# changelog

author: Packit <hello@packit.dev> - 104-1
changelog:
  Changes with 104
  ----------------
    * Add installer customizations to blueprints and cloud API (HMS-1161) (#4005)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Execute OpenShift Virtualization tests only on RHEL 9.x nightly (#4044)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * bump osbuild/images to 51 and add expiredate fields to user customizations (#4041)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: allow internet access on secure instance again (#4025)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * cloudapi: Override the request distro with the blueprint distro (#4006)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou
    * osbuild-jobsite-builder: disable http.Server timeouts (#4031)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite-manager: close writer before sending the store (#4029)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite: increase populate timeout (#4027)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    * osbuild-worker: add support for mtls dnf repo secrets (HMS-3798) (#4035)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * repositories: remove rhel-8-beta (#4024)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    * templates/packer: support ldap service account for repo mtls conf (#4049)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * test: drop oscap test script and gitlab job (HMS-3710) (#3991)
      * Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß
    * worker: drop backwards compatibility for DepsolveJob serialisation (COMPOSER-1612) (#4021)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-04-03


author: Dusty Mabe <dusty@dustymabe.com> - 2023.3-3
changelog:
  - Backport log message fix in https://github.com/ostreedev/ostree/pull/2870
  - Backport fallocate fix in https://github.com/ostreedev/ostree/pull/2871


author: Numan Siddique <numans@ovn.org> - 23.09.0-81
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-37)
  - ovn: add geneve PMTUD support (#2241711)
  [Upstream: e42ca82fb92cd69bbfd4da72b3c22bc57fc1ecd0]

  - fmt_pkt: make sure scapy-server is started once
  [Upstream: b788911812171ee5d9c51806b1e287be910164c9]

  - fmt_pkt: improve scapy-server logging
  [Upstream: 820e11754bff7b7029abf8bd8f166c169bdd8d04]

  - fmt_pkt: use -S check to wait for scapy sock file
  [Upstream: 2d710c3b1d9444a49f80db6058462e7d33253644]

  - fmt_pkt: don't subshell when calling ovs-appctl
  [Upstream: fc311bb6d6108d49b356d9c785f6d47e7dc8faff]

  - controller: fix group_table and meter_table allocation
  [Upstream: acc63727d14ff7e9f447ed90115f74235f968499]

  - Prepare for 23.09.2.
  [Upstream: 8a000cc863773030828a4cda2167840f08c4a65c]

  - Set release date for 23.09.1.
  [Upstream: 0afd4e59e95b5f8c7b56760e91269786b0e0e52a]

  - northd: Add missing stopwatch initialization.
  [Upstream: 7fd87c5d0b1492c14d90faec4af4069496ae3609]

  - controller: avoid extra flows if localnet_learn_fdb is disabled
  [Upstream: b2f839849c36c058f940c417dc29e26165a1d30e]

  - controller: FDB entries for localnet should not overwrite entries for vifs (#2242830)
  [Upstream: 33b0117598b23b8c0877e482ee350283a147bb5f]

  - controller: Disable inactivity probe for statctrl
  [Upstream: bbd07439b9a8cd6db901bffcac7ac17f58e33a07]

  - pinctrl: reset success and failures n_count regardless of svc state
  [Upstream: 617b84d7dd2ce3501b49e988e1ba06e86889c9bd]

  - pinctrl: send RST instead of RST_ACK bit for lb hc
  [Upstream: beb26027cf26271c7cd780869b540737c7916e99]

  - controller: Don't artificially limit group and meter IDs to 16bit.
  [Upstream: e9e716ad531e34766d2f02783ac08955096bf636]

  - tests: fixed race_condition with max_prefix
  [Upstream: d257d800e41388bd2a387e0b6d5a0e41c2e8d8f1]

  - tests: have CHECK_NO_CHANGE_AFTER_RECOMPUTE potentially wait for ports up
  [Upstream: dab54b81c7ee767943163f2aaaa27b2c4b367964]

  - tests: fixed "ovn-nbctl - daemon retry connection"
  [Upstream: d2e0acb2a6aa510282da5e04036ec5258454c351]

  - tests: fixed system test "LR with SNAT fragmentation needed for external server".
  [Upstream: 0bb6ba908421825428ec904d5316ae13090adbbf]

  - tests: fixed "interconnection - static multicast" and "- IGMP/MLD multicast"
  [Upstream: 810d83e77ce3398bc94469404d85a01eb63e40bd]

  - ovn-ctl man: Add election timer config to manpage
  [Upstream: 25d4b6855f6ce3795314e9439716f775994c7f4d]

  - Fix flows not removed in ha migration
  [Upstream: 5375cdd96eaf8e527e5afea402f279990398710c]

  - binding: handle pb->chassis and pb->up from if-status module
  [Upstream: 619abe5c5e18f417fe20b252ca41b70e644466e0]

  - binding: slight refactor if no local binding in consider_iface_release
  [Upstream: d039b4332b9ea739bdf6b2efc9f5f3e422fe9a42]

  - controller: have I+P assigning ct_zones for l3gateway ports
  [Upstream: f5d01be7f1337bdc7885dd45592aa3b376467790]

  - tests: fixed another set of flaky ovn-ic tests
  [Upstream: 650bffdbe0562dc364faaef51f51f99e82cccc56]

  - tests: wait for all flows to be installed before sending packets
  [Upstream: b3d03b94178bee2479d6f66ffa34255a7feb79eb]

  - tests: fixed "ipsec -- basic configuration"
  [Upstream: ac3ece28ca04cb74b21c80e2bd73767e29cca9a3]

  - tests: fixed "LSP incremental processing"
  [Upstream: fcbc0ae1c66e31c38ad9d5e099237e7446958035]

  - tests: do not start backup-northd by default
  [Upstream: 54fae8cbb5db827da95a2a52ff28f29e6c7740fe]

  - tests: fixed multiple tests not properly waiting for packets to be received
  [Upstream: a1422144228bb9924dbc75782734a09c6ecfa534]

  - ci: Pin Python, Fedora and Ubuntu runner versions.
  [Upstream: 627955eb79c2cd374853319c1d271c2fd1aeac37]

  - ovs: Bump submodule to include E721 fixes.
  [Upstream: 1fa7628db4155d3a39d55fe61d8d19fa7d3030af]

  - tests: Remove broken "feature inactivity probe" test.
  [Upstream: 5044376da0a1c14d1ccc4b41dfdbae14e74746b2]

  - readthedocs: Add the configuration file.
  [Upstream: 84c93511ce9a612b9a815cc1403b4841cc2e4c58]

  - Documentation: Use theme from Read The Docs.
  [Upstream: 39236dc3151baa3ace58c3ecd62ba0384b4c7a05]

  - ovs: Bump submodule to v3.2.1.
  [Upstream: 74172ed481f7c239d9258845eb493f17d731df99]

  - py-requirements: Remove hacking dependency and use recent flake8.
  [Upstream: c6a631f066eea105c57c265dc68257d1b5ee18e4]

  - ovn-ic: wakeup on ovsdb transaction failures
  [Upstream: be4364e62ac739744c1ef5bdd74a85fe39d6e37d]

  - ovn-ic: fix potential segmentation violation when ts is deleted

  - controller, northd: Wait for cleanup before replying to exit
  [Upstream: aae5b2ec8ec9f4f9f7c9738d23818c2c4967627c]

  - tests: Add missing check for scapy.
  [Upstream: ea9310a5f1e37b373abffd85f7a8dd4fefc30c4e]

  - ci: Apply the ASAN workaround only for Clang <16
  [Upstream: 15bf24b889b178d4cdbb6166d3bc5434ec59f9fc]

  - ci: Use proper uname argument to get the HW type
  [Upstream: 2efc23f3edf0293ec81a167e1c4bf99fe5601ca2]


author: Numan Siddique <numans@ovn.org> - 23.09.0-91
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-81)
  - Revert "ovn: add geneve PMTUD support"
  [Upstream: ed4e4a94ba44f5d5be5148ee82f336cab3adc7ec]

  - northd: forward arp request to lrp snat on.
  [Upstream: 20ea3b63fb3a2fce2c9e273bfbdcb4d8399b8091]

  - northd: fix missing port up when deleting and adding back an lsp
  [Upstream: 8cabb443ae88dded5cd1800bdcea5c5760954d25]

  - ovn-macros: Make sure stopped daemons continue before the test ends.
  [Upstream: e54ec661ef67cd93d1a72de907b37fab522bc2f9]

  - system-test: Fix tcpdump usage in LB template tests.
  [Upstream: 5141c9d4c7c861f6a65a711e59a4e64ae7d2fcdb]

  - tests: Move SCTP test from kernel only to general OVN system tests.
  [Upstream: 49d33629595a9c7fc44d7ac86926c83e475b322d]

  - tests: Remove 'protoinfo' from the conntrack entries for SCTP tests.
  [Upstream: d87ffbe44d5b5c3f143c1e38e868f9db636b4565]

  - northd: Skip transient IDL records.
  [Upstream: 44a40011f0b7f465c1eb60c9016bd56e09d7e538]

  - system-tests: Consolidate wait condition in CoPP test
  [Upstream: ba7a45bde1de25868e0b16d8e58e6d523e2034ab]

