# changelog

author: Steve Cossette <farchord@gmail.com> - 6.27.0-1
changelog:
  - Initial release (Rename/version scheme change from kmime)
  - Removed doc subpackage (It's been empty for a while)
  - Cleaned up dependancies


author: Jerry James <loganjerry@gmail.com> - 4.0.4-1
changelog:
  - Version 4.0.4
  - Add patch to fix bitwise NOTs that should be logical NOTs
  - BR 7zip instead of p7zip-plugins


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.4-48
changelog:
  - Add 0100-c23.patch for C23 compatibility for GCC 15
  - Add 0101-ansi-c.patch to convert function prototypes from K&R to ANSI C
  - Fix 0038-SDL2-build.patch to add -lm to SDL2_gfx_LIBS
  - Fix 0030-Add-SDL-support.patch to include <stdlib.h> in sdl/input.c for exit()


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Julien Rische <jrische@redhat.com> - 1.22.2-7
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  - resolves: rhbz#2463398
  - resolves: rhbz#2463395


author: Than Ngo <than@redhat.com> - 6.0.2.1-1
changelog:
  - Fix rhbz#2481429, Update to 6.0.2.1
  - Fix rhbz#2476570, CVE-2026-42144: integer overflow in PNM size check bypasses memory guard


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.31-1
changelog:
  - New upstream release
  - Fix lzo1x decompress call to use safe version of the API
  - Lower log levels of messages generated for each packet


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.32-1
changelog:
  - New upstream release
  - IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.
  - Fix potential thread race condition in libnozzle close.
  - Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11).
  - Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces.
  - New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO.
  - Bump soname to reflect new API call.
  - Improve OpenSSL error handling.
  - Add support for OpenIndiana.
  - Documentation updates.
  - Fix several tests to better deal with execution timing.
  - Handle some new coverity errors.
  - Create and refine STYLE_GUIDE.md for project contributions.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.33-1
changelog:
  - New upstream release
  - Build fixes for gcc-15
  - Build fixes for rust coreutils
  - Coverity tests cleanup
  - Release: ship all files for completeness


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.34-1
changelog:
  - New upstream release (Resolves rhbz#2494753)
  - Important bugfixes:
    Fix critical defragmentation buffer reclamation logic
    Fix sequence number wraparound calculation in defragmentation
    Add decompression buffer size validation
    Fix SCTP reconnect thread race condition
    Build fixes for int_decompress_bufsize without zlib
  - New features:
    Add unique names to all threads for better debugging
    Add Wireshark dissector plugin for kronosnet protocol analysis
    Add API to enumerate supported cipher modes and hash algorithms
    libnozzle: Platform-specific refactoring and native ioctl implementations
    libnozzle: Add input validation for network prefixes
    libnozzle: Portable type and macro abstractions for BSD/Solaris
    Improve OpenSSL error logging to print entire error stack
    Add CLAUDE.md documentation for AI-assisted development
  - Test suite improvements:
    Add comprehensive defragmentation and sequence wraparound test suites
    Improve test infrastructure with unified logging and injection helpers
    libnozzle: Introduce test macros similar to libknet
    Comprehensive test suite improvements and C99 compliance fixes
    Test suite now supports parallel execution with "make -j check" on systems with sufficient resources


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.35-1
changelog:
  - New upstream release
  - CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
  - CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
  - CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
  - tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
  - libnozzle: Introduce test macros similar to libknet
  - docs: convert README to markdown format


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.2-2
changelog:
  - Fix flaky TestWaitForAllPodsUnmount test
  - TestWaitForAllPodsUnmount will work sometimes but not always irrespective
    of arch
  - Skip on all arches


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.2-4
changelog:
  - Add flake test exceptions
  - Flake tests that fail in koji but not on mockbuilds or on different
    architectures


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.37.0-1
changelog:
  - Add initial Kubernetes 1.37.0 release
  - Initial release for Fedora
  - Urgent (must read) upgrade notes at: https://github.com/kubernetes/kubern
    etes/blob/master/CHANGELOG/CHANGELOG-1.37.md#urgent-upgrade-notes
  - New features, enhancements, and fixes


author: Richard Berger <richard.berger@outlook.com> - 20260330-1
changelog:
  - Version bump to 20260330
  - Add patches to avoid unit test failures
  - Bump Kokkos requirement to 5.0


author: Richard Berger <richard.berger@outlook.com> - 20260704-1
changelog:
  - Version bump to 20260704
  - Bump Kokkos requirement to 5.1
  - Remove patches that have been upstreamed
  - Disable Random test due to failures with OpenMPI
  - Disable MolPairStyle:e3b test due to aarch64 failures


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to v0.6.0
  - Fix project and source URL
  - Change license to LGPL-2.1-or-later
  - Adapt for building with Meson
  - Add lyx-fonts dependency
  - Drop patch for Georgian


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.8-3
changelog:
  - Build the IDE for all widgetsets, not just GTK2
  - Suffix qt5pas/qt6pas versions with Lazarus version instead of abusing the Release number


author: Kalev Lember <kalevlember@gmail.com> - 1:1.41.0-1
changelog:
  - Update to 1.41.0
  - Build with llvm 20
  - Re-bootstrap on ppc64le to switch to 128-bit IEEE long double ABI


author: Carl George <carlwgeorge@fedoraproject.org> - 3.51.2-1
changelog:
  - Update to 3.51.2
  - https://www.sqlite.org/releaselog/3_51_2.html
  - Resolves: rhbz#2417968
  - Include LICENSE.md file
  - Resolves: rhbz#2418961


author: Petr Khartskhaev <pkhartsk@redhat.com> - 3.52.0-1
changelog:
  - Update to version 3.52.0
  - Resolves: rhbz#2445301
  - Add sqlite3_rsync to the -tools subpackage
  - Resolves: rhbz#2441923


author: Petr Khartskhaev <pkhartsk@redhat.com> - 3.53.2-1
changelog:
  - Update to version 3.53.2
  - Enable the carray() table-valued function
  - Resolves: rhbz#2484543
  - Resolves: rhbz#2481057


author: Michal Hlavinka <mhlavink@redhat.com> - 692-4
changelog:
  - update lesspipe to 2.23
  - dont use html to process xml files, the result isnt usable (rhbz#2451451)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Cristian Le <git@lecris.dev> - 2.2.0-24
changelog:
  - Allow to build with CMake 4.0 (rhbz#2380705)
  - Use standard CMake macros (rhbz#2381033)
  - Various spec file cleanups


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.13-15
changelog:
  - use proper SPDX identifier for LGPLv2+ (verified against sources)
  - use modern spec macros where applicable
  - make -devel subpackage dependency on main package archful


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.0.8-3
changelog:
  - Disable X fontserver support. Deprecated for decades and this rules out a set
    of potential vulnerabilities.


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Dodji Seketeli <dodji@seketeli.org> - 2.10-3
changelog:
  - Apply patch 0001-tests-mockfedabipkgdiff.in-Fix-python-module-loading.patch
    to fix FTBS https://bugzilla.redhat.com/show_bug.cgi?id=2504261
    The patch comes from upstream mainline at https://sourceware.org/cgit/libabigail/commit/?id=b0f3f49a735bf8f8f49bfaa5131b2a9f0b437e3c
  - Separate the two testing targets to get an untangled build/test-suite.log
    in case of errors.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 7.1.0-1
changelog:
  - Version 7.1.0 (rhbz#2411725)
  - Improvements to sandboxing of download process, other changes
  - See https://gitlab.archlinux.org/pacman/pacman/-
    /blob/a6f7467d8c7c4d7e9cc846884e74c0ab7215c48d/NEWS#L3
  - SONAME is bumped to 16.0.


author: Viktor Malik <vmalik@redhat.com> - 2:1.6.2-2
changelog:
  - Add libbpf-usdt-devel subpackage containing the usdt.h single-header library
    for creating USDTs (User Statically-Defined Tracepoints).


author: Milan Zamazal <mzamazal@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - -Werror no longer disabled.
  - RPi features disabled to get it compiled, as libcamera package doesn't enable
    RPi pipelines.


author: Zephyr Lykos <fedora@mochaa.ws> - 0.30-40
changelog:
  - Use plughw ALSA device for canberra-boot
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro (Tom Stellard <tstellar@redhat.com>)
  - Fix broken URL (Tim Landscheidt <tim@tim-landscheidt.de>)
  - Split backend modules into separate subpackages (David Shea <dshea@redhat.com>)


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 6.1.2-1
changelog:
  - Disable build on x86_64; libcint is ABI incompatible with qcint
    which should be used instead on that platform.
  - Update to 6.1.2.


author: Tom Callaway <spot@fedoraproject.org> - 1.7.3-11
changelog:
  - merge pull request from yselkowitz (minus the autosetup, i like to be able to rediff patches on old things like this)
  - applies upstream commit that resolves FTBFS


author: David Auer <dreua@posteo.de> - 0-20.20181010gitf5a28c7
changelog:
  - Update source name to include project name and .tar.gz extension.
    Fix: https://bugzilla.redhat.com/show_bug.cgi?id=2427929


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.25-4
changelog:
  - In F45+/EL11+, don’t build programs, only libraries, on MinGW
  - Works around and closes RHBZ#2481005


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.3.2-1
changelog:
  - update to 3.3.2 (resolves rhbz#2390293)
  - use tomcli instead of patching Cargo.toml
  - fix build with bitvec_helpers 4.0.0 (resolves rhbz#2387776)


author: Tom Callaway <spot@fedoraproject.org> - 1.1.0-0.11.rc1
changelog:
  - apply lots of fixes from the LibreCAD git tree
  - conditionalize the dwg2dxf binary (still works but maybe won't forever)


author: Simone Caronni <negativo17@gmail.com> - 1.2.6-12
changelog:
  - Drop ldconfig scriptlets.
  - Be more explicit for files.
  - Use cmake macros everywhere.
  - Small cleanups.
  - Trim changelog.
  - Adjust tests properly.


author: Ales Nezbeda <anezbeda@redhat.com> - 16.4-1
changelog:
  - Update to 16.4
  - Fix compilation sometimes failing due to race condition in makefile
  - Resolves: BZ:2290330


author: Michal Schorm <mschorm@redhat.com> - 16.4-5
changelog:
  - Drop multilib-rpm-config usage on RHEL
    Related: RHEL-178013
    Related: https://github.com/fedora-eln/eln/issues/525


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Michel Lind <salimma@fedoraproject.org> - 1.0.0-31
changelog:
  - Fix FTBFS due to incompatible pointer types (rhbz#2261314)
  - Modernize spec file
  - Convert license to SPDX expression


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Cristian Le <git@lecris.dev> - 1.7.4-2
changelog:
  - Use modern Config.cmake formats
  - Use upstream's pkgconfig files
  - Changed build type from Debug to RelWithDebInfo


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-1
changelog:
  - Disable build on i386 architecture where the build runs out of memory.
  - Update license tag to LGPL-3.0-only (generated library).
  - Update to 2.9.0.


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-2
changelog:
  - Devel package now pulls in boost, eigen3, gmp, and mpfr development
    packages that are needed to build against libint2.


author: Jerry James <loganjerry@gmail.com> - 3.52.16-1
changelog:
  - Version 3.52.16
  - Reevaluate License field
  - Add patch to fix LTO type mismatches
  - Add patch to fix FTBFS due to a type mismatch in unicode.c
  - Build in C17 mode; the code is not ready for C23
  - Avoid rpaths instead of removing them afterwards
  - Minor spec file cleanups


author: Sumit Bose <sbose@redhat.com> - 2.13.1-3
changelog:
  - CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476
  - rhbz#2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD'
    'sssd_pam' process
  - rhbz#2497650: CVE-2026-14476 sssd: sssd: GPO cache path traversal via
    unsanitized gPCFileSysPath allows Kerberos authentication bypass
  - rhbz#2497651: CVE-2026-14474 sssd: sssd: sudo LDAP provider searches
    entire directory tree for sudoRole objects by default, enabling privilege
    escalation


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Martin Hoyer <mhoyer@redhat.com> - 1.20.3-2
changelog:
  - Remove redundant libgcrypt patches
  - Update spec file reflecting upstream changes
  - iscsi-rtpg tool


author: Ondrej Mosnáček <omosnacek@gmail.com> - 1.5.1-1
changelog:
  - Update to version 1.5.1 (fedora#2512793)
  - Fix CVE-2026-71225 (fedora#2511445)
  - Fix CVE-2026-71226 (fedora#2511484)
  - Fix CVE-2026-71227 (fedora#2511487)


author: Michel Lind <salimma@fedoraproject.org> - 0.5.5-1
changelog:
  - Update to version 0.5.5; Fixes: RHBZ#2334136
  - Drop deprecated Python bindings on Fedora >= 42 and EL >= 10


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.3.5-30
changelog:
  - Fix FTBFS with gcc14 -Werror=int-conversion (bug 2300903)
  - Fix invalid escape on json file (bug 2306455)


author: Marc Deop i Argemí <marcdeop@fedoraproject.org> - 1.1.0-18
changelog:
  - Change upstream source
  - Update to latest commit
  - Backport Amarok developer patch
  - Build on Qt5 and Qt6
  - Remove Qt4 support


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.8.1-1
changelog:
  - Update to v0.8.1
  - Drop Patch0 (unbundle inih - unbundled upstream)
  - Drop Patch1 & Patch2 (compilation errors - backports from this release)


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.5-1
changelog:
  - New upstream version 0.2.5
  - Add some post-0.2.5 patches from upstream.
  - Some modernisation of the spec file.


author: Martin Gieseking <martin.gieseking@uos.de> - 2.12.0-5
changelog:
  - Added upstream patch to fix build issues with GCC 15.
  - Added upstream patch to adapt tests to changes in liblouis >= 3.30.0
  - Rebuild autotools files.


author: Jeremy Newton <alexjnewt AT hotmail DOT com> - 11.5-8
changelog:
  - Add macros package for easier building of love dependent packages
  - Update arch conditions to reflect luagit and buildable targets


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.0.5-2
changelog:
  - Modernize spec file according to Fedora Packaging Guidelines
  - Add %check section to run test suite
  - Fix doc subpackage file duplication and directory ownership
  - Clean up obsolete comments and use explicit headers ownership


author: Remi Collet <remi@remirepo.net> - 1.1.4-8
changelog:
  - fix test suite with memcached 1.6.40
    reported as https://github.com/awesomized/libmemcached/issues/161
    using fix from https://github.com/awesomized/libmemcached/pull/162


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.3.12-1
changelog:
  - Update to 3.3.12
  - Regenerate patches
  - Also patch configure.ac to remove non standard CFLAGS so changes
    are effective after autoreconf.


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.2-3
changelog:
  - Enable the multithreading API
    (https://github.com/sahlberg/libnfs/blob/master/README.multithreading)


author: Jan Macku <jamacku@redhat.com> - 1.69.0-2
changelog:
  - add missing build dependency on systemd-devel (#2477798)
  - install missing sample configuration file for nghttpx service (#2477799)


author: Jan Macku <jamacku@redhat.com> - 1.69.0-5
changelog:
  - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 7.2-4
changelog:
  - ntirpc-7.2, ntirpc did not tag/release required updates for
    ganesha-8.1 and later (nfs-ganesha-9.15)


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 7.2-5
changelog:
  - ntirpc-7.2, ntirpc did not tag/release required updates for
    ganesha-8.1 and later (nfs-ganesha-9.16)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.12-1
changelog:
  - New version
    Resolves: rhbz#2316447
  - Dropped privileges when operating on user files
    Resolves: CVE-2024-47191


author: Packit <hello@packit.dev> - 2.0.0-1
changelog:
  - Update to version 2.0.0
  - License changed to Apache-2.0 by upstream in version 2.0.0
  - Upstream moved to https://github.com/OpenIDC/liboauth2
  - Resolves: rhbz#2307691


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 23.8.1-2
changelog:
  - fix build on non-x86
  - fix sed command so that they actually work
  - remove executable permission from sources
  - fix SONAME glob


author: Dominik Mierzejewski <dominik@greysector.net> - 23.8.1-3
changelog:
  - fix missing symbols due to non-lazy binding
  - preserve file timestamps and fix permissions
  - add comments about weird Makefile


author: Dominik Mierzejewski <dominik@greysector.net> - 0.5.0-1
changelog:
  - Updated to 0.5.0 (resolves rhbz#2422618)
  - Skip known failing tests with FFmpeg 8 and without OpenH264 and x264
  - Add support for running more tests when OpenH264 is available


author: Jerry James <loganjerry@gmail.com> - 3.0.0-5
changelog:
  - Use the boost version of pdqsort
  - Drop Zlib from the License field
  - Build with the cmake buildsystem
  - Support soplex and scip in a non-bootstrap build


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.2.4-3
changelog:
  - Initial pathrs release
  - Pathrs v0.2.4
  - Provides libpathrs used by runc and other packages
  - Exclude i686 arch


author: Filip Janus <fjanus@redhat.com> - 18.4-1
changelog:
  - Update to 18.4
  - Rebase to actual upstream release sources (was incorrectly built from 18beta1)
  - Resolves: rhbz#2468555


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.1-1
changelog:
  - Update to v7.10.1
    Fixes rhbz#2357284
  - Add patch to fix deprecation of the <ciso646> header for C++17


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.3-1
changelog:
  - Update to v7.10.3
    Fixes rhbz#2401105
  - Drop patch to fix deprecation of the <ciso646> header for C++17,
    solved upstream


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 2.2.1.4-2
changelog:
  - RPM 6.1 changed 
    . /builddir/build/BUILD/librecad-2.2.1.4-build/rpmbuild.env
    set -x
    umask 022
    cd "/builddir/build/BUILD/librecad-2.2.1.4-build" macro - use 
    RPM_SOURCE_DIR="/builddir/build/SOURCES"
    RPM_BUILD_DIR="/builddir/build/BUILD/librecad-2.2.1.4-build"
    RPM_OPT_FLAGS="-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"
    RPM_LD_FLAGS="-Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  "
    RPM_ARCH="aarch64"
    RPM_OS="linux"
    RPM_BUILD_NCPUS="12"
    RPM_SPECPARTS_DIR="/builddir/build/BUILD/librecad-2.2.1.4-build/SPECPARTS"
    export RPM_SOURCE_DIR RPM_BUILD_DIR RPM_OPT_FLAGS RPM_ARCH RPM_OS RPM_BUILD_NCPUS RPM_SPECPARTS_DIR RPM_LD_FLAGS
    RPM_DOC_DIR="/usr/share/doc"
    export RPM_DOC_DIR
    RPM_PACKAGE_NAME="librecad"
    RPM_PACKAGE_VERSION="2.2.1.4"
    RPM_PACKAGE_RELEASE="3.fc45"
    export RPM_PACKAGE_NAME RPM_PACKAGE_VERSION RPM_PACKAGE_RELEASE
    LANG=C.UTF-8
    export LANG
    unset CDPATH DISPLAY ||:
    unset DEBUGINFOD_URLS ||:
    unset RPM_CONFIG_DIR ||:
    RPM_BUILD_ROOT="/builddir/build/BUILD/librecad-2.2.1.4-build/BUILDROOT"
    export RPM_BUILD_ROOT
    
    PKG_CONFIG_PATH="${PKG_CONFIG_PATH}:/usr/lib64/pkgconfig:/usr/share/pkgconfig"
    export PKG_CONFIG_PATH
    CONFIG_SITE=${CONFIG_SITE:-NONE}
    export CONFIG_SITE instead.


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Remi Collet <remi@remirepo.net> - 0.18.1-1
changelog:
  - update to 0.18.1 for CVE-2025-13402
  - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6~20240301git6f6bb13-1
changelog:
  - modernize spec
  - use proper macros
  - BuildRequire make explicitly
  - ensure Fedora CFLAGS and LDFLAGS are used


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6~20240301git6f6bb13-2
changelog:
  - use SourceLicense: tag to describe source license accurately
  - use SPDX expression for -devel subpackage license
  - use build_cflags instead of optflags


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Add dtoa to License
  - Add patch to fix crashes in SCIPcreateConsBasicSOCNonlinear
  - Add patch to fix floating point output on s390x
  - Workaround float128/long double clash on ppc64le
  - Build with OpenMP support


author: Michel Lind <salimma@fedoraproject.org> - 2.6.1-1
changelog:
  - Update to version 2.6.1; Resolves: rhbz#2341880
  - Build Python bindings; Resolves: rhbz#2437438
  - Enable Packit
  - Support disabling tests for iterating on spec changes


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Joe Orton <jorton@redhat.com> - 1.3.10-11
changelog:
  - create compat libserf-1.so.1 for compatibility with upstream 1.x soname
  - only ship serf-1.pc not serf.pc


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304188)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.1-1
changelog:
  - Update to 2.10.1 (rhbz#2316762)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323581)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329741)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 (rhbz#2359289)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Jakub Jelen <jjelen@redhat.com> - 0.11.3-1
changelog:
  - New upstream release fixing the following security weaknesses:
    - CVE-2025-8114: Fix NULL pointer dereference after allocation failure
    - CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX


author: Jakub Jelen <jjelen@redhat.com> - 0.12.0-1
changelog:
  - New upstream release fixing following security issues:
    - CVE-2025-14821: libssh loads configuration files from the C:\etc directory on Windows
    - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request()
    - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files
    - CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input
    - CVE-2026-0967: Specially crafted patterns could cause DoS
    - CVE-2026-0968: OOB Read in sftp_parse_longname()


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Paul Howarth <paul@city-fan.org> - 1.11.1-6
changelog:
  - Fix CVE-2026-7598: integer overflow via large username or password arguments
    (https://github.com/libssh2/libssh2/pull/1858)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-5
changelog:
  - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#2383827)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
changelog:
  - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
  - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


author: Andreas Schneider <asn@redhat.com> - 0.26.10-1
changelog:
  - Update to version 0.26.10
  - https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.10
  - resolves: rhbz#2479963


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Sandro <devel@penguinpee.nl> - 6.1-1
changelog:
  - Update to 6.1 (RHBZ#2266204)
  - Update script for downloading test data
  - Store test data in side cache (instead of dist-git)
  - Rebase patches and drop no longer required patch
  - Use glob in .gitignore


author: Tom Callaway <spot@fedoraproject.org> - 1.8.1-1
changelog:
  - update to 1.8.1
  - tighten requires to _isa
  - add tests subpackage
  - use -std=c17 because of Gtest-nomalloc.c


author: Florian Weimer <fweimer@redhat.com> - 1.8.3-4
changelog:
  - Disable C++ exception support on all architectures (#2517606)
  - Add libunwind-s390x-glibc-mmap.patch to use glibc mmap on s390x
    (libunwind mmap did not use the right syscall ABI).
  - Add libunwind-s390x-backtrace-*.patch to fix endless loops in tests.


