# changelog

author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.44.0-1
changelog:
  - Update to 1.44.0 release
  - Enable automatic migration of ifcfg profiles to keyfile:
    https://fedoraproject.org/wiki/Changes/MigrateIfcfgToKeyfile


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.45.91-1
changelog:
  - Update to 1.46-rc2 (1.45.91) release
  - Enable stable MAC address based on SSID for Wi-Fi connections (rh #2258088)
  - Enable IPv4 ACD (duplicate address detection) by default (rh #2258083)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.0-3
changelog:
  - Introduce add-determinism-nopython
  - This version of the program is not linked to libpython, so it can be used
    for bootstrapping. The handler for .pyc files is disabled.


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Packit <hello@packit.dev> - 41.7-1
changelog:
  - Update translations from Weblate for master (github-actions)
  - Disable preexec for vtActivate() (mkolman)


author: Packit <hello@packit.dev> - 41.13-1
changelog:
  - Fix signature of the method passed to DNF (jkonecny)
  - Do not include teamd on RHEL (rvykydal)
  - network: guard team devices configuration in kickstart by capabilities
    (rvykydal)


author: Packit <hello@packit.dev> - 41.17-1
changelog:
  - RHEL moved from Bugzilla to Jira (jstodola)
  - Update translations from Weblate for master (github-actions)
  - docs: Fix link on ci-status page (jkonecny)
  - docs: Fix link on ci status for container updates (jkonecny)
  - gui: Fix displaying of the device label (yueyuankun)
  - Stop pretending liveinst+vnc is supported (#678354) (kkoukiou)
  - Use the standalone crypt_r package on Fedora 41+ (miro)
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-14005


author: Packit <hello@packit.dev> - 41.18-1
changelog:
  - Do not imply that Fedora ELN has an EULA (sgallagh)
  - Update translations from Weblate for master (github-actions)
  - Deprecate kickstart modularity module (marusak.matej)
  - Remove Javascript leftovers from Makefile (jkonecny)
  - Revert "Ignore npm packages files for translation" (jkonecny)
  - Update translations from Weblate for master (github-actions)
  - docs: Add guide how to debug/develop GH workflows (jkonecny)


author: Packit <hello@packit.dev> - 41.19-1
changelog:
  - dracut: Remove 'linear' from modules to load (vtrefny)
  - Remove 'linear' from list of expected MD RAID levels (vtrefny)


author: Nick Clifton <nickc@redhat.com> - 12.47-1
changelog:
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.


author: Nick Clifton <nickc@redhat.com> - 12.49-1
changelog:
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.


author: Nick Clifton <nickc@redhat.com> - 12.53-1
changelog:
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Ondřej Pohořelský <opohorel@redhat.com> - 3.2.5-6
changelog:
  - Convert licenses to SPDX format
  - Dropped MIT and Public Domain license as they are not present in upstream sources


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-7
changelog:
  - Update configure script.
  - fix ldap_parse_page_control() check.
  - fix crash in make_options_string().
  - Fix incompatible function pointer types in cyrus-sasl module.
  - fix always recreate credential cache.
  - update changelog.


author: Christian Krause <chkr@fedoraproject.org> - 0.8-18
changelog:
  - Install glade file for avahi-discover-standalone unconditionally
    (fixes #2036073 and #2126721)
  - Install desktop files for bssh and bvnc unconditionally


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.10.0-0.rc1.e0cce98fe279.19]
changelog:
  - gitlab-ci: add kernel-automotive pipelines (Michael Hofmann)
  - Enable CEC support for TC358743 (Peter Robinson)
  - fedora: arm: Enable ARCH_R9A09G057 (Peter Robinson)
  - fedora: updates for the 6.10 kernel (Peter Robinson)
  - fedora: arm: Enable the MAX96706 GMSL module (Peter Robinson)
  - Linux v6.10.0-0.rc1.e0cce98fe279


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.10.0-0.rc1.4a4be1ad3a6e.21]
changelog:
  - redhat: Build IMA CA certificate into the Fedora kernel (Coiby Xu)
  - Move CONFIG_RAS_FMPM to the proper location (Aristeu Rozanski)
  - redhat/configs: Remove CONFIG_NET_ACT_IPT (Ivan Vecera)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.10.0-0.rc2.2ab795141095.25]
changelog:
  - redhat/configs: Move CONFIG_BLK_CGROUP_IOCOST=y to common/generic (Waiman Long)
  - Turn on CONFIG_MFD_QCOM_PM8008 for Fedora aarch64 (Justin M. Forbes)
  - Linux v6.10.0-0.rc2.2ab795141095


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.10.0-0.rc2.32f88d65f01b.26]
changelog:
  - redhat/kernel.spec: keep extra modules in original directories (Jan Stancek)
  - Linux v6.10.0-0.rc2.32f88d65f01b


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-3
changelog:
  - drop default chrony.keys config (#2104918)
  - add chronyd-restricted service for minimal NTP client configurations
  - convert license tag to SPDX


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.15-1
changelog:
  - Upstream release 6.15
  - CVE-2022-27239: mount.cifs: fix length check for ip option parsing
  - CVE-2022-29869: mount.cifs: fix verbose messages on option parsing
  - Fixes: rhbz#2080525


author: Sandro <devel@penguinpee.nl> - 3.28.3-5
changelog:
  - Add python3-cmake sub package providing metadata for Python packages
    depending on CMake to facilitate automatic dependency resolution.


author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Stephen Smoogen <ssmoogen@redhat.com> - 1.0.3-1
changelog:
  - Update to upstream 1.0.3
  - Changes since 1.0.2: * Image format version 1 was added that allows
    storing overlay whiteouts in a composefs image. * libcomposefs added
    max_version option * mkcomposefs added --version and --max-version
    options * composefs can now be build without go-md2man * Minor bugfix
    handling file read errors


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version (rhbz#2272063)
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.13
changelog:
  - update from trunk
    - PRs analyzer/109251, analyzer/110902, analyzer/110928, analyzer/111305,
  	analyzer/111441, analyzer/112974, analyzer/112975, analyzer/113505,
  	analyzer/113619, analyzer/114286, analyzer/114408, analyzer/114473,
  	bootstrap/114369, c++/59465, c++/100557, c++/110323, c++/111918,
  	c++/112631, c++/112724, c++/114349, c++/114439, c/109619, c/114364,
  	fortran/30802, fortran/55978, fortran/101135, fortran/103715,
  	fortran/107426, fortran/111781, fortran/114475, ipa/108802,
  	ipa/114254, libfortran/107031, libgcc/111731, libgcc/114397,
  	libstdc++/101228, libstdc++/113841, libstdc++/114316,
  	libstdc++/114359, libstdc++/114367, libstdc++/114394,
  	libstdc++/114400, libstdc++/114401, middle-end/111151,
  	middle-end/111632, middle-end/111683, middle-end/113396,
  	middle-end/114347, middle-end/114348, middle-end/114480,
  	modula2/113836, modula2/114296, modula2/114380, modula2/114418,
  	modula2/114422, modula2/114443, modula2/114444, modula2/114478,
  	rtl-optimization/101523, rtl-optimization/112415, sanitizer/111736,
  	target/99829, target/111822, target/112651, target/114049,
  	target/114150, target/114175, target/114194, target/114272,
  	target/114323, target/114334, target/114352, target/114407,
  	target/114431, testsuite/114320, testsuite/114486,
  	tree-optimization/96147, tree-optimization/109925,
  	tree-optimization/111736, tree-optimization/113727,
  	tree-optimization/114057, tree-optimization/114151,
  	tree-optimization/114322, tree-optimization/114329,
  	tree-optimization/114365, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114405,
  	tree-optimization/114425, tree-optimization/114433,
  	tree-optimization/114464, tree-optimization/114469,
  	tree-optimization/114471


