# changelog

author: Sérgio Basto <sergio@serjux.com> - 0.103.7-4
changelog:
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Sérgio Basto <sergio@serjux.com> - 0.103.8-2
changelog:
  - Split out documentation into separate -doc sub-package
  - (#2128276) Please port your pcre dependency to pcre2
  - Explicit dependency on systemd since systemd-devel no longer has this dependency on F37+
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Orion Poplawski <orion@nwra.com> - 1.0.6-1
changelog:
  - Update to 1.0.6

    * Mon Apr 08 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-5
    - Update clamav-data and README.fedora.md

    * Thu Apr 04 2024 John Sullivan <jsullivan@nasuni.com> - 1.0.5-4
    - Update EPEL 7 and 8 support for 1.0.5

    * Sat Mar 16 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-3
    - (#1679375) fixes syntax error in /etc/logrotate.d/clamd.exim

    * Tue Mar 05 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-2
    - set nullblog to fix post script (#2253914)
    - Properly check valgrind arches

    * Thu Feb 08 2024 Orion Poplawski <orion@nwra.com> - 1.0.5-1
    - Update to 1.0.5

    * Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Sun Oct 29 2023 Orion Poplawski <orion@nwra.com> - 1.0.4-1
    - Update to 1.0.4
    - Remove docs again from main package (bz#2230512)

    * Fri Aug 18 2023 Orion Poplawski <orion@nwra.com> - 1.0.2-1
    - Update to 1.0.2 CVE-2023-20197 (bz#2232508)

    * Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.1-5
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    * Mon Feb 27 2023 Orion Poplawski <orion@nwra.com> - 1.0.1-4
    - Mark cvd files is clamav-data as %config(noreplace) (bz#2170876)
    - Rename clamav-update to clamav-freshclam
    - Make clamav-freshclam supplement clamd
    - Have clamav-freshclam ghost all of the .cld and .cvd files
    - Update data files with help of Cisco-Talos/cvdupdate
    - Update to 1.0.1
    - Make sure RUSTFLAGS are passed to rustc (bz#2167194)
    - Fix multilib install


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Ruben Kerkhof <ruben@rubenkerkhof.com> - 4.3.1-1
changelog:
  - Upstream released new version
    Fixes CVE-2020-10995, CVE-2020-12244 and CVE-2020-10030
    See https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1 for more details


author: Ruben Kerkhof <ruben@rubenkerkhof.com> - 4.3.6-1
changelog:
  - Upstream released new version
  - See https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.6 for more details


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