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.7.0-5
changelog:
  - Install the Fortran modules into %{_fmoddir} via CMake instead of moving
    them after the fact, fixing the non-existent include directory in the
    exported wignernj::wignernj_f03 target and in libwignernj_f03.pc.


author: Jerry James <loganjerry@gmail.com> - 3.6.2-1
changelog:
  - Version 3.6.2
  - Use zlib-ng directly instead of via the compatibility interface
  - Temporarily disable one failing test on ppc64le


author: Jerry James <loganjerry@gmail.com> - 3.6.2-2
changelog:
  - Work around a test failure
  - The failure appears to be due to changes in bsearch behavior in newer
    glibc builds


author: Holger Dengler <dengler@linux.ibm.com> - 2.0.0-1
changelog:
  - Upgrade to new upstream version 2.0.0
  - New OpenSSL provider API
  - Drop shared library API
  - Split package (multi-arch)


author: Holger Dengler <dengler@linux.ibm.com> - 2.0.0-2
changelog:
  - spec: Integrate patches
  - zpckey: Remove unused header include
  - zpckey: Use portable printf format


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-8
changelog:
  - add support for dropping root privileges
  - create linuxptp user and /run/ptp directory
  - modify default ptp4l.conf to drop root privileges


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Timm Bäder <tbaeder@redhat.com> - 18.1.8-6
changelog:
  - Fix missing cstdint include that broke the build.
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2338982


author: Nicolas De Amicis <deamicis@bluewin.ch> - 0.3.5-6
changelog:
  - Use 
    
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules  }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -I/usr/lib64/gfortran/modules  }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ;
    RUSTFLAGS="${RUSTFLAGS:--Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn}" ; export RUSTFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -G Ninja \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DCMAKE_INSTALL_FULL_SBINDIR:PATH=/usr/bin \
          -DCMAKE_INSTALL_SBINDIR:PATH=bin \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON in %conf SPEC file and fix license type


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.2-1
changelog:
  - Version 1.1.2 (rhbz#2314592)
  - SONAME version is changed from 3 to 1 :(. At this point I don't think any
    other package is using this, so I'll just push to rawhide without further
    ado.


author: Terje Rosten <terjeros@gmail.com> - B.02.20-10
changelog:
  - Improve cmake patch to get all required flags added
  - Increase required cmake version
  - Update to latest commit 209f83


author: Paul Evans <pevans@redhat.com> - 0.32.16
changelog:
  - lsscsi: Fixes for SBP (Firewire) host in transport_h_init() (RHEL-48228)
  - lsscsi: Change default output trailing space after each device entry (RHEL-70371)
  - lsscsi: Transport type FC and FCOE output inconsistencies (RHEL-155569)
  - lsscsi: Device name spacing before major:minor when dev name exceeds 9 chars (RHEL-157252)


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.8-4
changelog:
  - Move the license file to lua-libs, so it is always present if any combination of subpackages is installed
  - Fixes: rhbz#2418960


author: Simone Caronni <negativo17@gmail.com> - 1.18.10-1
changelog:
  - Update to 1.18.10.
  - Delete very old macro and provides/obsoletes definitions. We don't have any
    of those versions anymore in any non-EOL release.
  - Trim changelog.
  - Drop examples that require GTK2.
  - Remove %pretrans lua scriptlet, required only when going from el8 to el9.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - Use UTF-8 instead of EUC-JP in example/mimx-anthy.c This fixes encoding
    problems when ja-anthy is used by ibus-m17n (m17n:ja:anthy - ja-anthy
    (m17n)) or by ibus-typing-booster.
  - Enable anthy-unicode (thanks to Takao Fujiwara <tfujiwar@redhat.com>)
  - Fix build on Fedora rawhide (Fedora 42) (Now included in upstream
    tarball, remove patch)
  - configure.ac: fix incorrect bashism (thanks to Eli Schwartz
    <eschwartz93@gmail.com>)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.6-1
changelog:
  - Update to 1.8.6
  - Add m17n-input-test program (by David Mandelberg <david@mandelberg.org>)
  - input.c (regularize_action): Do not update the element of action_list if
    the element is a symbol that is defined as a variable (By K. Handa
    <handa@gnu.org>).
  - Increment buffer index correctly in read_mtext_element () (Resolves:
    https://savannah.nongnu.org/bugs/index.php?67107) (by David Mandelberg
    <david@mandelberg.org>)
  - Simplify configure check for anthy/anthy-unicode


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:1.1-10
changelog:
  - Convert license tag to SPDX
  - Rework specfile to follow the Fedora packaging guidelines
  - Preserve timestamps when installing


author: Jeremy Linton <jlinton@redhat.com> - 20250128-1
changelog:
  - New release 20250128 Moved to upstream github repo Upstream fixed soname
    naming, lets follow it. Dropped most of the fedora specific patches


author: Fedora Release Engineering <releng@fedoraproject.org> - 5.4-114.git.9ae8768
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
  - add patch for gint64 (to avoid incompatible pointer types on i686)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Sérgio Basto <sergio@serjux.com> - 1.6-39.g
changelog:
  - Add more patches from Debian
           004-spelling.patch
           011-man2html-doctype-status.patch
           012-man2html-TH.patch
           013-man2html-file-link.patch
           030-man2html-man-hyphens.patch
           032-man2html-man-remove-LO-tags.patch
           034-UTF8-charset.patch
           036-fix-tbl-font-parsing.patch
           037-man2html-Nm-and-Bk-mdoc.patch
           038-man2html-colon-escape-sequence.patch
           042-man2html-CVE-2021-40647.patch
           043-man2html-fix-asan-issues.patch
       
           man2html-ungzip.patch rename to 024-man2html-uncompress.patch


author: Wolfgang Ulbrich <raveit65.sun@gmail.com> - 1.28.0-5
changelog:
  - use some upstream commits
  - tabpopup: Report the window as active to a11y when it's showing
  - tabpopup: Stop spamming the ATs with label changes at startup
  - fix Firejail/Flatpak applications display "as superuser" on window title


author: Michal Schorm <mschorm@redhat.com> - 3:12.3.2-1
changelog:
  - Rebase to 12.3.2 (first GA release of the 12.3 series)
  - CVEs fixed: CVE-2026-44168, CVE-2026-44169, CVE-2026-44170,
                CVE-2026-44171, CVE-2026-44172, CVE-2026-44173
  - Drop 'mark-RISC-V64-as-64-bit-architecture.patch' (upstreamed in connector-c PR#295)
  - Drop 'upstream_87309d3d4bb8f48910d05b0ca5ee989bcdd6b053.patch' (upstreamed in MDEV-38811)
  - Rebase 'mariadb-libfmt.patch' for FMT 12.1.0
  - Remove PAM module install path workaround (fixed upstream in MDEV-37197)
  - Move wsrep scripts from server to server-galera subpackage (MDEV-30953)
  - Remove upstream 'galera.conf' systemd drop-in (conflicts with downstream service files)


author: Michal Schorm <mschorm@redhat.com> - 3:12.3.2-2
changelog:
  - Remove downstream 'wsrep_sst_rsync_tunnel' script (breaking change)
    MariaDB's own 'wsrep_sst_rsync' now provides TLS capability via stunnel,
    making the downstream socat-based tunnel script obsolete.
    Users with 'wsrep_sst_method=rsync_tunnel' must switch to 'rsync' with
    native TLS configuration.


author: Michal Schorm <mschorm@redhat.com> - 3:12.3.2-100
changelog:
  - Disable the 'distribution default' in MariaDB 11.8 (package 'mariadb11.8')
  - Enable the 'distribution default' in MariaDB 12.3 in this package


author: Daniel Handzus <dhandzus@redhat.com> - 1.1.14-5
changelog:
  - Add test sub-package
  - Introduce a new mariadb-connector-python-test sub-package to enable
    running the upstream test suite both in CI and by end-users.
  - Mark the sub-package as noarch, placing the test suite under
    %{python3_sitelib} to ensure architecture-independence.
  - Remove shebangs from test files during %install since they are not
    intended to be executed as standalone scripts.
  - To address the rpmlint no-documentation warning: upstream test suite
    usage is documented online; no separate offline documentation is
    packaged.
  - https://mariadb.com/docs/connectors/mariadb-connector-
    python/install#test-suite


author: Daniel Handzus <dhandzus@redhat.com> - 1.1.14-6
changelog:
  - Add upstream test suite for CI pipeline ran on the latest MariaDB, but
    accepting any MariaDB version


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.15-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 in this package
  - Enable the 'distribution default' in MariaDB 11.8 (package 'mariadb11.8')


author: Michal Schorm <mschorm@redhat.com> - 3:11.8.5-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 (package 'mariadb10.11')
  - Enable the 'distribution default' in MariaDB 11.8 in this package


author: Michal Schorm <mschorm@redhat.com> - 3:11.8.8-100
changelog:
  - Disable the 'distribution default' in MariaDB 11.8 in this package
  - Enable the 'distribution default' in MariaDB 12.3 (package 'mariadb12.3')


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: raveit65 <mate@raveit.de> - 1.28.0-7
changelog:
  - add some upstream commits
  - https://github.com/mate-desktop/mate-calc/commit/fe495df
  - https://github.com/mate-desktop/mate-calc/commit/7ef327f


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.33-1
changelog:
  - update to 4.8.33
  - remove any downstream specific configurations which should
    be done on user level
  - Resolves: 2272713 2244847 2332284 (thanks to Yury V. Zaytsev)


author: Jonathan Wright <jonathan@almalinux.org> - 4.3-6
changelog:
  - fix FTBFS on gcc15 rhbz#2340833
  - fix permissions on /usr/share/mdadm to be world-readable rhbz#2322402


author: Sandipan Roy <sandipan@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Update version from 1.8.2 to 1.8.3 in spec file
  - Update sources with new SHA512 hash for Megapixels-1.8.3.tar.bz2
  - Add patch to fix compilation error in capture callback signature
  - Remove conflicting changelog file (using %autochangelog in spec)
  - Add ExcludeArch for 32-bit architectures (i686, armv7hl) due to memory
    requirements
  - Fix indentation issues in spec file (replace tabs with spaces)


author: Tim Semeijn <tim@semeijn.net> - 4.7.0-1
changelog:
  - Update to 4.7.0 (fixes rhbz#1878554)
  - Use autorelease and autochangelog
  - Remove redundant white lines and fix indentation
  - Mark COPYING file as license


author: Mads Kiilerich <mads@kiilerich.com> - 7.2.3-3
changelog:
  - Drop Python 3.15 patch that apparently isn't necessary.
  - Add patch for Python 3.15 with OpenSSL 4.0 and no TLSv1.2


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg


author: Paul Howarth <paul@city-fan.org> - 4.6.4-17
changelog:
  - Drop EL-7 support
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Sandro Mani <manisandro@gmail.com>
changelog:
  - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082,
    CVE-2025-11081, CVE-2025-11083


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.0.11-16
changelog:
  - Fix License tag (project relicensed from LGPL-2.1-or-later to Zlib)
  - Add a patch to fix a broken function


author: Richard W.M. Jones <rjones@redhat.com> - 0-5
changelog:
  - Initial packaging (RHBZ#2440652)
  - Link the binaries statically so they don't require libstdc++.dll
  - Compile resource catalog and link it
  - Include a Makefile for easier building
  - Add patch to fix an error message


author: Sérgio Basto <sergio@serjux.com> - 2.5.3-3
changelog:
  - Update provides and obsoletes for openjpeg2 of Fedora 40
  - Also add a more agressive way to remove old openjpeg-libs (1.x)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.3-13
changelog:
  - use systemctl try-restart in postrotate script (resolves rhbz#2372859)
  - attempt to fix CVE-2023-47430 (resolves rhbz#2271621)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.2-9
changelog:
  - switch to tar.gz source to avoid manual build
  - build using CMake (use upstream SONAME)
  - ship pkg-config and CMake files (resolves rhbz#2378931)
  - fix build with CMake 4.0
  - use dos2unix instead of sed


author: Michal Schorm <mschorm@redhat.com> - 3.3.1-1
changelog:
  - Rebase to upstream version 3.3.1
  - Update 'Source0' URL: upstream moved from '/unix/' to '/linux/' path
    and changed the tarball naming convention to include '-linux' suffix
  - Drop all three patches, merged upstream:
    'mirrormagic-3.0.0-yesno.patch' (Y/N key handling),
    'mirrormagic-3.0.0-fcommon-fix.patch' (-fcommon multiple definitions),
    'mirrormagic-3.0.0-c23.patch' (C23 compatibility)
  - Update build flags: replace 'RO_GAME_DIR' with 'BASE_PATH',
    drop removed 'sdl2' make target (now auto-detected),
    drop unused '-DUSE_USERDATADIR_FOR_COMMONDATA' flag
  - Add 'zlib-devel' BuildRequires (new upstream zip support via bundled minizip)
  - Remove pre-built binary and bundled shared libraries in '%prep'
  - Drop iconv CREDITS conversion (file is now UTF-8 upstream)
  - Correct License to 'GPL-2.0-only' (COPYING contains GPL-2.0 text; the prior
    'GPL-1.0-or-later' was a mechanical SPDX conversion from the old 'GPL+' tag)
  - Update URL to HTTPS


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: RPM Fusion Release Engineering <sergiomb@rpmfusion.org> - 2.2.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add GCC-15 patch from upstream


author: Kalev Lember <klember@redhat.com> - 24.03.1-1
changelog:
  - Update to 24.03.1
  - Switch to SPDX license identifiers
  - ExcludeArch i686 for https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0-1
changelog:
  - update to 1.0 (resolves rhbz#2374624)
  - avoid BR: sparse
  - drop second -DFORTIFY_SOURCE from CFLAGS


author: Tomas Halman <thalman@redhat.com> - 2.4.16.11-1
changelog:
  Rebase to version 2.4.16.11
  - Resolves: rhbz#2357672 - mod_auth_openidc-2.4.16.11 is available
  - Resolves: CVE-2025-31492 mod_auth_openidc allows
              OIDCProviderAuthRequestMethod POSTs to leak protected data


author: Tomas Halman <thalman@redhat.com> - 2.4.17.2
changelog:
  Rebase to new version, opt in for autorelease and autochangelog
  - Resolves: rhbz#2361581 - mod_auth_openidc-2.4.17.2 is available


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-1
changelog:
  - Bump version to 0.7.2 upstream tag
  - Incorporate patch with enables --help on non-supported systems


author: Michal Josef Špaček <mspacek@redhat.com> - 1.2.0-44
changelog:
  - Add comment for setgit uucp for dialin.monitor.wrap.
  - Add default config file to CGI script.
  - Correct the permissions of the dialin.monitor.wrap file as indicated in the source code.
  - Fix CGI->start_form() method.
  - Fix Perl syntax (defined %hash and defined @array).
  - Rewrite gethostbyname, inet_addr to new common api.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 6.12.0-20
changelog:
  - Change the certificate bundle used to popule Mono certificate store
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 4.3.1-1
changelog:
  - Update to 4.3.1
  - Port build system from CMake to Meson
  - Build against system nanobind instead of the bundled subproject
  - Make NeuroML2 (pyneuroml) support optional
  - The moose binary and libmoose shared library are no longer built upstream;
    MOOSE is now a Python-only package


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 4.3.1-4
changelog:
  - feat: update licenses
  - Fixes rhbz#2504355
  - Fixes rhbz#2377333
  - Fixes rhbz#2414807
  - Fixes rhbz#2422121
  - Fixes rhbz#2459472


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.15-53
changelog:
  - Fix FTBFS on i686 and s390x, gcc16 and gmp 6.3 no longer accept non-integer
    loop variable
    (ref: bug 2501699)


author: Tom Callaway <spot@fedoraproject.org> - 2.1.2-2
changelog:
  - add explicit Requires on cjson-devel to mosquitto-devel (header assumes the cjson headers are also present)


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.8-2
changelog:
  - Fix memleak in XmString from:
    https://sourceforge.net/p/motif/code/merge-requests/10/
  - Add NET_WORKAREA and GTK_WORKAREAS support from:
    https://sourceforge.net/p/motif/code/merge-requests/11/


author: Miro Hrončok <miro@hroncok.cz> - 4.0.0-1
changelog:
  - Update to 4.0.0
  - Fixes: rhbz#2258538
  - Removes the doc package, has manual pages instead
  - Include compatibility libmpdec.so.3 to allow Python rebuilds


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-15
changelog:
  - Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling
    Resolves: #2513829


author: Dan Horák <dan[at]danny.cz> - 1.8-1
changelog:
  - rebased to 1.8
  - update for https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin (rhbz#2340890)


author: Alain Vigne <avigne@fedoraproject.org> 1.3.7-1
changelog:
  - upstream release 1.3.7
  - Add a patch + dependency to get Unicode files from distrib, and not from the Internet
  - Add empty check section


author: Carl George <carlwgeorge@fedoraproject.org> - 1.4.287-8
changelog:
  - Add patch for building with GCC 15
  - Rebuilt for poco 1.14.1 rhbz#2335663
  - Exclude self signed certificate tests rhbz#2340894


author: Michael J Gruber <mjg@fedoraproject.org> - 1.28.2-1
changelog:
  - rebase to 1.28.2 (rhbz#2493555)
  - Markdown document format support
  - HTML and EPUB improvements
  - PDF write option "decrypt" is deprecated; use "encrypt=none" instead
  - New mutool audit command to analyze PDF structure and generate report
  - Various fixes and improvements


author: Jerry James <loganjerry@gmail.com> - 4.7.2-1
changelog:
  - Version 4.7.2
  - Use the cmake declarative buildsystem
  - Drop upstreamed patches: ffmpeg8, qt6.10, tinyxml2-11
  - Give the subpackages individual release numbers


author: Carl George <carlwgeorge@fedoraproject.org> - 3.3.1-8
changelog:
  - Include NOTICE file as a license
  - Use upstream doc installation
  - Do not ship epub file
  - Update license expression to SPDX


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.4.3-5
changelog:
  - move two shared libraries from -devel to main package
  - add missing SONAME to libMyGUI.OpenGLPlatform.so


author: Chapien <inquiries@chapien.net> - 3.4.4-5
changelog:
  - Removed libMyGui.OpenGLPlatform.so and libMyGUICommon.so, as they are no
    longer necessary with opengl being the only supported backend.


author: Michal Schorm <mschorm@redhat.com> - 9.4.0-1
changelog:
  - Rebase to 9.4.0
  - Remove mysql-connector-odbc-c99.patch (fixed upstream)
    https://github.com/mysql/mysql-connector-
    odbc/commit/f4d1236d034a8c8993adf6819c9263a6dade3861
    https://github.com/mysql/mysql-connector-
    odbc/commit/d17e2279404601df61bcdfcb8517f1e5769436ee
  - Remove mysql-connector-odbc-pointer-type.patch (fixed upstream)
    https://github.com/mysql/mysql-connector-
    odbc/commit/d17e2279404601df61bcdfcb8517f1e5769436ee


author: Michal Schorm <mschorm@redhat.com> - 9.7.1-100
changelog:
  - Disable the 'distribution default' in MySQL 8.4 (package 'mysql8.4')
  - Enable the 'distribution default' in MySQL 9.7 in this package


author: Michal Schorm <mschorm@redhat.com> - 8.4.10-100
changelog:
  - Disable the 'distribution default' in MySQL 8.4 in this package
  - Enable the 'distribution default' in MySQL 9.7 (package 'mysql9.7')


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 2.5-1
changelog:
  - Update to upstream (bz#2453492)
  - Fix check_icmp: host-count overflow leads to heap buffer overflow
    in setuid-root binary (bz#2513957)
  - Remove RHEL7- support
  - Add dependency on openssl3-devel for fedora-45+ (bz#2504361)


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 2.5-2
changelog:
  - Added perl-Math-BigInt as dependency for
    nagios-plugins-ssl_validity (bz#2439960)
  - Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase hostnames (bz#2500542)


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.7-1
changelog:
  - require only git-core which is already sufficient for %autosetup -S git_am
  - rebase to latest upstream release (rhbz#2414527)


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Miroslav Lichvar <mlichvar@redhat.com> 6.6-1
changelog:
  - update to 6.6
  - move screen5 terminfo entry to -base (#2435327)
  - drop old conflict with rxvt-unicode


