
  - Break methodes to smaller methods (Jan Rodak)
  - Fix tests according to change of structure of SCAPResultsParser class (Jan Rodak)
  - Rework structure SCAPResultsParser class (Jan Rodak)
  - Rework assembly of OVAL and CPE trees (Jan Rodak)
  - Remove None comment (Jan Rodak)
  - Remove None value from definition ID (Jan Rodak)
  - Fix test of remediation (Jan Rodak)
  - Specify data types of Rule (Jan Rodak)
  - Specify data types of Report (Jan Rodak)
  - Remove default id of Remediation (Jan Rodak)
  - Specify data types of OvalTest (Jan Rodak)
  - Specify data types of OvalObject (Jan Rodak)
  - Specify data types of OvalNode (Jan Rodak)
  - Specify data types of Group (Jan Rodak)
  - Create objects Identifier and Reference (Jan Rodak)
  - Use buildin function asdict (Jan Rodak)
  - Generate json output from report structure (Jan Rodak)
  - Ignore generated JSON reports (Jan Rodak)
  - Create tests (Jan Rodak)
  - Use report_generators sub package (Jan Rodak)
  - Create a JSON generator shell (Jan Rodak)
  - Create report_generators sub package (Jan Rodak)
  - Add format JSON to cli (Jan Rodak)
  - Fix W1514 (Jan Rodak)
  - Update pylint config (Jan Rodak)
  - Add a copy to the clipboard for the rule ID field (Jan Rodak)
  - Fix problem with the formatting of command line options (Jan Rodak)
  - Replace default value TextIOWrapper with name of file in man page (Jan Rodak)
  - Remove enumerte of choices for alternative options (Jan Rodak)
  - Format lists of descriptions of choices (Jan Rodak)
  - Fix FIRST_HIDDEN_ELEMENT is null (Jan Rodak)
  - Remove unused template file (Jan Rodak)
  - Move CSS style to separate file (Jan Rodak)
  - Minimalize the usage of inline styles (Jan Rodak)
  - Add footer to report (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.1-1
changelog:
  - 0.2.1 (Jan Rodak)
  - Add rule weight attribute to report (Jan Rodak)
  - Parse rule weight attribute (Jan Rodak)
  - Add weight attribute to rule datastructure (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.2-0
changelog:
  - 0.2.2 (Jan Rodak)
  - Clean up CI jobs titles (Evgeny Kolesnikov)
  - Fix RHEL8/EPEL8 build and test integration (Evgeny Kolesnikov)
  - Show message for OVAL object (Jan Rodak)
  - Parse message of collected OVAL object (Jan Rodak)
  - Create OvalObjectMessage (Jan Rodak)
  - Create a clickable rule title to show rule detail (Jan Rodak)
  - Add a copy remediation to the clipboard (Jan Rodak)
  - Uderline remediation summary (Jan Rodak)
  - Replace word search with filter (Jan Rodak)
  - Fix compatibility issue with python3.8 in the test suite (Jan Rodak)
  - Execute test suite with python3.8 and the latest python (Jan Rodak)
  - Create package dependency test for centos stream 8 (Jan Rodak)
  - Create copr build for rhel8 (Jan Rodak)
  - Fix TypeError: 'type' object is not subscriptable coused by downgrade (Jan Rodak)
  - Downgrade the minimum version of python (Jan Rodak)
  - Add spec file for rhel8 (Jan Rodak)
  - Fix W3601 (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.3-1
changelog:
  - 0.2.3 (Jan Rodak)
  - Determine which product use (Jan Rodak)
  - Discover upstream (Jan Rodak)
  - Run only smoke test in Testing Farm (Jan Rodak)
  - Add weekly execution of integration test (Jan Rodak)
  - Add tmt tests (Jan Rodak)
  - Add tmt plan (Jan Rodak)
  - Modify the smoke test to use different ARF reports (Jan Rodak)
  - Add script for generation of ARF report (Jan Rodak)
  - Add filter for rule id (Jan Rodak)
  - Select new multi-check rules (Jan Rodak)
  - Create copy of multi-check rule for every OVAL definition (Jan Rodak)
  - Make method _get_applicable_cpe_ids_for_machine part of ProfileInfo and rename the method to get_list_of_cpe_platforms_that_satisfy_evaluation_target (Jan Rodak)
  - Adapt input of oval_cpe_definiton in test (Jan Rodak)
  - Adapt the mapping of OVAL definitions to the new OVAL definition analysis system and specify which OVAL result report is for CPE (Jan Rodak)
  - Parse all OVAL definition from all OVAL result reports (Jan Rodak)