  - pinctrl: Fix up comments about sending RST packets for healthcheck.
  [Upstream: 4ef375edc8bee094f24b9e649dc01ce3edd2034b]


author: Numan Siddique <numans@ovn.org> - 23.09.0-100
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-91)
  - actions: Make sure affinity learnt flows are auto deleted.
  [Upstream: 6ce267af7124a93306d8b5bf4944379536ecd264]

  - pinctrl: Directly retrieve desired port_binding MAC.
  [Upstream: f85f5e3929c916985c7dfc0fe0f0433347d8bfae]

  - test: add dedicated test for garp-max-timeout
  [Upstream: 28fef02db946ba8113a2752e1abf61d8df5797e3]

  - treewide: Fix small memory leaks reported by static analysis
  [Upstream: 0d5e6d65db19845aede9198d8e164d934a5f189e]

  - Documentation: Add note about pinning the container after release
  [Upstream: 1a70f3f171c032c2329bb66f2e62d233ce19a494]

  - ci: Cover more container posibilities
  [Upstream: 639aff0896527f9c48c56d6dfb3fdce84403b6dd]

  - ci: Build container image before very job
  [Upstream: ca0f17758559ed836dfa0220e472ea99438cefb8]

  - ovs: Bump submodule to include IDL "spurious delete" fix.
  [Upstream: 9c97cdcd757ce356a85b3e6dde7eb19776fe4c38]

  - Correct ethtype referencing incorrect values
  [Upstream: e9863e57320d24f8fb0d02436834f795ba58ce48]


author: Dumitru Ceara <dceara@redhat.com> - 23.09.0-106
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-100)
  - northd: Make sure that affinity flows match on VIP.
  [Upstream: 859e8d917408d50272c910f78ac44ab8a593aa13]

  - Fix segfault due to ssl-ciphers.
  [Upstream: d39e7c0068ecc719a3d6154e2078d6d9a3435fc9]

  - ovn: Add tunnel PMTUD support. (#2241711)
  [Upstream: 6d2f9d60760a793c15ca7423b24ff586b653fc76]

  - controller: fixed potential segfault when changing tunnel_key and deleting ls.
  [Upstream: 120075357a624293d52a1905c47a1bd249d2157c]

  - northd: Use proper field for lookup_nd
  [Upstream: 8e25c1c37aa3301f69bc89ee49ffaef5aa2f76fd]

  - checkpatch.py: Port checkpatch related changes from the OVS repo.
  [Upstream: bf334c65e1ead50013880049564d445919aee61f]


author: Numan Siddique <numans@ovn.org> - 23.09.0-109
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits
  since last update (23.09.0-106)
  - ovs: Bump submodule to tip of OVS branch-3.2.
  [Upstream: f224c6e5f69c099ddb008f99dba2e19a902a612f]
  - actions: Use random port selection for SNAT with external_port_range.
  [Upstream: 7ee483a45df19e11e26487e64a93940e0de64b9a]
  - ovn-ic: Handle NB:name updates properly.
  [Upstream: 0e684ec206e8979694912ad1037145ccd0d0b7dc]


author: Dumitru Ceara <dceara@redhat.com> - 23.09.0-112
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits since
  last update (23.09.0-109)
  - northd: Remove the protocol match from ECMP symmetric reply flows.
  [Upstream: a36f2955be67a6581e81fb3ae27de825e0046b52]
  - northd: Explicitly handle SNAT for ICMP need frag.
  [Upstream: 6a4c412f43d5f1c076fac3784a4ffeb8a3861436]
  - actions: Adjust the ct_commit_nat action.
  [Upstream: 069842478601c0b01b0cc3117637e5a00344fcb6]


author: Numan Siddique <numans@ovn.org> - 23.09.0-131
changelog:
  - Sync to upstream OVN branch-23.09. Below are the commits since
  last update (23.09.0-109)

  - northd: Don't create fair Sb meters for ACLs with logging disabled.
  [Upstream: 215d53ea1436f03ab26a1a65df0824b319e6a4c3]

  - ci: Update crun in GitHub actions runner.
  [Upstream: 5bf1773c90ef7b61a85946027a987184e8d74fa0]

  - ci: Update crun in Cirrus CI cloud image.
  [Upstream: afa3da7677ed4d484612b820d8f09642d5821bd4]

  - controller: ofctrl: Use index for meter lookups.
  [Upstream: 683fb6dd2fc3c2ab025b1dd87ba2883e40d6d775]

  - tests: Fix "router port type update and then ...".
  [Upstream: c463d1de1a0c2cd368a4809f0d9eda9792b79851]

  - tests: Fix "ovn-controller - Chassis other_config".
  [Upstream: cbd4f2fcd0223a96c739dd07eded753f8f9b2a30]

  - tests: Fix "ofctrl wait before clearing flows".
  [Upstream: 81486b62bcac0d081ca907533ae34d826605b485]

  - tests: Fix flaky "ovn-controller-vtep - binding 1".
  [Upstream: 48a08a447340b095e8472d40aaaac5156320b4c1]

  - tests: Fix flaky "options:requested-chassis ...".
  [Upstream: a088df5aa75a7207ccdd751d2167e1536113737f]

  - tests: Fix typos in tests.
  [Upstream: 0a5726652b202add51d1dc8b6557268673e6cc51]

  - tests: Have tests fail when adding veth peer fails.
  [Upstream: 609a943e33c734d368f2019e7d3b41e31bb31d6f]

  - pinctrl: dns: Ignore additional records.
  [Upstream: 511f5a214226be84ae3b9434ffcab973e37295eb]

  - ovn-ic: Fix global blacklist filter for IPv6 addresses.
  [Upstream: 27d23712260b9faba23018ce973010743e30ccf7]

  - tests: Fix macro OVN_CHECK_PACKETS_CONTAIN.
  [Upstream: 28b0eddff68c5a64b80071a9a27cb79e3fac792a]

  - features.c: Always wait on the rconn.
  [Upstream: c0c9e507470439c3220b99c361f71e0cff3406fc]

  - ci: Bump CirrusCI Ubuntu image version
  [Upstream: 41e7f01872dae61b9ffcc1d3871865313ff90619]

  - Documentation: Fix broken links in ovn-sandbox.rst.
  [Upstream: 99d22a176f45971516803129f08c7a37a50bc4a1]

  - ovn-sb.xml: Remove IPv4-only restriction from Service Monitors.
  [Upstream: 97fca0f846bf6839144fc04fed6f0873198b4f89]

  - github: Update versions of action dependencies (Node.js 20).
  [Upstream: 2981936b61e0e0694c16df979b986dd1cb60b147]


author: Numan Siddique <numans@ovn.org> - 23.09.0-139
changelog:
  - github: Reduce ASLR entropy to be compatible with asan in llvm 14.
  [Upstream: 835b43811dfcf469da3123911240cc953b52bac3]

  - Prepare for 23.09.4.
  [Upstream: 5ce1740aaa02ebeed561ffb6298b71035b5c908a]

  - Set release date for 23.09.3.
  [Upstream: fbdc94d4309f28ad59e41025ff42945478dd12cc]

  - controller: Set check_tnl_key for BFD on tunnel ifaces.
  [Upstream: c966c35f1b1cd8c5351ccac3051843fbf765c2ae]

  - tests: Skip EDNS test if the scapy version doesn't support it.
  [Upstream: 7af89a5e50a4ba75a3ea5c393499f1e0fa0a6abb]

  - northd: Don't skip the unSNAT stage for traffic towards VIPs.
  [Upstream: 094b1217345a8ae5935fdd4dfec4949f46197377]

  - Prepare for 23.09.3.
  [Upstream: 7bd52d7a25f2ddad0be25a5e54a3eb63d98a19d8]

  - Set release date for 23.09.2.
  [Upstream: 04b23938302ad54f453f622a4b0c2fa5e27d3e41]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.1.1-1
changelog:
  - Update to 9.1.1 (close RHBZ#2276572)
  - Replace downstream man page with upstream generated man page


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.6-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.6-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.6-rc1
  - Changed licenses to SPDX
  - Removed non-packet-specific wildcards from files-sections


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.6-0.2.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.6-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.6-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.6-0.3.rc2
changelog:
  - have users/groups created via sysusers(compat)
    f37 and below seem not to support 189:haclient as ID needed to mimic
    the user-group-configuration we had up to now


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.6-4
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.6,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.6


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc1


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.3.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc4


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-4
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.7,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7


author: Jerry James <loganjerry@gmail.com> - 2.15.3-1
changelog:
  - Version 2.15.3
  - Add a metainfo file
  - Use https URLs
  - BR pari-nflistdata for the tests
  - Temporarily disable tests on 32-bit x86


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.1.1-2
changelog:
  - Misc changes
  - Move meson_test to check section
  - Reorder BuildRequires alphabetically
  - Reorder install files
  - Use %%{buildroot} instead of RPM_BUILD_ROOT
  - Use %%autorelease for Release tag


author: Stefano Brivio <sbrivio@redhat.com> - 0^20240318.g615d370-1
changelog:
  - Switch license identifier to SPDX (Dan Čermák)
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2024_02_20.1e6f92b..2024_03_18.615d370


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.7-1
changelog:
  - update to 1.3.7 (upstream switched to meson build system)
  - fix python shebang in lddtree.py
  - build manpages (using xmlto)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.7-2
changelog:
  - ship the bash version of lddtree to avoid dependency on python3-pyelftools
  - fix python shebang in pylint
  - fix deprecated patchN macro usage


author: Nathan Scott <nathans@redhat.com> - 6.1.0-1
changelog:
  - Remove unintended pmie logging to syslog (BZ 2223348)
  - Update pcp selinux policy to match core (BZ 2223568)
  - Resolve pmlogconf SIGABRT during fsync (BZ 2229441)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Resolves i686/x86_64 conflicts of PCP packages (BZ 2248841)
  - Additional selinux policy updates for pmproxy (BZ 2223568)
  - Update to latest PCP sources.