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Richard Russon <rich@flatcap.org> - 20260616-1
changelog:
  - Security
    - #4900 bcache: sanitize mailbox names that escape the cache dir
    - #4901 auth_gss: fix out-of-bounds read of GSS security token
  - Bug Fixes
    - #4866 Fix broken message-hook in the pager
    - #4869 Fix duplicate "no mail" message
    - #4874 Restore the `-C` command-line flag
    - #4882 Refresh notmuch tag completion cache, and fix a tag completion crash
    - #4893 Fix index-format-hook parsing
    - #4897 Allow `<entire-thread>` from any mailbox type, and fix a related crash
    - email: fix header rewind after mbox separator
    - imap: retry login after a failure
    - maildir/notmuch: fix memory leak
    - config: fix inherited has_been_set
    - main: fix inverted condition in init_nntp
  - Code
    - test: fix conddate after 2038


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.2.19-1
changelog:
  - Update to 0.2.19
  - Build with Qt6
  - Convert License tag to SPDX
  - Use xwfb-run for tests instead of xvfb-run


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Bruno Wolff III <bruno@wolff.to> - 2.1.2-42
changelog:
  - Newer gcc seems to have changed detection of system type in includes
  - Bad prototype for unused function


author: Göran Uddeborg <goeran@uddeborg.se> - 2.5.0-1
changelog:
  - Update to version 2.5.0 (rhbz#2382631)
  - Autoconverted license tag verified
  - Clean up spec file and use auto- and forge- macros


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.6-46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fixed build with GCC15 (Dominik Mierzejewski)


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.7.7-33
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - fix building with GCC 15 (resolves rhbz#2340940) (Dominik Mierzejewski)


author: Michael J Gruber <mjg@fedoraproject.org> - 0.40-1
changelog:
  - rebase with upstream release 0.40 (rhbz#2432525)
  - additions to C and python API
  - generate Emacs autoload file


author: Michael J Gruber <mjg@fedoraproject.org> - 1.8-1
changelog:
  - update to upstream release 1.8 (rhbz#2325474)
  - New function npth_get_version.  New macros NPTH_VERSION and
    NPTH_VERSION_NUMBER.
  - Fix INSERT_EXPOSE_RWLOCK_API for musl C library.
  - Return a run-time error if npth_rwlock_timedrdlock is not supported.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 3.125.0-2
changelog:
  - fix the nspr version to full expansion
  - affected: https://bugzilla.redhat.com/show_bug.cgi?id=2488324


author: Rostislav Krasny <rostiprodev@gmail.com> - 3.125.0-2
changelog:
  - Reseed the freebl DRBG after fork() so forked children do not replay the
    parent's random stream (Firefox fork server duplicate UUIDs / crypto output)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.23.0-9
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Michel Lind <salimma@fedoraproject.org> - 20240115-3
changelog:
  - Explicitly include <memory> for GCC 14.1 compatibility
  - Credit: Kefu Chai <tchaikov@gmail.com>
  - Fixes: RHBZ#2301002


author: Jonathan Wright <jonathan@almalinux.org> - 2.0.19-1
changelog:
  - update to 2.0.19 rhbz#2321909
  - Fixes "numactl exits if MPOL_PREFERRED_MANY isn't supported"
    https://github.com/numactl/numactl/issues/231


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.3-4
changelog:
  - Patch for gcc-15 "error: expected identifier or '(' before 'false'"
  - Use gcc -std=gnu17 to avoid md5wrap.c:48:5: error: too many arguments to function ‘MD5Init’


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Jerry James <loganjerry@gmail.com> - 0.8.5-35
changelog:
  - OCaml 5.5.0 rebuild
  - Use the topkg declarative buildsystem
  - Update __ocaml_requires_opts for OCaml 5.5.0


author: Jerry James <loganjerry@gmail.com> - 1.12-10
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Add upstream patch to fix segfaults in OCaml GC with OCaml 5.3.0


author: Jerry James <loganjerry@gmail.com> - 2.0.0-22
changelog:
  - OCaml 5.5.0 rebuild
  - Add upstream pull request to fix compilation with dune 3.24
  - Use the dune declarative buildsystem


author: Jerry James <loganjerry@gmail.com> - 2.1.1-1
changelog:
  - Rebuild for OCaml 5.5.0
  - New upstream version 2.1.1
  - New tools subpackage
  - Skip the tests, which now require b0


author: Jerry James <loganjerry@gmail.com> - 1.8.0-8
changelog:
  - OCaml 5.5.0 rebuild
  - Add patch for compatibility with previous dune versions
  - Drop unused ocaml-findlib BR


author: Jerry James <loganjerry@gmail.com> - 0.24.0-7
changelog:
  - OCaml 5.5.0 rebuild
  - Use the dune declarative buildsystem
  - Update __ocaml_requires_opts for OCaml 5.5.0


author: Jerry James <loganjerry@gmail.com> - 5.5.0-1
changelog:
  - New upstream version 5.5.0 (RHBZ#2442622)
  - Drop upstreamed fix for arm64 frame pointers
  - Reenable LTO
  - Move ld.conf, libasmrun, and libcamlrun to ocaml-runtime
  - Drop hardlink dependency; rpm now does this by default
  - Drop unused utilx-linux dependency


author: Jerry James <loganjerry@gmail.com> - 1.9.8-1
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Version 1.9.8
  - Drop workaround for upstream dynlink_subdir bug
  - Change config name to findlib.conf to match upstream
  - Update __ocaml_requires_opts for OCaml 5.3.0


author: Jerry James <loganjerry@gmail.com> - 1.9.8-9
changelog:
  - OCaml 5.5.0 rebuild
  - Drop unused BuildRequires: m4, ocaml-ocamlbuild
  - Remove runtime dependency on ocaml
  - Update __ocaml_requires_opts for OCaml 5.5.0


author: Richard W.M. Jones <rjones@redhat.com> - 0.5.0-2
changelog:
  - Add dependency from devel to ocaml-dune-site-devel.
    https://src.fedoraproject.org/rpms/ocaml-gettext/pull-request/3#comment-249424


author: Jerry James <loganjerry@gmail.com> - 1.25.1-1
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Version 1.52.1
  - Drop upstreamed patch to link with flexiblas after gsl
  - Add VCS field


author: Jerry James <loganjerry@gmail.com> - 3.1.5-11
changelog:
  - OCaml 5.5.0 rebuild
  - Use the dune declarative buildsystem
  - Add patch for dune 3.24 pathname changes


author: Jerry James <loganjerry@gmail.com> - 11.1.1-1
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Version 11.1.1
  - Munging build flags is no longer needed
  - Add VCS field
  - Update __ocaml_requires_opts for OCaml 5.3.0


author: Jerry James <loganjerry@gmail.com> - 6.1.1-1
changelog:
  - Version 6.1.1
  - New ocaml-lwt-direct subpackage
  - Drop upstreamed patch for ppxlib 0.36 compatibility


author: Jerry James <loganjerry@gmail.com> - 2.5.2-2
changelog:
  - OCaml 5.5.0 rebuild
  - Use the dune declarative buildsystem
  - Add 2 patches to fix issues with dune 3.24


author: Jerry James <loganjerry@gmail.com> - 4.2.1-7
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Add patch to fix a build failure with OCaml 5.3.0
  - Add patch to adapt the tests to dune 3.17.0


author: Richard W.M. Jones <rjones@redhat.com> - 1.9.0-1
changelog:
  - New upstream version 1.9.0 (RHBZ#2400841)
  - Remove emacs fix which is now upstream.
  - Rebase nonbreaking space patch for code movements in 1.9.0


author: Jerry James <loganjerry@gmail.com> - 1.9.0-5
changelog:
  - OCaml 5.5.0 rebuild
  - Use the dune declarative buildsystem
  - Fix a test that fails on filesystems with security contexts


author: Jerry James <loganjerry@gmail.com> - 0.10.7-1
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Version 0.10.7
  - Adapt to changed hevea path
  - Work around a broken test for cmxs support


author: Jerry James <loganjerry@gmail.com> - 21.1-8
changelog:
  - OCaml 5.5.0 rebuild
  - Use the dune declarative buildsystem
  - Update the OCaml 5.4.0 patch for 5.5.0


author: Dan Horák <dan[at]danny.cz> - 4.1.1-5
changelog:
  - work around GCC 15 / C23 build failure (rhbz#2340957)
  - work around Tcl 9 build failure (rhbz#2337742)


author: Michal Schorm <mschorm@redhat.com> - 1:1.9.0-56
changelog:
  - Fix SPDX license expression: replace 'LicenseRef-Callaway-dante-treglia'
    with 'Game-Programming-Gems', fix 'GPLv2-or-later' to 'GPL-2.0-or-later'


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.0^20241204git8ac191c-1
changelog:
  - Update to last git commit
  - Add 0001-fix-qt6-arg-format.patch
  - Add 0002-fix-qt6-arg-sampleformat.patch


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.24.2-1
changelog:
  - Update to 1.24.2
  - License reanalysis
  - Remove bundled fmt
  - Remove unneeded dependencies (fluidsynth)
  - Remove proprietary parts
  - Use pkgconfig for library dependencies
  - Cleanup


author: Dominik Mierzejewski <dominik@greysector.net> - 0.2.0.4-1
changelog:
  - update to 0.2.0.4 (resolves rhbz#2399635)
  - generate SO version from release version automatically


author: Peng Wu <pwu@redhat.com> - 1.1.9-4
changelog:
  - Update for https://fedoraproject.org/wiki/Changes/CMake_drop_install_vars
  - Resolves: RHBZ#2381327


author: Simone Caronni <negativo17@gmail.com> - 9.12-8
changelog:
  - Clean up SPEC file, drop EOL distro conditionals and macros.
  - Fix Source URL, the old one is no longer valid.
  - Use macros everywhere.
  - Sort BuildRequires, files, configure parameters, etc.
  - Be consistent with macros and variables.
  - Trim changelog.


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Update to 3.25.0
  - Drop patches which are included in upstream
  - Adapt p11sak patch
  - Fix RPM build warnings
  - Add jq and openssl in Build Requirement, required for testcases


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Require openssl >= 3.5.1
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
  - Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.27.0-1
changelog:
  - Update to 3.27.0
    * Add base support for PKCS#11 v3.2
    * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]
    * Add support for PKCS#11 v3.2 C_EncapsulateKey/C_DecapsulateKey
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with RSA-PKCS and RSA-OAEP mechanisms
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the ECDH mechanism
    * Soft/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the DH-PKCS mechanism
    * Soft: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types
      and mechanisms (requires OpenSSL 3.5 or later, or the OQS-provider must be configured)
    * CCA: Add support for PKCS#11 v3.2 ML-DSA key type and mechanisms (requires CCA v8.4 or later)
    * EP11: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types and mechanisms
      (requires an EP11 host library v4.2 or later, and a CEX8P crypto card with firmware v9.6 or
      later on IBM z17, and v8.39 or later on IBM z16)
    * p11sak: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types
    * Soft/ICA: Add support for PKCS#11 v3.2 mechanisms CKM_ECDH_X_AES_KEY_WRAP and CKM_ECDH_COF_AES_KEY_WRAP
    * p11sak: Add support for key wrapping with PKCS#11 v3.2 mechanisms
      CKM_ECDH_X_AES_KEY_WRAP and CKM_ECDH_COF_AES_KEY_WRAP
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 mechanism CKM_PUB_KEY_FROM_PRIV_KEY
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.0 Edwards and Montgomery key types and mechanisms
    * Soft/ICA: Support CKM_ECDH_AES_KEY_WRAP also for Montgomery keys
    * p11sak: Add support for PKCS#11 v3.0 Edwards and Montgomery key types
    * Soft: Add support for CKM_ECDH1_COFACTOR_DERIVE
    * CCA: Add support for additional RSA public exponent values 5, 17, or 257
    * p11sak: Add option to list-key command to show EP11 session IDs
    * Make the maximum number of token objects supported configurable
    * Fixes for CVE-2026-40253, CVE-2026-23893, and CVE-2026-22791
    * Bug fixes
  - Drop %{ix86} build


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2331728)
  - Convert STI tests to FMF (rhbz#2382998)


author: Michal Schorm <mschorm@redhat.com> - 1:0.58-0.41.rc5
changelog:
  - Fix SPDX license tag to compound expression reflecting all compiled-in code
  - Main code: 'LGPL-2.0-or-later' (COPYING.LIB: "GNU Library GPL, Version 2, June 1991")
  - Clipboard code from Battle for Wesnoth: 'GPL-2.0-or-later'
  - Bundled pstreams copylib: 'LGPL-2.1-or-later'


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Zoltan Fridrich <zfridric@redhat.com> - 10.3p1-5
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.3p1-6
changelog:
  - Improve GSS KEX algorithms documentation
    Patches are submitted by xspielinbox+redhat@protonmail.com
    Resolves: rhbz#2241564


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:4.0.0~beta1-5
changelog:
  - Mark release as beta1 according to upstream naming.
  - Update requirements for better backward compatibility


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:4.0.1-3
changelog:
  - We use FIPS provider from a separate package and can drop
    FIPS-specific patches and stop building OpenSSL native FIPS provider


author: Pavol Žáčik <pzacik@redhat.com> - 1:4.0.1-5
changelog:
  - Don't raise NOT_ENOUGH_DATA on a clean EOF at an object boundary
    (Backport from https://github.com/openssl/openssl/commit/4360d53)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5, resolving CVE-2025-15467, CVE-2025-15468,
    CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420,
    CVE-2025-69421, CVE-2025-69419, CVE-2026-22795, CVE-2026-22796, CVE-2025-11187


author: Dmitry Belyavskiy <beldmit@gmail.com> - 1:3.5.6-4
changelog:
  - We don't use include directives in the compat package to avoid interference
    with the upcoming 4.0 release. We use the DEFAULT crypto policy instead.
  - Remove copying of the existing openssl.cnf to openssl3.spec


author: Frank Lichtenheld <frank@lichtenheld.com> - 2.7.6-1
changelog:
  - Update to upstream 2.7.6 release
  - Drop obsolete patch 0001-test_tls_crypt-Fix-issue-with-temp-file-name-on-big-.patch


author: Michal Schorm <mschorm@redhat.com> - 4.16.7-2
changelog:
  - Correct License tag from 'LicenseRef-Callaway-BSD' to '0BSD' per
    upstream 'COPYRIGHT.orafce' (SPDX tag correction, not a license change)


author: Leo Sandoval <lsandova@redhat.com> - 1.81-9
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Related: RHEL-44705


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 163-1
changelog:
  Changes with 163
  ----------------
    - Update osbuild dependency commit ID (#5012)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260215 (#5024)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore(deps): update konflux references (#4984)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 2f3015a (#4983)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore: bump dependencies via gobump (#5002)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#5025)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cloudapi/v2: add distro metadata endpoint (HMS-9643) (#4991)
      - Author: Tomáš Koscielniak, Reviewers: Nobody
    - github: new workflow for updating osbuild commit on schedule (#5011)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - gitlab: run notifications only on main (#5020)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: bump images to 239 (HMS-9984) (#5018)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update osbuild/images to v0.238.0 for multi-stage RPM installation support (HMS-9090) (#5015)
      - Author: Tomáš Hozza, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - templates/packer: increase timeout of ExecStop(Post) commands (#5009)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - test/rhel-upgrade: bump target versions and refactor repo override (#5017)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - tools/appsre-ansible: fix rpmbuild for osbuild (#5022)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Allow any valid upload target for bootc composes, not just local (HMS-10507) (#5092)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - osbuild-composer.spec: fix version in spec file (#5100)
      - Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    - templates/packer: set authfile location for container registries (#5094)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - test/worker-executor*: add missing '$' when referencing a variable (#5097)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-17


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add end-to-end functional test for bootc composes in a service deployment (HMS-10008) (#5098)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    - Enable all bootc-supported disk image types for bootc composes, not just qcow2 (HMS-10508) (#5102)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    - SPEC: add explicit Requires on podman for worker subpackage (#5099)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update for RHEL 9.9 and 10.3 nightlies (#5095)
      - Author: Justin Sherrill, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260419 (#5105)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - build(deps): bump actions/github-script from 8 to 9 (#5090)
      - Author: {}, Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5104)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: bump go-jose to 4.1.4 (#5107)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump grpc to 1.79.3 (RHEL-160720) (#5106)
      - Author: Anna Vítová, Reviewers: Florian Schüller, Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update github.com/openshift-online/ocm-sdk-go to v0.1.499 (#5103)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-22


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - Schutzfile: drop minor versions from bootc-foundry (#5134)
      - Author: Lukáš Zapletal, Reviewers: Simon Steinbeiß, Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add default target for bootc iso (#5125)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - go.mod: update osbuild/images to v0.261.0 (#5115)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Lukáš Zapletal, Sanne Raymaekers
    - test/repositories: switch RHEL 9.7 and 10.1 test repos to GA (#5122)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: drop ubi-wsl.sh test (#5130)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - Update import paths for image-builder [HMS-10853] (#5185)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20260705 (#5197)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/data/repositories/rhel-9.9: disable gpg check (HMS-10929) (#5192)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Simon Steinbeiß

  — Somewhere on the Internet, 2026-07-08


author: Dusty Mabe <dusty@dustymabe.com> - 2026.2-3
changelog:
  - Backport changes for ostree min-free-space accounting
  - https://github.com/ostreedev/ostree/pull/3614
  - https://github.com/ostreedev/ostree/pull/3615


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Dumitru Ceara <dceara@redhat.com> - 26.03.3-10
changelog:
  - Updated the OVN sources to upstream release v26.03.1 with the
    commit 0cc1ea5bb71d29b91244f5368ecbbda8837bc542 and picked up
    the commits from v26.03.1 till the tip of branch-26.03
    a1482006410f09dfe471c6aec76de3902327f1ad (2 commits) in
    ovn.patch.
  - Updated the OVS sources to the branch-26.03 ovs submodule
    commit bdb95cc1920d4ab66fe062a9470eeb33a51d33e2


author: Dumitru Ceara <dceara@redhat.com> - 26.03.1-50
changelog:
  - Updated the OVN sources to pick up the commits from v26.03.1 till
    the tip of branch-26.03 (9f04b8c5086a74db299daeea4908518bbb27d139).


author: Nicholas Hubbard <nhubbard@redhat.com> - 26.03.1-52
changelog:
  - Configure OVN with --with-version-suffix=-%{release} so OVN binaries
    report the full RPM version-release string.


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.2-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.2


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.1-2
changelog:
  - FSWC: Migrate to lastlog2
    Link: <https://fedoraproject.org/wiki/Changes/Migrate_to_lastlog2>
    Resolves: #2361594


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.2-1
changelog:
  - Rebase to release 1.7.2. Resolves: #2321512
  - Rebase to pam-redhat-1.3.1
  - Drop unused linuxdoc-tools dependency


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.3.2-1
changelog:
  - Update to 1.3.2 - resolves rhbz#2338418
    1.3.2 fixes a potentially breaking issue with tightened authfile checking with 1.3.1


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.4.0-1
changelog:
  - Update to 1.4.0 - resolves rhbz#2354803
  - Add new yubico release developer gpg key to keyring
  - Migrate to cmake builds (upstream change)


author: Aaron Merey <amerey@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi-7.2.0.
  - Remove upstreamed patches
    papi-python3.patch
    papi-libsde.patch
    papi-gcc15.patch
  - Add papi-revert-arm-test.patch.
  - Add papi-revert-event-depr.patch.


author: Brian C. Lane <bcl@redhat.com> - 3.6-10
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
  - libparted: Fix dvh disklabel unhandled exception (bcl)
  - tests: Add test for SUN disklabel handling (bcl)
  - libparted: Fix sun disklabel unhandled exception (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.6-12
changelog:
  - doc: Fix some groff/mandoc linting complaints (bcl)
  - nilfs2: Fixed possible sigsegv in case of corrupted superblock (abutenko)
  - libparted: Do not detect ext4 without journal as ext2 (pascal)
  - tests: probing ext4 without journal should still indicate ext4 (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.6.37-1
changelog:
  - Remove patches, all are included in the new release
  - Dropping pre-3.6 changelog entries
  - maint: regenerate .po, .pot files (bcl)
  - NEWS: Update news (bcl)
  - tests: t2420: New test confirming updating msdos doesn't add boot code
    (mike.fleetwood)
  - libparted: Stop adding boot code in MBR when updating msdos table
    (mike.fleetwood)
  - disk.c: Update metadata after reading partition table (pascal)
  - Fix initialization of atr_c_locale inside PED_ASSERT (felipe)
  - fat: Reword the failed to resize error (bcl)
  - doc: Add more detail to --script documentation (bcl)
  - Change AUTHORS urls to point to savannah.gnu.org (bcl)
  - bootstrap.conf: Remove unused gnulib-tests (bcl)
  - doc: API documentation moved to API.md (bcl)
  - cfg.mk: Adjust maint.mk for the parted codebase (bcl)
  - maint: Mention COPYING and INSTALL in README (bcl)
  - Upate include error.h (bcl)
  - tests: Use license URL not the old address (bcl)
  - doc: Use license URL not the old address (bcl)
  - maint: Update copyright statements to 2026 (bcl)
  - maint: Update to latest gnulib and bootstrap script (bcl)
  - hurd: Support USB device names (samuel.thibault)
  - doc: Fix some groff/mandoc linting complaints (bcl)
  - nilfs2: Fixed possible sigsegv in case of corrupted superblock (abutenko)
  - libparted: Do not detect ext4 without journal as ext2 (pascal)
  - tests: probing ext4 without journal should still indicate ext4 (bcl)
  - tests: Add test for dvh with a bad checksum (bcl)
  - libparted: Fix dvh disklabel unhandled exception (bcl)
  - tests: Add test for SUN disklabel handling (bcl)
  - libparted: Fix sun disklabel unhandled exception (bcl)
  - bug#74444: [PATCH] parted: fix do_version declaration (rudi)
  - libparted: Fail early when detecting nilfs2 (oldium.pro)
  - doc: Document IEC unit behavior in the manpage (bcl)
  - parted: Print the Fixing... message to stderr (bcl)
  - docs: Finish setup of libparted API docs (bcl)
  - m4: Remove unused parted.m4 (bcl)
  - bug#64034: [PATCH] libparted: link libparted-fs-resize.so to libuuid
    (raj.khem)
  - maint: Add .dirstamp files to .gitignore (yegorslists)
  - parted: link to libuuid (yegorslists)
  - maint: post-release administrivia (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.7-2
changelog:
  - Cleanup zero as null pointer constant warnings (bcl)
  - bug#80795: [PATCH] build: mark functions with const attribute, per gcc warnings (bug-parted)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260728.gf8df3f1-1
changelog:
  - qrap(1) is no longer shipped upstream as it has been obsoleted a
    while ago and presumably nobody is using it anymore (not needed
    starting from QEMU 7.2): drop it from the package as well
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_07_16.090d739..2026_07_28.f8df3f1


author: Carl Byington <carl@five-ten-sg.com> - 1.24.0-4
changelog:
  - Include fixes after the official 1.24.0 release.
  - Add context menu to copy the custom field values.
  - The report files are now always bom-less utf-8 encoded.
  - Text input for custom fields value is now resizeable.
  - Allow import from Gorilla password safe V2 files including URL fields.
  - Add browse + autotype feature.
  - Add 1.24.0 changelog entries from upstream.
  - Custom fields can now be added to each entry. That is, fields with
    user-defined names and values.
  - Changing the height of the Add/Edit dialog will cause a vertical
    scrollbar to be added.
  - In the "Flattened List" view, sorting by time columns (e.g., entry
    creation time) now works correctly.


author: Carl Byington <carl@five-ten-sg.com> - 1.25.0-1
changelog:
  - update to 1.25.0
  - (regression) Clicking on a row in the "conflicting items" grid in the
    comparison dialog no longer hangs the app.
  - Don't clear a non-recurring expiry when the password is changed.