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.14
changelog:
  - update from trunk
    - PRs analyzer/114588, bootstrap/106472, c++/91079, c++/99377, c++/100667,
  	c++/103825, c++/104040, c++/111132, c++/114377, c++/114462,
  	c++/114479, c++/114537, c++/114561, c++/114562, c++/114572,
  	c++/114580, c/114361, debug/114608, fortran/36337, fortran/50410,
  	fortran/106999, fortran/110987, fortran/112407, fortran/113885,
  	fortran/113956, fortran/114474, fortran/114535, gcov-profile/113765,
  	gcov-profile/114115, gcov-profile/114601, ipa/111571, ipa/113359,
  	ipa/113907, ipa/113964, libquadmath/114533, libquadmath/114623,
  	libstdc++/104606, libstdc++/114519, libstdc++/114633, lto/114655,
  	middle-end/114552, middle-end/114599, middle-end/114604,
  	middle-end/114627, middle-end/114628, modula2/114517,
  	modula2/114520, modula2/114548, modula2/114565, modula2/114617,
  	modula2/114648, rtl-optimization/112560, rtl-optimization/114415,
  	target/88309, target/101865, target/112919, target/113233,
  	target/113986, target/114577, target/114587, target/114590,
  	target/114603, target/114607, testsuite/114034, testsuite/114036,
  	testsuite/114307, testsuite/114614, testsuite/114642,
  	testsuite/114662, tree-optimization/112303,
  	tree-optimization/114115, tree-optimization/114480,
  	tree-optimization/114485, tree-optimization/114551,
  	tree-optimization/114555, tree-optimization/114557,
  	tree-optimization/114566, tree-optimization/114624
    - don't emit VEX encoded AES-NI instructions when just -maes and not -mavx
      is enabled (#2272758, PR target/114576)
    - fix s390* peephole2 to check mode of constant pool entries and for
      64-bit extraction from 128-bit constant pool entry extract the correct
      half of the value (#2273618, PR target/114605)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.15
changelog:
  - update from trunk
    - PRs analyzer/114472, c++/114303, c++/114409, debug/112878,
  	fortran/106500, middle-end/110027, middle-end/114681, target/114639,
  	tree-optimization/109596, tree-optimization/114672
    - fix symbol version of std::__basic_file<char>::native_handle() const
      (PR libstdc++/114692)
    - emit -Whardened warning even for -fhardened -fcf-protection=none
      (#2273610, PR target/114606)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.16
changelog:
  - update from trunk and releases/gcc-14 branch
    - GCC 14.1.0-rc1
    - PRs c++/93595, c++/99426, c++/106820, c++/107457, c++/109966, c++/111284,
  	c++/113141, c++/114078, c++/114393, c++/114426, c++/114600,
  	c++/114634, c++/114691, c++/114706, c++/114709, c++/114784,
  	c++/114795, c++/114888, c/92880, c/114780, d/111650, fortran/89462,
  	fortran/93678, fortran/102597, fortran/103471, fortran/103496,
  	fortran/113793, fortran/114739, fortran/114825, fortran/114959,
  	gcov-profile/114715, gcov-profile/114720, libgcc/114689,
  	libgcc/114755, libgcc/114762, libstdc++/93672, libstdc++/113386,
  	libstdc++/114750, libstdc++/114770, libstdc++/114803,
  	libstdc++/114863, lto/113208, lto/114574, middle-end/112938,
  	middle-end/114753, modula2/112893, modula2/114745, modula2/114807,
  	modula2/114811, modula2/114836, other/114738, preprocessor/114748,
  	rtl-optimization/114768, sanitizer/114687, sanitizer/114743,
  	target/110621, target/112431, target/112432, target/114416,
  	target/114668, target/114676, target/114696, target/114714,
  	target/114741, target/114752, target/114783, target/114794,
  	target/114810, target/114837, target/114861, target/114885,
  	testsuite/113706, testsuite/114744, testsuite/114768,
  	tree-optimization/114403, tree-optimization/114666,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114769,
  	tree-optimization/114787, tree-optimization/114792,
  	tree-optimization/114799, tree-optimization/114832,
  	tree-optimization/114883
  - switch to --with-arch_64=x86-64-v3 for latest RHEL
  - remove obsolete reason for not shipping *.gch* files


author: Marek Polacek <polacek@redhat.com>
changelog:
  - enable hardening and configure with --enable-host-pie --enable-host-bind-now
    on RHEL
  - don't require rocm-runtime on RHEL


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Parag Nemade <pnemade AT redhat DOT com> - 2.9.7-30
changelog:
  - As -dicts subpackage installs files under %{_libdir} path it should not be noarch
  - this fixes FTBFS on F37+


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.7-10
changelog:
  - require authselect-libs, since we use PAM modules password-auth or system-auth
  - got pam downstream patch upstream, use the commit from there


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.7-11
changelog:
  - 2263053 - CUPS/libppd PPD generators didn't check required attrs when deciding which driverless format to use,
    causing PPD generation to fail


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jan Macku <jamacku@redhat.com> - 8.7.1-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-2004 - Usage of disabled protocol
      CVE-2024-2379 - QUIC certificate check bypass with wolfSSL
      CVE-2024-2398 - HTTP/2 push headers memory-leak
      CVE-2024-2466 - TLS certificate check bypass with mbedTLS
  - drop upstreamed patches
  - reenable test 0313
  - fix zsh completions, use --with-zsh-functions-dir
  - apply upstream patches for 8.7.1 issues and regressions


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-16
changelog:
  - Add relocation, debug_str_offsets and macro fixes:
    0001-Make-relocation-reading-explicit.patch
    0002-Simplify-update_rela_data-by-checking-rel_updated.patch
    0003-debug_str_offsets-header-version-and-padding-are-2-b.patch
    0004-debugedit-Track-active-CU.patch
    0005-debugedit-Handle-DW_MACRO_-define-undef-_strx.patch


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.6-1
changelog:
  - Update to the head of the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0012 are now patches 0041-0052
  - Add 0053-RH-Add-mpathcleanup.patch
    * add mpathcleanup program


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-1
changelog:
  - Update source to upstream version 0.9.7
    * Previous patches 0001-0040 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0041-0053 are now patches 0001-0013
  - Remove /usr/lib/modules-load.d/multipath.conf
    * has been replaced with modprobe@dm_multipath.service unit Wants.


author: Paul Donohue <git@PaulSD.com> - 0.9.7-2
changelog:
  - Modify 0006-RH-add-mpathconf.patch
  - Modify 0008-RH-reset-default-find_mutipaths-value-to-off.patch
    * Fix find_multipaths values in docs and mpathconf


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-5
changelog:
  - Add 0014-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
    * Fix auto_resize code to avoid a segfault
  - Add 0015-multipathd-fix-auto-resize-configuration.patch
    * Fix auto_resize default value


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.8-1
changelog:
  - Update source to upstream version 0.9.8 plus latest staging branch
    * Previous patches 0014 & 0015 are included in the source tarball
    * patches 0001-0044 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0013 are now patches 0045-0057
  - Install /lib/udev/rules.d/99-z-dm-mpath-late.rules


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.3-4.P1
changelog:
  - New version 4.4.3-P1 (rhbz#2132240)
  - Fix for CVE-2022-2928 (rhbz#2132429)
  - Fix for CVE-2022-2929 (rhbz#2132430)