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.36.1-496
changelog:
  - 5.36.1 bump (see <https://metacpan.org/release/SHAY/perl-5.36.1/view/pod/perldelta.pod>
    or release notes)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.36.3-498
changelog:
  - 5.36.3 bump (see <https://metacpan.org/release/PEVANS/perl-5.36.3/view/pod/perldelta.pod>
    or release notes)


author: Xavier Bachelot <xavier@bachelot.org> - 0.079-1
changelog:
  - Update to 0.079 (RHBZ#2241629)
    - Fix CVE-2019-17362 in bundled libtomcrypt
  - Add upstream patch to fix tests with Math::BigInt 1.999840+ (RHBZ#2240587)


author: Paul Howarth <paul@city-fan.org> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory (CVE-2013-4184)


author: Paul Howarth <paul@city-fan.org> - 2.1.4-1
changelog:
  - Update to 2.001004 (rhbz#2162566)
    - Drop Dir::Self test dependency (use FindBin instead)
  - Use SPDX-format license tag
  - Use %{make_build} and %{make_install}
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.1.5-1
changelog:
  - Update to 2.001005 (rhbz#2164971)
    - Fix failures with perl 5.37.5..5.37.6 caused by new internal opcode
      structure for anonymous subs


author: Paul Howarth <paul@city-fan.org> - 2.1.6-1
changelog:
  - Update to 2.001006 (rhbz#2182064)
    - Work around perl core issue GH#20950 (use re "eval" doesn't capture lexical
      %^H environment like eval() does and stringifies it instead), by
      downgrading the previous hard error to a warning (in the new category
      'Function::Parameters') and switching Function::Parameters off in the
      affected scope


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.002002 (rhbz#2183727)
    - Provide //= for default arguments, which are also used when the caller
      passes in undef
    - Provide more type combinators in parameter declarations: In addition to |
      (union types), now ~ & / are also supported (for
      complement types, intersection types, and alternative types, respectively)
    - Enable type coercions: if a parameter has a declared type and that type
      supports coercions ($type->has_coercion returns true), call its
      ->coerce($value) method to transform arguments before type checking
    - Enable inline type checks: if a parameter has a declared type and that
      type supports inlining ($type->can_be_inlined returns true), its inline
      code (as provided by ->inline_check('$value')) is baked into the function
      definition instead of a call to ->check($value), which may speed up type
      checks
    - Move a big chunk of tests to xt/ (author testing only)
    - Remove xt/ from the distribution
    - Enable parallel testing by default (with -j4)
    - Fix (hopefully) Windows builds using nmake.exe
    - Work around old versions of ExtUtils::MakeMaker not providing
      is_make_type(), whose version dependency is undocumented (sigh)
    - Restrict GNU syntax for exporting variables to type 'gmake'; should fix
      building on BSD, Solaris, etc.
    - Declare dependency on ExtUtils::MakeMaker 7+ and remove compatibility code
      for older versions


author: Petr Pisar <ppisar@redhat.com> - 0.050-2
changelog:
  - Fix handling empty closure callbacks (#2181971)
  - Convert a license to an SPDX format
  - Package tests in perl-Glib-Object-Introspection-tests package


author: Paul Howarth <paul@city-fan.org> - 4.76-1
changelog:
  - Update to 4.76
    - Add autoconf test for siginfo_t, which is, of course, not available on
      Windows
    - Disable syscalls on Solaris, as perl seems to provide an incompatible
      syscall prototype that clashes with sys/syscall.h
    - Add MAP_FIXED_NOREPLACE, MAP_SHARED_VALIDATE, MAP_SYNC and MAP_UNINITIALIZED


author: Paul Howarth <paul@city-fan.org> - 4.77-1
changelog:
  - Update to 4.77
    - Add MFD_HUGETLB_2MB and MFD_HUGETLB_1GB constants
    - Add fexecve
    - Add lots of missing functions to @EXPORT_OK
  - Use SPDX-format license tags


author: Paul Howarth <paul@city-fan.org> - 4.78-1
changelog:
  - Update to 4.78
    - Add IO::AIO::mount and IO::AIO::umount
    - Add a bunch of symbols from sys/mount.h


author: Paul Howarth <paul@city-fan.org> - 4.79-1
changelog:
  - Update to 4.79
    - The autoconf result of the mount check was not used, so it failed to
      compile on most systems
    - Fix format string usage for croak in extract_stringvec function


author: Paul Howarth <paul@city-fan.org> - 4.80-1
changelog:
  - Update to 4.8
    - Remove long-obsolete "paths must be absolute" text in aio_open/stat
      descriptions
    - Another workaround for the low-quality musl libc
    - Test for umount separately, as it is more portable
    - Some low-quality posix attempts (openbsd, osx) declare the availability of
      fexecve() but then don't even bother to implement a stub
  - Avoid use of deprecated patch syntax


author: Petr Pisar <ppisar@redhat.com> - 0.58-2
changelog:
  - Correct a perl-Image-PNG-Libpng-tests license to
    (GPL-1.0-or-later OR Artistic-1.0-Perl) AND LicenseRef-Fedora-UltraPermissive


author: Paul Howarth <paul@city-fan.org> - 1:0.87-1
changelog:
  - Update to 0.87
    - Turn off internal POK flag for number scalars
  - Avoid use of deprecated patch syntax


author: Ondřej Sloup <osloup@redhat.com> - 2.0-0-1
changelog:
  - Rebase to the newest version
  - Fix compatibility with PostgreSQL 15
  - Remove patches as they are merged in upstream
  - Use autosetup
  - Manually build the package for documentation


author: Ondrej Sloup <osloup@redhat.com> - 2.0-3
changelog:
  - Make man docs only without subpackage as intended
  - Update upstream URL
  - Stop building llvmjit (rhbz#2214559, rhbz#2237282)
  - Prepare the package for EPEL9 (rhbz#2189271)


author: Devrim Gündüz <devrim@gunduz.org> - 1.20.1-1
changelog:
  - Update to 1.20.1, per changes described at:
    https://www.pgbouncer.org/changelog.html#pgbouncer-120x


author: Devrim Gündüz <devrim@gunduz.org> - 1.21.0-1
changelog:
  - Update to 1.21.0, per changes described at:
    https://www.pgbouncer.org/changelog.html#pgbouncer-121x


author: Remi Collet <remi@remirepo.net> - 8.0-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php81
  - add patch for PHP 8.1 from
    https://github.com/websupport-sk/pecl-memcache/pull/88


author: Remi Collet <remi@remirepo.net> - 8.0-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php82
  - add patch for PHP 8.2 from
    https://github.com/websupport-sk/pecl-memcache/pull/104


author: Remi Collet <remi@remirepo.net> - 1.14.0-1
changelog:
  - update to 1.14.0
  - raise dependency on libbson and libmongoc 1.22.0
  - raise dependency on libmongocrypt 1.5.0


author: Remi Collet <remi@remirepo.net> - 2.2.0-5
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php82
  - add upstream patch for 8.2 and from
    https://github.com/m6w6/ext-pq/pull/44


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - build out of sources tree
  - use new SPDX license ID Xdebug-1.03
  - open https://github.com/xdebug/xdebug/pull/896 relax test expectation


author: Remi Collet <remi@remirepo.net> - 1.0.6-7
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php82
  - add fix from https://github.com/eduardok/libsmbclient-php/pull/94


author: Remi Collet <remi@remirepo.net> - 1.1.0-1
changelog:
  - update to 1.1.0
  - drop patch merged upstream
  - add workaround for regression in libsmbclient 4.16.9/4.17.5
    from https://github.com/eduardok/libsmbclient-php/pull/100


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2022.04.01-4
changelog:
  - Rework specfile to follow the Fedora packaging guidelines
  - Drop unused BuildRequires on faad2-devel
  - Drop unnecessary Requires on ffmpeg-libs


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2022.04.01-5
changelog:
  - Adjust BuildRequires for ffmpeg
  - Perform checksum and signature checking for source tarball
  - Preserve timestamps on install
  - Package shared library and development headers


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.9.5-1
changelog:
  - Update to v0.9.5
  - Drop Patch0 (format string security - fixed upstream)
  - Move themes and sound effects to a -data subpackage
  - Install icons to hicolor theme


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0^20230418git2cbe462-1
changelog:
  - Update to git snapshot 2cbe462
  - Switch to C++14 as now required by the system gtest package
  - Run the tests (disabled by default due to requirements)


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Vitaly Zaitsev <vitaly@easycoding.org> - 3.1-1
changelog:
  - Updated to version 3.1.
  - Fixed FTBFS on Fedora 37+.
  - Performed major SPEC cleanup.
  - Switched to SPDX license tag.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.7.9-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 14.3-9
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
  - Resolves: #1980992
  - Resolves: #2121696


author: Ondrej Sloup <osloup@redhat.com> - 15.1-1
changelog:
  - Update to v15
  - Add llvm pointer patch
  - Add new build require for perl-FindBin
  - Resolves: https://fedoraproject.org/wiki/Changes/PostgreSQL_15


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 97.0.351b-1
changelog:
  - Update to v97.0.351b (beta release)
  - Drop Patch0 (no longer needed, changes now done via config values)
  - Install icons for the savefile mimetype as well
  - Use a patch for renaming files instead of relying on sed


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 2.4.9-7
changelog:
  - Backport patches from master for SSTP to connect using EAP-TLS to Azure VnetGWay and Windows RAS server


author: Alastor Tenebris <livingnightmare@thelivingnightmare.xyz> - 2.6.2-2
changelog:
  - Fix dependencies
  - Use provided icon and desktop file
  - Remove uneeded patch
  - Added bash-completion subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.14.1-2
changelog:
  - Install shell completion support system-wide
  - Supported shells (for system-wide completion) are bash, fish, and zsh;
    procs can also generate completions for elvish and powershell.