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Filipe Rosset <filiperosset@fedoraproject.org> - 5.4.3-1
changelog:
  - update to 5.4.3 fixes rhbz#2492868
  - a bunch of other bugs were fixed and will be backported to all supported
    Fedora / EPEL versions


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Paul Howarth <paul@city-fan.org> - 0.21-24
changelog:
  - Classify buildreqs by usage
  - Use %license unconditionally
  - Use %{make_build} and %{make_install}
  - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.66-1
changelog:
  - 0.66 bump (rhbz#2318577)
    - Remove bundled Test::More
    - Possible precedence problem between ! and string eq
    - Silence clang warnings


author: Paul Howarth <paul@city-fan.org> - 2.25-1
changelog:
  - Update to 2.25 (rhbz#2326474)
    - Deterministic hash key order, needed for reproducible builds (GH#6)
  - Use %{make_build} and %{make_install}
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 0.48-1
changelog:
  - Update to 0.48
    - Performance: Optimize hot paths in Clone.xs
    - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
    - Fix: Don't require MGf_DUP flag for ext magic duplication
    - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
    - Fix t/10-deep_recursion.t for Windows
    - Fix C89 declaration-after-statement violations in Clone.xs
    - Fix deep recursion stack overflow on Windows
    - Fix cloning of Math::BigInt::GMP objects (GH#16)
    - Fix cloning of threads::shared data structures (GH#18)
    - Add thread safety test for Class::DBI-like patterns (GH#14)
    - Add comprehensive documentation with examples and limitations
    - Improve README.md structure and installation instructions
    - Add DBI + DBD::SQLite as recommended test dependencies
    - Fix weakened reference cloning via deferred weakening (GH#15)
    - Fix memory leak when cloning non-existent hash values (GH#42)
    - Fix segfault when cloning DBI database handles (GH#27)
    - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
    - Replace static recursion_depth with stack parameter
    - Fix C++ style comments in Clone.xs for C89 portability
    - Fix memory leak in Clone.xs (GH#42)
    - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
    - Rename tests with more readable names
    - Remove TODO from CoW test
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.49-1
changelog:
  - Update to 0.49
    - Try to exclude macOS extended attributes from dist tarball
    - Fix: Suppress DBI STDERR noise in t/13-io-handle.t (GH#82)
    - Fix: Skip DBI fork tests on Windows
    - Fix: Remove spurious warn output in t/03-scalar.t
    - Add AI_POLICY.md documenting AI-assisted workflow


author: Paul Howarth <paul@city-fan.org> - 0.50-1
changelog:
  - Update to 0.50
    - Fix: Deep-copy HVs past MAX_DEPTH instead of aliasing (GH#93)
    - Fix: Strip macOS xattrs from dist directory before packaging
    - Clean-up: Remove unreachable break and empty magic_ref if-body in Clone.xs
    - Docs: Update MAX_DEPTH limits to reflect actual platform values
    - Docs: Add SECURITY.md policy for vulnerability reporting
    - Prefer using gtar in Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 2.219-1
changelog:
  - Update to 2.219
    - Add PERL_UNUSED_DECL for trace to silence clang warning
    - Fix indentation in Lzma.xs that triggers a clang warning
    - Remove vestigial references to Pod::Markdown (GH#14)
    - Fix POD typo
    - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
      (GH#16)
    - Remove unused constants (GH#17)
    - Documentation improvements (GH#15)


author: Paul Howarth <paul@city-fan.org> - 2.224-1
changelog:
  - Update to 2.224
    - Remove 5.6-specific code and make 5.8 the minimum version supported
    - Remove call to UpDowngrade in Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 4.42-1
changelog:
  - Update to 4.42
    - Ensure encode with a type spec hashref does not change the hashref argument
      (GH#240)
    - Fix -e docs: "written" → "read" (GH#239)
    - Fix Boolean eq overload matching undef (GH#207); Cpanel::JSON::XS::Boolean
      overloaded eq would match undef as equal to false because undef stringifies
      to "" - added defined() guard
    - Fix error messages showing overloaded stringification for blessed objects
      (GH#191); error messages now use ClassName=TYPE(addr) format, bypassing any
      "" overload
    - Fix type_all_string overriding allow_blessed/convert_blessed (GH#175); with
      type_all_string + allow_blessed, blessed objects are now encoded as null
      (not stringified as HASH address)
    - Fix infinite recursion when encode is called from a "" overload (GH#128);
      the recursion guard temporarily clears convert_blessed and allow_stringify
      flags on the JSON object before calling the overload, preventing re-entrant
      encode loops
    - Fix $obj->new creating a broken object (GH#93); when new() is called on an
      existing object (e.g. $json->new->new), the class name is now extracted
      from the object's stash rather than using the stringified reference
    - Change allow_nonref default to true (GH#241, matching JSON::PP and
      JSON::XS 4.0+ and the insecure RFC 7159); encode and decode now accept
      non-reference values by default; decode_json() with an explicit 0/1 second
      argument still works; allow_nonref(0) to disable scalars-only for secure
      JSON
    - Fix minor t/12_blessed.t typo
    - Fix GH#112: encode large whole-number NV values without .0 on 32-bit Perl
      (values exceeding UV_MAX that Perl stores as float)
    - Fix GH#197: prefer IOK over pNOK when encoding values where IV is accurate
      but NV is imprecise (SvNOK not set)


author: Paul Howarth <paul@city-fan.org> - 4.43-1
changelog:
  - Update to 4.43
    - Fix canonical sort: Compare by UTF-16 code units per RFC 8785 (GH#248)
    - Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts UTF-8
      decoding instead of checking SvUTF8 flag, since older Perls may store valid
      UTF-8 hash keys without the flag set
    - Fix quadmath encode dropping ".0" for large floats (GH #246)
      - The .0 guard condition that suppressed appending for NV values > UV_MAX
        was incorrect on high-precision FP (quadmath, 128-bit long double on
        arm64) where %g uses fixed-point notation for values like 1.01e30
      - Guarded with #if NV_DIG < 31 to skip only on double/80-bit-ld where %g
        naturally uses %e for large values


author: Paul Howarth <paul@city-fan.org> - 2.09-1
changelog:
  - Update to 2.09 (rhbz#2513719)
    - New maintainer (TIMLEGGE)
    - Fix failure to build on newer GCC with implicit-function-declaration
      (CPAN RT#133363, CPAN RT#133412)
    - Add Security Policy (DES is insecure)
    - Add a Security Considerations section to the pod
    - Minor packaging updates
    - Clarify module recommendations
    - Add a Changes file
    - Move new Module::Whatever to Module::Whatever->new() in pod and tests


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.651-1
changelog:
  - 1.651 bump (rhbz#2499925) - Fix CVE-2026-15043, CVE-2026-15392,
    CVE-2026-60082 and CVE-2026-60081


author: Paul Howarth <paul@city-fan.org> - 2:1.66-1
changelog:
  - Update to 1.66 (rhbz#2346459)
    - Require Specio 0.50
      - That release has a bug fix for validation of integer values
      - Without the fix, DateTime could accept non-integer values for things like
        nanoseconds (GH#145)


author: Paul Howarth <paul@city-fan.org> - 0.004-1
changelog:
  - Update to 0.004
    - Fix failing tests where '.' was removed from INC
    - Fix cpantester fails on debug perls; switch to a rv2cv op that dereferences
      a code reference, matching what Perl expects as the last child of
      OP_ENTERSUB newUNOP(OP_RV2CV, 0, newSVOP(OP_CONST, 0, newRV_inc((SV*)cv)));
    - Fix qerror compatibility across perl versions: declare Perl_qerror via
      EXTERN_C to fix implicit declaration error on blead perl 5.43.9+ and avoid
      Perl_yyerror linker failure on Windows
    - PERL_VERSION_GE is now wrapped in #ifndef so it skips the local definition
      when Perl's handy.h already defines it
    - The qerror fallback now checks for Perl_qerror first (older Perls), and
      falls back to Perl_yyerror
    - Fix t/leximport.t failures on threaded/debugging Perl builds: add
      find_lexical_cv() helper that checks %^H hints hash directly for
      Lexical::Sub CVs before falling back to rv2cv_op_cv() lookup


author: Paul Howarth <paul@city-fan.org> - 2.2.5-1
changelog:
  - Update to 2.002005 (rhbz#2338807)
    - When debugging (perl -d), skip over invisible (generated) parameter
      initialization code even if single-step mode is active
    - Move repository and bugtracker to https://codeberg.org/


author: Paul Howarth <paul@city-fan.org> - 2.2.6-1
changelog:
  - Update to 2.002006 (rhbz#2388952)
    - Fix a parse-time memory leak with undef or default initializers
      ('fun ($x = undef)' or 'fun ($ =)'); this leak mostly manifests as noise
      from memory checkers because non-leaked ops aren't freed anyway while perl
      is still running
    - Update bugtracker info in README


author: Paul Howarth <paul@city-fan.org> - 2.84-1
changelog:
  - Update to 2.84
    - Added Makefile.PL --with and --without options to bypass autodetection
      errors or upstream libgd or subsequent library errors (GH#55)
    - Better support MSWin32 without gdlib.pc (requires manual --options and
      --lib_gd_path)
    - Work around broken ExtUtils::PkgConfig->find (GH#61)
    - Fixed snprintf for newer MSVC (>= VS 2015)
    - Added GD::Image::supported() image types method
    - Added newFromTiffData() method
    - Fixed t/GD.t for unsupported image types
    - Add GIFANIM to the default since 2.0.33 (GH#56)
    - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
    - Add demos/png2jpeg.pl
  - Don't disable XPM support if GD config doesn't explicitly require -lX11
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.85-1
changelog:
  - Update to 2.85
    - Tolerate runtime TIFF decode failures in autodetect (GH#62)
    - Replace cpm with cpanm in github actions
    - Fixed a minor precedence bug in t/z_manifest.t


author: Paul Howarth <paul@city-fan.org> - 2.87-1
changelog:
  - Update to 2.87
    - Fix OpenBSD support (GH#63)
    - Fix $image->compare() usages (GH#64, GH#65)
    - Fix tiff test without libimagequant (GH#66)


author: Paul Howarth <paul@city-fan.org> - 2.91-1
changelog:
  - Update to 2.91
    - Add JXL, UHDR support for new libgd-2.4.0 (from git)
    - JXL: newFromJxl/newFromJxlData readers, jxl() writer
      (lossless/distance/effort), magic-byte autodetection in new()
    - UHDR: New GD::UHDR class (newFromFile/newFromData, width/height/hasGainMap,
      resize/crop/rotate/mirror, file/write, getSdr)
    - Work around libgd 2.4.0 gd.h no longer declaring gdImageBoundsSafe()
    - IMAGEQUANT: trueColorToPaletteSetMethod/SetQuality and the GD_QUANT_*
      constants for the libimagequant-backed quantizer
    - Guard for installations without libimagequant
    - Fix imagequant feature autodetection in Makefile.PL (libimagequant surfaces
      in gdlib.pc's Libs.private, not Requires.private
    - Embed rpath (Linux) and fix stale blib/lib/GD/Image.pm so 'make test'
      reliably exercises the just-configured libgd (GH#21 test infra); fix GD_LIQ
      detection from the deprecated gdlib-config script
    - Add Affine transformations (GH#21): GD::Image affine matrix builders
      (affineIdentity/Scale/Rotate/ShearHorizontal/ShearVertical/Translate/
       Concat/Invert/Flip/Expansion/Rectilinear/Equal/ApplyToPoint) and
      transformAffineGetImage/transformAffineCopy/transformAffineBoundingBox,
      wrapping gdAffine*/gdTransformAffine* (libgd >= 2.1.0); fix GD_AFFINE_*
      constant visibility (same enum/#ifdef issue as GD_QUANT_*)
    - Add more previously-unbound libgd methods (libgd >= 2.1.0 unless noted):
      paletteToTrueColor, crop, cropAuto, cropThreshold, colorReplace,
      colorReplaceArray, colorReplaceThreshold, convolution, resolution;
      cloneImage, getTrueColorPixel, perceptualDiff (libgd >= 2.4.0); clone() now
      uses the native gdImageClone() when available, fixing truecolor-ness loss on
      the old new()+copy() fallback; Fix GD_CROP_* constant visibility (same
      enum/#ifdef issue as GD_QUANT_*)
    - Animated WebP support (libgd >= 2.4.0): new GD::WebpAnimWriter
      (new/addImage/finish, wrapping gdWebpWriteOpenPtr/AddImage/PtrFinish) and
      GD::WebpAnimReader (newFromData/info/nextImage, wrapping
      gdWebpReadOpenCtx/GetInfo/NextImage) classes
    - Animated/multi-image JXL support (libgd >= 2.4.0): new GD::JxlAnimWriter
      (new/addImage/finish, wrapping gdJxlWriteOpenPtr/AddImage/PtrFinish) and
      GD::JxlAnimReader (newFromData/info/nextImage, wrapping
      gdJxlReadOpenCtx/GetInfo/NextImage) classes, mirroring
      GD::WebpAnimReader/Writer
    - Multi-page TIFF support (libgd >= 2.4.0): new GD::TiffMultiWriter
      (new/addImage/finish, wrapping gdTiffWriteOpenPtr/AddImage/PtrFinish) and
      GD::TiffMultiReader (newFromData/info/nextImage, wrapping
      gdTiffReadOpenCtx/GetInfo/NextImage) classes, mirroring
      GD::WebpAnimReader/Writer (pages have no per-page delay; nextImage()
      returns a page-info hashref instead); also adds the GD_TIFF_* writer option
      constants (colorspace, compression, resolution unit, alpha type)
    - Per-format header introspection (libgd >= 2.4.0): new
      GD::Image->pngInfoData/jpegInfoData/gifInfoData/bmpInfoData/avifInfoData/
      heifInfoData class methods, wrapping
      gd{Png,Jpeg,Gif,Bmp,Avif,Heif}GetInfoCtx; each reads just the container
      facts (dimensions, bit depth, and similar) from an in-memory buffer without
      fully decoding the image
    - Fixed a longstanding bug in the in-memory gdIOCtx used by every
      newFrom*Data()/*InfoData() method: its getC() callback never advanced the
      read position, so any decoder reading a buffer byte-by-byte (as the new
      bmpInfoData()'s BMP header parser does) would spin re-reading the first
      byte forever; PNG, JPEG, GIF, WebP, TIFF, JXL, AVIF and HEIF decoding were
      unaffected because they read through the bulk getBuf() callback instead,
      which was already correct
    - Worked around inconsistent success/failure return conventions across
      libgd's new Get*InfoCtx functions: gdPngGetInfoCtx, gdJpegGetInfoCtx,
      gdAvifGetInfoCtx and gdHeifGetInfoCtx all return 0 on success despite two
      of their own header comments claiming the opposite, while gdGifGetInfoCtx
      and gdBmpGetInfoCtx return 1 on success as documented
    - t/affine.t: Compare affineInvert(scale(2,3))'s result with an epsilon
      (1e-6) instead of exact is_deeply, since -Duselongdouble perls compute the
      division in extended precision, giving a last-few-ULP-different 1/3 than a
      plain double (GH#68)


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23 (rhbz#2450189)
    Bug Fixes:
    - Fix function detection on Solaris by adding __EXTENSIONS__ to expose BSD
      extensions (like strlcpy) that are hidden when _XOPEN_SOURCE is defined
      (GH#47, GH#48)
    - Fix file descriptor leaks in open_slave() error paths; the master pty fd
      was not closed on several early-return error paths, causing fd leaks when
      falling through multiple pty allocation methods (GH#49)
    - Replace deprecated indirect object syntax (e.g. 'new IO::Pty') with direct
      method calls ('IO::Pty->new'); Perl 5.36+ disables indirect object calls,
      so this fixes forward compatibility (GH#52)
    Improvements:
    - Add unit tests for ttyname(), slave()/close_slave() lifecycle,
      set_winsize()/get_winsize() round-trips, pack_winsize/unpack_winsize, and
      constant importing (28 new tests) (GH#50)
    - Replace DynaLoader with XSLoader and bump minimum perl version to 5.8.8;
      XSLoader is simpler and has been in core since perl 5.6 (GH#51)
    - Add clone_winsize_from() test coverage (7 new tests) covering basic clone
      between slave ttys, non-tty master fast path, croak on non-tty source, and
      pixel dimension preservation (GH#53)
    Maintenance:
    - Fix stale POD versions, add Perl 5.38/5.40 to CI, and update repository
      URLs from toddr/IO-Tty to cpan-authors/IO-Tty (GH#44)
    - Remove dead Perl 5.003 compatibility code, modernize XS (Nullch to NULL,
      perl_get_sv to get_sv, sprintf to snprintf) (GH#45)
    - Modernize CI with dynamic perl version discovery via
      perl-actions/perl-versions and add a disttest job (GH#46)
    - Regenerate README from POD to fix stale version (GH#52)
    - Modernize 'use vars' to 'our' declarations in Tty.pm and Pty.pm; add
      missing 'use warnings' to Pty.pm (GH#53)
    - Add AI_POLICY.md for transparency on AI-assisted contributions
    - Convert README to Markdown and update MANIFEST


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24 (rhbz#2452300)
    Bug Fixes:
    - Fix slave pty reopening on Solaris/illumos; after close_slave(), reopening
      with plain Perl open() skipped pushing STREAMS modules (ptem, ldterm,
      ttcompat), causing isatty() to return false - added _open_tty() XS function
      that opens the device and pushes STREAMS modules on platforms that support
      I_PUSH (GH#54, GH#55)
    - Fix undef warnings on Perl 5.8.8 by removing the undef operator on
      localized $SIG{__DIE__}, and fix XS ttyname() on older Perls by avoiding
      the InOutStream typemap, which can return NULL for filehandles created via
      new_from_fd (GH#56, GH#58)
    - Add __BSD_VISIBLE for FreeBSD in function probes; the _XOPEN_SOURCE
      definition hid BSD extensions like strlcpy, causing probe failures and
      subsequent compile errors from conflicting static/non-static declarations
      (GH#57, GH#59)
    Maintenance:
    - Modernize Makefile.PL: replace BUILD_REQUIRES with TEST_REQUIRES
      (EUMM 6.64+), add CONFIGURE_REQUIRES, upgrade META_MERGE to meta-spec v2,
      modernize generated Constant.pm to use 'our' instead of 'use vars', and
      remove dead PPD postamble (GH#60)


author: Paul Howarth <paul@city-fan.org> - 1.25-1
changelog:
  - Update to 1.25 (rhbz#2454158)
    Bug Fixes:
    - Fix IO::Pty DESTROY force-closing the slave pty: the DESTROY method (added
      in 1.21) explicitly closed the cached slave handle, breaking consumers like
      IPC::Run that hold a reference to the slave via $pty->slave() and expect it
      to survive master destruction; now just deletes the internal reference and
      lets Perl's refcounting handle fd closure correctly (GH#62, GH#64)
    Maintenance:
    - Simplify version variables to a single source of truth: extract version
      from Tty.pm in Makefile.PL using MM->parse_version() instead of hardcoding
      it, use VERSION_FROM in WriteMakefile, and remove $XS_VERSION from Tty.pm
      (GH#61)