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Packit <hello@packit.dev> - 5.1.13-1
changelog:
  - Release 5.1.13
  - build: Adapt to changes in Fedora packaging of bash-completion
  - Change location of automatic.conf
  - Limit message log to one on dnf5 start
  - Implement waiting for network for dnf5 automatic
  - Write dnf5 commandline to the log
  - Implement dnf5-automatic: Tool for managing automatic upgrades
  - Parametrize output stream in transaction table
  - Add `download --srpm` option
  - Add missing dbus signal registations
  - Add new versionlock bindings
  - Implement `dnf5 versionlock` command


author: Packit <hello@packit.dev> - 5.1.14-1
changelog:
  - Update translations from weblate
  - Make the error to resolve module metadata more descriptive
  - Switch off deltarpm support
  - Limit number of dnf5daemon simultaneously active sessions
  - Make info and list commands case insesitive
  - Allow dnf5daemon configuration overrides for root
  - Add repoquery.hpp for swig-4.2.1 support


author: Packit <hello@packit.dev> - 5.1.15-1
changelog:
  - Update translations from weblate
  - Automatically set `upgrade --downloadonly` when `--destdir` is used
  - Write warnings to stderr too in config-manager plugin
  - Add repoid to generated repository name in config-manager plugin
  - Bump sdbus-cpp requirement to 0.9.0
  - Document and implement dnf5daemon Rpm interface
  - Document and implement dnf5daemon Goal interface
  - Document and implement dnf5daemon Repo interface
  - Document and implement dnf5daemon Base interface
  - Document and implement dnf5daemon Advisory interface
  - Document and implement dnf5daemon SessionManager interface
  - Add `dnf5daemon repo --enable/--disable` commands
  - automatic: Skip network availability check without remote repo
  - dnf5daemon: Rpm.list() works with commandline pkgs


author: Packit <hello@packit.dev> - 5.1.16-1
changelog:
  - Update translations from weblate
  - Document system-upgrade aliases
  - Improved Bash Completion
  - Print command line hints after resolve failure
  - Docuent Advisory.list() API usage
  - Add NEVRA field to advisory packages in dnf5daemon
  - Review and fix missing commands
  - Document dnf5daemon advisory
  - Document system-upgrade
  - system-upgrade: offline status subcommand
  - Add aliases `offline-distrosync`, `offline-upgrade`
  - Add `system-upgrade --offline` option
  - Add `offline`, `system-upgrade` commands


author: Packit <hello@packit.dev> - 5.2.0.0-1
changelog:
  - Update translations from weblate
  - [DNF5] `--enable-plugin` and `--disable-pluin`: no match found message
  - [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  - spec: Add conflict with the former provider of plugin man pages
  - spec: Add conflict with the old provider of dnf.conf
  - [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  - [libdnf5 API] Base::get_plugins_info
  - [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  - repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  - [DNF5] API: No inline methods in shared_options.hpp
  - [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  - [DNF5] API: Remove unused and buggy RpmTransactionItem class
  - [DNF5] Command: no inline methods
  - [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  - API: cli::session: no inline methods and public vars in opts classes
  - API: cli::session::Command: no inline methods
  - API: add p_impl to cli::session::Session
  - API: rpm::TransactionCallbacks: no inline methods
  - API: repo::RepoCallbacks: no inline methods
  - Prepare for switch of dnf5 in Rawhide
  - base: Make get_transaction_history unstable
  - Set `group` reason for packages removed by a group removal
  - [DNF5] Implement `--enable-plugin` and `--disable-pluin`
  - [libdnf5 API] Base::enable_disable_plugins
  - spec: Simplify man page files
  - Loggers: Fix: Add missing "null_loger.cpp" file
  - Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  - doc: Review of DNF4 vs DNF5 CLI and configuration changes
  - Re-enable clang builds after API changes
  - Add `--store` option for storing arbitrary transaction
  - libdnf5::Goal: when adding serialized transaction accept local items
  - Goal: change `add_serialized_transaction()` to accept path to trans
  - Add group/env paths for transaction parsing/serializing
  - base::Transaction: during serialization allow specifying paths
  - base::Transaction: add `store_comps(...)` method
  - repo_sack: add stored_transaction repo and its private API
  - repo: add private API `add_xml_comps(path)`
  - Generalize logging of `read_group_solvable_from_xml(..)`
  - Add `environment_no_groups` to `GoalJobSettings`
  - libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  - libdnf5 IPlugin: Use pImpl
  - libdnf5 IPlugin: Do not use inline methods
  - dnf5 IPlugin: Do not use inline methods on API
  - libdnf5 IPlugin: Add argumets description
  - libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  - libdnf5 plugins: New hook `repos_loaded`
  - libdnf5 plugins: New hook `repos_configured`
  - Base: notify_repos_configured and are_repos_configured methods
  - Fix: implicit conversion changes signedness, unused value
  - Disable unit tests for Copr dnf5 plugin
  - dnfdaemon: Document Polit CheckAuthorization call
  - dnfdaemon: Catch timeout during CheckAuthorization
  - Not handle compatibility.conf as configuration file
  - config: add search (se) and info (if) aliases
  - Improve documentation of repo config directories
  - Cross reference documentation
  - Document Repos and Vars Dirs
  - doc: Unify style and move "Files" section
  - Document repos configuration overrides
  - doc: Remove ":" in titles
  - Bump libdnf5/libdnf5-cli so version
  - Mark multiple strings for translation
  - Set locale for dnf5 run
  - spec: Add missing dnf-config-manager.8.gz file
  - Generate documentation for ConfigRepo Class
  - [Doc] Describe denerating repo cache path
  - dnf5daemon: Make availability case insensitive
  - dnf5: Drop unneeded severities capitalization
  - dnf5: Document --available as default for advisory cmd
  - dnf5daemon-client: Drop unneeded severities capitalization
  - advisory: filter_severity and filter_type case insensitive
  - dnfdaemon: Fix and enhance Advisory interface doc
  - Enable import data from DNF4 for systems without state dir
  - libdnf5 options: Unify constructors - pass args for storing by value
  - dnfdaemon: Missing signal registration
  - doc: config manager plugin: wrap too long lines
  - doc: document config-manager plugin
  - Packit: get version from specfile for copr_builds againts main
  - Update tests to use new `load_repos()` API
  - Use new load_repos instead of deprecated update_and_load_enabled_repos
  - Make `libdnf5::repo::Repo::load()` private
  - Deprecate: `update_and_load_enabled_repos`
  - RepoSack: add new `load_repos` method
  - Move update_and_load_repos and fix_group_missing_xml to Impl
  - Prevent loading plugins for unittests
  - Respect plugins configuration option for loading plugins
  - Add pImpl to `libdnf5::LogRouter`
  - Add pImpl to `libdnf5::MemoryBufferLogger`
  - Add pImpl to `libdnf5::OptionBinds`
  - Add pImpl to `libdnf5::OptionBinds::Item`
  - Add pImpl to `libdnf5::Config`
  - Add pImpl to `libdnf5::OptionStringList`
  - OptionStringList: remove assignment operators and move constructor
  - Add pImpl to `libdnf5::OptionBool`
  - OptionBool: remove assignment operators and move constructor
  - Add pImpl to `libdnf5::OptionNumber`
  - Add pImpl to `libdnf5::OptionPath`
  - Add pImpl to `libdnf5::OptionString`
  - libdnf5::OptionEnum: remove template, add pImpl
  - Add pImpl to `libdnf5::Option`
  - modules: Report problems with switching module streams
  - modules: Report switched module streams
  - modules: Add switching module streams as a possible transaction action
  - modules: Add replaces and replaced_by to TransactionModule
  - Add missing info updates alias, to match list command
  - Update `package_info_sections` not to use `scols_table_print_range`
  - libdnf-cli: Extract package info printing
  - ArgumentParser: use p_impl, no inline methods
  - ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  - ArgumentParser:PositionalArg: Support repeating of positional argument
  - Hide/Remove deprecated `libdnf5::repo::Repo` API
  - Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  - Remove deprecated unused function `create_forcearch_option()`
  - builddep: Don't escape globs, use expand_globs = false
  - builddep: Don't try to expand globs in pkg specs
  - libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  - Interfaces and adapters
  - module::ModuleStatus: Move to separate header file
  - comps::PackageType: Move to separate header file
  - cmp_naevr: Fix: pass by reference
  - modules: Report module solver problems
  - Accept SolverProblems for transacion resolve log
  - modules: Return problems from the module solver
  - modules: Add a method to process module solver problems
  - modules: Add a separate set of problem rules for modules
  - modules: Store the original module context also in the libsolv solvable
  - modules: Internalize modular repositories
  - Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  - Add pImpl to `libdnf5::repo::RepoQuery`
  - Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  - Remove deprecated `libdnf5::Base::load_config_from_file`
  - Move all `libdnf5::Base` members to pImpl
  - Add pImpl to `libdnf5::rpm::Reldep`
  - Add pImpl to `libdnf5::rpm::Changelog`
  - Add pImpl to `libdnf5::rpm::Nevra`
  - Add pImpl to `libdnf5::rpm::Checksum`
  - Add pImpl to `libdnf5::rpm::Package`
  - Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  - Add a method accepting std::string for filter_repo_id()
  - Add a method accepting std::string for filter_location()
  - Add a method accepting std::string for filter_file()
  - Add a method accepting std::string for filter_supplements()
  - Add a method accepting std::string for filter_enhances()
  - Add a method accepting std::string for filter_suggests()
  - Add a method accepting std::string for filter_recommends()
  - Add a method accepting std::string for filter_obsoletes()
  - Add a method accepting std::string for filter_conflicts()
  - Add a method accepting std::string for filter_requires()
  - Add a method accepting std::string for filter_description()
  - Add a method accepting std::string for filter_summary()
  - Add a method accepting std::string for filter_url()
  - Add a method accepting std::string for filter_sourcerpm()
  - Add a method accepting std::string for filter_nevra()
  - Add a method accepting std::string for filter_evr()
  - Add a method accepting std::string for filter_arch()
  - Add a method accepting std::string for filter_release()
  - Add a method accepting std::string for filter_version()
  - Add a method accepting std::string and int for filter_epoch()
  - Add a method accepting std::string for filter_name()
  - Add a method accepting std::string for filter_provides()
  - Extend version to four numbers (5.x.y.z)
  - Unify smallest version number name
  - cmake: rename PROJECT_VERSION_* to just VERSION_*
  - dnf5daemon: Document before_begin / after_complete signals
  - dnf5daemon: Signals to wrap rpm transaction execution
  - rpm: New callback to wrap whole rpm transaction
  - Add pImpl to `libdnf5::module::ModuleProfile`
  - Add pImpl to `libdnf5::module::ModuleDependency`
  - Add pImpl to `libdnf5::module::Nsvcap`
  - Add pImpl to `libdnf5::module::ModuleQuery`
  - Add pImpl to `libdnf5::comps::EnvironmentQuery`
  - Add pImpl to `libdnf5::comps::GroupQuery`
  - Add pImpl to `libdnf5::comps::Environment`
  - Add pImpl to `libdnf5::comps::Package`
  - Add pImpl to `libdnf5::comps::Group`
  - Remove unused `libdnf5::comps::GroupSack`
  - Remove unused `libdnf5::comps::EnvironmentSack`
  - Remove unused `libdnf5::comps::Comps`
  - Add pImpl to `libdnf5::advisory::Advisory`
  - Add pImpl to `libdnf5::advisory::AdvisoryReference`
  - Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  - Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  - Add pImpl to `libdnf5::rpm::RpmSignature`
  - Add pImpl to `libdnf5::transaction::Transaction`
  - Add pImpl to `libdnf5::rpm::KeyInfo`
  - Add pImpl to `libdnf5::repo::RepoSack`
  - Add pImpl to `libdnf5::base::SolverProblems`
  - Add pImpl to `libdnf5::base::LogEvent`
  - Add pImpl to `libdnf5::ConfigParser`
  - Add pImpl to `libdnf5::Vars`
  - Add pImpl to `libdnf5::transaction::TransactionHistory`
  - Add pImpl to `libdnf5::transaction::Package`
  - Add pImpl to `libdnf5::transaction::CompsGroup`
  - Add pImpl to `libdnf5::transaction::CompsEnvironment`
  - Add pImpl to `libdnf5::transaction::TransactionItem`
  - Remove several not needed imports
  - repo: add p_Impl and several needed utility methods
  - Repo: remove unused `fresh()` and `timestamp` attribute
  - Add pImpl to `ModuleItem` and remove definitions from header
  - Add pImpl to `libdnf5::base::transaction_*` classes
  - Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  - Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  - dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  - dnf5: Bash completion: Switch to `_init_completion`
  - Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  - Support RPMTRANS_FLAG_DEPLOOPS
  - Give inline methods hidden visibility by default
  - dnfdaemon: Make only internally used funcs static
  - dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  - doc: Add example of Rpm.list_fd usage in Python
  - dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  - dnfdaemon: New method list_fd() on Rpm interface
  - dnfdaemon: Serialize package object to JSON string
  - dnf5daemon: Handler that return data using UNIX_FD
  - dnf5daemon: Auxiliary method to write string to fd
  - dnf5daemon: Move utils functions into dnfdaemon namespace
  - dnf5daemon: get_session() method for D-Bus services
  - dnf5daemon-server: Ignore SIGPIPE
  - Vars: Add unit tests for API methods
  - Vars::unset: API method for removing variable
  - dnf5daemon-server/dbus: Install config files into /usr
  - Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  - Fix: Do not use Variable-length arrays (VLAs) in C++ code
  - Add a hint to call base.setup() prior loading repositories
  - dnf5daemon-client: New switches for group list
  - doc: Include comps.Group interface to D-Bus API documentatin
  - dnfdaemon: Enhance comps.Group.list() method
  - dnf5daemon-client: Fix group.get_installed()
  - man: Link dnf5 pages to dnf