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Improve file ownership in doc subpackage
  - Minor fix in the doc subpackage (no need to remove rst files)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-7
changelog:
  - Fix for buffer overflow detected in response.c API test on s390x
    causing FTBFS in Fedora 39 (rhbz#2226148)
    (https://github.com/proftpd/proftpd/pull/1692)


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683,
      CVE-2023-51713)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-5
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-15.1
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Pavel Raiskup <praiskup@redhat.com> - 5.5.13-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/5.5.13
    https://github.com/okbob/pspg/releases/tag/5.5.12
    https://github.com/okbob/pspg/releases/tag/5.5.11
    https://github.com/okbob/pspg/releases/tag/5.5.10
    https://github.com/okbob/pspg/releases/tag/5.5.9
    https://github.com/okbob/pspg/releases/tag/5.5.8
    https://github.com/okbob/pspg/releases/tag/5.5.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.7.2-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/5.7.2
    https://github.com/okbob/pspg/releases/tag/5.7.1
    https://github.com/okbob/pspg/releases/tag/5.7.0
    https://github.com/okbob/pspg/releases/tag/5.6.4
    https://github.com/okbob/pspg/releases/tag/5.6.2
    https://github.com/okbob/pspg/releases/tag/5.6.0


author: Pavel Raiskup <praiskup@redhat.com> - 5.7.5-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/5.7.5
    https://github.com/okbob/pspg/releases/tag/5.7.4
    https://github.com/okbob/pspg/releases/tag/5.7.3


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.80-1
changelog:
  - New version
    Resolves: rhbz#2255025
  - Fixed Terrapin vulnerability in some SSH protocol extensions
    Resolves: CVE-2023-48795


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.81-1
changelog:
  - New version
    Resolves: rhbz#2275179
  - Fixed vulnerability allowing recovery of NIST P-521 private keys
    Resolves: CVE-2024-31497


author: Christian Krause <chkr@fedoraproject.org> - 0.2.13-1
changelog:
  - Update to new upstream release 0.2.13
  - Update spec file to latest Python packaging guidelines
  - Migrated to SPDX license
  - Remove version requirement of setuptools dependency
  - Fixes BZ 2238132 (PyAudio 0.2.11 does not work, needs update to >= 0.2.12)


author: Miro Hrončok <mhroncok@redhat.com> - 3.42.0-4
changelog:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in the noarch subpackage is bit-to-bit identical
    Related: rhbz#1915764


author: Jos de Kloe <josdekloe@gmail.com> 2.1.4-7
changelog:
  - remove no longer needed BR for python3-pyproj
  - SPDX migration: checked the license text, and concluded that MIT is the
    correct SPDX license tag.


author: José Matos <jamatos@fedoraproject.org> - 2.3.3-1
changelog:
  - Update to 2.3.3
  - Update license tag to SPDX license identifier
  - Update url for source
  - Add patch to work with Python 3.12


author: Ondrej Sloup <osloup@redhat.com> - 4.0.30-7
changelog:
  - Use autosetup
  - Use name macro
  - Fix pyodbc fails to build with Python 3.11: error: PyUnicode_EncodeUTF8 (#2049428)


author: Miro Hrončok <mhroncok@redhat.com> - 4.0.30-10
changelog:
  - Fix version in the Python package metadata
  - This makes the package provide python3dist(pyodbc) = 4.0.30 instead of python3dist(pyodbc) = 4.0.0-unsupported
  - This makes the package buildable with python-packaging 22+


author: Ondřej Sloup <osloup@redhat.com> - 4.0.39-1
changelog:
  - Rebase to the newest version
  - Remove the PyUnicode_AsUTF8String Patch file, as it is already merged in upstream
  - Change packaged files to match new setup.py requirements


author: Jos de Kloe <josdekloe@gmail.com> 3.3.1-2
changelog:
  - Adjust py_build_libdir to let sphinx build the documentation
    with the latest setuptools version (62.4.0)


author: Jos de Kloe <josdekloe@gmail.com> 3.4.1-2
changelog:
  - SPDX migration: checked the license text, and concluded that MIT is the
    correct SPDX license tag.


author: Tim Orling <ticotimo@gmail.com> - 0.7.1-9
changelog:
  - Add patch for deprecated distuls (rhbz 2154875)
    - https://github.com/libstatgrab/pystatgrab/pull/7
    - minimum libstatgrab is 0.91
    - BR python3-setuptools
    - drop .rpmlint (unused filters)
    - migrated to SPDX license


author: Michael J Gruber <mjg@fedoraproject.org> - 1.22.0-1
changelog:
  - Update to new upstream release 1.22.0 (rhbz#2186919)
  - Text extraction now includes glyphs that overlap with clip rect, not just those contained entirely.
  - Compatibility with mupdf 1.22.0, various bug fixes.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Roman Inflianskas <rominf@aiven.io> - 0.8.1-7
changelog:
  - Use autorelease macro

  -* Fri Jan 26 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.1-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  -
  -* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.1-4
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  -
  -* Fri Jul 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.1-3
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  -
  -* Thu Jul 13 2023 Roman Inflianskas <rominf@aiven.io> - 0.8.1-2
  -- Rebuilt for Python 3.12 (fedora#2220104)
  -
  -* Thu Jun 29 2023 Roman Inflianskas <rominf@aiven.io> - 0.8.1-1
  -- Update to 0.8.1 (resolve rhbz#2211696)
  -
  -* Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-2
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  -
  -* Tue Jan 10 2023 Italo Garcia <italo.garcia@aiven.io> - 0.8.0-1
  -- Update to version 0.8.0
  -
  -* Tue Jul 12 2022 Italo Garcia <italo.garcia@aiven.io> - 0.7.2-1
  -- Initial package


author: Sergio Pascual <sergiopr@fedoraproject.org> - 5.1-3
changelog:
  - New upstream source 5.1
  - Deselect some tests failling with Python 3.11 (https://github.com/astropy/astropy/issues/13522)
  - Deselect test failling in i686


author: Christian Dersch <lupinix@fedoraproject.org> - 5.2.1-1
changelog:
  - new version, required for numpy 1.24 compat
  - reenable some tests
  - disable test astropy/visualization/wcsaxes/tests/test_misc.py::test_contour_empty


author: Christian Dersch <lupinix@fedoraproject.org> - 5.2.2-1
changelog:
  - new version
  - enable astropy/visualization/wcsaxes/tests/test_misc.py::test_contour_empty (fixed upstream)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.27.0-9
changelog:
  - Run tests with/without PYTHONASYNCIODEBUG=1 and uvloop
  - This follows the “test” target of the upstream Makefile


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Fabian Affolter <mail@fabian-affolter.ch> - 5.6.2-1
changelog:
  - Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)
  - Fixes CVE-2024-26134 (closes rhbz#2265036, closes rhbz#bug 2265035)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.20.0-12
changelog:
  - Patch for sphinx 6.0 some deprecated items removal
  - Backport upstream patch for testsuite to support sasl 3.6.5


author: Miro Hrončok <mhroncok@redhat.com> - 4.7.1-6
changelog:
  - Use SPDX license identifiers
  - The schematron files are not Zlib licensed, but MIT
  - Package the lxml[cssselect], lxml[html5] and lxml[htmlsoup] extras


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0.5.0^20230922gita2e068b-2
changelog:
  - Call nipnost (nosetests) with --traverse-namespace
  - This imitates upstream’s GitHub workflow, but we don’t see any effect


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.1-2
changelog:
  - Update license breakdown and convert to SPDX
  - Fully update optional dependencies and their versions
  - Do not BR/Recommend pyarrow on 32-bit arches, where it is unavailable
  - Drop accommodations for 32-bit ARM and Fedoras older than 36
  - Update test skips for i686


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.2-1
changelog:
  - Update to 1.5.2
  - Re-enable python-gcsfs BR/weak-dep. on F38 and later
  - Work around a harmless test failure with libarrow/pyarrow 10
  - Allow a slightly older numpy version for F37
  - Skip a test that sometimes hangs on aarch64 and ppc64le
  - Additional test skips for F37
  - Drop some test skips that are no longer needed
  - Fix several flaky test failures by no longer running tests in parallel


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.3-3
changelog:
  - Drop unnecessary weak dependency on python-pandas-datareader
  - Backport proper pyarrow 10 and 11 support


author: Jerry James <loganjerry@gmail.com> - 1.3.2-2
changelog:
  - Provide python3-PARIKernel
  - Trim the -pari patch down to the essentials
  - Provide URLs for upstream pull requests


