# changelog

author: Justin M. Forbes <jforbes@fedoraproject.org> [6.11.0-0]
changelog:
  - Initial set up for stable Fedora branch (Justin M. Forbes)
  - Reset RHEL_RELEASE for 6.12 (Justin M. Forbes)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.11.1-0]
changelog:
  - media: qcom: camss: Fix ordering of pm_runtime_enable (Bryan O'Donoghue)
  - media: qcom: camss: Remove use_count guard in stop_streaming (Bryan O'Donoghue)
  - arm64: dts: allwinner: a64: Add GPU thermal trips to the SoC dtsi (Dragan Simic)
  - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (Dragan Simic)
  - arm64: dts: qcom: sc8280xp-x13s: Enable RGB sensor (Bryan O'Donoghue)
  - ARM: dts: bcm2837/bcm2712: adjust local intc node names (Stefan Wahren)
  - arm64: dts: broadcom: Add minimal support for Raspberry Pi 5 (Andrea della Porta)
  - Linux v6.11.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.11.3-0]
changelog:
  - Add bugs to BugsFixed (Justin M. Forbes)
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Basavaraj Natikar)
  - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts (Ping-Ke Shih)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - configs: fedora/x86: Set CONFIG_CRYPTO_DEV_CCP_DD=y (Hans de Goede)
  - common: arm64: build in some SCMI options (Peter Robinson)
  - common: Cleanup ARM_SCMI_TRANSPORT options (Peter Robinson)
  - Another BugsFixed entry (Justin M. Forbes)
  - Add bug to BugsFixed (Justin M. Forbes)
  - Turn on ZRAM_WRITEBACK for Fedora (Justin M. Forbes)
  - Config updates for 6.11.3 (Justin M. Forbes)
  - Linux v6.11.3


author: Augusto Caringi <acaringi@redhat.com> [6.11.5-0]
changelog:
  - Revert "fedora/configs: enable GPIO expander drivers" (Justin M. Forbes)
  - Add bluetooth bzs to BugsFixed (Justin M. Forbes)
  - Bluetooth: btusb: Fix not being able to reconnect after suspend (Luiz Augusto von Dentz)
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
  - Linux v6.11.5


author: Augusto Caringi <acaringi@redhat.com> [6.11.6-100]
changelog:
  - Turn off libbpf dynamic for perf on F39 (Justin M. Forbes)
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)


author: Sandro <devel@penguinpee.nl> - 3.28.3-5
changelog:
  - Add python3-cmake sub package providing metadata for Python packages
    depending on CMake to facilitate automatic dependency resolution.


author: Simone Caronni <negativo17@gmail.com> - 1.1.17^20240918git845568c-1
changelog:
  - Update to latest snapshot.
  - Switch to more recent packaging guidelines for snapshot versions.
  - Move egl-gbm ICD to egl-gbm package.


author: Michel Lind <salimma@fedoraproject.org> - 0.191-3
changelog:
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static
  - Add dependency on libzstd-static for elfutils-libelf-devel-static


author: Mark Wielaard <mjw@fedoraproject.org> - 0.191-6
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@fedoraproject.org> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    Add elfutils-0.190-profile-empty-urls.patch
    Add elfutils-0.190-riscv-flatten.patch


author: Jan Grulich <jgrulich@redhat.com> - 130.0.1-3
changelog:
  - Fix PipeWire camera support enablement for F41+
  - Additional WebRTC backports for PipeWire camera support


author: Martin Stransky <stransky@redhat.com> - 131.0-2
changelog:
  - Fix regression from mzbz#1634961 - enable Gnome Shell search in opened tabs
  - Temporary disabled PGO due to build issues.


author: Terje Rosten <terjeros@gmail.com> - 3.7.6-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.2-4
changelog:
  - CVE-2024-37370 CVE-2024-37371: GSS message token handling
    Resolves: rhbz#2294678 rhbz#2294680
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Do not include files with "~" termination in krb5-tests


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-26458: Memory leak in src/lib/rpc/pmap_rmt.c
    Resolves: rhbz#2266732
  - CVE-2024-26461: Memory leak in src/lib/gssapi/krb5/k5sealv3.c
    Resolves: rhbz#2266741
  - CVE-2024-26462: Memory leak in src/kdc/ndr.c
    Resolves: rhbz#2266743
  - Add missing SPDX license identifiers
    Resolves: rhbz#2265333


author: Julien Rische <jrische@redhat.com> - 1.21.3-2
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: rhbz#2304071
  - Fix various issues detected by static analysis
    Resolves: rhbz#2322704
  - Remove RSA protocol for PKINIT
    Resolves: rhbz#2322706
  - Make TCP waiting time configurable
    Resolves: rhbz#2322711


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3 release
  - Don't do "dos2unix doc/manuals/html/_static/jquery.js"
    The file doc/manuals/html/_static/jquery.js is no more.
    Hence, don't BuildRequires: dos2unix anymore.
  - The libaigail binary is now libabigail.so.2.0.0.


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4 tarball
  - Drop patches
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch and
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  - Enable build with support for BTF
  - Added BuildRequires: libbpf-devel
  - Support soname bumped to libabigail.so.3.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
    That patch is applied in upstream mainline and will be available in
    libabigail 2.5.
  - Use 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libabigail-2.6 base"
  /usr/bin/git checkout --track -b rpm-build

  - Use SPDX licensing reference
  - Add git as a build requirement


author: Dodji Seketeli <dodji@redhat.com> - 2.4-3
changelog:
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch 
    0003-Replace-deprecated-mock-with-unittest.mock.patch
  - Package libabigail.so.4 rather than the previous libabigail.so.3.
  - Add abidb to the package
    Added BuildRequires: python3-GitPython, python3-libarchive-c
  - Better handle error handling when tests fails.


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-9
changelog:
  - fix CVE-2024-7006 (rhbz#2302997)
  - fix CVE-2023-52356 (rhbz#2260112)
  - fix CVE-2023-6228 (rhbz#2251863)


author: Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
changelog:
  - cherrypick from upstream master patches for known vulnerabilities:
  - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
  - CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.2-1
changelog:
  - Add support for API-configurable cache home
  - Fix enforcer_acl_free logic
  - scitokens_internal: catch matching exception type after jwt-cpp update


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.0-1
changelog:
  - Allow the scitokens library user to setup a custom CA file
  - Fix typecast errors in scitoken_status_get_*() that caused async queries to fail
  - Fix logic error in deserialize_continue() that caused async deserialization to fail


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: #2294354 - CVE-2024-37894 squid: Out-of-bounds write error may
    lead to Denial of Service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-2
changelog:
  - vncsession: use /bin/sh if the user shell is not set
  - add missing comma in default security type list


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-3
changelog:
  - Correctly handle ZRLE cursors
  - Move old log to log.old if present
  - Handle existing config directory in vncpasswd


author: José Expósito <jexposit@redhat.com> - 1.20.14-29
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


