# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.4.2-1
changelog:
  - Bump version to 2.4.2
  - Issue 5793 - UI - fix suffix selection in export modal
  - Issue 5793 - UI - Fix minor crashes (#5827)
  - Issue 5825 - healthcheck - password storage scheme warning needs more info
  - Issue 5822 - Allow empty export path for db2ldif
  - Issue 5755 - Massive memory leaking on update operations (#5824)
  - Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  - Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  - Issue 5755 - The Massive memory leaking on update operations (#5803)
  - Issue 2375 - CLI - Healthcheck - revise and add new checks
  - Bump openssl from 0.10.52 to 0.10.55 in /src
  - Issue 5793 - UI - movce from webpack to esbuild bundler
  - Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  - Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  - Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  - Issue 5781 - Bug handling return code of pre-extended operation plugin.
  - Issue 5785 - move bash completion to post section of specfile
  - Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  - Issue 4758 - Add tests for WebUI
  - Issue 3527 - Add PROXY protocol support (#5762)
  - Issue 5789 - Improve ds-replcheck error handling
  - Issue 5786 - CLI - registers tools for bash completion
  - Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  - Issue 5646 - Various memory leaks (#5725)
  - Issue 5778 - UI - Remove error message if .dsrc is missing
  - Issue 5751 - Cleanallruv task crashes on consumer (#5775)


author: Mark Reynolds <mreynolds@redhat.com> - 2.4.2-2
changelog:
  - Bump version to 2.4.2-2
  - Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  = Issue 4719 - CI - Add dsconf add a PTA URL test


author: Mark Reynolds<mreynolds@redhat.com> - 2.4.3-1
changelog:
  - Bump version to 2.4.3-1
  - Issue 5729 - Memory leak in factory_create_extension (#5814)
  - Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  - Issue 5876 - CI Test random failure - Import (#5879)
  - Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  - Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  - Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  - Issue 5785 - CLI - arg completion is broken
  - Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  - Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  - Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  - Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  - Issue 4551 - Paged search impacts performance (#5838)
  - Issue 4758 - Add tests for WebUI
  - Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  - issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  - Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)


author: James Chapman <jachapma@redhat.com> - 2.4.4
changelog:
  - Bump version to 2.4.4
  - Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  - Issue 5973 - Fix fedora cop RawHide builds (#5974)
  - Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  - Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  - Issue 5786 - Update permissions for Release workflow
  - Issue 5960 - Subpackages should have more strict interdependencies
  - Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  - Issue 4843 - Fix dscreate create-template issue (#5950)
  - bugfix for --passwd-file not working on latest version (#5934)
  - Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  - Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  - Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  - issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  - Issue 1925 - Add a CI test (#5936)
  - Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  - Issue 1870 - Add a CI test (#5929)
  - Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  - Issue 5761 - Worker thread dynamic management (#5796)
  - Issue 1802 - Improve ldclt man page (#5928)
  - Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  - Issue 1317 - Add a CI test (#5923)
  - Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  - Issue 1115 - Add a CI test (#5913)
  - Issue 5848 - Fix condition and add a CI test (#5916)
  - Issue 5848 - Fix condition and add a CI test (#5916)
  - Issue 5914 - UI - server settings page validation improvements and db index fixes
  - Issue 5909 - Multi listener hang with 20k connections (#5917)
  - Issue 5902 - Fix previous commit regression (#5919)
  - pass instance correctly to ds_is_older (#5903)
  - Issue 5909 - Multi listener hang with 20k connections (#5910)
  - Issue 5722 - improve testcase (#5904)
  - Issue 5203 - outdated version in provided metadata for lib389
  - Bug Description:
  - issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  - Issue i5846 - Crash when lmdb import is aborted (#5881)
  - Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  - Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  - Issue 5082 - slugify: ModuleNotFoundError when running test cases
  - Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  - Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  - Issue 5872 - part 2 - fix is_dbi regression (#5887)
  - Issue 4758 - Add tests for WebUI
  - Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  - Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  - Issue 5872 - `dbscan()` in lib389 can return bytes


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5
  - Issue 5989 - RFE support of inChain Matching Rule (#5990)
  - Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  - Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  - Issue 5954 - Disable Transparent Huge Pages
  - Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  - Issue 5984 - Crash when paged result search are abandoned (#5985)


