# changelog

author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.7-11
changelog:
  - 2263053 - CUPS/libppd PPD generators didn't check required attrs when deciding which driverless format to use,
    causing PPD generation to fail


author: Sérgio Basto <sergio@serjux.com> - 18.0.1-1
changelog:
  - Update ddnet to 18.0.1 (#2258303)
    Mon Jan 22 2024 Packit <hello@packit.dev> - 18.0-1
      - Update config_variables.h (Samuele Radici)
      - Resolves rhbz#2258303


author: Packit <hello@packit.dev> - 18.0.2-1
changelog:
  - Version 18.0.2 (Dennis Felsing)
  - Fix updater issue. Close #7867 (Learath)
  - Resolves rhbz#2260746


author: Packit <hello@packit.dev> - 18.0.3-1
changelog:
  - Version 18.0.3 (Dennis Felsing)
  - Fix client/server updates (Learath)
  - Scale angles using MousePos with zoom (furo)
  - Resolves rhbz#2262556


author: Sandro <devel@penguinpee.nl> - 19.24.4-3
changelog:
  - Update dependencies
  - Use `cblas` and `lapack` instead of `flexiblas`
  - Add `libav`, `libjxl` and `libsw` dependencies
  - Enable webp support


author: Sandro <devel@penguinpee.nl> - 19.24.4-5
changelog:
  - Clarify licenses and use SPDX throughout
  - All code is BSL-1.0
  - Examples are CC0-1.0 AND CC-BY-SA-3.0


author: Omair Majid <omajid@redhat.com> - 8.0.103-1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Add dotnet.macros with %dotnet_runtime_arch and %dotnet_runtime_id


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 3.0.0-2
changelog:
  - after merging the last PR to move to Qt6, merge the remaining features
    on behalf of Frank Dana (by Marie Loise Nolden <loise@kde.org>:
  - Build Qt6-based client with both Qt6 and Qt5 probes


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 1f0fab7ff86, aa19bc1d259, acc117b57f7,
    aff250145af, and 3644f41dc80.  These commits reduce the size of the
    generated gdb-index file, and also ensure that the gdb-index and
    dwarf-5 index are generated consistently even as the number of
    worker threads that GDB uses changes (RHBZ 2232086).


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Rebase to FSF GDB 14.1.
  - Update local patches:
      gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
      gdb-6.6-buildid-locate-rpm.patch
      gdb-6.6-buildid-locate.patch
      gdb-container-rh-pkg.patch
      gdb-core-open-vdso-warning.patch
      gdb-fedora-libncursesw.patch
      gdb-linux_perf-bundle.patch
  - Update backported patches which didn't make it into 14.1:
      gdb-rhbz-2232086-cpp-ify-mapped-symtab.patch
      gdb-rhbz-2232086-generate-gdb-index-consistently.patch
  - Drop upstreamed local patches:
      gdb-6.5-sharedlibrary-path.patch
  - Drop gdb-13.2 backports (which are now in gdb-14.1):
      gdb-binutils29988-read_indexed_address.patch
      gdb-bz2196395-debuginfod-legacy-openssl-crash.patch
      gdb-bz2237392-dwarf-obstack-allocation.patch
      gdb-bz2237515-debuginfod-double-free.patch
      gdb-rhbz2192105-ftbs-dangling-pointer
      gdb-rhbz2233961-CVE-2022-4806.patch
      gdb-rhbz2233965-memory-leak.patch
  - Adjust gdb.spec so that --with-mpfr is no longer passed to
    configure; doing so, combined with some configury changes triggered
    a latent build problem.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-2
changelog:
  - Backport upstream commit bc23ea51f8a83e9524dfb553baa8baacb29e68a9,
    potentially fixing RHBZ 2257562.


author: Alexandra Hájková <ahajkova@redhat.com> - 14.1-3
changelog:
  - Backport upstream commits 7ae9ecfd801 and 8170efad364 to avoid
    using _PyOS_ReadlineTState  (RHBZ 2250652).


