# changelog

author: Paul Howarth <paul@city-fan.org> - 5.008-1
changelog:
  - Update to 5.008 (rhbz#2498977)
    - Decoder now supports 'thaw_allow_classes' and 'thaw_deny_action' to control
      thaw callbacks during decoding


author: Paul Howarth <paul@city-fan.org> - 5.009-1
changelog:
  - Update to 5.009 (rhbz#2501693)
    - Only use Perl's $Config{ccflags} when building bundled zstd on AIX/IBM
      toolchains, or when SEREAL_ZSTD_USE_CONFIG_CCFLAGS is set; other platforms
      now use the normal zstd build flags again


author: Paul Howarth <paul@city-fan.org> - 5.010-1
changelog:
  - Update to 5.010 (rhbz#2511545)
    - Reset the pending frozen-object state (thaw_av and ref_thawhash) at the
      start of every decode (Sereal GH#316)


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480336)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 5.007-1
changelog:
  - Update to 5.007 (rhbz#2498241)
    - Use $Config{ccflags} to compile zstd with, which should fix AIX


author: Paul Howarth <paul@city-fan.org> - 5.009-1
changelog:
  - Update to 5.009 (rhbz#2501695)
    - Only use Perl's $Config{ccflags} when building bundled zstd on AIX/IBM
      toolchains, or when SEREAL_ZSTD_USE_CONFIG_CCFLAGS is set; other platforms
      now use the normal zstd build flags again


author: Petr Pisar <ppisar@redhat.com> - 0.15-36
changelog:
  - Correct a license to "(GPL-1.0-or-later OR Artistic-1.0-Perl) AND
    BSD-3-Clause"
  - Quallify bundled(mt19937ar) RPM provide with a release date
  - Package the tests


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Fix version comparison logic for forward compatibility
  - Switch source URL from cpan.metacpan.org to www.cpan.org
  - Use %{make_build} and %{make_install}


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.46-10
changelog:
  - Add 0000-Fix-for-compilation-in-C23-mode.patch for GCC 15 compatibility,
    thanks to Paul Howarth.


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Paul Howarth <paul@city-fan.org> - 1.63-1
changelog:
  - Update to 1.63
    - Check attribute lengths (memory protection)
    - Minor code consistencies (not user-visible)
    - Dropped support for 5.6.x and 5.8.0; minimum perl is now 5.8.1
    - Fix special str setting consistency for types, undef_str and comment_str
    - Characters []:*/\ are not allowed in XLSX sheet names


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Unicode::UTF8 now allows noncharacters; they receive no special handling
      and are processed like any other code point
    - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
      (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
      reserved but should be allowed in interchange:
      https://www.unicode.org/versions/corrigendum9.html


author: Paul Howarth <paul@city-fan.org> - 0.65-1
changelog:
  - Update to 0.65
    - C99-compliant compiler is now required for Unicode::UTF8
    - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
      validation for non-ASCII input; this approach resulted in a 900% throughput
      improvement on English text and a 200% improvement on Swedish text compared
      with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Rewrote the UTF-8 validator using a shift-based DFA from
      https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
      up to 10x faster decoding compared with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.68-1
changelog:
  - Update to 0.68
    - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
      builds
    - Use Dist::Zilla for the distro
  - Package new LICENSE file
  - Drop hacks related to use of Module::Install, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Update the c-utf8 library code: improved GCC code generation, including
      with -O2, resulting in higher throughput
    - Use utf8_check_ascii with a 16-byte ASCII fast path


author: Paul Howarth <paul@city-fan.org> - 0.72-1
changelog:
  - Update to 0.72
    - read_utf8() now takes a single-pass fast path on PerlIO fast-gets layers,
      validating/copying/counting straight out of the layer buffer (up to ~11%
      faster on multibyte-heavy input; see benchmarks/)
    - Fixed read_utf8() on non-buffered handles stranding the trailing incomplete
      sequence that was read to satisfy the requested length: the pending bytes
      are now pushed back with PerlIO_unread() so the following read sees them,
      matching decode_utf8() when drained to end of file
  - Add patch to avoid trying to use 64-bit SSE2 on ix86 (GH#14)


author: Paul Howarth <paul@city-fan.org> - 0.74-1
changelog:
  - Update to 0.74
    - Added slurp_utf8($filename), which reads an entire file and returns its
      contents decoded from UTF-8 as a character string
    - Added support for older MSVC C compilers by using __inline in place of the
      C99 inline keyword on pre-Visual Studio 2015 builds
    - Fixed SSE2 detection to only enable the SIMD implementation on 64-bit x86
      targets, which prevents unsupported SSE2 code from being selected on 32-bit
      x86 builds (GH#14)


author: Paul Howarth <paul@city-fan.org> - 0.75-1
changelog:
  - Update to 0.75
    - Fixed slurp_utf8() leaking the file descriptor if a fatal "utf8" warning
      (e.g. warnings FATAL => 'utf8') was thrown while reading an ill-formed file