  - Add parsing of OVAL refence to OVAL report (Jan Rodak)
  - Load all oval reports present in ARF report (Jan Rodak)
  - Fix typo in link (Jan Rodak)
  - Sync tests with downstream (Jan Rodak)
  - Add required parameter (Jan Rodak)
  - Move unit tests from interation_tests direcory (Jan Rodak)
  - Move function get_fake_args to test utils (Jan Rodak)
  - Create separate job propose_downstream for EPEL8 (Jan Rodak)
  - Sort chapters (Jan Rodak)
  - Add manual about report content (Jan Rodak)
  - Add assets (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add license tag (Jan Rodak)
  - Add explanation of result of OVAL definition (Jan Rodak)
  - Parse class of OVAL definition (Jan Rodak)
  - Add tests for CPE AL (Jan Rodak)
  - Fix negation of logical test (Jan Rodak)
  - Add support for check-fact-ref element in CPE-AL (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.4-1
changelog:
  - 0.2.4 (Jan Rodak)
  - Rename field Result explained to Class explained (Jan Rodak)
  - Add button back to top (Jan Rodak)
  - Generate tooltip when hover the mouse over the OVAL operator (Jan Rodak)
  - Fix persistance of checkboxes after refresh browser (Jan Rodak)
  - Add functionality to buttons (Jan Rodak)
  - Add buttons (Jan Rodak)
  - Set logging severity from warning to info for missing fonts problem (Jan Rodak)
  - Change fonts to week dependency (Jan Rodak)
  - Disable scrollbar (Jan Rodak)
  - Show tooltip for NOT (Jan Rodak)
  - Add explanations (Jan Rodak)
  - Generate tooltip (Jan Rodak)
  - Set tooltip position for OVAL and CPE AL operators (Jan Rodak)
  - Add new tooltip when user click on copy to clipboard (Jan Rodak)
  - Rename tooltip class (Jan Rodak)
  - Add new lines on end of file (Jan Rodak)
  - Update eslint config (Jan Rodak)
  - Implement clear button for search bar (Jan Rodak)
  - Change title (Jan Rodak)
  - Use the same title for the page title and report title (Jan Rodak)
  - Using span element instead of link element when href is not available (Jan Rodak)
  - Add non-breaking space (Jan Rodak)
  - Add missing package (Jan Rodak)
  - Update modules docs (Jan Rodak)
  - Add documentation on how to run the test suite (Jan Rodak)
  - Add usage from source (Jan Rodak)
  - Add installation from source and PyPi (Jan Rodak)
  - Update README (Jan Rodak)
  - Sync generate_arf.sh (Jan Rodak)
  - Remove execution of integration test on push to main (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Paul Howarth <paul@city-fan.org> - 2.10.1-1
changelog:
  - Update to 2.10.1
    - CVE-2022-24302: Creation of new private key files using
      '~paramiko.pkey.PKey' subclasses was subject to a race condition between
      file creation and mode modification, which could be exploited by an
      attacker with knowledge of where the Paramiko-using code would write out
      such files; this has been patched by using 'os.open' and 'os.fdopen' to
      ensure new files are opened with the correct mode immediately (we've left
      the subsequent explicit 'chmod' in place to minimize any possible
      disruption, though it may get removed in future backwards-incompatible
      updates)
    - Add support for the '%C' token when parsing SSH config files (GH#1976)
    - Add support for OpenSSH's Windows agent as a fallback when Putty/WinPageant
      isn't available or functional (GH#1509, GH#1837, GH#1868)
    - Significantly speed up low-level read/write actions on
      '~paramiko.sftp_file.SFTPFile' objects by using 'bytearray'/'memoryview'
      (GH#892); this is unlikely to change anything for users of the higher level
      methods like 'SFTPClient.get' or 'SFTPClient.getfo', but users of
      'SFTPClient.open' will likely see orders of magnitude improvements for
      files larger than a few megabytes in size
    - Add 'six' explicitly to install-requires; it snuck into active use at some
      point but has only been indicated by transitive dependency on 'bcrypt'
      until they somewhat-recently dropped it (GH#1985); this will be short-lived
      until we drop Python 2 support