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (rhbz#2454517)
    Bug Fixes:
    - Fix strlcpy detection on DragonFly BSD to avoid static/non-static
      declaration conflict; added __DragonFly__ guard to the function test
      (paralleling __FreeBSD__) and added a belt-and-suspenders check for
      perl's own HAS_STRLCPY in Tty.xs (GH#67)
    Maintenance:
    - Add 5-minute timeout to all CI test steps to prevent hung tests from
      consuming CI resources indefinitely (GH#66)


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27 (rhbz#2454942)
    Bug Fixes:
    - Fix build on OpenBSD by including termios.h to detect openpty reliably and
      setting _BSD_SOURCE to find strlcpy in includes (GH#68)


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29 (rhbz#2461125)
    Bug Fixes:
    - Fix make_slave_controlling_terminal() on Solaris/HP-UX to use _open_tty()
      instead of IO::Tty->open(), ensuring STREAMS modules (ptem, ldterm,
      ttcompat) are pushed via I_PUSH when the slave is opened for controlling
      terminal setup - parallel fix to the slave() method fix in 1.24 (GH#69)
    - Fix Perl 5.40+ "Possible memory corruption: ioctl overflowed 3rd argument"
      warning in clone_winsize_from() and get_winsize(); use
      pack_winsize(0,0,0,0) to pre-allocate the ioctl buffer with SvCUR matching
      sizeof(struct winsize) instead of an empty string (GH#74)
    - Fix diagnostic warnings being silently suppressed when callers use lexical
      "use warnings" (the modern standard since Perl 5.6); $^W and PL_dowarn only
      fire under perl -w - replaced with warnings::enabled() in IO::Tty and
      IO::Pty (GH#76) and ckWARN(WARN_IO) in Tty.xs (GH#79)
    - Fix file descriptor leak in IO::Pty when new_from_fd() fails after
      pty_allocate() or _open_tty() returns raw C-level fds; added POSIX::close()
      calls on the raw fds before croaking at three sites in new() and slave()
      (GH#77)
    - Fix openpty() detection on Alpine Linux and other musl-based systems where
      openpty() has moved from libutil into libc (glibc 2.34+); probe libc first
      before falling back to -lutil (GH#78)
    - Fix -Wsign-compare compiler warnings: change namebuflen parameter type from
      int to size_t in open_slave() and allocate_pty() to match the return type
      of strlcpy() and the size argument of snprintf() (GH#80)
    - Fix spurious "_FORTIFY_SOURCE requires compiling with optimization"
      warnings during configure probes when $Config{optimize} (e.g. -Os) is
      separate from $Config{ccflags}; include optimize flags in all configure
      probe compilations (GH#81)
    - Fix header probes in Makefile.PL missing platform extension defines
      (_GNU_SOURCE, _BSD_VISIBLE, etc.) that function probes already included;
      bare #includes could cause HAVE_PTY_H and similar to be unset on strict
      POSIX systems even when the header exists (GH#84)
    - Fix configure-time function detection probes being broken by compiler
      optimization:
      - The probes stored function pointers in local variables that -O2/-Os
        (added to probe flags in GH#81) eliminated as dead stores, so the linker
        never saw the function reference; on systems where openpty() lives in
        -lutil (older glibc, BSDs), the probe falsely succeeded without -lutil,
        producing "undefined symbol: openpty" at runtime
      - Fixed by storing the function pointer in a file-scope global variable
        that the optimizer cannot eliminate (GH#87, GH#88)
    Improvements:
    - Use L<> instead of C<> for cross-module POD references in Tty.pm and Pty.pm
      so MetaCPAN renders IO::Pty, IO::Handle, and IO::Stty as clickable links
      (GH#86)
    Maintenance:
    - Modernize POD in Tty.pm and Pty.pm: remove stale platform version
      references (FreeBSD 4.4, OpenBSD 2.8, HPUX 10.20, Solaris 2.6), replace
      defunct SourceForge/mailing list URLs with GitHub issue tracker (GH#70)
    - Modernize the 'try' example script: add strict/warnings, my declarations,
      3-arg open, and lexical filehandles; the script is shipped to CPAN and
      referenced in POD as the canonical usage example (GH#73)
    - Strengthen test coverage for set_raw() and winsize: verify all termios
      flags set by cfmakeraw (iflag, oflag, PARENB, CSIZE, CS8, VMIN, VTIME) and
      add a test for the unpack_winsize() length-validation croak (GH#75)
    - Update GitHub Actions to Node.js 24 versions: actions/checkout v6,
      cross-platform-actions/action v1, perl-actions/install-with-cpm v2;
      required before GitHub forces Node.js 24 in June 2026 (GH#85)
    - Add Ubuntu LTS version matrix (20.04, 22.04, 24.04) to the GitHub Actions
      test suite; exercises the system perl on each current Ubuntu LTS release
      via Docker containers, running after the main ubuntu job (GH#89)


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2481113)
    Bug Fixes:
    - Fix v1.27 regression where _open_tty() always passed O_NOCTTY, preventing
      make_slave_controlling_terminal() from acquiring a controlling terminal via
      the POSIX-standard open-without-O_NOCTTY mechanism (it was forced to fall
      through to an explicit TIOCSCTTY ioctl) (GH#91, GH#94)
      - _open_tty() now takes an optional noctty flag (default 1 for backward
        compatibility)
      - make_slave_controlling_terminal() passes 0
    - Fix openpty() detection on Fedora 33-34 / glibc 2.32-2.33 where LTO flags
      (-flto=auto) caused the libc-only compile probe to falsely succeed,
      producing "undefined symbol: openpty" at runtime; try -lutil before libc;
      harmless on systems where openpty lives in libc (glibc 2.34+, musl) and
      necessary where it doesn't (GH#92, GH#93)
    Maintenance:
    - Address CPANTS kwalitee issues: add LICENSE, SECURITY.md, and
      CONTRIBUTING.md; add META 'provides' for IO::Tty, IO::Pty, and
      IO::Tty::Constant; use --format=ustar in TARFLAGS to prevent PaxHeader
      entries in distribution tarballs (GH#90)
    - Clean up MANIFEST.SKIP: add #!include_default so ExtUtils::Manifest's
      built-in skip list is in effect, drop five entries that duplicate those
      defaults, and add a ^\.claude/ rule
  - Package CONTRIBUTING.md, LICENSE and SECURITY.md


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.035-1
changelog:
  - 1.035 bump (rhbz#2519477)
  - Fix CVE-2026-73639 (PNG buffer overflow)
  - Fix CVE-2026-73638 (EXIF decoding issues)


author: Paul Howarth <paul@city-fan.org> - 2.143-5
changelog:
  - Fix FTBFS with ExtUtils::ParseXS 3.61
    https://github.com/briandfoy/net-ssh-perl/pull/75
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.94-9
changelog:
  - Fix for test suite compatibility with OpenSSL 3.4
    (https://github.com/radiator-software/p5-net-ssleay/pull/514)


author: Paul Howarth <paul@city-fan.org> - 1.96-1
changelog:
  - Update to 1.96
    - Skip NPN tests when NPN is disabled in OpenSSL instead of assuming NPN is
      always enabled
    - Update GitHub Actions CI workflow; a number of test jobs were broken
      because some GitHub runners were discontinued, changes in QEMU setup,
      changes in Cygwin, etc.
    - Adjust test 32_x509_get_cert_info.t to match formatting changes in
      OpenSSL 3.4.0 and 3.4.1
    - OpenSSL 3.9.0 and later remove EVP_add_digest()
    - Increase timeout in 62_threads-ctx_new-deadlock.t to allow the test to pass
      on very slow platforms
    - Add missing documentation for STACK_OF() free functions sk_X509_free and
      sk_X509_INFO_free
    - Add $prefx/lib/64 to lib paths in Makefile.PL for Illumos
    - Support vendor-supplied OpenSSL 3.x on VMS and update %ENV modification in
      test 10_rand.t to work on VMS
    - Compiler -D switches Makefile.PL sets are no longer added to the MakeMaker
      CCFLAG attribute because of portability reasons; the switches are now
      passed either via WriteMakefile() or appending them to the
      'perl Makefile.PL ...' DEFINE argument
    - Update GitHub Actions CI testing:
      - Perl on Ubuntu 24.04: Add Perl 5.38, 5.40 and 5.42, add OpenSSL 3.3, 3.4
        and 3.5 minor releases, add LibreSSL 3.9, 4.0 and 4.1 release branches
      - Alpine Linux: Remove 3.15, 3.16 and 3.17; Add 3.19, 3.20, 3.21 and 3.22
      - Freebsd: Add 14.3 and replace 13.2 with 13.5
      - OpenBSD: Add 7.6 and 7.7. Remove 7.2 and 7.3
      - NetBSD: Add 10.1 and replace 9.3 with 9.4
    - Update test 62_threads-ctx_new-deadlock.t to work with LibreSSL 4.1.0
    - Support SSL_CTX_set1_sigalgs_list and SSL_CTX_set1_client_sigalgs_list
    - Support SSL_set1_sigalgs_list, SSL_set1_client_sigalgs_list,
      SSL_get_sigalgs and SSL_get_shared_sigalgs, and add the function
      SSL_CTX_set_cert_cb
    - Add test file 67_sigalgs.t for the sigalgs functions


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-3
changelog:
  - Add BR: gcc
  - Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
  - Unset test envars


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-5
changelog:
  - Drop conditional around ExcludeArch, no i686 valkey build anywhere
  - Directly BR: valkey rather than valkey-compat-redis
  - Drop duplicate BR:


author: Michal Schorm <mschorm@redhat.com> - 2.548-34
changelog:
  - Skip 't/core_palette.t' palette tests when 'sdl12-compat' does not provide a palette (rhbz#2464853)


author: Paul Howarth <paul@city-fan.org> - 5.005-1
changelog:
  - Update to 5.005 (rhbz#2480052)
    - Update bundled Zstd to 1.5.7, and other changes
    - Update spec to document changes from version 5
    - Security fixes - make sure that COPY tags cannot be used to read past end
      of buffer


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480334)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 5.007-1
changelog:
  - Update to 5.007 (rhbz#2498240)
    - Use $Config{ccflags} to compile zstd with, which should fix AIX


author: Paul Howarth <paul@city-fan.org> - 5.008-1
changelog:
  - Update to 5.008 (rhbz#2498977)
    - Decoder now supports 'thaw_allow_classes' and 'thaw_deny_action' to control
      thaw callbacks during decoding


author: Paul Howarth <paul@city-fan.org> - 5.009-1
changelog:
  - Update to 5.009 (rhbz#2501693)
    - Only use Perl's $Config{ccflags} when building bundled zstd on AIX/IBM
      toolchains, or when SEREAL_ZSTD_USE_CONFIG_CCFLAGS is set; other platforms
      now use the normal zstd build flags again


author: Paul Howarth <paul@city-fan.org> - 5.010-1
changelog:
  - Update to 5.010 (rhbz#2511545)
    - Reset the pending frozen-object state (thaw_av and ref_thawhash) at the
      start of every decode (Sereal GH#316)


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480336)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 5.007-1
changelog:
  - Update to 5.007 (rhbz#2498241)
    - Use $Config{ccflags} to compile zstd with, which should fix AIX


author: Paul Howarth <paul@city-fan.org> - 5.009-1
changelog:
  - Update to 5.009 (rhbz#2501695)
    - Only use Perl's $Config{ccflags} when building bundled zstd on AIX/IBM
      toolchains, or when SEREAL_ZSTD_USE_CONFIG_CCFLAGS is set; other platforms
      now use the normal zstd build flags again


author: Petr Pisar <ppisar@redhat.com> - 0.15-36
changelog:
  - Correct a license to "(GPL-1.0-or-later OR Artistic-1.0-Perl) AND
    BSD-3-Clause"
  - Quallify bundled(mt19937ar) RPM provide with a release date
  - Package the tests


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Fix version comparison logic for forward compatibility
  - Switch source URL from cpan.metacpan.org to www.cpan.org
  - Use %{make_build} and %{make_install}


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.46-10
changelog:
  - Add 0000-Fix-for-compilation-in-C23-mode.patch for GCC 15 compatibility,
    thanks to Paul Howarth.


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Paul Howarth <paul@city-fan.org> - 1.63-1
changelog:
  - Update to 1.63
    - Check attribute lengths (memory protection)
    - Minor code consistencies (not user-visible)
    - Dropped support for 5.6.x and 5.8.0; minimum perl is now 5.8.1
    - Fix special str setting consistency for types, undef_str and comment_str
    - Characters []:*/\ are not allowed in XLSX sheet names


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Unicode::UTF8 now allows noncharacters; they receive no special handling
      and are processed like any other code point
    - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
      (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
      reserved but should be allowed in interchange:
      https://www.unicode.org/versions/corrigendum9.html


author: Paul Howarth <paul@city-fan.org> - 0.65-1
changelog:
  - Update to 0.65
    - C99-compliant compiler is now required for Unicode::UTF8
    - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
      validation for non-ASCII input; this approach resulted in a 900% throughput
      improvement on English text and a 200% improvement on Swedish text compared
      with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Rewrote the UTF-8 validator using a shift-based DFA from
      https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
      up to 10x faster decoding compared with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.68-1
changelog:
  - Update to 0.68
    - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
      builds
    - Use Dist::Zilla for the distro
  - Package new LICENSE file
  - Drop hacks related to use of Module::Install, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Update the c-utf8 library code: improved GCC code generation, including
      with -O2, resulting in higher throughput
    - Use utf8_check_ascii with a 16-byte ASCII fast path


author: Paul Howarth <paul@city-fan.org> - 0.72-1
changelog:
  - Update to 0.72
    - read_utf8() now takes a single-pass fast path on PerlIO fast-gets layers,
      validating/copying/counting straight out of the layer buffer (up to ~11%
      faster on multibyte-heavy input; see benchmarks/)
    - Fixed read_utf8() on non-buffered handles stranding the trailing incomplete
      sequence that was read to satisfy the requested length: the pending bytes
      are now pushed back with PerlIO_unread() so the following read sees them,
      matching decode_utf8() when drained to end of file
  - Add patch to avoid trying to use 64-bit SSE2 on ix86 (GH#14)


author: Paul Howarth <paul@city-fan.org> - 0.74-1
changelog:
  - Update to 0.74
    - Added slurp_utf8($filename), which reads an entire file and returns its
      contents decoded from UTF-8 as a character string
    - Added support for older MSVC C compilers by using __inline in place of the
      C99 inline keyword on pre-Visual Studio 2015 builds
    - Fixed SSE2 detection to only enable the SIMD implementation on 64-bit x86
      targets, which prevents unsupported SSE2 code from being selected on 32-bit
      x86 builds (GH#14)


author: Paul Howarth <paul@city-fan.org> - 0.75-1
changelog:
  - Update to 0.75
    - Fixed slurp_utf8() leaking the file descriptor if a fatal "utf8" warning
      (e.g. warnings FATAL => 'utf8') was thrown while reading an ill-formed file


author: Paul Howarth <paul@city-fan.org> - 0.65-1
changelog:
  - Update to 0.65 (rhbz#2520627)
    - The 'delete' callback for hashes will now correctly be fired in void
      context; VMG_COMPAT_HASH_DELETE_NOUVAR_VOID is now always set to false
      (this is a [good] side effect of the following fix)
    - Fix test failures under perl v5.45.2 (CPAN RT#180372)
    - CONTRIBUTING: AI contributions are not welcomed


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Paul Howarth <paul@city-fan.org> - 1.46-1
changelog:
  - Update to 1.46
    Bug Fixes:
    - Preserve string nature of numeric-looking values in Dump; pure strings (POK
      only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
      (GH#199, GH#200)
    - Accept trailing commas in flow sequences and mappings ([a, b,] and
      {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
    Maintenance:
    - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
      prior to 5.24 in perldocker containers (GH#197, GH#198)
    - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
      exclude .claude/ from distribution


author: Paul Howarth <paul@city-fan.org> - 1.47-1
changelog:
  - Update to 1.47
    Security:
    - Fix four libsyck memory-safety CVEs reachable from the default
      YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
      - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
        caused by signed-char indexing of the decode table on !!binary input
      - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
        between the node and the anchors table
      - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
        newline scan during block-scalar parsing (incomplete-fix follow-on
        to CVE-2025-11683)
      - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
        anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
    - Harden syck_base64dec() to bounds-check each read so it cannot run past a
      non-NUL-terminated input buffer (defense-in-depth for callers passing raw
      buffers; GH#213)
    Bug Fixes:
    - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
      nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
      matching Dump (GH#204)
    - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
      Dump so they roundtrip with ImplicitTyping instead of reloading as plain
      strings (GH#201)
    Maintenance:
    - CI: add an AddressSanitizer job that builds the XS with
      -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
      libsyck memory-safety defects; de-pin the libasan version so it tracks the
      runner's GCC (GH#213)


author: Paul Howarth <paul@city-fan.org> - 3.0.2-1
changelog:
  - Update to 3.0.2 (rhbz#2309576)
    - Fix debugger test (GH#15)
    - Upgrade ppport.h from 3.42 to 3.68
    - Fix doc typo (GH#12)
    - Fix changelog typo (GH#14)


author: Petr Pisar <ppisar@redhat.com> - 0.36-31
changelog:
  - Correct a license tag to "GPL-1.0-or-later OR Artistic-1.0-Perl"
  - Package the tests
  - Stop applying a patch for replacing signal handlers unneeded since Perl
    5.14 (CPAN RT#49878)


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.18-15
changelog:
  - Adapt to perl 5.43.11 (define PERL_EXT to access reg_numbered_buff and
    reg_named_buff functions)


author: Michal Schorm <mschorm@redhat.com> - 2.2-1
changelog:
  - Rebase to 2.2
  - Cherry-pick PostgreSQL 18 support from upstream 'main' branch
  - Add 'libzstd-devel' to BuildRequires (PG 18 links against libzstd)


author: Remi Collet <remi@remirepo.net> - 1.0.0-37
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix build with PHP 8.5.0alpha2
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 2.1.2-9
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0alpha2 from
    https://github.com/php-amqp/php-amqp/pull/595
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Remi Collet <remi@remirepo.net> - 1.0.3-19
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@remirepo.net> - 2.0.6~RC1-18
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix build with PHP 8.5.0alpha2 using patch from
    https://github.com/vitoc/gmagick/pull/59


author: Remi Collet <remi@fedoraproject.org> - 4.2.6-3
changelog:
  - fix incompatible pointer type FTBFS #2341063
    using patch from https://github.com/m6w6/ext-http/pull/143
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 3.2.16-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix for PHP 8.5.0beta2 using patch from
    https://github.com/igbinary/igbinary/pull/399
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/igbinary/igbinary/pull/398
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 3.2.17~RC1-1
changelog:
  - update to 3.2.17RC1
  - add pie virtual provides
  - drop patches merged upstream
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@fedoraproject.org> - 3.7.0-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/Imagick/imagick/pull/690


author: Remi Collet <remi@remirepo.net> - 3.8.0-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/Imagick/imagick/pull/741
  - ignore 1 test failing with IM 7.1.2 reported as
    https://github.com/Imagick/imagick/issues/737


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@fedoraproject.org> - 1.0.7-1
changelog:
  - update to 1.0.7
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - fix build with PHP 8.4 using patch from
    https://github.com/php/pecl-encryption-mcrypt/pull/19


author: Remi Collet <remi@fedoraproject.org> - 1.0.9-1
changelog:
  - update to 1.0.9
  - re-license spec file to CECILL-2.1
  - modernize the spec file
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 8.2-12
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix for PHP 8.5.0RC1 using patch from
    https://github.com/websupport-sk/pecl-memcache/pull/120
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/websupport-sk/pecl-memcache/pull/118
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 2.4.0-1
changelog:
  - update to 2.4.0
  - raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
  - run upstream test suite without server


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-12
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/krakjoe/pcov/pull/111


author: Remi Collet <remi@remirepo.net> - 2.2.3-8
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add patch for test suite with PHP 8.5 from
    https://github.com/m6w6/ext-pq/pull/53
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 6.2.0-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0alpha3 from
    https://github.com/phpredis/phpredis/pull/2677
  - add upstream patch for redis 8


author: Remi Collet <remi@remirepo.net> - 2.0.4-1
changelog:
  - update to 2.0.4
  - drop patches merged upstream
  - fix build with PHP 8.6.0beta1 using  patch from
    https://github.com/php/pecl-processing-rrd/pull/18
  - drop pear/pecl dependency
  - sources from github
  - open https://github.com/php/pecl-processing-rrd/issues/19 drop tag prefix


author: Remi Collet <remi@fedoraproject.org> - 1.1.3-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - fix PHP 8.4 build using patch from
    https://github.com/php/pecl-xml-xmldiff/pull/2


author: Remi Collet <remi@remirepo.net> - 1.1.5-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0alpha2 from
    https://github.com/php/pecl-xml-xmldiff/pull/6


author: Remi Collet <remi@remirepo.net> - 2.2.5-2
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0RC1 from
    https://github.com/php/pecl-file_formats-yaml/pull/95
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.1.3-34
changelog:
  - fix build with GCC 15 using patch from
    https://github.com/zeromq/php-zmq/pull/238
  - re-license spec file to CECILL-2.1
  - modernize the spec file


author: Remi Collet <remi@remirepo.net> - 1.1.3-36
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix build with PHP 8.5.0alpha2 using patch from
    https://github.com/zeromq/php-zmq/pull/240


author: Kevin Fenzi <kevin@scrye.com> - 2024.07-7
changelog:
  - use correct go-md2man in BuildRequires
  - Drop 32bit build as a leaf node since go-md2man doesn't exist there.