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.17.0-1
changelog:
  - Update to 3.17.0
  - Fix Flatpak build (see
    https://src.fedoraproject.org/rpms/python-pycryptodomex/pull-request/3)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2222843)
  - Update License to SPDX
  - Run the tests
  - Support Cython 3 (fix RHBZ#2254038)
  - Package examples as documentation


author: Jakub Kadlcik <frostyx@email.cz> - 0.15.24-3
changelog:
  - License breakdown
  - Install license and doc files
  - Depend on the correct wlroots version
  - Use pytest instead of unittest
  - Specify pyproject_save_files


author: Julian Sikorski <belegdol@fedoraproject.org> - 1.7.0-2
changelog:
  - Fixes around Source0 and URL
  - run fedpkg new-sources
  - update the URL
  - use a more specific Source0 archive name


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Sandro <devel@penguinpee.nl> - 0.2.0-1
changelog:
  - Update to 0.2.0
  - Switch to Meson build system
  - Use PyPI source
  - Drop patch and associated BR (fixed upstream)


author: Matthieu Saulnier <fantom@fedoraproject.org> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Update SourceURL
  - Minor fix in the doc subpackage (no need to move rst files in another directory)


author: Federico Pellegrin <fede@evolware.org> - 1.0.0-1
changelog:
  - Bump to version 1.0.0
  - Local patch for Python 3.12 compatibility (fixes rhbz#2165556)
  - Fix wrong version in provides (fixes rhbz#2048102)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.5.0-1
changelog:
  - Update to 5.5.0 (closes RHBZ#2127227)
  - Update License to SPDX and include additional license texts


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.2.0-1
changelog:
  - Bump to 4.2.0 rhbz#2063287 fixes FTBFS rhbz#2064646
  - Minor changes to spec, like using https for URL
  - Simplify some of checks for different builds


author: Dominik Mierzejewski <dominik@greysector.net> 0.16.0-1
changelog:
  - update to 0.16.0 (#2014873)
  - drop obsolete patch
  - improve patch for inconsistent `closed` attribute issue


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-28
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
    Related: rhbz#2144072


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.02-3
changelog:
  - Use "standardsymbolsps" instead of "symbol" when searching for the
    Symbols font in order to not find Noto Symbols instead


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.02-8
changelog:
  - Exclude failing gtest-math-matrix-test-testMatrixTSparse on Fedora 40
    (aarch64, ppc64le and s390x)


author: Mattias Ellert <ellert@ellert.se> - 6.30.04-1
changelog:
  - Update to 6.30.04
  - Drop patch root-adjust-test-for-failures-on-aarch64-ppc64le-s390x.patch
    (accepted upstrem)
  - Exclude failing TClingDataMemberInfo.Offset test on s390x


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 2021.05.10.00-21
changelog:
  - Rebuild for folly 2023.07.03.00
  - Fix build failure with Python 3.12 (fixes: rhbz#2155443)
  - Fix build failure with fmt 10 (fixes: rhbz#2219458)
  - Use SPDX license identifiers


author: Panu Matilainen <pmatilai@redhat.com> - 4.18.0-11
changelog:
  - Disable debuginfod lookups in rpmbuild scripts
  - Exclude kernel modules from ELF dependency generation


author: Miro Hrončok <mhroncok@redhat.com> - 4.18.1-3
changelog:
  - Explicitly require rpm-sequoia >= 1.4.0 on runtime to avoid
    rpm: symbol lookup error: /lib64/librpmio.so.9: undefined symbol: _pgpVerifySignature2


author: José Matos <jamatos@fedoraproject.org> - 3.5.13-1
changelog:
  - Update to 3.5.13
  - Update license tag to SPDX license identifier
  - Clean package (workarounds no longer required)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Menšík <pemensik@redhat.com> - 1.17.0-2
changelog:
  - Move unbound user creation to libs (#2149036)
  - Use systemd-sysusers for user creation (#2105416)
  - Keep original DNSSEC root key as config (#2132103)


author: Paul Wouters <paul.wouters@aiven.io - 1.17.1-1
changelog:
  - Resolved rhbz#2160397 unbound-1.17.1 is available (bugfix release)
  - Add support for building with redis


author: Petr Menšík <pemensik@redhat.com> - 1.19.1-1
changelog:
  - Update to 1.19.1 for CVE-2023-50387, CVE-2023-50868 (#2264029)
  - Ensure only unbound group members can make changes


author: Paul Wouters <paul.wouters@aiven.io> - 1.19.1-2
changelog:
  - Fix trim of EDE text from large udp responses from spinning cpu.
  - b rootserver patches from rawhide


author: Petr Menšík <pemensik@redhat.com> - 1.19.3-1
changelog:
  - Update to 1.19.3 (rhbz#2268404)
  - Fix CVE-2024-1931, Denial of service when trimming EDE text on
    positive replies. (rhbz#2268419)
  - Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672.
  - Bug fixes


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.8-1
changelog:
  - Update to version 5.6.8
  - Disable tests that require file attributes if the file system doesn't
    support them


author: Kalev Lember <klember@redhat.com> - 0.23.90-5
changelog:
  - Misc packaging cleanup
  - Sort BuildRequires and Requires and split them out one per line
  - Move GObject Introspection bindings to -gtk and -gtk-devel subpackages
  - Split libzbar out to zbar-libs subpackage
  - Tighten subpackage deps with %{_isa}
  - Drop manual requires on pkgconfig and rely on rpm dep extractor
  - Rename zbar-python3 to python3-zbar as per latest Python guidelines
  - Use make_build and make_install macros


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.12-3
changelog:
  - Remove extra distro-applied CFLAGS passed to user built C extensions
  - https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~a2-2
changelog:
  - Add the python3.13-freethreading and python3.13-freethreading-debug packages
  - See https://peps.python.org/pep-0703/
  - ppc64le and s390x are excluded for now, support is expected in 3.13.0a3


author: Python Maint <python-maint@redhat.com> - 3.13.0~a5-2
changelog:
  - Move all test modules to the python3.13-test package, namely:
    - __phello__
    - _xxinterpqueues
    - _xxsubinterpreters
    - xxlimited
    - xxlimited_35
    - xxsubtype
  - Remove internal usage of @LIBPYTHON@


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.18-2
changelog:
  - Fix implicit int compiler warning in configure check for PTHREAD_SCOPE_SYSTEM
  - Resolves: rhbz#2147519


author: Jan Grulich <jgrulich@redhat.com> - 0.1.3-2
changelog:
  - Backport upstream fixes and improvements
    - fix crash on forcing repaint on non-existing decorations
    - fix indentation of buttons when placed on the left side
    - apply correct button order
    - use Adwaita icons as fallback


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.9.0-3
changelog:
  - Add id to developer element in AppStream XML metadata
  - Fixes failure to build/validate with appstream 1.0.2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.9.0-4
changelog:
  - Use the autogenerated archive instead of the “release” archive
  - Fixes an obsolete FSF postal address in the license file.
  - Fixes the need to patch in upstream PR#103, which was released


author: Richard W.M. Jones <rjones@redhat.com> - 7.2.0-7
changelog:
  - Fix virtio-blk-pci detect-zeroes=unmap (RHBZ#2173357)
  - Fix build with glib2 2.75.3 (RHBZ#2173639)
  - Disable the tests on i686


author: Stefan Becker <chemobejk@gmail.com> 2.0-1
changelog:
  - update to version 2.0
  - drop downstream patches
  - switch from qmake + make to cmake + ninja
  - disable fill form shortcuts as they don't work under Wayland anyway
  - add translations (de, pl)


author: Packit <hello@packit.dev> - 3.0-1
changelog:
  - Increase major version due to the API change (Martin Tůma)
  - Code samples cleanup (Martin Tůma)
  - Added HiDPI and Overzoom sections (Martin Tůma)
  - Cosmetics (Martin Tůma)
  - Added overzoom description (Martin Tůma)
  - Keep the overzoom and scaled size separated (Martin Tůma)
  - Version++ (Martin Tůma)
  - Added support for overzoom (Martin Tůma)
  - Example codes cleanup (Martin Tůma)


author: Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
changelog:
  - cherrypick from upstream master patches for known vulnerabilities:
  - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
  - CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c


author: John Kacur <jkacur@redhat.com> - 2.4-1
changelog:
  - Update to latest version upstream
  - Include upstream patch to fix affinity being set even when -a not set


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Richard Hughes <richard@hughsie.com> - 0.4.1-1
changelog:
  - Rebase to upstream version 0.4.1
  - Fixed CVE-2022-36039
  - Fixed CVE-2022-36040
  - Fixed CVE-2022-36041
  - Fixed CVE-2022-36042
  - Fixed CVE-2022-36043
  - Fixed CVE-2022-36044


author: Jeremy Newton <alexjnewt at hotmail dot com> - 5.5.1-2
changelog:
  - Add missing perl-generators for generating requires
  - Fix some issues with hipcc.pl
  - Add fix build for aarch64


author: Jeremy Newton <alexjnewt at hotmail dot com> - 5.5.1-5
changelog:
  - Move some sed patching to patch files, sent some to upstream
  - Add hipconfig patch for incorrect HIP_CLANG_INCLUDE detection
  - Using rocm-device-libs 16.2 simplifies hipcc patching
  - Minor clean up


author: Onuralp SEZER <thunderbirdtr@fedoraproject.org> - 1.7.4-1
changelog:
  - rpi-imager version 1.7.4
  - Telemery disabled
  - Auto-update checker disabled
  - autosetup patch param added in case of patches added
  - 0001-fix-header-import-cstdint.patch added
  - ExcludeArch s390x because upstream not supported


author: Colin Walters <walters@verbum.org> - 2023.1-4
changelog:
  - Cherry pick
    https://github.com/coreos/rpm-ostree/pull/4308/commits/476afb1d08513cb74cd1d28490c5e028c70f67c2


author: Attila Lakatos <alakatos@redhat.com> - 8.2204.0-1
changelog:
  - rebase to 8.2204.0
    resolves: rhbz#1951970
  - CVE-2022-24903 rsyslog: Heap-based overflow in TCP syslog server
    resolves: rhbz#2082302


author: Attila Lakatos <alakatos@redhat.com> - 8.2210.0-1
changelog:
  - rebase to 8.2210.0
    resolves: rhbz#2097173
  - Drop capabilities to the necessary set via libcap-ng
    resolves: rhbz#2127403


author: Attila Lakatos <alakatos@redhat.com> - 8.2210.0-2
changelog:
  - Move all if rhel feature conditions to bcond
  - Move to bcond: rdkafka, relp, mysql, pgsql, gssapi, gnutls, udpspoof, omamqp1
  - Move to bcond: clickhouse, imdocker, improg