author: Paul Howarth <paul@city-fan.org> - 2.10.2-1
changelog:
  - Update to 2.10.2
    - Fix Python 2 compatibility breakage introduced in 2.10.1 (GH#2001)
  - Re-enable sftp tests, no longer failing under mock


author: Paul Howarth <paul@city-fan.org> - 2.10.3-1
changelog:
  - Update to 2.10.3
    - Certificate-based pubkey auth was inadvertently broken when adding SHA2
      support in version 2.9.0 (GH#1963, GH#1977)
    - Switch from module-global to thread-local storage when recording thread IDs
      for a logging helper; this should avoid one flavor of memory leak for
      long-running processes (GH#2002, GH#2003)


author: Paul Howarth <paul@city-fan.org> - 2.10.4-1
changelog:
  - Update to 2.10.4
    - Update 'camelCase' method calls against the 'threading' module to be
      'snake_case'; this and related tweaks should fix some deprecation warnings
      under Python 3.10 (GH#1838, GH#1870, GH#2028)
    - '~paramiko.pkey.PKey' instances' '__eq__' did not have the usual safety
      guard in place to ensure they were being compared to another 'PKey' object,
      causing occasional spurious 'BadHostKeyException', among other things
      (GH#1964, GH#2023, GH#2024)
    - Servers offering certificate variants of hostkey algorithms (e.g.
      'ssh-rsa-cert-v01@openssh.com') could not have their host keys verified by
      Paramiko clients, as it only ever considered non-cert key types for that
      part of connection handshaking (GH#2035)


author: Paul Howarth <paul@city-fan.org> - 2.11.0-1
changelog:
  - Update to 2.11.0
    - Align signature verification algorithm with OpenSSH re: zero-padding
      signatures that don't match their nominal size/length; this shouldn't
      affect most users, but will help Paramiko-implemented SSH servers handle
      poorly behaved clients such as PuTTY (GH#1933)
    - OpenSSH 7.7 and older has a bug preventing it from understanding how to
      perform SHA2 signature verification for RSA certificates (specifically
      certs - not keys), so when we added SHA2 support it broke all clients using
      RSA certificates with these servers; this has been fixed in a manner similar
      to what OpenSSH's own client does - a version check is performed and the
      algorithm used is downgraded if needed (GH#2017)
    - Recent versions of Cryptography have deprecated Blowfish algorithm support;
      in lieu of an easy method for users to remove it from the list of
      algorithms Paramiko tries to import and use, we've decided to remove it
      from our "preferred algorithms" list, which will both discourage use of a
      weak algorithm, and avoid warnings (GH#2038, GH#2039)
    - Windows-native SSH agent support as merged in 2.10 could encounter
      'Errno 22' 'OSError' exceptions in some scenarios (e.g. server not cleanly
      closing a relevant named pipe); this has been worked around and should be
      less problematic (GH#2008, GH#2010)
    - Add SSH config token expansion (eg '%h', '%p') when parsing 'ProxyJump'
      directives (GH#1951)
    - Apply unittest 'skipIf' to tests currently using SHA1 in their critical
      path, to avoid failures on systems starting to disable SHA1 outright in
      their crypto backends (e.g. RHEL 9) (GH#2004, GH#2011)