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Drop upstreamed C23 patch
  - Add patch to properly detect the secure_getenv function
  - Figure the License fields out all over again
  - Rename swi-prolog-nox to swi-prolog-cli
  - Combine swi-prolog-x into swi-prolog-win


author: Robert Scheck <robert@fedoraproject.org> 4.4-13
changelog:
  - Add patch to replace pipes.quote() from deprecated Python
    pipes (#2318435, thanks to Sean Carlos and Patrick Scheck)


author: Michal Schorm <mschorm@redhat.com> - 0.7.1-25
changelog:
  - Fix FTBFS with GCC 16: set 'CMAKE_CXX_STANDARD=17' to avoid C++20
    'concept' keyword clash in bear-engine headers (rhbz#2434925)
  - Fix FTBFS with Boost 1.88: replace removed 'boost/filesystem/convenience.hpp'
    and 'boost/filesystem/path.hpp' with the all-inclusive 'boost/filesystem.hpp'


author: Michal Schorm <mschorm@redhat.com> - 0.7.1-26
changelog:
  - Fix SPDX license: replace 'LicenseRef-Callaway-CC-BY-SA' with 'CC-BY-SA-3.0',
    add 'OFL-1.1' and 'CC-BY-3.0' for bundled fonts


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 24.004.60-22
changelog:
  - Fix crash in drm plugin close_input_source() (rhbz#2416551)
  - Fix wrong KBD layout when a user has configured multiple layouts
    (rhbz#2416197)
  - Fix race in fb_device_has_drm_device () causing frame-buffer plugin to
    sometimes load while drm plugin is already handling the display


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-7
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
  - sepolicy: Fix detection of writeable locations


author: Xavier Bachelot <xavier@bachelot.org> - 19-45
changelog:
  - Add conditional for {pipewire-,}jack-audio-connection-kit-devel
  - Narrow scope of globs for .so/.pc


author: Robert-André Mauchin <zebob.m@gmail.com> - 19.7.0-1
changelog:
  - Fix version number and refactor
  - The archive already used actually corresponds to version 19.7.0
  - Grab the archive from the official VCS repo: this allows us to use
    %{version} variable instead of a hardcoded archive name (useful if we
    want to use Packit later).
  - License reanalysis with scancode (no change)
  - Remove old cruft


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Petr Khartskhaev <pkhartsk@redhat.com> - 16.14-1
changelog:
  - Update to version 16.14
  - Resolves: rhbz#2477451
  - Resolves: rhbz#2499964
  - Resolves: rhbz#2499726
  - Resolves: rhbz#2499705
  - Resolves: rhbz#2489304
  - Resolves: rhbz#2487460
  - Resolves: rhbz#2484513
  - Resolves: rhbz#2484512
  - Resolves: rhbz#2484431
  - Resolves: rhbz#2482515
  - Resolves: rhbz#2499705


author: Nikola Davidova <ndavidov@redhat.com> - 1.5.2-2
changelog:
  - Spec file cleanups and improvements
  - Adopt %autorelease to match %autochangelog usage
  - Update Source0 URL to use proper GitHub archive format
  - Add explicit >= 16 version constraints to postgresql dependencies
  - Transition from %setup to %autosetup
  - Tighten wildcard for SQL extension files to prevent accidental inclusions
  - Abstract pg_server_config path into a macro and format header
  - Related: INFRASERV-1487


author: Filip Janus <fjanus@redhat.com> - 19beta1-1
changelog:
  - Initial build of postgresql 19 (beta1)
  - Based on postgresql18 package
  - Integrate pgaudit extension as subpackage
  - Support upgrade from PostgreSQL 18 only


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 100.0.399-1
changelog:
  - Update to v100.0.399
  - License change: "GPL-3.0-only AND Apache-2.0 AND MIT" -> "GPL-3.0-only AND MIT"


author: Kim Walisch <walki@fedoraproject.org> - 8.3-1
changelog:
  - fast_div.hpp: Improve x64 assembly
  - S2_easy.cpp: Bidirectional clustered easy leaves optimization
  - AC.cpp: Bidirectional clustered easy leaves optimization
  - AC.cpp: Cast to smaller type optimization
  - SegmentedPiTable.hpp: Use faster lightweight compression
  - SegmentedPiTable.cpp: Use faster lightweight compression
  - SegmentedPiTable.cpp: Do not interleave pi and bits lookup tables
  - SegmentedPiTable.cpp: Reuse primesieve::iterator object when initializing multiple segments
  - LoadBalancerAC.cpp: Tune single thread performance
  - Sieve.cpp: Optimize cross_off() and cross_off_count()
  - Sieve.cpp: Tune minimum counter distance
  - nth_prime_sieve.hpp: Optimize 128-bit division on x64 CPUs
  - util.hpp: Tune alpha_z for new AC algorithm
  - README.md: Update benchmark timings


author: Kim Walisch <walki@fedoraproject.org> - 8.4-1
changelog:
  - test/codegen: Add assembly code generation tests
  - doc/Hard-Special-Leaves-SIMD-Filtering.pdf: New math paper about the branchfree SIMD hard special leaves algorithm
  - Vector.hpp: Improve Vector exception safety
  - Sieve_count_simd.hpp: Tune AVX512 and ARM SVE kernels
  - D_avx512.hpp: Implement new branchfree AVX512 algorithm
  - D_arm_sve.hpp: Implement new branchfree ARM SVE algorithm
  - D.cpp: Implement new branchfree portable D algorithm
  - FactorTableD.hpp: Add direct data() access and improve 32-bit/64-bit support for the new D algorithms
  - popcnt.hpp: Add popcnt64_native() to bypass POPCNT runtime checks
  - multiarch_avx512_vpopcnt.cmake: Require AVX512BW and AVX512VL
  - cpu_arch_macros.hpp: Require AVX512BW and AVX512VL
  - cpu_supports_avx512_vpopcnt.hpp: Detect AVX512BW and AVX512VL
  - cpuid.cpp: Detect AVX512BW and AVX512VL
  - multiarch_arm_sve.cmake: Improve ARM SVE compile test for svcompact()
  - sve.cpp: Clarify ARM SVE detection requirements
  - Sieve.hpp: Update AVX512 attributes to use AVX512BW and AVX512VL
  - Sieve_count_start_stop.hpp: Remove count_algo_name() and update AVX512 attributes
  - Sieve_count_stop.hpp: Simplify count() algorithm selection
  - S2_hard.cpp: Remove obsolete SIMD-specialized thread code
  - pi_lmo_parallel.cpp: Remove obsolete SIMD-specialized thread code
  - pi_lmo5.cpp: Remove bit counting algorithm status output


author: Kim Walisch <walki@fedoraproject.org> - 8.5-1
changelog:
  - ci.yml: Add FreeBSD GitHub Actions CI tests
  - PiTable.cpp: Annotate OpenMP barrier with nowait
  - main.cpp: Set LLVM OpenMP environment variables to tune performance
  - CMakeLists.txt: Set WITH_DIV32=OFF by default to fix Clang-22 performance regression in the D algorithm
  - CMakeLists.txt: Add support for building primecount as a shared library (primecount.dll) on Windows using MSVC
  - CMakeLists.txt: Remove WITH_MSVC_CRT_STATIC option
  - FactorTable.hpp: Fix 64-bit integer overflow
  - CmdOptions.cpp: Validate alpha tuning factor command-line options
  - calculator.hpp: Fix std::tolower() undefined behavior
  - util.cpp: Improve get_time() precision
  - StatusS2.cpp: Support use in lockfree code
  - LoadBalancerS2.cpp: Use lockfree implementation, get rid of mutex
  - LoadBalancerAC.cpp: Use lockfree implementation, get rid of mutex
  - LoadBalancerP2.cpp: Use lockfree implementation, get rid of mutex
  - nth_prime.cpp: Use new nth_prime_sieve() implementation
  - nth_prime_sieve.cpp: Improved multi-threading
  - RiemannR.cpp: Add RiemannR(psi(x)) implementation
  - CmdOptions.cpp: Add --RiemannR-psi & --RiemannR-psi-inverse
  - README.md: Document --RiemannR-psi & --RiemannR-psi-inverse
  - doc/primecount.txt: Add --RiemannR-psi & --RiemannR-psi-inverse
  - doc/primecount.1: Add --RiemannR-psi & --RiemannR-psi-inverse
  - test/nth_prime_sieve.cpp: Update nth_prime_sieve() test
  - test/RiemannR_psi.cpp: New test for RiemannR(psi(x)) implementation


author: Jerry James <loganjerry@gmail.com> - 8.5-4
changelog:
  - Stop building for 32-bit x86
  - Remove obsolete ldconfig_scriptlets macro
  - Use macros for architecture families
  - Enable future use of AVX2/AVX512 with libdivide


author: Kim Walisch <walki@fedoraproject.org> - 8.6-1
changelog:
  - count_simd.hpp: Prevent loop unrolling to reduce branch mispredictions
  - Sieve.cpp: New sieving algorithm for small primes
  - Sieve_count_simd.hpp: Fix undefined behavior
  - Sieve.hpp: Use Vector<uint64_t> sieve to fix undefined behavior
  - Move the sieve source files into the new src/sieve directory
  - Fix LLVM/Clang -Wunused-template warning
  - Improve ARM SVE runtime dispatch
  - multiarch_arm_sve.cmake: Update the ARM SVE compiler support check to match


author: Kim Walisch <walki@fedoraproject.org> - 8.7-0
changelog:
  - primecount now requires C++14 or later (only for building, linking still works with C++11)
  - nth_prime_sieve.cpp: Fix rare OpenMP multi-threading bug
  - Fix GCC/Clang -Wundef warnings
  - PiTable.cpp: Add multi-threaded primes vector initialization
  - FactorTableD.hpp: Reduce Gourdon D memory using 16-bit prime factor ordinals
  - primecount.pc.in: Add missing libatomic and libquadmath dependencies
  - primecountConfig.cmake.in: Only find OpenMP when required
  - ci.yml: Add pkg-config and CMake find_package() CI tests
  - D_arm_sve.hpp: Fix GCC ARM SVE failed auto-vectorization
  - Fix get_max_x() for x > 10^31
  - CmdOptions.cpp: Detect too many input numbers
  - P2.cpp: Fix potential 64-bit integer overflow
  - phi.cpp: Fix phi(x, a) for x >= 4611686065672028281 which requires primes > INT32_MAX
  - lmo/*.cpp: Fix int32_t primes overflow
  - api.cpp: Fix nth_prime() error message
  - api.cpp: Fix 128-bit nth_prime() for negative inputs
  - main.cpp: Validate 128-bit to 64-bit integer conversions
  - LoadBalancerS2.cpp: Fix Clang scaling issue
  - AC.cpp: Improve clustered easy leaves algorithm using Gourdon's inversion equality
  - AC.cpp: Implement segmented C1 algorithm to improve cache efficiency
  - AC.cpp: Use multi-threading to initialize the libdivide vector
  - util.cpp: Retune Gourdon alpha factors due to improved C algorithm
  - test.cpp: Improve test coverage using alternate alpha_z values
  - doc/Easy-Special-Leaves.pdf: Add description of new C algorithm
  - doc/alpha-factor-gourdon.pdf: Retune Gourdon alpha factors


author: Kim Walisch <walki@fedoraproject.org> - 12.9-1
changelog:
  - CMakeLists.txt: Speed up build by removing compile dependencies
  - Move private header files from /include to /src
  - src/CMakeLists.txt: Update for private header files in /src
  - test/CMakeLists.txt: Update for private header files in /src
  - Vector.hpp: Get rid of std::is_trivial which is deprecated in C++26


author: Kim Walisch <walki@fedoraproject.org> - 12.10-1
changelog:
  - Fix undefined behavior in Bucket allocation
  - Enable ARM SVE for Mingw-w64 on ARM64
  - Improve Windows libprimesieve.dll support
  - BUILD.md: Add WebAssembly/Emscripten build instructions


author: Kim Walisch <walki@fedoraproject.org> - 12.11-1
changelog:
  - calculator.hpp: Update to version 2.0 with improved error handling
  - test/calculator.cpp: Add much more tests for calculator.hpp
  - PreSieve.cpp: Simplify SIMD runtime dispatching
  - CountPrintPrimes.cpp: Faster printing of primes to stdout
  - CmdOptions.cpp: Prevent multiple different --print options
  - CMakeLists.txt: Set CMAKE_VISIBILITY_INLINES_HIDDEN=ON by default
  - BUILD.md: Update MSVC build instructions


author: Kim Walisch <walki@fedoraproject.org> - 12.12-1
changelog:
  - CMakeLists.txt: Fix CMAKE_PROJECT_VERSION not defined
  - doc/Doxyfile.in: REVERSE workaround for Doxygen/LaTeX broken tables
  - Automated building Windows binaries using GitHub Actions CI
  - build_clang_x64.ps1: New Clang Windows x64 build script
  - build_clang_arm64.ps1: New Clang Windows ARM64 build script


author: Kim Walisch <walki@fedoraproject.org> - 12.14-1
changelog:
  - malloc_vector.h: Fix undefined behavior
  - calculator.hpp: Fix std::tolower undefined behavior
  - CpuInfo.cpp: Fix std::isdigit undefined behavior
  - CmdOptions.cpp: Fix 64-bit integer overflow in optionTimeout()
  - PrimeSieveClass.cpp: Reduce mutex contention
  - iterator-c.cpp: Fix use after free in primesieve_free_iterator()
  - config.hpp: Add MAX_CACHE_LINE_SIZE
  - macros.hpp: Add MAYBE_UNUSED
  - Vector.hpp: Improve Vector exception safety
  - GitHub Actions CI: Fix node 20 deprecation warning
  - CMakeLists.txt: On Windows rename static library to primesieve_static.lib #183
  - CMakeLists.txt: Remove WITH_MSVC_CRT_STATIC option


author: Kim Walisch <walki@fedoraproject.org> - 12.15-1
changelog:
  - Fix LLVM/Clang -Wunused-template warning
  - CpuInfo.cpp: Use primesieve::Vector instead of std::vector
  - nthPrime.cpp: Fix undefined behavior
  - util.hpp: Fix undefined behavior in littleendian_cast<T>()
  - PrimeGenerator_x86_avx512.hpp: Fix undefined behavior
  - CountPrintPrimes.cpp: Fix undefined behavior
  - popcount.hpp: Fix undefined behavior
  - PreSieve_arm_sve.hpp: Improve ARM SVE multiarch runtime dispatch
  - multiarch_sve_arm.cmake: Update the ARM SVE compiler support check to match
  - CMakeLists.txt: Fix Emscripten (WebAssembly) compiliation failure


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Julio Faracco <jfaracco@redhat.com> - 3.5.2-1
changelog:
  - Adds .NET counter integration (3.5.2)
  - Adds a custom core dumper (corex) (3.5.2)
  - Add support for RHEL10, Debian 13, Ubuntu 26.04, Fedora 43 and updated dependencies (3.5.1)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.9b-1
changelog:
  - Update to 1.3.9b
    - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
      CVE-2026-44331)
    - Additional fix for session management with OpenSSL 3.2.x or later, when
      using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
    - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
      expected (GH#2098)
    - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
      in mod_sftp (GH#2102)
    - SSH packet with empty payload triggered null pointer dereference in
      mod_sftp (GH#2104)
    - Bad DSA signatures could lead to out-of-bounds read of heap memory in
      mod_sftp (GH#2106)
    - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
      mod_sftp (GH#2108)
    - SFTP request payload length underflow calculation in mod_sftp
      (GH#2115, CVE-2026-53994)
    - Several modules failed to build using OpenSSL 4.0 (GH#2120)
  - Update mod_proxy to 0.9.7
    - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
    - Set the payload_len field before checking its value (GH#292)
    - Keep the SSH packet reading code in mod_proxy more in line with what is
      done in mod_sftp, for legibility (GH#294)
    - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
      (GH#295, GH#296)
    - Correct misspellings noted by codespell (GH#297)
    - Use clang-tidy to start polishing the codebase (GH#298)
    - Disable the Nagle algorithm by default on our TCP connections to back-end
      servers (GH#299)
    - Require OpenSSL for building (GH#249, GH#300)
    - Documentation fixes
    - Implement a limit on the number of EXT_INFO extensions we'll be willing to
      accept (GH#303)
    - Comparison of expected/provided MAC data should be done in a constant-time
      manner
    - Support PKCS11-stored private keys
    - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
      post-quantum SSH key exchange mechanisms (GH#306)
    - Add sanity check for SRV record lengths
    - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
      does not underflow
    - If we detect a bad DSA signature length, properly error out
    - Ensure that RSA/DSA signatures match their expected algorithm types, and
      avoid null pointer dereferences
    - Update to build against OpenSSL 4.x (GH#313)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-1
changelog:
  - Update to 1.3.9c
    - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
    - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
    - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
    - AdminControlsACLs for config, get actions not honored as they should be
      (GH#2163)
    - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
      buffers without bounds checking (GH#2166)
    - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
      to reject illegal characters (GH#2173)
    - SQL group name lookup concatenates client-provided group names without
      escaping (GH#2188)
    - Authenticated SFTP sessions can overflow the SFTP packet buffer
      (GH#2190, CVE-2026-63090)
    - Default Controls socket ACLs unintentionally allow all users access for
      sending Controls requests (GH#2210)
    - Exercise caution when reading the client-provided file size for SCP
      uploads, as it could possibly overflow our size type (CVE-2026-63091)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-3
changelog:
  - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
    /proc/self/root path prefix); this module disallows file accesses via procfs
    filesystems


author: Paul Howarth <paul@city-fan.org> - 1.3.9d-1
changelog:
  - Update to 1.3.9d
    - SSH channel open request from authenticated client with max packet size of
      zero lead to infinite loop (GH#2242)
    - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
      (GH#2255)
    - Possible use-after-free issue via FTP STAT command using -C option; note
      that the -C option is now silently ignored for FTP STAT commands (GH#2265)
    - Passive FTP data transfers do not honor AllowForeignAddress policy properly
      (GH#2272)
    - Empty password fields should be rejected by the mod_sql_passwd module
      (GH#2275)
    - Empty password fields should be rejected by the mod_auth_file module
      (GH#2279)
    - .ftpaccess file policy bypass possible in certain configurations (GH#2282)


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jerry James <loganjerry@gmail.com> - 2.6.4-1
changelog:
  - Version 2.6.4
  - Drop upstreamed remove-redundant-ref patch
  - Drop upstreamed workaround for swig 4.3
  - Add patch for incompatible pointer types
  - Add patch for incompatible format specifiers


author: Mike FABIAN <mfabian@redhat.com> - 0.5.5-11
changelog:
  - Stop using deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/pyhunspell-0.5.5-build/BUILDROOT --prefix /usr macros
    rm -rfv /builddir/build/BUILD/pyhunspell-0.5.5-build/BUILDROOT/usr/bin/__pycache__

    Resolves: rhbz#2377393


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-5
changelog:
  - Import upstream patch to fix problem introduced by upgrade proj to v9.7.1
  - Remove old patch for proj v9.6.2 that is no longer needed.


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-11
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431977


author: Jerry James <loganjerry@gmail.com> - 1.5.0-1
changelog:
  - Version 1.5.0
  - Stop building for 32-bit x86
  - Update the License field to BSD-2-Clause
  - Use the pyproject declarative buildsystem
  - Do not build documentation for RHEL


author: Troy Curtis Jr <troy@troycurtisjr.com> - 0.27.1-1
changelog:
  - Update to 0.27.1.
  - Fixes rhbz#2349293
  - Drop the no longer needed 72.patch
  - Open up the rapidfuzz-cpp build version to allow build against 3.3.3
  - Update URL to the new rapidfuzz GitHub organization.


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - Update to new upstream release 1.27.1 (rhbz#2412929)
  - compatibility with mupdf 1.27.1
  - new method `Document.repair()`
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.2.2-1
changelog:
  - Update to new upstream release 1.27.2.2 (rhbz#2446026)
  - Works with mupdf 1.27.2
  - Improved get_textpage_ocr()
  - Various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.28.2-1
changelog:
  - Update to new upstream release 1.28.2 (rhbz#2446026)
  - Compatible with MuPDF-1.28.2.
  - pymupdf.Document.__init__(): new arg `archive` to support documents with
    archives.
  - pymupdf.Document.convert_to_pdf(): also generate links.
  - pymupdf.Document.save() now saves non-PDF documents in PDF format.
  - New method pymupdf.Document.apply_css().
  - Various fixes.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.14.3-1
changelog:
  - Update to 3.14.3
  - Security fix for CVE-2026-34993; fixes RHBZ#2511060
  - Security fix for CVE-2026-59881; fixes RHBZ#2509739
  - Security fix for CVE-2026-69243; fixes RHBZ#2519530
  - Security fix for CVE-2026-69244; fixes RHBZ#2519529


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.25.0-9
changelog:
  - Workaround to pass the tests, removed --mpl image comparison enforcement,
    as Matplotlib 3.11 and FreeType 2.14 in Fedora Rawhide generate slightly
    updated pixel outputs relative to cartopy 0.25 baseline images.