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 21.12-3.20220401git8228f0d
changelog:
  - Comment some of the config options makes for more sensible defaults
  - Use install instead of cp for config file


author: Vít Ondruch <vondruch@redhat.com> - 3.1.3-173
changelog:
  - Disable MJIT test cases on i686 due to issues with PCH.
  - Fix CGI causing issue with leading '.' in domain names.


author: Yaakov Selkowitz <yselkowi@redhat.com> - 3.1.3-175
changelog:
  - Use SHA256 instead of SHA1 where needed in Openssl tests
  - Let OpenSSL choose the digest if digest for Openssl::OCSP::BasicResponse#sign is nil


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.13.10-2
changelog:
  - Use %gem_extdir_mri instead of ext for %check due to ruby3.2 change
    for ext cleanup during build


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.3.2-22
changelog:
  - F-36: rebuild against ruby31
  - modernize spec file, especially move %gem_install to %build
    to fix FTBFS with package_notes


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.24-6
changelog:
  - Add explicit service unit ordering, after multi-user.target
    Backports: https://github.com/coreos/zincati/pull/831


author: Julio González Gil <packages@juliogonzalez.es> - 1.91-1
changelog:
  - Update to 1.91 from https://github.com/s3fs-fuse/s3fs-fuse (#2061848)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.91


author: Julio González Gil <packages@juliogonzalez.es> - 1.92-1
changelog:
  - Update to 1.92 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 2.9.0-9
changelog:
  - Add patch for liborigin-3.0.2 (https://github.com/SciDAVis/scidavis/issues/30)
  - Fix patch macro syntax


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.0-1
changelog:
  - Add async API for parsing and verifying tokens
  - Add configuration API
  - Make nbf claim optional for non-scitokens tokens
  - Update to OpenSSL 3.0


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.2-1
changelog:
  - Add support for API-configurable cache home
  - Fix enforcer_acl_free logic
  - scitokens_internal: catch matching exception type after jwt-cpp update


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.0-1
changelog:
  - Allow the scitokens library user to setup a custom CA file
  - Fix typecast errors in scitoken_status_get_*() that caused async queries to fail
  - Fix logic error in deserialize_continue() that caused async deserialization to fail


author: Christian Krause <chkr@fedoraproject.org> - 2.5.0-1
changelog:
  - Update to latest upstream
  - Update License tag and add more %license files
  - Drop upstreamed patch
  - Update configure patch
  - Flag bundled lua


author: Rich Mattes <richmattes@gmail.com> - 6.3.1-1
changelog:
  - Update to release 6.3.1
  - migrated to SPDX license
  - Fix use of deprecated ruby function
  - Resolves: rhbz#2165939


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Chauvet <kwizart@gmail.com> - 0.32.1-2
changelog:
  - Enable RPM conditional --with facedetect, using opencv
    Disabled by default for now - see rhbz#2190013


author: Robert Scheck <robert@fedoraproject.org> - 30-6
changelog:
  - Spec file improvements by Robert-André Mauchin
    - Add tarball signature verification
    - Add patch to keep files timestamps
    - Rewrite summary (no encrypt)
    - Add Public Domain License
  - Switch to upstream commit for keeping file timestamps


author: David Trudgian <dtrudg@sylabs.io> - 3.11.0-1
changelog:
  - Upgrade to 3.11.0 upstream version.
  - This is a compatible upgrade to a new upstream minor version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.1-1
changelog:
  - Upgrade to 3.11.1 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.2-1
changelog:
  - Upgrade to 3.11.2 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.3-1
changelog:
  - Upgrade to 3.11.3 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.4-1
changelog:
  - Upgrade to 3.11.4 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.5-1
changelog:
  - Upgrade to 3.11.5 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-3
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.3.6-23
changelog:
  - Rebuilt for Fedora unretired package
  - Follows comments by lichaoran and Artur Frenszek-Iwicki, see RH BZ #2173236
  - Note that the Source0 file actually has a v instead of slim in the address at the very end. However, the file that is downloaded is slim-version.tar.gz.


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-1
changelog:
  - Rebuilt 1.4.0 from slim-fork
  - Updated Fedora and selinux patches to correspond to 1.4.0
  - Note no need to remove files from slim.service and libslim.so.
  - selinux patch now removes xserver_arguments   -nolisten tcp -deferglyphs 16
  - TOD0: changes to the default wallpaoer for Fedora, perhaps through a patch


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-2
changelog:
  - Changed default theme to the current Fedora theme
  - dropped desktop-backgrounds-basic and included f38-backgrounds-base


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-4
changelog:
  - Changed  
    
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON -DUSE_PAM=yes  to 
    
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON -DUSE_PAM=yes -DUSE_CONSOLEKIT=no -DBUILD_SHARED_LIBS=no -DBUILD_SLIMLOCK=yes (per RH BZ #2173236, comment #18)
  - Also removed rm /builddir/build/BUILDROOT/slim-1.4.0-6.fc38.aarch64//usr/lib64/libslim.so as a consequence	- Removed /usr/lib64/libslim.so.1.4.0 from before the config files
  -Changed daemon default to no in slim.conf


author: Stewart Smith <stewart@flamingspork.com> - 2.26-37
changelog:
  - Build with the right LDFLAGS (fixes rpmlint warning about PIE binaries, hardens build)
  - Remove executable bit on man page.


author: Michel Lind <salimma@fedoraproject.org> - 22.05.9-4
changelog:
  - Consistently use rpmautospec by using %autorelease
  - Fix license: GPLv2 should be GPLv2 or later
  - Use SPDX license identifiers


author: Neil Hanlon <neil@fedoraproject.org> - 22.05.11-1
changelog:
  - Update to 22.05.11 (#2155310)
  - Closes CVE-2023-49933 through CVE-2023-49938; RHBZ bugs:
  - #2254496, #2254499, #2254502, #2254505, #2254507, #2254509


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.0-18
changelog:
  - Replace file path dependency by package name (rhbz#1731702). With dnf
    this was "illegal" but didn't have any practical effect. With dnf5 this
    causes an installation error (c.f. #2173051).


author: Neal Gompa <ngompa@fedoraproject.org> - 2.4.14-1
changelog:
  - Rebase to 2.4.14
  - Modernize packaging to current packaging guidelines
  - Drop unsupported devel content
  - Run test suite


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 2.5.1-1
changelog:
  - Update to 2.5.1
  - Convert to SPDX license identifier
  - Add compat subpackage for snoopy-disable and snoopy-enable


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 16.0.0-2
changelog:
  - Rebase downstream patch Fix-standalone-builds-with-LLVM_LINK_LLVM_DYLIB-ON to the version that got merged upstream
  - Rebase to a later commit while at it


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Bryan Gurney <bgurney@redhat.com> - 3.5.9-1
changelog:
  - Update to 3.5.9
  - Remove patch macro for serde_derive patch
  - Remove vendor-serde_derive.patch file


author: Ondrej Mosnáček <omosnacek@gmail.com> - 1.0.18-1
changelog:
  - Update to version 1.0.18
  - Refresh and correct the license list and the resulting License field
  - Convert the License field to SPDX
  - Resolves: fedora#2219104


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: Arne Reiter <redhat@arnereiter.de> - 5.9.6-1
changelog:
  - Resolves rhbz#2080070 strongswan-5.9.6 is available
  - Fixed missing format string in enum_flags_to_string()


author: Arne Reiter <redhat@arnereiter.de> - 5.9.8-1
changelog:
  - Resolves rhbz#2112274 strongswan-5.9.8 is available
  - Patch1 removes CFLAGS -Wno-format which interferes with -Werror=format-security
  - Add BuildRequire for autoconf and automake, now required for release
  - Remove obsolete patches


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.9.8-2
changelog:
  - Add BR perl-generators to automatically generates run-time dependencies
    for installed Perl files


author: Radovan Sroka <rsroka@redhat.com> - 1.9.12-1
changelog:
  - Rebase to sudo 1.9.12p2
  - sudo-1.9.12p2 is available Resolves: rhbz#2137775
  - sudo: arbitrary file write with privileges of the RunAs user Resolves:
    CVE-2023-22809


author: Radovan Sroka <rsroka@redhat.com> - 1.9.13-1
changelog:
  - Rebase to sudo 1.9.13p2
  - sudo-1.9.13p2 is available Resolves: rhbz#2169840
  - sudo: double free with per-command chroot sudoers rules Resolves:
    CVE-2023-27320


