# changelog

author: Sérgio Basto <sergio@serjux.com> - 0.103.7-4
changelog:
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Sérgio Basto <sergio@serjux.com> - 0.103.8-2
changelog:
  - Split out documentation into separate -doc sub-package
  - (#2128276) Please port your pcre dependency to pcre2
  - Explicit dependency on systemd since systemd-devel no longer has this dependency on F37+
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Orion Poplawski <orion@nwra.com> - 1.0.6-1
changelog:
  - Update to 1.0.6

    * Mon Apr 08 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-5
    - Update clamav-data and README.fedora.md

    * Thu Apr 04 2024 John Sullivan <jsullivan@nasuni.com> - 1.0.5-4
    - Update EPEL 7 and 8 support for 1.0.5

    * Sat Mar 16 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-3
    - (#1679375) fixes syntax error in /etc/logrotate.d/clamd.exim

    * Tue Mar 05 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-2
    - set nullblog to fix post script (#2253914)
    - Properly check valgrind arches

    * Thu Feb 08 2024 Orion Poplawski <orion@nwra.com> - 1.0.5-1
    - Update to 1.0.5

    * Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Sun Oct 29 2023 Orion Poplawski <orion@nwra.com> - 1.0.4-1
    - Update to 1.0.4
    - Remove docs again from main package (bz#2230512)

    * Fri Aug 18 2023 Orion Poplawski <orion@nwra.com> - 1.0.2-1
    - Update to 1.0.2 CVE-2023-20197 (bz#2232508)

    * Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.1-5
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    * Mon Feb 27 2023 Orion Poplawski <orion@nwra.com> - 1.0.1-4
    - Mark cvd files is clamav-data as %config(noreplace) (bz#2170876)
    - Rename clamav-update to clamav-freshclam
    - Make clamav-freshclam supplement clamd
    - Have clamav-freshclam ghost all of the .cld and .cvd files
    - Update data files with help of Cisco-Talos/cvdupdate
    - Update to 1.0.1
    - Make sure RUSTFLAGS are passed to rustc (bz#2167194)
    - Fix multilib install


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-0.2.1
changelog:
  - Rename to corosync-epel and convert to EPEL-only package
  - Remove corosync-vqsim (shipped in CRB)
  - Remove corosynclib (shipped in AppStream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96-2
changelog:
  - Fixed "tainted search query is not properly quoted" for greylisting,
    patch provided by Marcel Härry <mh+fedora@scrit.ch>


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1
changelog:
  - New version
    Resolves: rhbz#2241735
    Resolves: rhbz#2241538
    Resolves: rhbz#2241540
    Resolves: rhbz#2241525
    Resolves: rhbz#2241526
    Resolves: rhbz#2241528
    Resolves: rhbz#2241530
    Resolves: rhbz#2241531
    Resolves: rhbz#2241533
    Resolves: rhbz#2241542
    Resolves: rhbz#2241543


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1
changelog:
  - New version
    Resolves: rhbz#2256145
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51766


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98-1
changelog:
  - New version
    Resolves: rhbz#2297124
  - Fixed incorrect parsing of multiline rfc2231 header filename
    Resolves: CVE-2024-39929


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.1.0.12-2.rolling
changelog:
  - added setup and thus enabled debuginfo strip
  - note, that debugsources are now empty. Symlink from full sourcess to build/jdk21.build or build/vcstag is needed


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.1.0.12-3.rolling
changelog:
  - proeprly filing debugsources pkg
    by addedd symlinks restructuring the structure for original build sources
  - according to logs, some are still missing
    probably generated during the build, and thus not existing in prep,
    when the sources subpkg is created after patching


author: Jiri Vanek <jvanek@redhat.com> - 1:22.0.0.0.32-1
changelog:
  - Update to jdk-22.0.0.0.32-0.2
  - removed libsystemconf.so; not present in jdk?
  - removed nss.fips.cfg; fisp disabled in portables for now
  - disabled java ${SEC_DEBUG} ${PROG} true; fisp disabled in portables for now
  - added lib/libsimdsort.so for simdsort_arches x86_64
  - added server/libjvm.a