author: Packit <hello@packit.dev> - 5.2.1.0-1
changelog:
  - Update translations from weblate
  - bindings: Tests for using struct attributes in Python
  - bindings: Add Python attributes for structs
  - docs: Fix diff link on the dnf 5.2.0.0 changes page
  - docs: Add diff with API changes in dnf5-5.2.0.0
  - docs: Add a page about public API changes in dnf 5.2.0.0
  - system-upgrade: fix missing \n before transaction test
  - system-upgrade: comment to clarify progress bar logic
  - system-upgrade: drop [[maybe_unused]] from reboot() arg
  - system-upgrade: fix progress bars, set transaction description
  - system-upgrade: adapt to new transaction serialization format
  - system-upgrade: clean up releasever logic
  - system-upgrade: fix poweroff_after
  - copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  - Add file search result for repoquery --whatprovides
  - doc: Add enviroment variables and clarify options for loading the plugins
  - dnfdaemon: Fix Rpm interface introspection file


author: Packit <hello@packit.dev> - 5.2.2.0-1
changelog:
  - Vars::substitute: fix use-out-of-scope leaks
  - docs: correct the default for pluginconfpath
  - cli: Add skipped packages to the transaction table
  - i18n: Improve formatting an error message for multiple streams
  - Add/fix documentation for rpm::PackageQuery methods
  - i18n: Unwind "No {} to remove for argument: {}"
  - `history list`: count also groups and envs in total `Altered`
  - Fix typo in translatable string
  - [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  - Option `--providers-of` doesn't require available repos
  - Improve docs regarding the keepcache option and download command
  - needs_restarting: Fix invalid reference usage
  - download: add `--source` alias for `--srpm`
  - automatic: Fix documentation and ship config file
  - fix: quote `dnf5-command({})' in command suggestion when plugin not found
  - i18n: Unwind "Cannot {} package \"{}\"" message
  - base: Add repository to solver problem messages
  - conf: New classes for append options
  - docs: Document changes to repoinfo and repolist
  - dnf5daemon: The buildtime attribute has been added to the package_attrs option


author: Packit <hello@packit.dev> - 5.2.3.0-1
changelog:
  - Update translations from weblate
  - const: Shared constant defining RPM transaction lock file
  - main: Implement checking of privileges before executing commands
  - exception: Add new exception for user insufficient privileges
  - locker: Move to public API
  - distro-sync: Add downloadonly option
  - commands: Fix using store option
  - Enhance warning about RPMs that were not validate by RPM