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.6-1
changelog:
  - Update to 2.4.6
  - Resolves: CVE-2024-1062 (rhbz#2261884)
  - Resolves: CVE-2024-2199 (rhbz#2283632)
  - Resolves: CVE-2024-3657 (rhbz#2283631)
  - Resolves: CVE-2024-5953 (rhbz#2292109)


author: Jonathan Wright <jonathan@almalinux.org> - 32:9.18.28-1
changelog:
  - update to 9.18.28 rhbz#2299467
  - Fixes CVE-2024-4076
  - Fixes CVE-2024-1975
  - Fixes CVE-2024-1737
  - Fixes CVE-2024-0760


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1:2.3.5-7
changelog:
  - Backport upstream fix for possible crash at startup (rhbz#2173854)
  - Backport upstream fix for crash on missing icon (rhbz#2217189)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1:2.3.5-8
changelog:
  - Backport upstream fix for sending out too many notifications (rhbz#2193294)
  - Fix broken patch for possible crash at startup (rhbz#2246819)
  - Migrate license tag to SPDX


author: Carl George <carlwgeorge@fedoraproject.org> - 2.19.5-3
changelog:
  - Move Python module to correct location rhbz#2299798
  - Mark package as architecture-independent (noarch)


author: Packit <hello@packit.dev> - 0.22.1-1
changelog:
  - New upstream release
  - Drop too-strict dependencies patch. Fixed by:
    https://github.com/coreos/coreos-installer/pull/1453


author: Vladis Dronov <vdronov@redhat.com> - 15.9-25
changelog:
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors (bz 2279099)
  - Minor edits in the rpm scripts and the changelog


author: Kamil Dudka <kdudka@redhat.com> - 3.4.1-1
changelog:
  - introduce the csdiff-static subpackage with the csgrep-static executable
  - update to latest upstream release


author: Packit <hello@packit.dev> - 5.1.9-1
changelog:
  - Release 5.1.9
  - Update translations from weblate
  - Fix builds for RISC-V arch
  - Fix architecture autodetection
  - Move `am_i_root` function to common library
  - Implement `module info` command
  - Add user confirmation request if `history store` overwrites a file
  - Add `history store` command
  - Add API to serialize base::transaction in JSON
  - Add API to serialize transaction::transaction in JSON
  - Add docs for `provides`
  - Implement command `provides`
  - Read `copr.vendor.conf` in `/usr/share` first
  - Add docs for `check` command
  - Implement `check` command
  - Expose `utis/fs/file.hpp` and `temp.hpp` on API
  - Document dropping of the `skip-broken` for `upgrade`
  - Update man pages with missing dependency resolving-related options
  - Document `skip-broken` option only for related commands
  - Test for adding an empty list to memory file
  - Check serialized temporary files memory is non-empty
  - Add `microcode_ctl` to needs-restarting's reboot list
  - Fix reporting spec matches only source


author: Packit <hello@packit.dev> - 5.1.10-1
changelog:
  - Release 5.1.10
  - Document dnf5 plugins
  - Document How-to write libdnf5 plugin tutorial
  - Document How-to write dnf5 plugin tutorial
  - Document Templates for libdnf5 plugin
  - Document Templates for dnf5 plugin
  - Sort the module info table
  - `module info` print hint for active modules
  - `module info` print "[a]" for active modules
  - Ensure write permission before importing packages
  - Change module dependency string to be the same as in dnf4
  - `module info`: improve summary and description
  - Escape glob characters in pkg specs for `builddep`
  - Add `mc` alias for `makecache`
  - Implement `logdir`, `log_size` and `log_rotate` config options
  - remove redundant "all" in command `check`
  - Improve bash completion
  - Fix progress bars miss newlines on non-interactive output