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Start work on the 1.4 release
  - Trim git commit summary prefix from changelog lines
  - Report the program version number in the results (#309)
  - Handle compressed but otherwise empty man pages (#308)
  - Flake8 fixes for test_manpage.py
  - s/self.rpm/self.after_rpm/ in two test_manpage.py tests
  - Disable broken ELF heurisitic and size limit in libclamav
  - Modify dump_cfg() to write valid YAML to stdout (#306)
  - Migrate more code off hsearch and to uthash
  - Replace hsearch() with uthash in the kmod inspection
  - Update TEST_METADATA status in TODO and MISSING
  - Restrict style checks to specific directories
  - Replace hsearch() with uthash in the abidiff inspection
  - Change tsearch/twalk use to uthash
  - Correct misuse of entry with hentry variables (#321)
  - Normalize copyright boilerplates in source files
  - Use hentry->key over hentry->value in pathmigration
  - Adjust lib/meson.build for Fedora rawhide
  - Drop gate.yml and begin non-x86_64 arches in ci.yml
  - Add armv7, aarch64, and s390x to the other_arches job
  - Change init.c error reporting over to err/warn functions
  - Modify file triggers and matrix use in ci.yml
  - Split 32-bit osdeps out to post.sh scripts in osdeps/
  - Split style.yml in to shellcheck.yml and python.yml
  - Rewrite extra-ci.yml to use the matrix strategy method for GHA
  - Move the emulated CI jobs to extra-ci.yml
  - s/pkg/pki/ for the centos jobs
  - Debian and Ubuntu fixes for CI
  - Python pip on Debian is called pip
  - Try to fix just debian:stable
  - Enable debian:testing in extra-ci.yml
  - Enable centos8 in extra-ci.yml again
  - Enable centos7 in extra-ci.yml again
  - Enable opensuse-leap and gentoo in extra-ci.yml again
  - Run each test script individually on emulated targets
  - Try a different syntax for the emulated matrix jobs
  - Install s390 glibc headers on s390x fedora systems
  - Detect 32-bit and musl presence in test_elf.py
  - Skip lost -fPIC tests if gcc lacks -m32 support
  - Add stretch and buster to the emulated targets list
  - Drop Debian buster from the emulated targets
  - Install gcc-multilib only on Debian x86_64 and s390x systems
  - libc-dev:i386 -> libc6-dev:i386
  - Disable Debian targets in extra-ci temporarily
  - s/AUR/git/g in osdeps/arch/post.sh
  - In read_cfgfile(), keep track of block depth correctly (#329)
  - A few more yaml parsing fixes for block vs group
  - Recommend or Require libabigail >= 1.8.2
  - Finish normalizing all the error reporting statements
  - Advertise of rpminspect-report in the contrib README.
  - Report libclamav version and CVD versions (#258)
  - Ensure first argument of warn(3) is a format string.
  - Enable werror=true and warning_level=3 in default_options
  - Update the translation template file
  - Get rid of invalid free() in get_product_release()
  - Add inspection_id() to librpminspect
  - Update the po/rpminspect.pot template
  - Improve mkannounce.sh to handle stable and devel releases