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.0-1
changelog:
  - Update to 3.3.0 (close RHBZ#1684966)
  - Drop obsolete ldconfig_scriptlets macro
  - Drop and Obsolete the static library (-static subpackage)
  - Properly mark the LICENSE file
  - Update License to SPDX


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Adam Williamson <awilliam@redhat.com> - 060-2
changelog:
  - Backport fix to pull in required libs for systemd (dracut-ng PR #118)
  - Backport fix to move hook directory for systemd (dracut-ng PR #194)


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Aaron Merey <amerey@fedoraproject.org> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2


author: Michel Lind <salimma@fedoraproject.org> - 0.191-3
changelog:
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static
  - Add dependency on libzstd-static for elfutils-libelf-devel-static


author: Mark Wielaard <mjw@fedoraproject.org> - 0.191-6
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-5
changelog:
  - FreeIPA 4.11.0 release
  - Simplify Fedora spec file
  - Release notes: https://www.freeipa.org/release-notes/4-11-0.html


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-7
changelog:
  - ipalib: fix the IPACertificate validity dates (python 3.12 compatibility)
  - Handle PKI revocation response differences in JSON API
  - Allow removal of minimal length from a custom password policy


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.11.1-2
changelog:
  - Rebuild against Samba 4.20rc1
  - Fix memory leak in Kerberos KDC driver
  - Fix possible crash in IPA command line tool when accessing Kerberos credentials
  - Compatibility fix for Python Cryptography 42.0.0
  - NetBIOS defaults fix
  - Fix default host keytab retrieval permissions


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Alexandra Hájková <ahajkova@redhat.com> - 8.0.6-3
changelog:
  - backport upstream "Do not probe to find main data root start if
    dl_iterate_phdr exists"
  - https://bugzilla.redhat.com/show_bug.cgi?id=2063942


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Drop gdb-container-rh-pkg.patch.  This patch gave a warning when
    connecting to very old gdbserver.  The warning mentioned specific
    RHEL versions, all of which are no longer supported.  As such the
    warning seems pointless.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Drop gdb-bz634108-solib_address.patch.  This is a test only patch.
    I've pushed upstream commit 52ca06e807b which covers this test case,
    we'll pick up the upstream test next time Fedora is rebased.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Drop gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch.  I've
    rewritten and expanded the test case and have submitted it for
    upstream consideration.  The hack which rewrote 'errno' into a
    dereference of a call to '__errno_location' does still fix a problem
    with printing errno in statically linked binaries.  But it will fail
    when attempting to debug a core file.  The original test case
    associated with this bug now works correctly due changes to glibc.


author: Kevin Buettner <kevinb@redhat.com> - 14.2-6
changelog:
  - Further changes for fixing RHBZ 2275274:  Add a
    'Requires: binutils' which is needed because gdb-add-index uses
    readelf and objcopy.  Also, delete librpm related stuff since
    gdb/build-id.c no longer attempts to dlopen a librpm library.  Add
    'Recommends python3-rpm' so that rpm-suggestions.py will find the
    required python module.


author: Keith Seitz <keiths@redhat.com> - 14.2-7
changelog:
  - Remove bundled copy of libipt.
  - Remove bundled copy of libstdc++ pretty-printers.
  - Always include debuginfod support.
  - Purge RHEL < 8.


author: Kevin Buettner <kevinb@redhat.com> - 14.2-9
changelog:
  - Revise rpm-suggestions.py script so that a message is printed when
    the 'rpm' module (found in the python3-rpm package) isn't found.
    In particular, the ModuleNotFoundError will be caught, avoiding
    a potential python import error.  (RHBZ 2275274)


author: Andrew Price <anprice@redhat.com> - 3.4.1-4
changelog:
  - gfs2/edit: always use "%s"-style format for printf()-style functions
  - Custom patch to fix a printw() call missed by the above
    Fixes a build failure due to format-security warnings being treated as errors


author: Andrew Price <anprice@redhat.com> - 3.5.0-1
changelog:
  - New upstream release
  - Drop all patches
  - Exclude i686 for https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval
  - Migrate to SPDX license identifier


author: Florian Weimer <fweimer@redhat.com> - 2.39.9000-9
changelog:
  - Drop glibc-rh2269799.patch, fixed differently upstream.
  - Auto-sync with upstream branch master,
    commit 1ea051145612f199d8716ecdf78b084b00b5a727:
  - ﻿powerpc: Placeholder and infrastructure/build support to add Power11 related changes.
  - ﻿powerpc: Add HWCAP3/HWCAP4 data to TCB for Power Architecture.
  - elf: Enable TLS descriptor tests on aarch64
  - arm: Update _dl_tlsdesc_dynamic to preserve caller-saved registers (BZ 31372)
  - Ignore undefined symbols for -mtls-dialect=gnu2
  - Add tst-gnu2-tls2mod1 to test-internal-extras
  - x86-64: Allocate state buffer space for RDI, RSI and RBX (#2269799)
  - riscv: Update nofpu libm test ulps
  - Add STATX_MNT_ID_UNIQUE from Linux 6.8 to bits/statx-generic.h
  - linux: Use rseq area unconditionally in sched_getcpu (bug 31479)
  - aarch64: fix check for SVE support in assembler
  - Update kernel version to 6.8 in header constant tests
  - Update syscall lists for Linux 6.8
  - Use Linux 6.8 in build-many-glibcs.py
  - powerpc: Remove power8 strcasestr optimization
  - riscv: Fix alignment-ignorant memcpy implementation
  - linux/sigsetops: fix type confusion (bug 31468)
  - LoongArch: Correct {__ieee754, _}_scalb -> {__ieee754, _}_scalbf
  - duplocale: protect use of global locale (bug 23970)


author: DJ Delorie <dj@redhat.com> - 2.39.9000-10
changelog:
  - Auto-sync with upstream branch master,
    commit 96d1b9ac2321b565f340ba8f3674597141e3450d.
  - RISC-V: Fix the static-PIE non-relocated object check
  - htl: Implement some support for TLS_DTV_AT_TP
  - htl: Respect GL(dl_stack_flags) when allocating stacks
  - hurd: Use the RETURN_ADDRESS macro
  - hurd: Disable Prefer_MAP_32BIT_EXEC on non-x86_64 for now
  - Allow glibc to be compiled without EXEC_PAGESIZE
  - hurd: Stop relying on VM_MAX_ADDRESS
  - hurd: Move internal functions to internal header
  - stdlib: Fix tst-makecontext2 log when swapcontext fails
  - or1k: Add prctl wrapper to unwrap variadic args
  - or1k: Only define fpu rouding and exceptions with hard-float
  - or1k: Update libm test ulps
  - AArch64: Check kernel version for SVE ifuncs