author: Paul Howarth <paul@city-fan.org> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2140281)
    - Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
      to gain more control over early Transport setup and manipulation (GH#2054,
      GH#2125)
    - Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
      socket object upon encountering socket errors at connection time; this
      should help somewhat with certain classes of memory leaks, resource
      warnings, and/or errors (though we hasten to remind everyone that Client
      and Transport have their own '.close()' methods for use in non-error
      situations!) (GH#1822)
    - Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
      key data is loaded, instead of the natural result of 'IndexError'; this
      should help more bits of Paramiko or Paramiko-adjacent codebases to
      correctly handle this class of error (GH#1599, GH#1637)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.12.0-2
changelog:
  - Address CVE 2023-48795 (a.k.a. the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    - The vulnerability only impacts encrypt-then-MAC digest algorithms in tandem
      with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko currently only
      implements ``hmac-sha2-(256|512)-etm`` in tandem with 'AES-CBC'
    - As the fix for the vulnerability requires both ends of the connection to
      cooperate, the below changes will only take effect when the remote end is
      OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
      patch version) and configured to use the new "strict kex" mode
    - Paramiko will always attempt to use "strict kex" mode if offered by the
      server, unless you override this by specifying 'strict_kex=False' in
      'Transport.__init__'
    - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
      when protocol messages are received in unexpected order; this includes
      situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
      exchange, which are no longer allowed during strict mode
    - Key (re)negotiation, i.e. 'MSG_NEWKEYS', whenever it is encountered, now
      resets packet sequence numbers (this should be invisible to users during
      normal operation, only causing exceptions if the exploit is encountered,
      which will usually result in, again, 'MessageOrderError')
    - Sequence number rollover will now raise 'SSHException' if it occurs during
      initial key exchange (regardless of strict mode status)
  - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the original
    implementation made assumptions based on an OpenSSH implementation detail
  - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
    packet-handler class used internally; this is mostly for testing, but advanced
    users may find this useful when doing deep hacks
  - A handful of lower-level classes (notably 'paramiko.message.Message' and
    'paramiko.pkey.PKey') previously returned 'bytes' objects from their
    implementation of '__str__', even under Python 3, and there was never any
    '__bytes__' method; these issues have been fixed by renaming '__str__' to
    '__bytes__' and relying on Python's default "stringification returns the
    output of '__repr__'" behavior re: any real attempts to 'str()' such objects


author: Scott K Logan <logans@cottsay.net> - 0.2.1-2
changelog:
  - Rebuilt to change main python from 3.4 to 3.6 in EPEL 7
  - Handle automatic dependency generation (f30+)


author: Scott K Logan <logans@cottsay.net> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Rebuilt to change main python from 3.4 to 3.6 in EPEL 7
  - Handle automatic dependency generation (f30+)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.9.3-1
changelog:
  - Update to 0.9.3; this adds KASLR support Document installing `kernel-
    debuginfo` for better tracing


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.9.4-2
changelog:
  - Update vendored dependencies
  - also generate bundled provides (courtesy of zincati's bundled-
    provides.jq)


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60
   - Support for dynamic snapshot data exclusions
   - Apparmor userspace is vendored inside the snapd snap
   - Added a default-configure hook that exposes gadget default
     configuration options to snaps during first install before
     services are started
   - Allow install from initrd to speed up the initial installation
     for systems that do not have a install-device hook
   - New `snap sign --chain` flag that appends the account and
     account-key assertions
   - Support validation-sets in the model assertion
   - Support new "min-size" field in gadget.yaml
   - New interface: "userns"


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.1
   - install: fallback to lazy unmount() in writeFilesystemContent
   - data: include "modprobe.d" and "modules-load.d" in preseeded blob
   - gadget: fix install test on armhf
   - interfaces: fix typo in network_manager_observe
   - sandbox/apparmor: don't let vendored apparmor conflict with system
   - gadget/update: set parts in laid out data from the ones matched
   - many: move SnapConfineAppArmorDir from dirs to sandbox/apparmor
   - many: stop using `-O no-expr-simplify` in apparmor_parser
   - go.mod: update secboot to latest uc22 branch


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.2
   - i/builtin: allow directories in private /dev/shm
   - i/builtin: add read access to /proc/task/schedstat in system-
     observe
   - snap-bootstrap: print version information at startup
   - go.mod: update gopkg.in/yaml.v3 to v3.0.1 to fix CVE-2022-28948
   - snap, store: filter out invalid snap edited links from store info
     and persisted state
   - o/configcore: write netplan defaults to 00-snapd-config on seeding
   - snapcraft.yaml: pull in apparmor_parser optimization patches from
     https://gitlab.com/apparmor/apparmor/-/merge_requests/711
   - snap-confine: fix missing \0 after readlink
   - cmd/snap: hide append-integrity-data
   - interfaces/opengl: add support for ARM Mali