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Kevin Fenzi <kevin@scrye.com> - 3.3.0-1
changelog:
  - Update to 3.3.0. Fixes rhbz#2359810
  - Apply upsteam patch to allow building with python 3.15. Fixes rhbz#2424580


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Jerry James <loganjerry@gmail.com> - 0.9-39.20231204.a6987c8
changelog:
  - Rebuild for polymake 4.15
  - Add patch to fix polymake shell usage
  - Add patches to fix compiler warnings
  - Use the pyproject declarative buildsystem


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.0-10
changelog:
  - Drop the hypothesmith test dependency (omit fuzz tests)
  - Also drop hypothesis since it is also only used for fuzz tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.0-13
changelog:
  - F45+: Stop shipping sassutils.wsgi
  - This avoids a difficult-to-remove pkg_resources dependency, for
    https://fedoraproject.org/wiki/Changes/Setuptools_82+


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.47.0~rc1-1
changelog:
  - Update to 0.47.0~rc1 (close RHBZ#2447070)
  - Fixes compatibility with recent setuptools, including
    https://fedoraproject.org/wiki/Changes/Setuptools_82+.


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.2.0-1
changelog:
  - Update to 3.2.0 (final); Fixes RHBZ#2435482
  - Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)


author: Miro Hrončok <miro@hroncok.cz> - 7.0.0-8
changelog:
  - python3-psutil-tests: Add dependencies, don't package test_scripts
  - pytest is Recommended as it is optional but preferred
  - procps-ng is needed to run some tests


author: Michel Lind <salimma@fedoraproject.org> - 7.2.2-1
changelog:
  - Update to 7.2.2 upstream release
  - Resolves: rhbz#2396273
  - Refactor test runs
  - Drop the tests subpackage, removed in 7.2.0
  - Enforce that license file is shipped


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.9.12-1
changelog:
  - Update to 2.9.12 fixes rhbz#2414801 and rhbz#2459947
  - Spec cleanup and modernization per Fedora guidelines
  - Fix rpmlint spelling, non-executable scripts, and hidden files warnings


author: Nils Philippsen <nils@tiptoe.de> - 2.3.13-2
changelog:
  - Drop build dependency on unmaintained pytest-subtests on Fedora >= 45
  - Relax build dependency on setuptools_scm on Fedora >= 45


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 1.6.2-1
changelog:
  - Update to v1.6.2
  - Added support for the low level AEAD AES bindings.
  - Added support for crypto_core_ed25519_from_uniform.
  - Added support for free-threaded Python 3.14.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 2.14.0-2
changelog:
  - Enable tests, patching the suite to pass with qcint and FlexiBLAS.
  - Fix a stack buffer overflow in the Dirac-Hartree-Fock (SS|LL) J/K build.
  - Read the FCI test Hamiltonian in the native byte order, since the solvers
    reject the little-endian arrays h5py hands out on big-endian machines.
  - Loosen the DKS veff fingerprints, whose reference values depend on how libxc
    rounds the correlation potential in the fully polarized limit, and drop the
    EA-CCSD* assertion that divides by a vanishing left-right overlap.


author: Troy Curtis Jr <troy@troycurtisjr.com> - 3.14.1-1
changelog:
  - Update to 3.14.1.
  - Fixes rhbz#2357336
  - Update the URL to point to the new rapidfuzz GitHub organization.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to version 0.8.0; Fixes RHBZ#2415927
  - Don’t remove source files associated with unpackaged extras


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 5.12.0-1
changelog:
  - update to 5.12.0 (resolves rhbz#2458888)
  - fix building with newer ruamel-yaml
  - keep building as noarch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.1-1
changelog:
  - Update to 0.23.1 and patch for PyO3 0.29
  - PyO3 0.29 fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.0-1
changelog:
  - Update to 3.8.0 (close RHBZ#2492139)
  - Run tests with pytest, as upstream is gradually adopting it


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Danny Colin <contact@dannycolin.com> - 0.36.0-1
changelog:
  - New release 0.36.0
  - Update license information. We only need to keep MIT since the GPLed
    widgets have been removed from the repository.
  - Update pyproject_buildrequires declaration.


author: Manish Tiwari <matiwari@redhat.com> - 1.4.0-1
changelog:
  - Update to 1.4.0 version
  - Bundled whisper.cpp
  - Remove pybind11 to use system available pybind11-devel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main python package
  - New subpackages: root-graf3d-glad, root-net-curl,
    root-tmva-sofie-parser-python, root-tree-ml, root-histv7util
  - Dropped patches: 2
  - New patches: 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-5
changelog:
  - Use the system civetweb library since it now supports web sockets
  - Drop the davix module for Fedora 45+ (davix will soon be retired)


author: Panu Matilainen <pmatilai@redhat.com - 6.0.1-5
changelog:
  - Enable enforcing signature checking by default, make it easy to flip back
    https://fedoraproject.org/wiki/Changes/Enforcing_signature_checking_by_default


author: Panu Matilainen <pmatilai@redhat.com - 6.0.91-3
changelog:
  - Revert file trigger refactor for further investigation (#2492628)
  - Fix a silly thinko causing a %define regression (#2492483)


author: Antonio Trande <sagitter@fedoraproject.org> - 1:9.2.1-1
changelog:
  - Release 9.2.1
  - Fix License expression
  - Exclude static libraries
  - Add Python libraries as sub-packages
  - Add EXAMPLE files as sub-packages


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.24.0-1
changelog:
  - Thrift 0.24.0 GA, h/t to Justin Caratzas <jcaratza@ibm.com>
    https://src.fedoraproject.org/rpms/thrift/pull-request/7


author: Benjamin A. Beasley <code@musicinmybrain.net> - 26.03-3
changelog:
  - Backport several OpenEXRCore security fixes
  - Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493
  - Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534
  - Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505
  - Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501
  - Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497


author: Miro Hrončok <mhroncok@redhat.com> - 3.10.20-2
changelog:
  - Explicitly build with OpenSSL 3
  - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: Karel Volný <kvolny@redhat.com> 2.3.0-1
changelog:
  - new version 2.3.0 (rhbz#2403550)
  - see the upstream changelog at http://qmmp.ylsoftware.com/
  - removes mms plugin (moves to plugin pack)


author: Karel Volný <kvolny@redhat.com> 2.2.2-1
changelog:
  - new version 2.2.2 (rhbz#2355923)
  - update source URL
  - see the upstream changelog at http://qmmp.ylsoftware.com/


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.2-3
changelog:
  - drop unused yasm from BuildRequires:, part of:
    https://fedoraproject.org/wiki/Changes/DeprecateYASM


author: Karel Volný <kvolny@redhat.com> 2.3.0-1
changelog:
  - new version 2.3.0 (rhbz#2403551)
  - add MMS plugin (moved from qmmp)
  - add mpv plugin
  - see the upstream changelog at http://qmmp.ylsoftware.com/


author: Dmitry Belyavskiy <beldmit@gmail.com> - 6.11.1-4
changelog:
  - Backport of upstream OpenSSL4 commit
    https://github.com/qt/qtbase/commit/e806630e694d89f567cffa9c982d1f471089ecd8


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Dominik Mierzejewski <dominik@greysector.net> - 1.18.5-2
changelog:
  - Use generic dependency names
  - Run tests using standard macro and stop ignoring failures
  - Skip test_bsu which requires network connectivity
  - Add missing build dependency on libv4l
  - Drop non-existent CMake option
  - Use SPDX expression in License: tag


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.0.20-2
changelog:
  - Switched to autotools build system (upstream preferred)
  - Dropped useless subpackages
  - Fixed requirement
    Resolves: rhbz#2355068


author: Michal Schorm <mschorm@redhat.com> - 0.7.2-45
changelog:
  - Fix SPDX license tag: 'LicenseRef-Callaway-LGPLv2+' -> 'LGPL-2.1-or-later AND MIT'
  - MIT: Mesa platform-detection macros in 'include/GL/glc.h' (shipped in -devel)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.11.0-1
changelog:
  - Update to v0.11.0
  - Fix license file not being installed
  - Fix .so.0 file being put in -devel package
  - Fix running the test suite in %check
  - Add help2man-generated man pages


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Sumit Bose <sbose@redhat.com> - 0.17.1-14
changelog:
  - Various fixes for issues found by static code scanners
  - Systemd security setting and CacheDirectory
  - use 'dnshostname' with net ads join
  - Install dbus policy in /usr/share, not /etc


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: mhorky <mhorky@redhat.com> - 1:0.3.9-2
changelog:
  - Update RPM dependencies
  - insights-client is has never been available in Fedora.
  - yggdrasil-worker-package-manager will not be shipped in RHEL 11, we are
    dropping it from Fedora as well.


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-1
changelog:
  - Modernize BuildRequires and License sections
  - Remove deprecated intltool and dbus-glib-devel
  - Update GTK and other dependencies to modern versions
  - Use SPDX license tag and HTTPS for URLs
  - Add missing build dependencies


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-2
changelog:
  - Modernize %install and %files sections
  - Switch to appstreamcli validate
  - Use more specific file paths in %files
  - Add comments and use modern macros


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-3
changelog:
  - Fix build dependencies and locale directories
  - Replace libmagic-devel with file-devel
  - Fix Armenian locale directory name (hye -> hy)
  - Add empty %check section to satisfy rpmlint


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-4
changelog:
  - Fix locale directory and add %check section
  - Rename Armenian locale directory from hye to hy
  - Add empty %check section to satisfy rpmlint


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-1
changelog:
  - Draft release
  - Update to new maintained fork at Codeberg:
    https://codeberg.org/schilytools/schilytools


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-2
changelog:
  - Bump release to include rmt package as requested
  - Added provides/obsoletes
  - Fixed up package versioning to avoid the use of epoch
  - Switch to autorelease


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-3
changelog:
  - Fix bogus date warning in spec
  - Added missing generaldocs macro for rmt
  - Unsuccessfully tried fixing check. Leaving it disabled as Fedora Sources 
    variant presently does not have this


author: Petr Khartskhaev <pkhartsk@redhat.com> - 2024.03.21-4
changelog:
  - Update license info
  - Replace spax and scpio subpackages with Provides due to them being compiled as symlinks
  - Re-add rmt's epoch
  - Re-add linker flags and add default rpm flags to make
  - Make tests functional by adding LD_LIBRARY_PATH and enable them
  - Re-add post and preun scriptlets for alternatives
  - Change rmt's location to bin instead of sbin in a cleaner way
  - Exclude 32bit architectures since the build was failing on them
  - Convert star 5 manfile to UTF-8


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Jerry James <loganjerry@gmail.com> - 5.4.5-41
changelog:
  - Fix FTBFS due to ncurses change
  - Update license to BSD-3-Clause
  - Stop building for 32-bit x86
  - Build in C17 mode to avoid FTBFS with GCC 15


author: Robert Scheck <robert@fedoraproject.org> 9.8-3.git20260609
changelog:
  - Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
    (portable) and 829f183 (openbsd) for OpenSSL 4.0 support


author: Aaron Merey <amerey@redhat.com> - 5.9.0-8
changelog:
  - Backport upstream fix for MADV_GUARD_INSTALL/REMOVE (kernel >= 6.13)
    to unbreak recording of multi-threaded programs (upstream commit 34ff3a70).


author: Aaron Merey <amerey@redhat.com> - 5.9.0-9
changelog:
  - Fix FTBFS on rawhide (gcc 16, glibc 2.43+) by including <limits.h>
    in src/test/util.h, which several test files rely on for INT_MAX
    and other limit macros.


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.0.6-36
changelog:
  - Update to Ruby 4.0.6
    Resolves: rhbz#2499884
  - Resolves: CVE-2026-42245 (rhbz#2484324)
  - Resolves: CVE-2026-42246 (rhbz#2492090)
  - Resolves: CVE-2026-42256
  - Resolves: CVE-2026-42257
  - Resolves: CVE-2026-42258 (rhbz#2487319)
  - Resolves: CVE-2026-47240 (rhbz#2498917)
  - Resolves: CVE-2026-47241
  - Resolves: CVE-2026-47242


author: Michal Schorm <mschorm@redhat.com> - 0.5.5-9
changelog:
  - Re-enable test cases, the FTBFS due to mariadb-connector-c-3.4.1-1.fc42 was fixed in
    mariadb-connector-c-3.4.3-10
    Related: rhbz#2323148


author: Björn Esser <besser82@fedoraproject.org> - 0.6.1.2-1
changelog:
  - New upstream release
  - Add patch with last upstream commits
  - Set GCC in C99 mode explicitly
  - Build devel package archful
  - Drop explicit Requires and Provides


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.19.4-1
changelog:
  - 1.19.4
  - Fixes CVE-2026-57234 CVE-2026-57235 CVE-2026-57236
  - Fixes CVE-2026-57434 CVE-2026-57435 CVE-2026-57436 CVE-2026-57437 CVE-2026-57438


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.10.0-35
changelog:
  - Adjust to mesa 24.2.2 change that swrast with dril does not expose
    accum buffers anymore
  - Adjust test result message with recent mesa


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.4.2-9
changelog:
  - Backport upstream change for updating SSL certs again for testsuite
  - Backport upstream fix for some OpenSSL method removal for ruby4_0


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.0-3
changelog:
  - 2377132 - sane-backends: "scanimage --device=test --batch-count=2" hangs: Turns on unsafe asynchronous cancellation


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-32
changelog:
  - Fix buffer overflow in CIMMethod header handling
  - Fix buffer overflow in CIMObject namespace handling


author: Tom Callaway <spot@fedoraproject.org> - 2.2.2-1
changelog:
  - update to 2.2.2
  - fix hardcoded versioning (with sed, not patch)
  - fixup .pc file
  - fix old minimum cmake version which breaks the build


author: josef radinger <cheese@nosuchhost.net> - 20260524-4
changelog:
  - replace Patch1
    https://github.com/schismtracker/schismtracker/commit/ee6798584b26856260bccca7b8f7730b221b1c0e.patch
    with
    https://raw.githubusercontent.com/chimera-linux/cports/refs/heads/master/main/schismtracker/patches/ppc64le-vec.patch


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Remi Collet <remi@remirepo.net> - 1:2.0.3-6
changelog:
  - fix build with GCC 15 using patch from
    https://github.com/sclorg/scl-utils/pull/57
  - FTBFS rhbz#2385622 workaround to rhbz#2386537


author: Remi Collet <remi@remirepo.net> - 1:2.0.3-8
changelog:
  - raise cmake minimum version to 3.5
  - use arch-agnostic test for packaging /usr/lib64 (Joe Orton, PR #2)


author: Michal Schorm <mschorm@redhat.com> - 44-43
changelog:
  - Fix SPDX license tag: replace 'LicenseRef-Callaway-CC-BY-SA' with
    'CC-BY-SA-3.0' based on upstream license text


author: Dave Love <loveshack@fedoraproject.org> - 10.0-1
changelog:
  - Update to version 10.0 (resolves #2493585)
  - BR otf2 >= 3.2
  - Remove patch
  - Add AMD GPU support
  - Work around libbfd bug


author: Christian Krause <chkr@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 (#2330987)
  - Fix FTBFS (#2341334)
  - Remove patch already included upstream
  - Add BR: pipewire-jack-audio-connection-kit (needed for fluidsynth)


author: Christian Iseli <christian.iseli@epfl.ch> - 5.1-1
changelog:
  - New upstream version
  - Fix FTBFS bugzilla 2385624
  - Update license definition according to upstream


author: Jakub Martisko <jamartis@redhat.com> - 4.9-6
changelog:
  - The manpage should no longer mention whether the SELinux is enabled/disabled on the system
  - It was based on the build system anyway
  - Resolves: rhbz#2396649


author: Jakub Martisko <jamartis@redhat.com> - 4.9-8
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Related: RHEL-144026


author: Jakub Martisko <jamartis@redhat.com> - 4.10-1
changelog:
  - Update to 4.10
  - Remove the --without-included-regex build option
    There were some fixes regarding the backrefences in the new release. 
    Removing the option fixed a testsuire failure in the backref test.


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.49.13-1
changelog:
  - Update to 1.49.13
  - Remove ExcludeArch: ppc64le since it is now fixed:
    https://github.com/Drive-Trust-Alliance/sedutil/issues/489


author: Peter Robinson <pbrobinson@gmail.com> - 0.2.1-1
changelog:
  - Update to 0.2.1
  - Fixes CVE-2026-1260 (rhbz#2432139 rhbz#2432139)
  - Minor package updates for new rev


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-5
changelog:
  - Update GPL2 license texts to the latest version
  - Limit RPC request size in RequestReceiver to prevent memory exhaustion


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-122982)
  - rescan-scsi-bus.sh: Replace 'which' with built in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix missing output fields in --export format (RHEL-119246)
  - sg_inq: re-add Unit serial number field (RHEL-119246)


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304308)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0 (rhbz#2316879)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323726)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329755)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 (rhbz#2359282)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Michal Schorm <mschorm@redhat.com> - 1.0-40
changelog:
  - Fix FTBFS with GCC 16 due to 'std::abs(__int128)' redefinition (BZ#2435106)
  - Drop '-D__STRICT_ANSI__' flag from Makefile: it conflicts with GCC 16 internal
    handling of '__int128' overloads in '<cstdlib>' and is not needed by the source


author: Michal Schorm <mschorm@redhat.com> - 1.0-41
changelog:
  - Fix annocheck failures: pass '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  ' via LDFLAGS to the linker


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.11.0-28
changelog:
  - Convert the spec from tabs to spaces
  - Refactor and update the spec to follow the latest packaging guidelines


author: Michal Schorm <mschorm@redhat.com> - 0.42c-11
changelog:
  - Pass '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  ' to the Makefile to fix annocheck 'bind-now' and 'pie'
    hardening failures
  - Mark 'sjasm.txt' as 'Zlib' instead of '%doc' (contains Zlib license text)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.70.0-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

  - Tue Aug 27 2024 Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-3
  - Fixed initialization regression that caused compat tree never be populated


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f45-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Michal Hlavinka <mhlavink@redhat.com> - 1:7.5-9
changelog:
  - use notify-send for notification for users with graphical sessions
  - smartd notify for all SMARTD_FAILTYPEs


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Than Ngo <than@redhat.com> - 4.14.3-30
changelog:
  - Fix rhbz#2381451, FTBFS with change proposal CMake 4.0
  - Fix rhbz#2381128, FTBFS with change proposal CMake: Use ninja generator by default
  - Fix rhbz#2381525, FTBFS with change proposal CMake drop non-standard variables
  - Fix rhbz#2504679, FTBFS in Fedora rawhide/f45


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Pavol Žáčik <pzacik@redhat.com> - 2.7.0-0.1.rc1.4
changelog:
  - Bring back the patch that prevents access to global C++ variables
    once they are destroyed (with a minor adjustment).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.7.0-1
changelog:
  - Update to upstream release 2.7.0
  - Skip SHA-1 signing, DSA, and single DES tests when not supported
  - Fix fork tests to properly terminate child processes
  - Enable command-line test suite selection in p11test


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Peter Hanecak <hany@hany.sk> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - build_type_safety_c lowered to work around several "incompatible pointer type"
    errors


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.3.1-1
changelog:
  - Update to 1.3; Fixes: RHBZ#2379679
  - Backport upstream commit to use the systemd journal; Fixes: RHBZ#2375403


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.3-14
changelog:
  - Remove macros obsolete in Fedora
  - Use CMake RPM macros to build and install
  - Build and run the tests
  - Do not glob over the .so version
  - Test with the system gtest instead of the bundled one


author: Martin Gansser <martinkg@fedoraproject.org> - 1:2.4.1-1
changelog:
  - Update to 2.4.1
  - Add 9ae2b6cc83ce5cdaec58cb4d2aed2fb5ae60b7c8.patch to restore FindSOLID.cmake
    so that the FreeSOLID library can be found again


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Emir Akdag <infraw.linux@proton.me> - 1.5.3-1
changelog:
  - Update spoofdpi to 1.5.3
  - Update to 1.5.3 to fix CVE-2026-27145
  - Add missing license for go-localereader
  - Fix build directory case sensitivity issue
  - Resolves: rhbz#2494220, rhbz#2494389


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.1-1
changelog:
  - rebuilt for version 2.3.1 fixes rhbz#1856025 rhbz#2454296 rhbz#2128374
  - modernized packaging, enabled generator, templates, and libev support


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Michael Bauer <mb.bauer@siemens.com> - 0.9.0-1
changelog:
  - Version 0.9.0
  - fix(git-cred-helper): ask for consent if needed when acquiring token by
    @fmoessbauer in #43
  - chore(sso-mib-tool): fix build without libjwt by @yselkowitz in #41
  - chore(doc): Added project's license information to meson.build by
    @fmoessbauer in #39
  - chore: remove debian packaging as package is in official debian by
    @fmoessbauer in #38


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Clark Williams <williams@redhat.com> - 1.28.1-1
changelog:
  - stalld: bump version to 1.28.1
  - tests: Fix journal flush race in logging destinations test
  - Merge remote-tracking branch 'wander/dev' into devel
  - stalld: fix format string type mismatch in set_cpu_affinity
  - stalld: fix error return in queue_track_get_cpu
  - stalld: fix snprintf truncation check in is_runnable
  - stalld: fix missing null-termination in is_runnable
  - stalld: guard nextline() returns in sched_debug parsing
  - stalld: remove NULL deref in fill_waiting_task error handler
  - stalld: fix type mismatches in detect_task_format
  - stalld: fix format string type mismatch for time_t
  - stalld: use CLOCK_MONOTONIC for starvation detection
  - stalld: remove async-signal-unsafe calls from signal handler
  - stalld: fix data race on config_buffer_size
  - stalld: fix signed integer overflow in set_reservation
  - stalld: check pthread_create return in conservative_main
  - stalld: check pthread_create return in aggressive_main
  - stalld: fix buffer underflow in sched_debug_get
  - stalld: fix buffer underflow in read_proc_stat
  - stalld: fix uninitialized buffer use in find_debugfs_mount_point
  - stalld: fix inverted DAEMON_UMASK value
  - stalld: fix data race on thread_running
  - bpf: Replace linear task scan with hash map
  - tests: Fix async-signal-unsafe handler
  - tests: Reduce timing and replace sleeps with event waits
  - tests: Remove redundant sleeps after start_stalld
  - tests: Drop redundant sleeps in test_pidfile
  - tests: Replace init sleeps in test_affinity
  - tests: Reduce starvation_gen durations
  - tests: Reduce default wait timeouts
  - tests: Extract wait_for_process_exit helper
  - tests: Introduce and adopt process helpers
  - tests: Remove dead code after making fail() fatal
  - tests: Abort immediately on test failure
  - tests: Remove if-wrappers around assert calls
  - tests: Replace wait conditionals with asserts
  - tests: Introduce and adopt assert_success() helper
  - tests: Remove weak, redundant, and assertion-free test blocks
  - tests: Introduce and adopt assert_log_contains() helper
  - tests: Remove redundant pkill from cleanup
  - tests: Add idle CPU skipping assertion
  - tests: Fix CPU selection grep substring matches
  - tests: Add assertions to SCHED_OTHER restoration test
  - chore: Remove legacy test infrastructure and stale docs
  - tests: Fix repeated log match finding same line
  - tests: Fix subshell swallowing test results
  - tests: Fix boost verification in runtime and duration tests
  - tests: Introduce assert_stalld_rejects() helper
  - tests: Consolidate and adopt init_functional_test()
  - tests: Fix task exit timing in test_boost_restoration
  - tests: Introduce find_starved_child() helper
  - tests: Introduce starvation and boost asserts
  - tests: Introduce cleanup_scenario() helper
  - tests: Introduce test_section() helper
  - stalld: Reject --force_fifo in single-threaded mode


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Tom Callaway <spot@fedoraproject.org> - 8.0.3-3
changelog:
  - lua-devel is no longer needed, suricata is getting lua support from a bundled rust crate
  - this seems weird and wrong, but whatever
  - added libunwind-devel as BR since the configure script wants it (and Fedora has it)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Peter Czanik <peter@czanik.hu> - 4.12.0-1
changelog:
  - update to 4.12.0
  - remove openssl 4.0 patch (part of the 4.12.0 release)
  - comment out secure logging related files (feature
    disabled by default by upstream)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.9-1
changelog:
  - update upstream URL
  - add tmpfiles configs for Image Mode
  - rebase to the latest upstraem release (rhbz#2419756)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 261.2-1
changelog:
  - Version 261.2
  - a bugfix release with correctness and security-relevant fixes too. 276
    patches, so too much to describe here.