author: Patsy Griffin <patsy@redhat.com> - 2.39.9000-11
changelog:
  - Auto-sync with upstream branch master,
    commit 42e48e720c78ab75eb8def9e866da52b0ac278df.
  - nptl: Add tst-pthread-key1-static for BZ #21777
  - elf: Add ld.so test with non-existing program name
  - elf: Check objname before calling fatal_error
  - Use crtbeginT.o and crtend.o for non-PIE static executables
  - aarch64: Enhanced CPU diagnostics for ld.so
  - x86: Add generic CPUID data dumper to ld.so --list-diagnostics
  - elf: Add CPU iteration support for future use in ld.so diagnostics
  - timezone: sync to TZDB 2024a
  - Fix bsearch, qsort doc to match POSIX better
  - x86-64: Exclude FMA4 IFUNC functions for -mapxf
  - Reinstate generic features-time64.h
  - Cleanup __tls_get_addr on alpha/microblaze localplt.data
  - arm: Remove ld.so __tls_get_addr plt usage
  - aarch64: Remove ld.so __tls_get_addr plt usage
  - math: x86 trunc traps when FE_INEXACT is enabled (BZ 31603)
  - math: x86 floor traps when FE_INEXACT is enabled (BZ 31601)
  - math: x86 ceill traps when FE_INEXACT is enabled (BZ 31600)
  - aarch64/fpu: Add vector variants of erfc
  - aarch64/fpu: Add vector variants of tanh
  - aarch64/fpu: Add vector variants of sinh
  - aarch64/fpu: Add vector variants of atanh
  - aarch64/fpu: Add vector variants of asinh
  - aarch64/fpu: Add vector variants of acosh
  - aarch64/fpu: Add vector variants of cosh
  - aarch64/fpu: Add vector variants of erf
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - manual: significand() uses FLT_RADIX, not 2
  - manual: Clarify return value of cbrt(3)
  - manual: floor(log2(fabs(x))) has rounding errors
  - manual: logb(x) is floor(log2(fabs(x)))
  - powerpc: Add missing arch flags on rounding ifunc variants
  - math: Reformat Makefile.
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - benchtests: Improve benchtests for strstr
  - x86_64: Remove avx512 strstr implementation
  - signal: Avoid system signal disposition to interfere with tests


author: Florian Weimer <fweimer@redhat.com> - 2.39.9000-12
changelog:
  - Auto-sync with upstream branch master,
    commit 14e56bd4ce15ac2d1cc43f762eb2e6b83fec1afe:
  - powerpc: Fix ld.so address determination for PCREL mode (bug 31640)
  - Revert "x86_64: Suppress false positive valgrind error"
  - wcsmbs: Ensure wcstr worst-case linear execution time (BZ 23865)
  - wcsmbs: Add test-wcsstr
  - posix: Sync tempname with gnulib
  - socket: Add new test for connect
  - libsupport: Add xgetpeername


author: Arjun Shankar <arjun@redhat.com> - 2.39.9000-14
changelog:
  - Drop glibc-rh827510.patch, fixed differently upstream.
  - Auto-sync with upstream branch master,
    commit 16c8dfba14ff7596ad3aea941a240f8abcdc50e6:
  - Revert "Allow glibc to be compiled without EXEC_PAGESIZE"
  - locale: Handle loading a missing locale twice (Bug 14247)
  - elf: Do not check for loader mmap on tst-decorate-maps (BZ 31553)
  - Use --enable-obsolete in build-many-glibcs.py for nios2-linux-gnu
  - login: Use unsigned 32-bit types for seconds-since-epoch
  - login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
  - login: Check default sizes of structs utmp, utmpx, lastlog
  - benchtests: Add random() benchmark
  - advisories: Add Reported-By
  - Fix 'Reported-By' to use Camel Case for commit 6a98f4640ea453f
  - Document CVE-2024-2961
  - iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)
  - elf/rtld: Count skipped environment variables for enable_secure


author: Florian Weimer <fweimer@redhat.com> - 2.39.9000-15
changelog:
  - Auto-sync with upstream branch master,
    commit 41903cb6f460d62ba6dd2f4883116e2a624ee6f8:
  - GLIBC-SA-2024-0004: add commit for 2.31 branch
  - benchtests: Add difficult strstr needle for bruteforce algorithms
  - x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676]
  - LoongArch: Add glibc.cpu.hwcap support.
  - nptl: Fix tst-cancel30 on kernels without ppoll_time64 support


author: Carlos O'Donell <carlos@redhat.com> - 2.39.9000-17
changelog:
  - Update License tag to match upstream.
  - Auto-sync with upstream branch master,
    commit 91695ee4598b39d181ab8df579b888a8863c4cab:
  - time: Allow later version licensing.
  - hurd: Stop mapping AT_NO_AUTOMOUNT to O_NOTRANS
  - libio: Sort test variables in Makefile
  - AArch64: Remove unused defines of CPU names
  - Make sure INSTALL is ASCII plaintext again
  - x86: In ld.so, diagnose missing APX support in APX-only builds
  - elf: Also compile dl-misc.os with $(rtld-early-cflags)
  - CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
  - CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
  - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
  - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
  - i386: ulp update for SSE2 --disable-multi-arch configurations


author: DJ Delorie <dj@redhat.com> - 2.39.9000-18
changelog:
  - Auto-sync with upstream branch master,
    commit 5f245f3bfbe61b2182964dafb94907e38284b806.
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - ﻿powerpc: Optimized strncmp for power10
  - build-many-glibcs.py: Add openrisc hard float glibc variant
  - or1k: Add hard float support
  - or1k: Add hard float libm-test-ulps
  - nscd: Use time_t for return type of addgetnetgrentX
  - Add a test to check for duplicate definitions in the static library
  - i686: Fix multiple definitions of __memmove_chk and __memset_chk
  - i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk
  - nscd: Typo inside comment in netgroup cache


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: José Relvas <jrelvas@proton.me> - 9.0.0-7
changelog:
  - Add eglgears and es2gears (eglgears_x11,eglgears_wayland,es2gears_x11,es2gears_wayland)
    to egl-utils subpackage


author: Marie Loise Nolden <loise@kde.org> - 1.20.0-1
changelog:
  - Update to 1.20.0 and enable/add qt6 build for qgpgme. The qt5 and qt6
    rpms have been split out into separate libs and -devel rpms for compatibility.


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-4
changelog:
  - convert NEWS to UTF-8
  - remove shebang in python module files and fix permissions
  - remove unnecessary .so symlink
  - update URL


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-6
changelog:
  - split X clients to separate subpackage
  - add missing dependencies for python clients
  - add explicit gcc dependency
  - drop xmlto from build dependencies
  - enable libusb1-devel on s390x
  - fix qt build option
  - fix spec indentation


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-116
changelog:
  - grub-core/commands: add flag to only search root dev
  - Resolves: #2223437
  - Resolves: #2224951
  - Resolves: #2258096
  - Resolves: CVE-2023-4001


author: Leo Sandoval <lsandova@redhat.com> - 2.06-118
changelog:
  - xfs: include the 'directory extent parsing patch', otherwise
  XFS-formatted partitions do not boot. This change effectively
  reverts 2.06-115
  - Resolves: #2259266


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-120
changelog:
  - GRUB2 NTFS driver vulnerabilities
  - (CVE-2023-4692)
  - (CVE-2023-4693)
  - Resolves: #2236613
  - Resolves: #2241978
  - Resolves: #2241976
  - Resolves: #2238343


author: Tomas Popela <tpopela@redhat.com> - 2.24.33-10
changelog:
  - Fix FTBFS on F37/rawhide as apparently autoconf is not using ibm, but
    redhat in the host triplet


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4-15
changelog:
  - Update hunspell dictionary directory path
    https://fedoraproject.org/wiki/Changes/Hunspell_dictionary_dir_change


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-5
changelog:
  - Update GNOME requirements in CI main.yml
  - Delete broken chrome-gnome-shell in rawhide
  - libproxy-webkitgtk4 is no longer available in Fedora 37


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.30-2
changelog:
  - Resolve #2252227 Fix display buffer overflow
  - Change IBus unique name to :1.0 from IBUS_SERVICE_IBUS