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Begin work on version 1.5
  - Use llabs() instead of labs() in the filesize inspection
  - Improve has invalid execstack flags reporting
  - Use long unsigned int to report size changes in patches
  - Fix some errors in the changedfiles inspection
  - Update the changedfiles test cases
  - Check DT_SONAME in is_elf_shared_library()
  - Skip debuginfo and debugsource files in abidiff
  - Make sure abidiff test cases add a DT_SONAME to the test lib
  - Report INFO level for patches findings by default
  - Python black fixes in test/test_abidiff.py
  - Update the test/test_patches.py cases for patches changes
  - Generate regular changelog in utils/srpm.h
  - Skip branches without targets in submit-koji-builds.sh
  - Fedora and CentOS systems in ci need diffstat
  - opensuse-leap CI job requires diffstat
  - Fix the Debian CI jobs in GitHub Actions
  - Fix and enable the Ubuntu extra-ci job in GitHub Actions
  - Use pip instead of pip3 for the Ubuntu command
  - Use apt-get -y install in
  - Enable the opensuse-tumbleweed GHA job again
  - Make sure the Gentoo GHA job has diffstat
  - Get the Arch Linux GHA job working again
  - Use ubuntu:latest for the ubuntu GHA image
  - Simplify the utils/determine-os.sh script
  - Update license table in README.md
  - Allow any number of builds specified for fetch only mode
  - Handle old or broken versions of libmagic in changedfiles
  - Update GitHub Action status badges in README.md
  - Fix $(OS) check in the Makefile
  - Fix the ubuntu GitHub Actions extra-ci job
  - Make sure the centos8 job has git available before cloning
  - Change strappend() to work as a variadic function
  - Use json_tokener_parse_ex() to get better error reporting
  - Fix reading of the javabytecode block in the config file
  - Catch missing/losing -fPIC correctly on .a ELF objects (#352)
  - Refactor elf_archive_tests() and its helper functions
  - Followup fix for find_no_pic, find_pic, and find_all
  - Install cpp-coveralls using pacman on Arch Linux
  - Install cpp-coveralls using pip on Arch Linux
  - Install cpp-coveralls in pre.sh on Arch Linux
  - Install required Python modules in pre.sh on Arch Linux
  - Do not upgrade pip on Arch Linux, go back to using pip.txt
  - Drop DEBUG_PRINT from source generated by pic_bits.sh
  - Do not run apt-get update as a second time on Debians systems
  - The lost PIC tests need to invoke gcc with -fno-PIC
  - Update the OpenSUSE Tumbleweed files, but disable it anyway
  - Define inspection_ignores in struct rpminspect
  - Clean up the config file section reading code
  - Add add_ignore() to init.c
  - Fix fetch only mode download directory
  - Stub out libcurl download progress callback function
  - Perform symbolic owner and group matching in ownership (#364)
  - Restrict download_progress() to systems with CURLOPT_XFERINFOFUNCTION
  - Read per-inspection ignore lists from the config file.
  - Add commented out per-inspection ignore blocks
  - Implement per-inspection path ignore support (#351)
  - Report annocheck failures correctly in librpminspect.
  - Note all regular expression settings use regex(7) syntax
  - Allow size_threshold: info in the config file (#261)
  - Check ignore list in files for path prefixes to ignore (#360)
  - Support a list of expected empty RPMs in the config file (#355)
  - Call mparse_reset() before mparse_readfd()
  - Do not crash with the -c option specifies a non-existent file
  - Update TODO list
  - Make sure brp-compress is disabled in test_manpage.py
  - Require/Recommend /usr/bin/annocheck
  - Note size_threshold can be the keyword info
  - Ensure ctxt->lastError.message is not NULL before strdup (#382)
  - Handle corrupt compressed files in changedfiles (#382)
  - Disable debugging output for the ignore lists in init.c
  - Drop debugging output in the xml inspection
  - Remove what working directories we can
  - Correctly find icons for desktop files in subpackages (#367)
  - Followup to the Icon= check in the desktop inspection (#367)
  - BuildRequires libmandoc-devel >= 1.14.5
  - Manually install mandoc on centos7 for now


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.16-4
changelog:
  - Change private key cipher to aes-256-cbc
  - Remove obsolete system V conditionals in the specfile
  - Move user/group creation logic to sysusers.d fragments


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.02-8
changelog:
  - Exclude failing gtest-math-matrix-test-testMatrixTSparse on Fedora 40
    (aarch64, ppc64le and s390x)


author: Mattias Ellert <ellert@ellert.se> - 6.30.04-1
changelog:
  - Update to 6.30.04
  - Drop patch root-adjust-test-for-failures-on-aarch64-ppc64le-s390x.patch
    (accepted upstrem)
  - Exclude failing TClingDataMemberInfo.Offset test on s390x


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.08-1
changelog:
  - Update to 6.30.08
  - Fixes for TUri class (PCRE2 compatibility)
  - Update ROOT's R interface for Rcpp 1.0.13


author: Jered Floyd <jered@redhat.com> 9.2.4-2
changelog:
  - Enable build with deprecated OpenSSL Engine
    https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