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Paul Howarth <paul@city-fan.org> - 1.46-1
changelog:
  - Update to 1.46
    Bug Fixes:
    - Preserve string nature of numeric-looking values in Dump; pure strings (POK
      only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
      (GH#199, GH#200)
    - Accept trailing commas in flow sequences and mappings ([a, b,] and
      {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
    Maintenance:
    - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
      prior to 5.24 in perldocker containers (GH#197, GH#198)
    - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
      exclude .claude/ from distribution


author: Paul Howarth <paul@city-fan.org> - 1.47-1
changelog:
  - Update to 1.47
    Security:
    - Fix four libsyck memory-safety CVEs reachable from the default
      YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
      - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
        caused by signed-char indexing of the decode table on !!binary input
      - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
        between the node and the anchors table
      - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
        newline scan during block-scalar parsing (incomplete-fix follow-on
        to CVE-2025-11683)
      - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
        anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
    - Harden syck_base64dec() to bounds-check each read so it cannot run past a
      non-NUL-terminated input buffer (defense-in-depth for callers passing raw
      buffers; GH#213)
    Bug Fixes:
    - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
      nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
      matching Dump (GH#204)
    - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
      Dump so they roundtrip with ImplicitTyping instead of reloading as plain
      strings (GH#201)
    Maintenance:
    - CI: add an AddressSanitizer job that builds the XS with
      -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
      libsyck memory-safety defects; de-pin the libasan version so it tracks the
      runner's GCC (GH#213)


author: Paul Howarth <paul@city-fan.org> - 3.0.2-1
changelog:
  - Update to 3.0.2 (rhbz#2309576)
    - Fix debugger test (GH#15)
    - Upgrade ppport.h from 3.42 to 3.68
    - Fix doc typo (GH#12)
    - Fix changelog typo (GH#14)


author: Petr Pisar <ppisar@redhat.com> - 0.36-31
changelog:
  - Correct a license tag to "GPL-1.0-or-later OR Artistic-1.0-Perl"
  - Package the tests
  - Stop applying a patch for replacing signal handlers unneeded since Perl
    5.14 (CPAN RT#49878)


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.18-15
changelog:
  - Adapt to perl 5.43.11 (define PERL_EXT to access reg_numbered_buff and
    reg_named_buff functions)


author: Michal Schorm <mschorm@redhat.com> - 2.2-1
changelog:
  - Rebase to 2.2
  - Cherry-pick PostgreSQL 18 support from upstream 'main' branch
  - Add 'libzstd-devel' to BuildRequires (PG 18 links against libzstd)


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 1.0.0-37
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix build with PHP 8.5.0alpha2
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 2.1.2-9
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0alpha2 from
    https://github.com/php-amqp/php-amqp/pull/595
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Remi Collet <remi@remirepo.net> - 1.0.3-19
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@remirepo.net> - 2.0.6~RC1-18
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix build with PHP 8.5.0alpha2 using patch from
    https://github.com/vitoc/gmagick/pull/59


author: Remi Collet <remi@fedoraproject.org> - 4.2.6-3
changelog:
  - fix incompatible pointer type FTBFS #2341063
    using patch from https://github.com/m6w6/ext-http/pull/143
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 3.2.16-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix for PHP 8.5.0beta2 using patch from
    https://github.com/igbinary/igbinary/pull/399
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/igbinary/igbinary/pull/398
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@remirepo.net> - 3.2.17~RC1-1
changelog:
  - update to 3.2.17RC1
  - add pie virtual provides
  - drop patches merged upstream
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@fedoraproject.org> - 3.7.0-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/Imagick/imagick/pull/690


author: Remi Collet <remi@remirepo.net> - 3.8.0-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/Imagick/imagick/pull/741
  - ignore 1 test failing with IM 7.1.2 reported as
    https://github.com/Imagick/imagick/issues/737