author: Packit <hello@packit.dev> - 5.1.11-1
changelog:
  - Release 5.1.11
  - Update translations from weblate
  - Fix `--skip-unavailable` documentation
  - Make `cachedir`, `system_cachedir` relative to `installroot`
  - Workaround for swig-4.2.0 missing fragment dependency
  - Add `repoquery --recursive` option
  - Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
  - Update documentation of repoquery
  - Update documentation for remove command behavior
  - Limit search pattern for remove command to NEVRAs and files
  - Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
  - Disable zchunk on RHEL
  - Add dnf5.conf man page
  - Add RPM package Group attribute to dnf5daemon-server
  - Document changes related to caching
  - Document caching man page
  - Document Global Option `--help-cmd` dropped
  - log_event: Correct message for HINT_ICASE


author: Packit <hello@packit.dev> - 5.1.12-1
changelog:
  - Release 5.1.12
  - Update translations from weblate
  - Drop dnf obsoletion temporarily
  - Use regex for tmt plan names
  - Add tmt tests identifiers
  - PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
  - Suggest to use dnf5 command to install dnf5 plugins
  - Added arch option to the download command
  - CI: Upgrade action/checkout to a version with Node.js 20
  - Document explicit nevra remove commands and aliases dropped
  - build: Include <unistd.h> for isatty()
  - Change user info display on history command to include display name and username
  - Revert "Use focusbest: prefer latest deps versions over smaller transactions"
  - Fix a warning when building docs.
  - modules: Add a test for enabling default modules
  - modules: Add a new module stream to test data
  - modules: Respect defaults when enabling multiple streams of a module
  - modules: Fix TransactionItemType for not found modules
  - Build: Require GCC 10.1 for std::in_range<>()
  - Add --urlprotocol option to download command
  - dnfdaemon: Explicitly specify allowed config overrides
  - Disable dnf and dnf5daemon tests
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
  - doc: Add --destdir option to upgrade command manual
  - Move number placeholder to postposition in copr_repo.cpp
  - Added url option
  - Load protected packages from installroot
  - Make protected_packages an append options
  - doc: Create a man page for Aliases
  - I18N: Annotate literals in advisory command
  - Extend filter_release and filter_version tests
  - package_query: Fix filter_version with non EQ comparator
  - Fix clang format
  - Fix code for string deduplication
  - Use placeholders to deduplicate strings
  - Add __hash__(), __str__(), and __repr__() for Package
  - Add __hash__() for Reldep Python binding
  - Add __repr__() to python bindings of Reldep
  - Define tp_str slot for Reldep Class
  - group: Fix using allowerasing option
  - Fix misspellings
  - I18N: Remove duplicate empty message IDs from catalogs
  - I18N: Do not mark empty strings for a translation


author: Packit <hello@packit.dev> - 5.1.13-1
changelog:
  - Release 5.1.13
  - build: Adapt to changes in Fedora packaging of bash-completion
  - Change location of automatic.conf
  - Limit message log to one on dnf5 start
  - Implement waiting for network for dnf5 automatic
  - Write dnf5 commandline to the log
  - Implement dnf5-automatic: Tool for managing automatic upgrades
  - Parametrize output stream in transaction table
  - Add `download --srpm` option
  - Add missing dbus signal registations
  - Add new versionlock bindings
  - Implement `dnf5 versionlock` command


author: Packit <hello@packit.dev> - 5.1.14-1
changelog:
  - Update translations from weblate
  - Make the error to resolve module metadata more descriptive
  - Switch off deltarpm support
  - Limit number of dnf5daemon simultaneously active sessions
  - Make info and list commands case insesitive
  - Allow dnf5daemon configuration overrides for root
  - Add repoquery.hpp for swig-4.2.1 support


author: Packit <hello@packit.dev> - 5.1.15-1
changelog:
  - Update translations from weblate
  - Automatically set `upgrade --downloadonly` when `--destdir` is used
  - Write warnings to stderr too in config-manager plugin
  - Add repoid to generated repository name in config-manager plugin
  - Bump sdbus-cpp requirement to 0.9.0
  - Document and implement dnf5daemon Rpm interface
  - Document and implement dnf5daemon Goal interface
  - Document and implement dnf5daemon Repo interface
  - Document and implement dnf5daemon Base interface
  - Document and implement dnf5daemon Advisory interface
  - Document and implement dnf5daemon SessionManager interface
  - Add `dnf5daemon repo --enable/--disable` commands
  - automatic: Skip network availability check without remote repo
  - dnf5daemon: Rpm.list() works with commandline pkgs