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Nils Philippsen <nils@tiptoe.de> - 0.10.18-1
changelog:
  - Update to 0.10.18
  - Fix license and URLs
  - Build with meson instead of waf
  - Fix typos and trailing white space
  - Use package name macro consistently


author: Xavier Bachelot <xavier@bachelot.org> 6.2.68-1
changelog:
  - Update to 6.2.68
  - Dont unbundle jquery-ui on EL9
  - Use Archive::Zip::SimpleZip instead of Archive::Zip where available


author: Xavier Bachelot <xavier@bachelot.org> 6.2.70-2
changelog:
  - Fix sympasoap socket ownership for httpd (RHBZ#2152381)
  - Fix both wwwsympa and sympasoap socket ownership for nginx


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.2.99.4-12
changelog:
  - Migrate to SPDX identifier
  - Fix up BuildRequires
  - Some more clean up spec file
  - Add rest support


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.6-1
changelog:
  - Update to v12.5.6 (#2059133)
  - Build position independent executables
  - Use systemd-rpm-macros
     - See https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.4-1
changelog:
  - Update to v12.7.4 (rhbz#2216900)
  - CVE-2023-33204 - check_overflow() function can work incorrectly that lead to an overflow


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253.12-1
changelog:
  - Version 253.12
  - Just some documentation patches, a hwdb update, and fix for udev on
    systemd with too much hardware devices, and some fixes for networkd.
  - Fixes rhbz#2242759 by virtue of rebuild.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253.13-1
changelog:
  - Version 253.13
  - No major bugs resolved, just a bunch of small fixes all over
    (documentation, udev, nspawn, cryptsetup…). Includes an update to the
    hardware database.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253.14-1
changelog:
  - Version 253.14
  - A bunch of small bugfixes: sd-journal, battery alarm detection,
    portablectl, new system call definitions for seccomp, systemd-networkd,
    log messages, D-Bus interfaces, systemd itself, udevadm, udev rules,
    systemd-homed, systemd-stdio-bridge, systemd pam modules, systemd-
    resolved.
  - An update to the hardware database


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253.15-1
changelog:
  - Version 253.15
  - A bunch of fixes for various components: systemd, systemctl, hostnamectl,
    bootctl, systemd-networkd, systemd-network-generator, systemd-analyze,
    systemd-dissect, man pages.
  - Also has a patch for CVE-2023-7008 (rhbz#2222260)


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases
  - migrated to SPDX license


author: Bojan Smojver <bojan@rexursive com> - 4.4.2-1
changelog:
  - bump up to 4.4.2
  - CVE-2022-27939, CVE-2022-27940, CVE-2022-27941, CVE-2022-27942,
  - CVE-2022-28487, CVE-2022-37047, CVE-2022-37048, CVE-2022-37049


author: Bojan Smojver <bojan@rexursive com> - 4.4.3-3
changelog:
  - CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786
    CVE-2023-27787 CVE-2023-27788 CVE-2023-27789


author: Jan Macku <jamacku@redhat.com> - 6.23.00-1
changelog:
  - Update to tcsh-6.23.00 (#2022337)
  - Drop tcsh-6.22.04-expose-HIST_PURGE.patch                   - applied by upstream
  - Drop tcsh-6.22.04-modifiers-no-longer-breaks-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Tom Callaway <spot@fedoraproject.org> - 10:20220321-65
changelog:
  - artificial bump to 65, I accidentally had ketcindy in both texlive and texlive-base.
    removed it from texlive, rebuilt at release=65, building here at 65 so we have it


author: Tom Callaway <spot@fedoraproject.org> - 10:20220321-66
changelog:
  - conditionalize use of poppler (and disable it by default)
  - fix issue where vasprintf() could be undefined in a build


author: Tom Callaway <spot@fedoraproject.org> - 10:20220321-72
changelog:
  - apply upstream fix for CVE-2023-32700
  - patch texmfcnf.lua
  - fix mptopdf.pl and thumbpdf.pl to have proper interpreter lines


author: Kalev Lember <klember@redhat.com> - 1.13.1-5
changelog:
  - Drop unrecognized configure options
  - Add buildrequires to get correct font and xkb directories from pkg-config
  - Re-enable server in flatpak builds and fix the build


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-11
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-13
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.10.1-1
changelog:
  - Update to v1.10.1
  - Drop Patch0 (change the default plugin dir - now supported upstream)
  - Migrate license tag to SPDX


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 1.5.0-2
changelog:
  - fix: correctly install extensions with shebangs and as executables for
    this, they've been moved to /usr/lib64/timew/, since in /usr/share/, they
    can't be executable etc.


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.2-28
changelog:
  - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718)
  - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462
    (rhbz#2254376, rhbz#2254381)
  - fix incorrect text element encoding (upstream isssue #51)
  - compile and run tests


author: Göran Uddeborg <goeran@uddeborg.se> - 221220-3
changelog:
  - Build nonatomic_uint64 on platforms where it is possible. - Include
    ns_capable as a general tool.


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Gabriel Somlo <gsomlo@gmail.com> - 1.2.1-16.20230226gitf767e56
changelog:
  - Update to newer snapshot
  - Temp. use bundled pybind11 (https://github.com/pybind/pybind11/issues/4529)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.7.0.1-0.10.20191104git36b0587
changelog:
  - drop obsolete and no longer available BR kf5-gpgmepp-devel, CMakeLists.txt
    prefers already BRed gpgmepp-devel and qgpgme-devel, fixes FTBFS (#1988027)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.7.0.1-0.12.20220117git266c757
changelog:
  - New git snapshot, hopefully fixes longstanding FTBFS (#1923550, #1988027)
  - F34 only: Use -Wl,--copy-dt-needed-entries to work around F34 FTBFS (#1923550)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.7.0.1-0.13.20220117git266c757
changelog:
  - Add BuildRequires: kf5-kio-devel (workaround for #2046299)
  - Add BuildRequires: kf5-ki18n-devel (workaround for #2046310)
  - Add BuildRequires: grantlee-qt5-devel (workaround for #2046574)


author: Jiri Kucera <jkucera@redhat.com> - 0.7.0.1-0.15.20220904git5295175
changelog:
  - New git snapshot, up to gpgme[>=1.18.0] fix (gpgme is not rebased yet)
    Note that no new strings have been added from commit 5295175 to now so it is save
    to fetch the latest ./po revision from SVN
  - Fixes FTBFS with akonadi-contact>=22.04.x
  - Add support for ragel 7
  - Use SPDX license identifier
  - Spec file cleanup


author: Gustavo Costa <xfgusta@gmail.com> - 0.5-1
changelog:
  - Update to 0.5 (rhbz#2187771)
  - Use python to run tests
  - Set CFLAGS
  - Add patch to update the version


author: Michal Schmidt <mschmidt@redhat.com> - 1.13.0-3
changelog:
  - Update to upstream release 1.13.0
  - Drop autogen.sh call. Upstream tarball does not have it anymore.


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 0.17.13-1
changelog:
  - preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
  - Fix tests in Gentoo sandbox build


author: Packit <hello@packit.dev> - 0.17.15-1
changelog:
  <!-- generated by eloquent/github-release-action -->
  <!-- original source:
  - test fixes
  -->

  <ul>
  <li>test fixes</li>
  </ul>


author: Packit <hello@packit.dev> - 0.17.16-1
changelog:
  <!-- generated by eloquent/github-release-action -->
  <!-- original source:
  - preload: Wrap __getcwd_chk()
  - uevent_sender: Fix fd leak in sendmsg_one
  - Fix gcc -fanalyzer complaints
  -->

  <ul>
  <li>preload: Wrap __getcwd_chk()</li>
  <li>uevent_sender: Fix fd leak in sendmsg_one</li>
  <li>Fix gcc -fanalyzer complaints</li>
  </ul>


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Radovan Sroka <rsroka@redhat.com> - 1.1.0-1
changelog:
  - rebase to 1.1.0
  Resolves: rhbz#2058450
  - fixed CVE-2019-25058 usbguard: Fix unauthorized access via D-Bus
  Resolves: rhbz#2058466


author: Radovan Sroka <rsroka@redhat.com> - 1.1.0-2
changelog:
  - selinux: allow policykit dbus comunnication
  - restore support for access control filenames without a group


author: Radovan Sroka <rsroka@redhat.com> - 1.1.0-3
changelog:
  - usbguard requires selinux subpackage
  - this ensures that the selinux package and all its dependencies are
    not pulled into containers and other systems that do not use SELinux


author: Björn Esser <besser82@fedoraproject.org> - 2.3.0-5
changelog:
  - Add tools package
  - Add explicit perl BRs
  - Add example program to doc package
  - Drop google site-verification file from doc package
  - Require main package in doc package to avoid file conflicts


author: Remi Collet <remi@remirepo.net> - 2.0.22-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php83
  - add patch for PHP 8.3 from
    https://github.com/unbit/uwsgi/pull/2559