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.30-3
changelog:
  - Resolve #2284094 Fix preedit in Flatpak with new DBus unique name
  - Add directory %{_prefix}/lib/systemd/user/gnome-session.target.wants
  - Add directory %{_libdir}/gtk-4.0/4.0.0/immodules


author: Mike FABIAN <mfabian@redhat.com> - 1.4.20-1
changelog:
  - Update to 1.4.20
  - Reduce preedit flicker (Resolves: https://github.com/ibus/ibus/issues/2536)
  - Remove `xml:lang="en"` from the screenshot in appdata.xml
    See: https://github.com/ximion/appstream/issues/494
    There must be one image in the default locale, and there can be some
    translated ones, but having only translated images is not okay.
  - Use ibus_text_new_from_string (string) instead of
    ibus_text_new_from_static_string (string) in ibus_m17n_engine_commit_string()
  - Add missing g_free (buf) in ibus_m17n_mtext_to_utf8()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Coiby Xu <coxu@redhat.com> - 1.5-5
changelog:
  - add ima-evm-utils-libs subpackage (rpm-sign-libs can depend on ima-evm-utils-libs instead)
  - add some IMA setup tools


author: Jan Macku <jamacku@redhat.com> - 10.17-1
changelog:
  - service: Exit when `/etc/init.d` is missing
  - ci: Update workflows to run on main branch
  - ci: remove differential-shellcheck configs
  - doc: Use main branch in links
  - dependabot: Monthly updates
  - ci(Mergify): configuration update
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Georgian)
  - ci: Update `packit.yml`
  - ci: Update Github workflows & add Dependabot
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Drop unnecessary obsoletes


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Phil Sutter <psutter@redhat.com> - 2.2.7-1
changelog:
  - New version 2.2.7 plus some pending fixes from upstream
  - Simplify spec file using some newer macros


author: Timothée Ravier <tim@siosm.fr> - 2:1.9.0-1
changelog:
  - Update to 1.9.0 (fedora#1952715 fedora#2091169 fedora#2063926)
  - Fix EnvironmentFile location in systemd unit (fedora#2058510)
  - Use upstream environment file in systemd unit


author: Akira TAGOH <tagoh@redhat.com> - 2.5-37
changelog:
  - To prevent confusion, drop some sentence from the error message
    happening when set invalid characters for reading.
    Resolves: rhbz#1938091


author: Coiby Xu <coxu@redhat.com> - 2.0.28-1
changelog:
  - kexec-tools 2.0.28 (Simon Horman)
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually
  - dracut-module-setup: consolidate s390 network device config


author: Julien Rische <jrische@redhat.com> - 1.20.1-8
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Colin Walters <walters@verbum.org> - 2.40-0.9.rc1
changelog:
  - Backport https://github.com/util-linux/util-
    linux/commit/211a9da0b4e9704eea210d7944b723fa78272c79


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.1-1
changelog:
  - lvm-dbus: Fix passing size for pvresize over DBus (vtrefny)
  - nvme: Add bd_nvme_is_tech_avail to the API file (vtrefny)
  - tests: Add NVMe controller type checks (tbzatek)
  - tests: Add NVMe persistent discovery controller tests (tbzatek)
  - tests: Fix removing custom LVM devices file (vtrefny)
  - tests: Ignore LVM devices file for non-LVM tests (vtrefny)
  - tests: Manually remove removed PVs from LVM devices file (vtrefny)
  - dm_logging: Annotate redirect_dm_log() printf format (tbzatek)
  - Fix some more occurrences of missing port to G_GNUC_UNUSED (tbzatek)
  - Port to G_GNUC_INTERNAL for controlling symbols visibility (tbzatek)
  - Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined (giulio.benetti)
  - Makefile: Fix bumpver to work with micro versions (vtrefny)


author: Adam Williamson <awilliam@redhat.com> - 3.1.1-2
changelog:
  - Backport proposed upstream fix for #2247319
  - Disable -Werror and build with -O0 to help further debug #2247319


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Nicola Sella <nsella@redhat.com> - 0.70.2-1
changelog:
  - Update to 0.70.2
  - Support "proxy=none" in main config (RhBug:2155713)
  - Fix #1558: Don't assume inclusion of cstdint
  - Disconnect monitors in dnf_repo_loader_finalize() (RhBug:2070153)


author: Jan Kolarik <jkolarik@redhat.com> - 0.71.0-1
changelog:
  - Update to 0.71.0
  - PGP: Use new librepo PGP API, remove gpgme dependency
  - API: Basic support for OpenPGP public keys
  - Avoid using GNU extensions in the dependency splitter regex
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838)
  - Make code C++20 compatible


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1
  - Fix https://issues.redhat.com/browse/RHEL-27657
  - subject-py: Fix memory leak
  - MergedTransaction: Calculate RPM difference between two same versions as no-op
  - Onboard packit tests
  - Add virtual destructor to TransactionItem


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Carlos O'Donell <carlos@redhat.com> - 3.4.4-8
changelog:
  - Analyze libffi-3.4.4-7.fc40 sources for license information
  - Migrate License field to SPDX identifiers for
    https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    https://docs.fedoraproject.org/en-US/legal/update-existing-packages
    (#2222084)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Březina <pbrezina@redhat.com> - 2.9.4-1
changelog:
  - Rebase to SSSD 2.9.4
  - Files provider suport remove (rhbz#2253183)
  - i686 support removed (rhbz#2069738)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: Phil Sutter <psutter@redhat.com> - 1.2.6-1
changelog:
  - Drop outdated libnftables provides, it might clash with the new
    nftables-provided libnftables at some point in future
  - Backport one late fix from upstream
  - new version 1.2.6


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Paul Wouters <paul.wouters@aiven.io - 1.4.5-1
changelog:
  - Resolves: rhbz#2154991 libpwquality fails to build with Python 3.12: ModuleNotFoundError: No module named 'distutils'
  - Resolves: rhbz#2006063 RFE: Support running without cracklib-dicts installed
  - Cleanup and remove python2/3 conditional macros


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Packit <hello@packit.dev> - 2.17.11-1
changelog:
  - Release version 2.17.11 (Michal Srb)
  - spec: Add missing requires for python3-libreport (Michal Srb)
  - Build URL with urllib.parse.urljoin() (Michal Srb)
  - Add XDG_ACTIVATION_TOKEN to the list of ignored words (Michal Srb)
  - Attachments are minor updates in Bugzilla (Michal Srb)
  - Retry Bugzilla search queries with delays (Michal Srb)
  - Fix "NameError: name 'ticket' is not defined" exception (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Jiri Pirko <jiri@resnulli.us> - 1.32-1
changelog:
  teamd: Add option to change evaluation logic of multiple link-watchers
  Revert: teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  teamd: lacp: don't move the port state from disabled when admin state is down
  teamd: lacp: set port to disabled state during removal
  teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  libteam: clear changed bits in case of TEAM_IFINFO_CHANGE
  misc: fix possible strncpy truncation bug
  teamd: stop iterating callbacks when a loop restart is requested
  teamd: do no remove the ports on shutdown with -N
  binding/python: ifindex 0 is invalid so do not process it
  teamd: Include missing headers for strrchr and memcmp
  libteamdctl: validate the bus name before using it
  options: move option temporary check after the err check
  teamd: lacp: increase "min_ports" upper limit to 1024
  fix build on OpenWRT/musl-libc
  teamd: increase the waitting time for daemon killing
  Revert "teamd: Disregard current state when considering port enablement"


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Kate Hsuan <hpa@redhat.com> - 1.0.27-1
changelog:
  - Update to 1.0.27
  - Update to 1.0.27
  - Add tests, including init_context, set_option, and stress_mt


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Björn Esser <besser82@fedoraproject.org> - 4.4.33-5
changelog:
  - Simplify transitional Requires and Obsoletes for legacy packages
  - Drop versioned BR on perl-interpreter
  - Fix README.posix file, as the fcrypt function is still available


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Kamil Dudka <kdudka@redhat.com> - 3.20.1-1
changelog:
  - new upstream version 3.20.1, which fixes the following security issue:
      CVE-2022-1348 - potential DoS from unprivileged users via the state file


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Josef Ridky <jridky@redhat.com> - 1:5.9.3-8
changelog:
  - Fix warning for RPM DB
  - split perl module into separate package that doesn't pull in gcc and
    other build dependencies (thanks Chris Adams)
  - don't install MakefileSubs.pm - it's just needed at module build time
    (thanks Chris Adams)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Michael J Gruber <mjg@fedoraproject.org> - 1.7-1
changelog:
  - update to upstream release 1.7 (rhbz#2265629)
  - use pkgconf/npth.c instead of npth-config
  - new functions npth_poll and npth_ppoll


author: Richard W.M. Jones <rjones@redhat.com> - 2:2022.5.17-1
changelog:
  - New upstream version 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.0-22234872.
    - Fix for CVE-2023-20900 - a SAML token signature bypass vulnerability.
    - Fix for CVE-2023-20867 - an Authentication Bypass vulnerability.
    - Linux quiesced snapshots have been updated to avoid intermittent hangs
      of the vmtoolsd process.
      - File systems prefrozen by custom quiescing scripts must be listed on the
        "excludedFileSystems" setting in the "vmbackup" section of the tools.conf
        file.
      - A tools.conf configuration setting is available to temporaily direct
        Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
        of ignoring file systems already frozen.
    - A number of Coverity reported issues have been addressed.
    - A number of GitHub issues and pull requests have been handled.