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Jonathan Wright <jonathan@almalinux.org> - 1.98.4-1
changelog:
  - update to 1.98.4
  - Allow nftables to satisfy firewall dependency in lieu of iptables rhbz#2453924
  - Fix 45s timeout on shutdowns in certain cases rhbz#2440864
  - Fixes CVE-2026-34165 rhbz#2454571
  - Fixes CVE-2026-33762 rhbz#2454572


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream fix for savannah bug 65838, commit 1e6ce98e (fedora#2427654)
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS) (fedora#2389217)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582 (fedora#2380007)


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.9.6-0.1
changelog:
  - Snapshot of upcoming upstream release 0.9.6
  - New upstream source at github
  - Removed patches and hacks merged upstream
  - Installs a default systemd unit tayga.service that points to a default config
    (similar to Debian and upstream)
  - Pulled support for older EL releases


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.15-3
changelog:
  - Fixed SPDX license case, it was according to the SPDX standard, but
    now it should be more easy to validate with some XML validators


author: Peter Bieringer <pb@bieringer.de> - 7.6-110
changelog:
  - add patch to fix errors on GCC 15 (#2341423)
  - add patch to fix some warnings
  - change URLs to GitHub repository


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.18.4-23
changelog:
  - Patch for libxml2 2.12.0 API constness change
  - Patch for variable name confusion with errno
  - Use libsoup-3, linking with both libsoup-2 and -3 is not supported


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.13.16-42
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (Zbigniew Jędrzejewski-Szmek)
  - Fix GCC build, compiling with -std=gnu17


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3-3
changelog:
  - apply following patches from RHEL 10
    - tftp: propagate exit codes in non-interactive mode
    - fix creation of /var/lib/tftpboot on bootc systems


author: Peter Robinson <pbrobinson@gmail.com> - 2.5.12-1
changelog:
  - Update to 2.5.12
  - Enable aarch64 support
  - Drop (and obsolete) monitor subpackage (removed upstream)
  - Minor associated cleanups


author: Neal Gompa <ngompa@fedoraproject.org> - 2.5.12-2
changelog:
  - Backport fixes to allow thermald to work on "non-mobile platforms"
    (rhbz#2512758)
  - Modernize spec file


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-4
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259
          CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
          CVE-2026-50264


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 0.34.0-2
changelog:
  - Remove older patches
  - QEMU is no longer broken for the cases we need.
  - The optional package suggestion was never fully implemented, so drop it
    for now.


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.3-2
changelog:
  - Backport upstream CVE fixes
  - Fixes rhbz#2452969 CVE-2026-3945
  - Fixes rhbz#2455913 CVE-2026-31842
  - Run upstream test suite


author: Miro Hrončok <mhroncok@redhat.com> - 1:8.4.3-44
changelog:
  - Drop needles runtime requirements on tk-devel and tcl-devel
  - Make the package installable with tk/ctl 8 as well as tk8/tcl8 compat packages
    Resolves: #2337797


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Tom Callaway <spot@fedoraproject.org> - 2.1.1-1
changelog:
  - update to 2.1.1
  - bump libtiff to 4.7.2 (the tkimg libtiff library glue still versions at 4.7.1, because I didn't want to break compat when/if upstream makes a similar change)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Stewart Smith <trawets@amazon.com> - 1.4.48-29
changelog:
  - Update project and source URLs.
  - Update description to include the author's suggestions of successors


author: Dimitris Soumis <dsoumis@redhat.com> - 1:2.0.14-2
changelog:
  - The old description is from the 1.x era when tomcat-native provided broad
    APR integration. In 2.x it's focused solely on TLS/OpenSSL.


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.11-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-9-11/21786 bz#2483769


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-5
changelog:
  - Fix tests for F41 https://bugzilla.redhat.com/show_bug.cgi?id=2301337
  - Revert exclude broken test on s390


author: Adrian Freihofer <adrian.freihofer@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0
  - Drop sha1/sha256 Fedora patches (already upstream in 1.3.0)
  - Replace downstream OpenSSL 4.0 patch with upstream cherry-pick (6dcc3b2)


author: Vincent Mihalkovic <vmihalko@redhat.com> - 2.3.1-1
changelog:
  - update to 2.3.1, switch source to GitLab unix-tree archive
  - refresh patches for 2.3.1 (tree-static-analysis.patch tree.c hunk)


author: Akira TAGOH <tagoh@redhat.com> - 1.9.0-1
changelog:
  - New upstream release.
    Resolves: rhbz#2347165
  - Disable OpenSSL support.
    OpenSSL plugin isn't packaged. should be no harm.


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Packit <hello@packit.dev> - 0.19.8-1
changelog:
  - preload: Fix libc name on alpha architecture (Thanks Michael Cree!)
  - preload: Check dlopen(libc) failure
  - ioctl: Fix array.resize(0) to work with gcc 16 static analyzer
  - tests: Fix Gentoo tests, re-enable them in CI


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 16.0.01-1
changelog:
  - Version 16.0.01
  - License tag is updated and converted to proper SPDX
  - The ttf subpackage is dropped and will be removed from systems


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-4
changelog:
  - [cleanup] Drop obsolete MySQL-5 driver config from odbcinst.ini
  - [bugfix] Own /usr/lib64/unixODBC/ directory for ODBC connector plugins
  - [bugfix] Update MariaDB driver path in odbcinst.ini
  - [workaround] Remove broken Setup/Setup64 entries from PostgreSQL driver
    config
  - [bugfix] Update PostgreSQL driver path in odbcinst.ini


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-6
changelog:
  - [bugfix] Fix MySQL driver path in odbcinst.ini
  - [bugfix] Fix FreeTDS driver path in odbcinst.ini (rhbz#2453060)
  - Drop multilib-rpm-config usage on RHEL


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-7
changelog:
  - [refactor] Use consistent '/usr/lib64' macro syntax in '%files devel'
  - [enhancement] Add 'MDBTools' driver entry to 'odbcinst.ini'
  - [enhancement] Add missing 'Suggests' for all ODBC driver packages
  - [bugfix] Fix incorrect 'FileUsage' values in 'odbcinst.ini'
  - [bugfix] Remove dead 'Port' key from [FreeTDS] driver definition
  - [cleanup] Drop obsolete 'keep-typedefs.patch'
  - [design change] Enable ODBC driver search path, use bare library names in
    'odbcinst.ini'


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-11
changelog:
  - [cleanup] Remove dead 'Conflicts: iodbc' from spec
  - [bugfix] Use 'mkdir -p' for ODBC plugin directory creation
  - [Fedora 45 Change] Add drop-in directory infrastructure for ODBC driver registration


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Zipinfo: remove the extra %c that cause invalid reads
  - Zipinfo: fix the whitespace formating of the help message
  Related: RHEL-59972


author: Jakub Martisko <jamartis@redhat.com> - 6.0-71
changelog:
  - Port some RHEL downstream patches to fedora
  - Fixes for RHEL-86228, RHEL-45997 + some issues found by coverity and other scans
  - Fixes for CVE-2022-0529 and 2022-0530 (Thanks Stewart Smith for the Heads up about these)


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Michal Hlavinka <mhlavink@redhat.com> - 1.114-14
changelog:
  - drop console.apps files as pam no longer uses those and pam_console
    was dropped https://fedoraproject.org/wiki/Changes/RemovePamConsole


author: Michael Jeanson <mjeanson@efficios.com> - 0.15.0-1
changelog:
  - New upstream release
  - The 'signal' flavour of liburcu was removed upstream
  - Enable compiler atomics


author: Charles R. Anderson <cra@alum.wpi.edu> - 0.5.20^20241111git7ef9e26-2
changelog:
  - Rebuilt for Tcl/Tk 9.0 (#2337805)
  - Patch to always set -D_REENTRANT since Tcl 9.0 no longer sets TCL_THREADS,
    and add -std=gnu17 to CFLAGS since GCC 15 changed to gnu23 which fails.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@remirepo.net> - 9.1.1-1
changelog:
  - Valkey 9.1.1 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639
  - own /etc/logrotate.d as its owner is an optional dependency
  - refresh the documentation
  - drop OpenSSL 4 patch merged upstream


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1
changelog:
  - update to 1.37.1 rhbz#2510094
  - Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
  - Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Jeremy Sanders <jeremy@jeremysanders> - 4.2.1-1
changelog:
  - Update to new Python packaging guidelines
  - Update appdata location to _metainfodir
  - Copy icons rather than symlink
  - Remove line for versioned docdir
  - Remove examples from documentation
  - Cleanup dependencies and build dependencies
  - Update to Veusz 4.2.1


author: Carl George <carlwgeorge@fedoraproject.org> - 2.8.0-9
changelog:
  - Port to new golang packaging guidelines
  - Use vendor tarball for build dependencies
  - Remove golang-github-vrothberg-vgrep-devel subpackage rhbz#2446694


author: Petr Pisar <ppisar@redhat.com> - 1.2.4-41
changelog:
  - Adapt to GCC 15 (bug #2341514)
  - Correct a license tag to "BSD-3-Clause AND MIT-open-group AND SMLNJ"


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3^20241114.git11e15a1-2
changelog:
  - Fix issues with /usr/bin/ and /usr/sbin/ merge (#2363531)
  - Always use consolehelper, implicitly allowed for root,
    remove consoleuser sub-package
  - Remove pam_console.so from vpnc.pam (not available anymore)


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Major Hayden <major@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Fixes CVE-2025-11065: go-viper/mapstructure updated to v2.4.0
  - Resolves: rhbz#2390882, rhbz#2399729, rhbz#2397062


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-3
changelog:
  - use upstream way of running tests
  - run unit tests
  - re-enable most tests on s390x now that they pass
  - skip failing test on ppc64le and s390x with GCC 15


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.37-1
changelog:
  - update to 1.0.37 (resolves rhbz#2349655)
  - skip new failing tests on i686 and ppc64le
  - re-enable wasm2c/spec/float_exprs.txt test, now that GCC 15 is fixed


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.8.3-1
changelog:
  - update to 1.8.3 spec cleanup and modernization fixes rhbz#2505136 waffle:
    FTBFS in Fedora rawhide/f45


author: hydai <hydai@hyd.ai> - 0.17.0-1
changelog:
  - Release 0.17.0
  - Bump C API library version (capi_version) to 0.1.1
  - Drop Patch0: Poller context refactor merged upstream in 0.17.0
    (WasmEdge/WasmEdge#4509)


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Neal Gompa <ngompa@fedoraproject.org> - 0.5.0-3
changelog:
  - Refresh build dependencies to match actual build requirements
  - Refresh free codec patch
  - Drop ffmpeg 7 compatibility patch as its included in this release


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Joe Doss <joe@solidadmin.com> - 1.0.20260223-1
changelog:
  - Update to 1.0.20260223
  - syncconf: account for persistent keepalive removed from config file
  - config: preserve const correctness
  - wg-quick@.service: add deps on wg-quick.target
  - wg-quick: linux: do not unnecessarily set sysctl
  - wg-quick: use addconf instead of setconf
  - wg-quick: linux: deal with resolvconf migration more gracefully
  - wg-quick: pass on # comments to {Pre,Post}{Up,Down}
  - syncconf: account for psks removed from config file
  - wg-quick: linux: use smallest mtu, not largest


author: Shawn W Dunn <sfalken@opensuse.org> - 0.7-1
changelog:
  - Update to 0.7
  - Add 0001-fix-config-path.patch to put configs in the correct place
  - Add 0002-remove-google-chrome.patch to remove Google Chrome and enable
    Firefox as default browser
  - Update to libbase-aa0da7a355b04b1dd8572a94261a0b0c497e1a85
  - Change Recommends: to firefox, foot, and wdisplays for functionality


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: Michal Schorm <mschorm@redhat.com> - 1:1.0.4-2
changelog:
  - Fix SPDX license expression: 'GPL-2.0-only AND CC-BY-3.0 AND CC-BY-SA-3.0'
  - 'ogg_to_pcm.c' is GPL-2.0-only (from vorbis-tools), not GPL-2.0-or-later


author: Michel Lind <salimma@centosproject.org> - 0.4-1
changelog:
  - Update to version 0.4
  - Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
    querying KASLR


author: Michel Lind <salimma@centosproject.org> - 0.5-1
changelog:
  - Update to version 0.5
  - Apply build flags consistently
  - Update licenses to account for bundled dependencies


author: Michel Lind <salimma@centosproject.org> - 0.5-2
changelog:
  - fix to show SHA commit in help text
  - also ensure `make install` uses the right build flags
  - include all bundled projects' licenses


author: Michel Lind <salimma@fedoraproject.org> - 0.5-3
changelog:
  - Drop rust_arches; no longer needed. But limit builds to the architectures
    strobelight-libs supports


author: Sun Haiyong <sunhaiyong@zdbr.net> - 3.2.9-3
changelog:
  - Add loongarch64 to the condition for using lib64 in the wx-config file.
  - Skip failing tests on riscv64


author: Tom Callaway <spot@fedoraproject.org> - 4.2.6-1
changelog:
  - so, funny story. turns out this thing is still being actively developed.
    and... i just noticed. whoops. sorry.
  - anyways, new achievement: Back From The Dead
  - update to 4.2.6


author: Patrick Monnerat <patrick@monnerat.net> 2.9.0-5
changelog:
  - Patch "openssl4" for openssl version 4 compatibility.
  - Remove BR openssl-devel-engine for Fedora > 44.
  - Perform tests.


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.1.3-2
changelog:
  - spec cleanup and modernization - use https for spec urls - sort BR in
    alphabetical order - silent rpmlint


author: Neal Gompa <ngompa@fedoraproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races (#2319081)
  - Fix minor spec formatting inconsistencies


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
  	[XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-6
changelog:
  - x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487]
  - domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490]
  - Arm: Completion of memory accesses not guaranteed by completion of a TLBI
  	 [XSA-493, CVE-2025-10263]
  - x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]


author: Hans de Goede <hans@hansg.org> - 3.2.9a-1.20250317gitce9782a
changelog:
  - Update to 3.2.9a + latest git changes to fix build with -std=c11
  - Switch to upstream appdata/metainfo and desktop file
  - Drop all patches (all upstreamed)
  - Resolves: rhbz#2341567
  - Resolves: rhbz#2385740


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


author: Marcus Müller <mueller_fedora@baseband.digital> - 3.3.0-1
changelog:
  - Bump to new upstream release 3.3.0
  - Fix wrong license (see doc/COPYING in source code)
  - Fix installation location in a less hacky way
  - Fix keyring source. (you need to git clone the kernel gpgkeys repo and then
    grep for the key needed, then replace the Source here. This is not a
    sustainable system.)
  - Fix description typo
  - Remove stray tab byte from description, which was shown as \x09 in
    `dnf info xfsdump` (huh?)


author: Pavel Reichl <preichl@redhat.com> - 7.0.1-1
changelog:
  - Update to upstream v7.0.1
  - Move xfs_healer systemd units from xfsprogs-xfs_scrub to main xfsprogs package
  - Related: rhbz#2467694


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Greg Hellings <greg.hellings@gmail.com> - 4.3.1-1
changelog:
  - New upstream version 4.3.1 which already has editor fixed
  - Updated dependencies
  - Removed all patches


author: Greg Hellings <greg.hellings@gmail.com> - 4.4.0-1
changelog:
  - New upstream release 4.4.0
  - Introduction of speech services for TTS
  - Restoration of editor through GTK-native technologies


author: Tom spot Callaway <spotaws@amazon.com> - 3.0.7-5
changelog:
  - revert 6ca325d Fix libsv include path, while libsv upstream has moved
    their header location, the libsv in fedora has not moved it yet as of
    1.2-7


author: Tom Callaway <spot@fedoraproject.org> - 4.7-39
changelog:
  - am i wrong for keeping a motif app alive in 2025? No, it is the kids who are wrong.
  - uh, apply fix for compiling with c23 (gcc15)


author: Jonathan Wright <jonathan@almalinux.org> - 1.60.4-1
changelog:
  - update to 1.60.4 rhbz#2334236
  - re-enable builds against libxml2, no more bundled libexpat
  - fixes rhbz#2310136
  - fixes rhbz#2310146
  - fixes rhbz#2310152


author: Simone Caronni <negativo17@gmail.com> - 23.0.0-6
changelog:
  - Clean up SPEC file.
  - Trim changelog.
  - Do not disable debug stripping (caught by rpminspect) tests.


author: Dominik Mierzejewski <dominik@greysector.net> - 25.0.0-1
changelog:
  - Update to 25.0.0 (resolves rhbz#2384262)
  - Download and validate GPG signature
  - Switch to meson build system


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.23-1
changelog:
  - Update to xserver 21.1.23
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 24.1.12-1
changelog:
  - Update to xwayland 24.1.12
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.7-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix build with GCC15 (Dominik Mierzejewski)


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.8.3-1
changelog:
  - New upstream version 5.8.3 (fixes RHBZ#2453487, CVE-2026-34743)
  - Add Arabic language translations


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.6.1-1
changelog:
  - update to 2.3.6.1 fixes rhbz#1933807 rhbz#2381649
  - Switched to HTTPS for URL and Source0, consolidated patches
  - Use macros in %prep, %cmake macros, honor build flags


author: Gabriel Somlo <gsomlo@gmail.com> - 0.67.2.20260713git22c15a7
changelog:
  - update to newer 0.67 snapshot
  - simplify downstream (un-bundling) patch since some upstream support added


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 4.1.5^git20251117.c9a0e98-1
changelog:
  - Removed debug package creation opt-out.
  - Updated to Git revision c9a0e98 (Nov 17, 2025).
  - Updated the SPDX license expression.
  - The examples can now be found in the package documentation directory.
  - All package summaries and descriptions have been updated.
  - The README-file has been removed from the package as it doesn't contain any
    useful information for Fedora users.
  - The license file can now be found in the package license directory.
  - Made the generated project file architecture-independent.


author: Martin Gieseking <martin.gieseking@uos.de> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Dropped rpath patch which is no longer required
  - Updated license (libzint is now licensed under BSD-3-Clause)


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10.2-1
changelog:
  - Update to 1.10.2 + fix build with OpenSSL4+
  - Enable Argon2 and i18n support
  - Resolves: rhbz#2369074
  - Resolves: rhbz#2505395


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to v1.1.0
  - Upstream bug fixes: out-of-bounds array access, missing unistd.h header,
    localtime prototype, curses header preprocessor guard
  - Upstream build improvements: LDFLAGS support in Makefile
  - Migrate to %autorelease
  - Remove unnecessary %global _hardened_build 1 (default since F23)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.0.0-1
changelog:
  - Update to upstream 7.0.0 (fixes rhbz#2307507)
  - License audit and update to SPDX license expressions (fixes rhbz#2118200)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.1.0-1
changelog:
  - Update to upstream 7.1.0 (fixes rhbz#2330000, rhbz#2331292)
  - Update license string with final SPDX expression


author: Jakub Sencak <jsencak@redhat.com> - 0.13.78-6
changelog:
  - Replaced make macros with cmake macros; the cmake macro defaults to ninja generator instead of make
  - Removed obsolete files
  - Ship CMake config files in -devel package