author: Packit <hello@packit.dev> - 5.1.16-1
changelog:
  - Update translations from weblate
  - Document system-upgrade aliases
  - Improved Bash Completion
  - Print command line hints after resolve failure
  - Docuent Advisory.list() API usage
  - Add NEVRA field to advisory packages in dnf5daemon
  - Review and fix missing commands
  - Document dnf5daemon advisory
  - Document system-upgrade
  - system-upgrade: offline status subcommand
  - Add aliases `offline-distrosync`, `offline-upgrade`
  - Add `system-upgrade --offline` option
  - Add `offline`, `system-upgrade` commands


author: Omair Majid <omajid@redhat.com> - 8.0.103-1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Add dotnet.macros with %dotnet_runtime_arch and %dotnet_runtime_id


author: Neal Gompa <ngompa@fedoraproject.org> - 6.0-13
changelog:
  - Add patches to support enhanced RTMP and AV1 encoding through VA-API
  - Force AAC decoding through fdk-aac-free


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 3.0.0-2
changelog:
  - after merging the last PR to move to Qt6, merge the remaining features
    on behalf of Frank Dana (by Marie Loise Nolden <loise@kde.org>:
  - Build Qt6-based client with both Qt6 and Qt5 probes


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Joe Orton <jorton@redhat.com> - 2.4.59-3
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Joe Orton <jorton@redhat.com> - 2.4.59-4
changelog:
  - mod_ssl: add engine bcond, disable ENGINE support by default for F41+
  - mod_ssl: enable SSL_OP_NO_RENEGOTIATION (upstream PR#426)


author: Martin Osvald <mosvald@redhat.com> - 2.6.0-7
changelog:
  - Fix FTBFS on f41 caused by openssl engine headers moving from -devel to
    -devel-engine (rhbz#2300868)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.7.3-3
changelog:
  - Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 - Closes rhbz#2294255
    rhbz#2294007 rhbz#2292714


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~b2-4
changelog:
  - On Fedora 40+ x86_64 and aarch64, build Python with the experimental JIT compiler
  - To enable it on runtime, set the PYTHON_JIT environment variable to 1
  - https://peps.python.org/pep-0744/


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~b4-2
changelog:
  - Explicitly BuildRequire systemtap-sdt-devel
    https://fedoraproject.org/wiki/Changes/Separate_dtrace_package


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~b4-3
changelog:
  - Preserve AST nodes for f-string with single-element format specifiers
  - Fixes https://github.com/python/cpython/issues/122300


author: Jan Grulich <jgrulich@redhat.com> - 5.15.14-2
changelog:
  - HTTP2: Delay any communication until encrypted() can be responded to
    Resolves: CVE-2024-39936
  - KDE/Qt patchset collection respin


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.2
changelog:
  - Make fill_process_comm() open comm file as READ_ONLY
  - throttlectl.sh: use legal value for exit on fail
  - stalld: free malloc'd buffer on function exit
  - throttling.c:  null terminate input buffer
  - stalld.conf: Fix stalld service start fail
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Clark Williams <williams@redhat.com> - 1.19.3
changelog:
  - src/utils.c: fix off-by-one error in buffer allocation
  - Makefile:  change build to use FORTIFY_SOURCE=3


author: Clark Williams <williams@redhat.com> - 1.19.5
changelog:
  - Makefile:  refactor CFLAGS/LDFLAGS for local and koji builds
  - doc/Releases.md:  Add a note about tagging


author: Clark Williams <williams@redhat.com> - 1.19.6
changelog:
  - systemd: add BE environment variable to select backend
  - Makefile: add uninstall target
  - version bump to 1.19.6


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-11
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-13
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083


author: Jered Floyd <jered@redhat.com> 9.2.4-2
changelog:
  - Enable build with deprecated OpenSSL Engine
    https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine


author: Tomas Korbar <tkorbar@redhat.com> - 5.7.0-3
changelog:
  - Disable asm code parts
  - ASM code parts break support for cf-protection on x86_64,
    since they do not contain such feature. This situation is
    likely to repeat in the future and thus all code parts
    should be compiled by compiler which knows distribution
    settings.