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@fedoraproject.org> - 1.0.7-1
changelog:
  - update to 1.0.7
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - fix build with PHP 8.4 using patch from
    https://github.com/php/pecl-encryption-mcrypt/pull/19


author: Remi Collet <remi@fedoraproject.org> - 1.0.9-1
changelog:
  - update to 1.0.9
  - re-license spec file to CECILL-2.1
  - modernize the spec file
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 8.2-12
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix for PHP 8.5.0RC1 using patch from
    https://github.com/websupport-sk/pecl-memcache/pull/120
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/websupport-sk/pecl-memcache/pull/118
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-12
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/krakjoe/pcov/pull/111


author: Remi Collet <remi@remirepo.net> - 2.2.3-8
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add patch for test suite with PHP 8.5 from
    https://github.com/m6w6/ext-pq/pull/53
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 6.2.0-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0alpha3 from
    https://github.com/phpredis/phpredis/pull/2677
  - add upstream patch for redis 8


author: Remi Collet <remi@fedoraproject.org> - 1.1.3-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - fix PHP 8.4 build using patch from
    https://github.com/php/pecl-xml-xmldiff/pull/2


author: Remi Collet <remi@remirepo.net> - 1.1.5-3
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0alpha2 from
    https://github.com/php/pecl-xml-xmldiff/pull/6


author: Remi Collet <remi@remirepo.net> - 2.2.5-2
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - add patch for PHP 8.5.0RC1 from
    https://github.com/php/pecl-file_formats-yaml/pull/95
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.1.3-34
changelog:
  - fix build with GCC 15 using patch from
    https://github.com/zeromq/php-zmq/pull/238
  - re-license spec file to CECILL-2.1
  - modernize the spec file


author: Remi Collet <remi@remirepo.net> - 1.1.3-36
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - fix build with PHP 8.5.0alpha2 using patch from
    https://github.com/zeromq/php-zmq/pull/240


author: Kevin Fenzi <kevin@scrye.com> - 2024.07-7
changelog:
  - use correct go-md2man in BuildRequires
  - Drop 32bit build as a leaf node since go-md2man doesn't exist there.


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Drop upstreamed C23 patch
  - Add patch to properly detect the secure_getenv function
  - Figure the License fields out all over again
  - Rename swi-prolog-nox to swi-prolog-cli
  - Combine swi-prolog-x into swi-prolog-win


author: Robert Scheck <robert@fedoraproject.org> 4.4-13
changelog:
  - Add patch to replace pipes.quote() from deprecated Python
    pipes (#2318435, thanks to Sean Carlos and Patrick Scheck)


author: Michal Schorm <mschorm@redhat.com> - 0.7.1-25
changelog:
  - Fix FTBFS with GCC 16: set 'CMAKE_CXX_STANDARD=17' to avoid C++20
    'concept' keyword clash in bear-engine headers (rhbz#2434925)
  - Fix FTBFS with Boost 1.88: replace removed 'boost/filesystem/convenience.hpp'
    and 'boost/filesystem/path.hpp' with the all-inclusive 'boost/filesystem.hpp'


author: Michal Schorm <mschorm@redhat.com> - 0.7.1-26
changelog:
  - Fix SPDX license: replace 'LicenseRef-Callaway-CC-BY-SA' with 'CC-BY-SA-3.0',
    add 'OFL-1.1' and 'CC-BY-3.0' for bundled fonts


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 24.004.60-22
changelog:
  - Fix crash in drm plugin close_input_source() (rhbz#2416551)
  - Fix wrong KBD layout when a user has configured multiple layouts
    (rhbz#2416197)
  - Fix race in fb_device_has_drm_device () causing frame-buffer plugin to
    sometimes load while drm plugin is already handling the display


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-7
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
  - sepolicy: Fix detection of writeable locations


author: Xavier Bachelot <xavier@bachelot.org> - 19-45
changelog:
  - Add conditional for {pipewire-,}jack-audio-connection-kit-devel
  - Narrow scope of globs for .so/.pc


author: Robert-André Mauchin <zebob.m@gmail.com> - 19.7.0-1
changelog:
  - Fix version number and refactor
  - The archive already used actually corresponds to version 19.7.0
  - Grab the archive from the official VCS repo: this allows us to use
    %{version} variable instead of a hardcoded archive name (useful if we
    want to use Packit later).
  - License reanalysis with scancode (no change)
  - Remove old cruft