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.3
   - i/b/shared-memory: handle "private" plug attribute in shared-
     memory interface correctly
   - i/apparmor: support for home.d tunables from /etc/


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Jakub Kadlcik <frostyx@email.cz> 0.6.17-1
changelog:
  - Update releasers.conf (frostyx@email.cz)
  - Make build --verbose autocompletable (nmoumoul@redhat.com)
  - Add support for centpkg (wpoteat@redhat.com)
  - Remove extraneous extra newline (areese@users.noreply.github.com)
  - Add some documentation for tito.builder.SubmoduleAwareBuilder
    (areese999@apple.com)
  - Update based on feedback: 1. Remove PushDir, tito.common.chdir has the same
    functionality so use that instead. 2. Remove useless override of constructor,
    it's just extra noise. (areese999@apple.com)
  - 150 Add support for repos that use submodules. Allow though submodules are a
    contentious topic, this adds a submodule_aware_builder (areese999@apple.com)
  - doc: fix typo tito.props (subpop@users.noreply.github.com)
  - Update fedora releaser in .tito/releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.18-1
changelog:
  - Document fetch_sources option in tito.props (frostyx@email.cz)
  - Rename fetch-sources to fetch_sources in the tito.props config
    (frostyx@email.cz)
  - Adding option to fetch sources (sisi.chlupova@gmail.com)
  - Change the master branch in releasers.conf to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.20-1
changelog:
  - Sync repo (in addition to tag) during mead build (nmoumoul@redhat.com)
  - Add 'Building RHEL packages with Tito' as external doc (frostyx@email.cz)
  - Consider the current project git config when releasing to DistGit
    (frostyx@email.cz)
  - Print the problematic binary files (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.21-1
changelog:
  - Properly catch TitoException (frostyx@email.cz)
  - Add documentation for the MockBuilder (frostyx@email.cz)
  - Allow to define mock chroot in tito.props (frostyx@email.cz)
  - Fix recursion error in MockBuilder (frostyx@email.cz)
  - DistGitReleasers: don't nuke external sources with fetch_sources (praiskup@redhat.com)
  - Add installation instructions from PyPI (frostyx@email.cz)
  - Add long_description to setup.py (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.22-1
changelog:
  - Fix python2 urlretrieve import (frostyx@email.cz)
  - Fixed submodule archives concatenation (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #414 (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #413 (jerzy.drozdz@jdsieci.pl)
  - Revert 45d431ad149cb33e2462a990c4c4f29e6bb2bb7e (nmoumoul@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.23-1
changelog:
  - Replace `submodule--helper list` with `git config --get-regexp`
  - do not overwrite packit.yaml and its variants (msuchy@redhat.com)
  - packit: fixing the Fedora build failures (praiskup@redhat.com)
  - Don't upload patches to the lookaside cache (frostyx@email.cz)
  - use spdx license (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.24-1
changelog:
  - Will now copy both source files and patch files declared in the spec
  - Fix UpstreamBuilder deprecation warning (#461) (frostyx@email.cz)
  - Fix the setup.py license according to tito.spec (#433) (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz>
changelog:
  - Use rpm.ds instead of deprecated hdr.dsFromHeader (frostyx@email.cz)
  - Support branch aliases in releasers (frostyx@email.cz)
  - Document how to automate bodhi updates (msuchy@redhat.com)
  - Use raw strings for regex patterns (frostyx@email.cz)
  - Allow tito build without .tito directory (frostyx@email.cz)
  - Unify README and index.md (msuchy@redhat.com)
  - Fix PEP8 issues found by runtests.py (frostyx@email.cz)
  - Replace egrep with grep -E (frostyx@email.cz)
  - Don't use --cacheonly on DNF5 (frostyx@email.cz)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.10.50-1
changelog:
  - Update to 1.10.50
  - Enable GNOME Flashback applet
  - Support GNOME Shell 42 (#2132504) and 43 (#2132507)