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-2
changelog:
  - backport commit 91874afabcd to solve RHEL-2295897
    This fixes a double free when debugging mysql-workbench


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Sérgio M. Basto <sergio@serjux.com> - 1:0.8.1-0.1.0~sonamebump
changelog:
  - Update to 0.8.1 with new soname
  - Drop patches because they are already in the code
  - Add update_third_party.sh helper script


author: Joe Orton <jorton@redhat.com> - 2.4.58-4
changelog:
  - fix OpenSSL 3.0 deprecation warnings (r1913912, r1915067)
  - mod_ssl: move to provider API for pkcs11 support (#2253014)


author: Joe Orton <jorton@redhat.com> - 2.4.59-3
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Joe Orton <jorton@redhat.com> - 2.4.59-4
changelog:
  - mod_ssl: add engine bcond, disable ENGINE support by default for F41+
  - mod_ssl: enable SSL_OP_NO_RENEGOTIATION (upstream PR#426)


author: Julien Rische <jrische@redhat.com> - 1.20.1-8
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.2-4
changelog:
  - CVE-2024-37370 CVE-2024-37371: GSS message token handling
    Resolves: rhbz#2294678 rhbz#2294680
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Do not include files with "~" termination in krb5-tests


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-26458: Memory leak in src/lib/rpc/pmap_rmt.c
    Resolves: rhbz#2266732
  - CVE-2024-26461: Memory leak in src/lib/gssapi/krb5/k5sealv3.c
    Resolves: rhbz#2266741
  - CVE-2024-26462: Memory leak in src/kdc/ndr.c
    Resolves: rhbz#2266743
  - Add missing SPDX license identifiers
    Resolves: rhbz#2265333


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.0-4
changelog:
  - Initial rust-libcramjam0.2 compat package
  - Builds libcramjam/libcramjam-devel (C API shared library and headers) to
    avoid breaking ABI in stable releases, while allowing the source-only
    Rust crate package to be updated.


author: Nicola Sella <nsella@redhat.com> - 0.70.2-1
changelog:
  - Update to 0.70.2
  - Support "proxy=none" in main config (RhBug:2155713)
  - Fix #1558: Don't assume inclusion of cstdint
  - Disconnect monitors in dnf_repo_loader_finalize() (RhBug:2070153)


author: Jan Kolarik <jkolarik@redhat.com> - 0.71.0-1
changelog:
  - Update to 0.71.0
  - PGP: Use new librepo PGP API, remove gpgme dependency
  - API: Basic support for OpenPGP public keys
  - Avoid using GNU extensions in the dependency splitter regex
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838)
  - Make code C++20 compatible


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Jan Kolarik <jkolarik@redhat.com> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1
  - Fix https://issues.redhat.com/browse/RHEL-27657
  - subject-py: Fix memory leak
  - MergedTransaction: Calculate RPM difference between two same versions as no-op
  - Onboard packit tests
  - Add virtual destructor to TransactionItem


author: Evan Goode <egoode@redhat.com> - 0.73.2-1
changelog:
  - Update to 0.73.2
  - context: use rpmtsAddReinstallElement() when doing a reinstall
  - MergedTransaction: Fix invalid memory access when dropping items
  - ConfigParser: fix use-out-of-scope leaks
  - Since we use rpmtsAddReinstallElement rpm also uninstalls the package
  - Fix countme bucket calculation


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.0-5
changelog:
  - Use curl instead of wget, since wget2 is broken
    (https://gitlab.com/gnuwget/wget2/-/issues/652)
  - Remove yajl daemon dep and replace with jansson.


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Sérgio Basto <sergio@serjux.com> - 5.0.3-1
changelog:
  - Update lxc to 5.0.3 (inspired in https://build.opensuse.org/package/show/Virtualization:containers/lxc)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.18.0-1
changelog:
  - Update to version 6.18.0
  - Run autoreconf during build (following upstream)
  - Drop xmlsec related patches accepted upstream


author: Sandro Mani <manisandro@gmail.com> - 7.8-7
changelog:
  - Backport fix for CVE-2024-4216
  - Regenerate pgadmin4-7.8-vendor.tar.xz, fixes CVE-2024-4068, CVE-2024-4067


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.8-1
changelog:
  - Update to version 5.6.8
  - Disable tests that require file attributes if the file system doesn't
    support them


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.9-2
changelog:
  - Reduce socket path lengths used by tests for rpm 4.20 compatibility
  - Avoid test failures due to using the same port numbers in different tests


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-1
changelog:
  - Update to version 5.7.0
  - Drop patches accepted upstream
  - Drop EPEL 7 support from spec file (EOL)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-2
changelog:
  - Fix compilation error due to hidden overloaded virtual
  - Make documentation package not noarch due to non-reproducible filenames


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.15-20
changelog:
  - Remove extra distro-applied CFLAGS passed to user built C extensions
  - https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction


author: Jan Grulich <jgrulich@redhat.com> - 5.15.14-2
changelog:
  - HTTP2: Delay any communication until encrypted() can be responded to
    Resolves: CVE-2024-39936
  - KDE/Qt patchset collection respin


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