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: John Wolfe <john.wolfe@broadcom.com> - 12.4.0-1
changelog:
  - Package a new upstream version of open-vm-tools-12.4.0-23259341.
    - A number of Coverity reported issues have been addressed.


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Remove needless configure option with hardcoded path to pcsclite
  - Fix import of RSA keys in pkcs11-tool (#2150010)


author: Daniel Milnes <daniel@daniel-milnes.uk> - 9.6p1-1
changelog:
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.6p1-1.3
changelog:
  - Build OpenSSH without engine support
  - Make tests run at build phase (using parallel run mechanism by Alexander Sosedkin)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.6p1-1.7
changelog:
  - Only set PAM_RHOST if the remote host is not "UNKNOWN"
    https://src.fedoraproject.org/rpms/openssh/pull-request/71
    Patch by Daan De Meyer <daan.j.demeyer@gmail.com>
  - Some spec cleanup
    https://src.fedoraproject.org/rpms/openssh/pull-request/74
    by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.1-3
changelog:
  - Minimize skipping tests
  - Allow ignoring unknown signature algorithms and groups (upstream #23050)
  - Allow specifying provider algorithms in SignatureAlgorithms (upstream #22779)


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Brian C. Lane <bcl@redhat.com> - 3.5-7
changelog:
  - libparted: Fix handling of msdos partition types
  - tests: Add a libparted test for ped_partition_set_system on msdos
  - parted: Add display of GPT UUIDs in JSON output
  - Add no_automount flag support
  - increase xfs size to 300M


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Stefano Brivio <sbrivio@redhat.com> - 0^20240318.g615d370-1
changelog:
  - Switch license identifier to SPDX (Dan Čermák)
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2024_02_20.1e6f92b..2024_03_18.615d370


author: Nathan Scott <nathans@redhat.com> - 6.1.0-1
changelog:
  - Remove unintended pmie logging to syslog (BZ 2223348)
  - Update pcp selinux policy to match core (BZ 2223568)
  - Resolve pmlogconf SIGABRT during fsync (BZ 2229441)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Resolves i686/x86_64 conflicts of PCP packages (BZ 2248841)
  - Additional selinux policy updates for pmproxy (BZ 2223568)
  - Update to latest PCP sources.


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.42-1
changelog:
  - Rebase to version 10.42
  - RISC-V is JIT enabled according to the https://github.com/PCRE2Project/pcre2/issues/14


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.0-498
changelog:
  - 5.38.0 bump (see <https://metacpan.org/pod/release/RJBS/perl-5.38.0/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Vit Mojzis <vmojzis@redhat.com> - 3.5-5
changelog:
  - python/sepolicy: Fix spec file dependencies
  - python/sepolicy: Fix template for confined user policy modules
  - Improve man pages and add examples


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-7
changelog:
  - python: improve format strings for proper localization
  - python: Drop hard formating from localized strings
  - sepolicy: port to dnf4 python API (rhbz#2209404)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 124-3
changelog:
  - pkexec: no session for cookie error fixed
  - pkttyagent: fix of generation of coredump if EOF (Ctrl+D) sent to password prompt


author: Jan Rybar <jrybar@redhat.com> - 124-4
changelog:
  - pkla-compat is now recommends: pkla is obsolete and binaries are run every time
  - polkitbackend watches only session changes to reduce cpu usage
  - PolkitPermission: only sessions that really changed state send CheckAuthorization


author: Panu Matilainen <pmatilai@redhat.com> - 1.19~rc1-1
changelog:
  - Rebase to 1.19-rc1 (https://github.com/rpm-software-management/popt/releases/tag/popt-1.19-rc1)
  - Remove manual .la cleanup, it's automatic nowadays
  - Add a guard against accidental soname changes


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.2-2
changelog:
  - Enable package notes
  - Reduce BuildRequires set by using git-core
  - Remove redundant runtime requires of python3-six
  - Run import check during the build


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.91-7
changelog:
  - Resurrect rpmbuild --buildroot option for cpack (#2284124)
  - Bring back %{buildsubdir} requirement for debuginfo generation
  - Bring back %{_buildrootdir} macro definition


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.12-3
changelog:
  - Remove extra distro-applied CFLAGS passed to user built C extensions
  - https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Python Maint <python-maint@redhat.com> - 3.13.0~a5-2
changelog:
  - Move all test modules to the python3.13-test package, namely:
    - __phello__
    - _xxinterpqueues
    - _xxsubinterpreters
    - xxlimited
    - xxlimited_35
    - xxsubtype
  - Remove internal usage of @LIBPYTHON@


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.18-2
changelog:
  - Fix implicit int compiler warning in configure check for PTHREAD_SCOPE_SYSTEM
  - Resolves: rhbz#2147519


author: Cole Robinson <crobinso@redhat.com> - 8.2.0-7
changelog:
  - Enable PIE for qemu-user-static builds
  - Replace PVH build fix patch with version that should work on centos


author: Sumit Bose <sbose@redhat.com> - 0.17.1-11
changelog:
  - Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening


author: Michal Ruprich <mruprich@redhat.com> - 3.2.6-2
changelog:
  - Resolves: #2128682 - rsync fail with "ERROR: rejecting unrequested file-list name..." depend of parameters order


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.1-1
changelog:
  - Wrong versioning for 4.15.0 RC releases makes the oficial release look lower than them.
    Fix it by bumping the minor release to 4.15.1. Resolves: #2268690


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 2:4.15.1-4
changelog:
  - Fix build with %_bindir==%_sbindir
  - Add virtual Provides for old file paths used by other packages


author: Michal Hlavinka <mhlavink@redhat.com> - 1:7.3-6
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Radovan Sroka <rsroka@redhat.com> - 1.9.13-1.p2
changelog:
  - Rebase to sudo 1.9.13p2
  - sudo-1.9.13p2 is available Resolves: rhbz#2169840
  - sudo: double free with per-command chroot sudoers rules Resolves:
    CVE-2023-27320


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256~rc1^20240509git1781de1-1
changelog:
  - Version 256-rc1^20240509git
  - There were some fixes merged upstream, so let's try again before v256-rc2
    is released.


author: Petr Menšík <pemensik@redhat.com> - 1.19.3-1
changelog:
  - Update to 1.19.3 (rhbz#2268404)
  - Fix CVE-2024-1931, Denial of service when trimming EDE text on positive
    replies. (rhbz#2268419)
  - Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672.
  - Bug fixes


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Jonathan Wright <jonathan@almalinux.org> - 1.51.08-1
changelog:
  - update to 1.51.08
  - Remove meson build code, follow upstream build methods
  - rhbz#2009098
  - rhbz#2010890


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.4.0-14
changelog:
  - Require xmodmap, setxkbmap and xrdb after the xorg-x11-server-utils
    deaggregation (#1961036). These are all (conditionally) invoked from
    xinitrc-common.


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