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.25.1-1
changelog:
  - Update to 2.0.25.1, drop merged patches
  - Use github.com as source for the main tarball
  - Do not build for i686 any more


author: Mark Wielaard <mjw@fedoraproject.org> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.21.0-9
changelog:
  - Add valgrind-3.21.0-gdb-multi-mode-stdout-redirecting-to-stderr.patch
  - Use %patch -Pn instead of deprecated %patchn


author: Mark Wielaard <mjw@fedoraproject.org> - 3.22.0-0.1.RC1
changelog:
  - Upstream 3.22.0-RC1
  - Remove all upstreamed patches
  - Adjust valgrind-3.16.0-some-stack-protector.patch
  - Adjust valgrind-3.16.0-some-Wl-z-now.patch
  - Add cachegrind.h to valgrind-devel package


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Yanko Kaneti <yaneti@declera.com> - 2017.08-0.18.20230312gitab6e6f3
changelog:
  - Pull a recent snapshot. Brings back the kms backend. Drop upstreamed patch
  - Migrate to SPDX license identifier


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.2.1-4
changelog:
  - Convert license tag to SPDX
  - Rework specfile to follow the Fedora packaging guidelines
  - Fix outstanding rpmlint issues
  - Rework package description


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-47
changelog:
  - Temporary pass -Wno-deprecated-declarations to gcc to ignore
    deprecated warnings to be able to build against OpenSSL-3.0
  - Resolves: rhbz#1962603


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.1.20.3-9
changelog:
  - Add patch to bring up to 2022-03-15 git 17cc55f24d1c56f6a5dcca6065a227ca91d01c90
  - Remove patch for bigendian and boost-1.76 due to inclusion to git
  - Add in boost-1.78 for rawhide fix BZ#2084320 BZ#2113757
  - Add in minor fixes to clean up C20 warnings


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.3.0-1
changelog:
  - Updated to 3.3.0
  - Removed un-needed patches to code to fix C20 problems
  - Removed endian patches
  - Changed CMakefileLists.txt patch to remove -Werror for gcc-13
  - Opened upstream on that.


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.25-1
changelog:
  - update to 1.0.25 (#2047107)
  - skip some new failing tests on 32-bit
  - skip two more failing tests on i686


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.28-1
changelog:
  - update to 1.0.28 (#2065997)
  - run fixed tests on 32-bit again
  - work around test failures due to new gcc-12 warnings


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.30-1
changelog:
  - update to 1.0.30 (#2132095)
  - increase timeout to fix tests on ARM
  - skip some new failing tests on i686 and s390x for now


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.33-1
changelog:
  - update to 1.0.33 (#2203483)
  - drop obsolete patch
  - disable failing tests on aarch64 and ppc64le (reported upstream)
  - fix running tests on i686
  - disable failing wasm2c tests on s390x (big endian not supported upstream)
  - fix deprecated patchN macro usage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.4-12
changelog:
  - Explicitly set most Makefile variables
  - Moves the documentation into the standard location
  - Enables rebuilding localized man pages etc.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.5-2
changelog:
  - Remove explicit %set_build_flags, not needed since F36 > >
    https://www.fedoraproject.org/wiki/Changes/SetBuildFlagsBuildCheck


author: Bob Hepple <bob.hepple@gmail.com> - 0.3.1-0.1.20221222git3933ab2
changelog:
  - moving to rawhide/f38 - retire from fusion now that ffmpeg-free is available
  - merge https://github.com/ammen99/wf-recorder/pull/198:
  - change the default for wf-recorder to use only royalty-free codecs (libvpx-vp9) by default.
  - merge https://github.com/ammen99/wf-recorder/pull/197:
  - a minimal set of options to enable realtime encoding.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.0.0-1
changelog:
  - Rebase to 2.0.0 final
  - Split out libraries into libs subpackage
  - Delete unwanted static subpackage


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.16.0-1
changelog:
  - Update to 0.16.0 (#2142159)
  - Add patch for compatibility with older libdrm
  - Sync examples.meson.build with upstream, include all available examples


author: Damian Wrobel <dwrobel@ertelnet.rybnik.pl> - 1.16.1-1
changelog:
  - Update to 1.16.1 (rhbz#2264357)
  - Switch to use pkgconfig for BuildRequires
  - Specify Require for rtl-wmbus which supports needed -f option


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.10.50-1
changelog:
  - Update to 1.10.50
  - Enable GNOME Flashback applet
  - Support GNOME Shell 42 (#2132504) and 43 (#2132507)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.5.24-4
changelog:
  - spec cleanup for Fedora inclusion
  - use upstream patches with fixes for autoconf-2.71 and gcc-13
  - use SPDX License expression
  - use pkgconfig-style build dependencies for FFmpeg, cairo and pangocairo
  - drop unused build dependencies


author: Benson Muite <benson_muite@emailplus.org> - 1.0.0-5
changelog:
  - Fix soname and softlinking
  - Ensure devel package pulls in main library
  - Package static and dynamic libraries


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.1.8-2
changelog:
  - Unretire package
  - Update URL
  - Install README as doc
  - Use the appropriate macro to install the license
  - Relax globbing for man pages
  - Convert specfile from tabs to spaces


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.6.0-3
changelog:
  - Recommend only one chooser of 3 supported, prefer slurp.
  - Add missing BR: pkgconfig(systemd)
  - Add upstream patch for screenshot portal version
  - Convert License tag to SPDX


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-1
changelog:
  - update to xen-4.17.2 which includes
    x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569]
    x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982]
  - remove patches now included upstream


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-2
changelog:
  - arm32: The cache may not be properly cleaned/invalidated [XSA-437,
  	CVE-2023-34321]
  - top-level shadow reference dropped too early for 64-bit PV guests
  	[XSA-438, CVE-2023-34322]
  - x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.2.9-2
changelog:
  - Backport upstream patches for upstream 2 issues
    - Fix exporting only active layers
    - Sanitize a call to realloc (redhat #2252679)


author: José Expósito <jexposit@redhat.com> - 1.20.14-29
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 22.1.7-3
changelog:
  - Use the recommended way to apply conditional patches without
    conditionalizing the sources (for byte-swapped clients).


author: Olivier Fourdan <ofourdan@redhat.com> - 22.1.9-5
changelog:
  CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 22.1.9-6
changelog:
  CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083
    Fix for copy/paste error in previous CVE fix
    Fix to enable buttons with pointer gestures for backward compatibility
    with legacy X11 clients.


author: Olivier Fourdan <ofourdan@redhat.com> - 22.1.9-7
changelog:
  Fix for a regression introduced with the fix for CVE-2024-31083
    https://gitlab.freedesktop.org/xorg/xserver/-/issues/1659


author: Alisson Bruno <alissonbruno.sa@gmail.com> - 1:1.1.14-29
changelog:
  - Bring back XDM package
  - Update to version 1.1.14
  - Remove unnecessary patches for crypt.h and libdl
  - Add support to systemd notify
  - New patch for version 1.1.14 for audit and systemd unit file
  - Add patch to fix build when auto-identifying the libsystemd
  - Add patch to set -nolisten tcp


author: Bojan Smojver <bojan@rexursive.com> - 0.9.19-5
changelog:
  - Insert glamoregl module into xorg.conf for glamor package
  - Add missed Xorg server dependencies into glamor package


author: Tom Callaway <spot@fedoraproject.org> - 1:4.04-5
changelog:
  - pull in all the headers
  - apply null fix for default var in GlobalParams()
  - make a libxpdfcore for texlive-base to use


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.05-3
changelog:
  - Kill no longer needed workaround stuff
  - hacks/fonts: fix installation on out-of-source build
  - driver/Makefile.in: fix GLIB_COMPILE_RESOURCES source
  - hacks/Makefile.in: fix driver/prefs.o output location


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.06-2
changelog:
  - Make -base subpackage require -gl-base (debian bug 1030659)
  - switch_page_cb: backport debian fix for DPMS settings issue


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.07-2
changelog:
  - Update to 6.07
  - make_ximage: avoid integer overflow on left shift
  - convert_ximage_to_rgba32: likewise


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.1-1
changelog:
  - Update to version 0.8.1
  - Drop patch xxhash-pkgconfig-version.patch (accepted upstream)
  - Fix compilation on RHEL 7 ppc64le (gcc 4.8)
  - The x86 dispatch code now enables sse2 and avx2 separately, it can now use
    sse2 on EPEL 7 without trying to use avx2 which is not supported by gcc 4.8
  - Add documentation package - doxygen mark-up was added


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Vitaly Zaitsev <vitaly@easycoding.org> - 0.7.0-3
changelog:
  - Fixed broken CMake configs (rhbz#2188009).
  - Backported CMake fixes from upstream.
  - Converted license tag to SPDX.
  - Performed minor SPEC cleanup.


author: Michal Ambroz <rebus at, seznam.cz> - 4.2.1-1
changelog:
  - bump to 4.2.1
  - adding changes based on proposal of Mikel Olasagasti Uranga:
  - change to BSD license as yara was relicensed in 2016
  - minor changes to spec, like using https for URL
  - remove old patches
  - enable checks


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.2.2-1
changelog:
  - Update to 4.2.2 (#2103444)
  - BUGFIX: Fix buffer overrun in "dex" module (#1728).
  - BUGFIX: Wrong offset used when checking Version string of .net metadata (#1708).
  - BUGFIX: YARA doesn't compile if --with-debug-verbose flag is enabled (#1719).
  - BUGFIX: Null-pointer dereferences while loading corrupted compiled rules (#1727).


author: Jakub Jelen <jjelen@redhat.com> - 1.2.5-1
changelog:
  - New upstream release (#2167005)
  - Remove dependency on old version of python-yubikey-manager (#2148957)


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