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Petr Khartskhaev <pkhartsk@redhat.com> - 16.14-1
changelog:
  - Update to version 16.14
  - Resolves: rhbz#2477451
  - Resolves: rhbz#2499964
  - Resolves: rhbz#2499726
  - Resolves: rhbz#2499705
  - Resolves: rhbz#2489304
  - Resolves: rhbz#2487460
  - Resolves: rhbz#2484513
  - Resolves: rhbz#2484512
  - Resolves: rhbz#2484431
  - Resolves: rhbz#2482515
  - Resolves: rhbz#2499705


author: Nikola Davidova <ndavidov@redhat.com> - 1.5.2-2
changelog:
  - Spec file cleanups and improvements
  - Adopt %autorelease to match %autochangelog usage
  - Update Source0 URL to use proper GitHub archive format
  - Add explicit >= 16 version constraints to postgresql dependencies
  - Transition from %setup to %autosetup
  - Tighten wildcard for SQL extension files to prevent accidental inclusions
  - Abstract pg_server_config path into a macro and format header
  - Related: INFRASERV-1487


author: Filip Janus <fjanus@redhat.com> - 19beta1-1
changelog:
  - Initial build of postgresql 19 (beta1)
  - Based on postgresql18 package
  - Integrate pgaudit extension as subpackage
  - Support upgrade from PostgreSQL 18 only


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 100.0.399-1
changelog:
  - Update to v100.0.399
  - License change: "GPL-3.0-only AND Apache-2.0 AND MIT" -> "GPL-3.0-only AND MIT"


author: Kim Walisch <walki@fedoraproject.org> - 8.1-9
changelog:
  - S2_easy.cpp: Fix "#pragma omp master" deprecated in OpenMP 5.1
  - Fix incorrect release number in previous changelog entry


author: Kim Walisch <walki@fedoraproject.org> - 8.3-1
changelog:
  - fast_div.hpp: Improve x64 assembly
  - S2_easy.cpp: Bidirectional clustered easy leaves optimization
  - AC.cpp: Bidirectional clustered easy leaves optimization
  - AC.cpp: Cast to smaller type optimization
  - SegmentedPiTable.hpp: Use faster lightweight compression
  - SegmentedPiTable.cpp: Use faster lightweight compression
  - SegmentedPiTable.cpp: Do not interleave pi and bits lookup tables
  - SegmentedPiTable.cpp: Reuse primesieve::iterator object when initializing multiple segments
  - LoadBalancerAC.cpp: Tune single thread performance
  - Sieve.cpp: Optimize cross_off() and cross_off_count()
  - Sieve.cpp: Tune minimum counter distance
  - nth_prime_sieve.hpp: Optimize 128-bit division on x64 CPUs
  - util.hpp: Tune alpha_z for new AC algorithm
  - README.md: Update benchmark timings


author: Kim Walisch <walki@fedoraproject.org> - 8.4-1
changelog:
  - test/codegen: Add assembly code generation tests
  - doc/Hard-Special-Leaves-SIMD-Filtering.pdf: New math paper about the branchfree SIMD hard special leaves algorithm
  - Vector.hpp: Improve Vector exception safety
  - Sieve_count_simd.hpp: Tune AVX512 and ARM SVE kernels
  - D_avx512.hpp: Implement new branchfree AVX512 algorithm
  - D_arm_sve.hpp: Implement new branchfree ARM SVE algorithm
  - D.cpp: Implement new branchfree portable D algorithm
  - FactorTableD.hpp: Add direct data() access and improve 32-bit/64-bit support for the new D algorithms
  - popcnt.hpp: Add popcnt64_native() to bypass POPCNT runtime checks
  - multiarch_avx512_vpopcnt.cmake: Require AVX512BW and AVX512VL
  - cpu_arch_macros.hpp: Require AVX512BW and AVX512VL
  - cpu_supports_avx512_vpopcnt.hpp: Detect AVX512BW and AVX512VL
  - cpuid.cpp: Detect AVX512BW and AVX512VL
  - multiarch_arm_sve.cmake: Improve ARM SVE compile test for svcompact()
  - sve.cpp: Clarify ARM SVE detection requirements
  - Sieve.hpp: Update AVX512 attributes to use AVX512BW and AVX512VL
  - Sieve_count_start_stop.hpp: Remove count_algo_name() and update AVX512 attributes
  - Sieve_count_stop.hpp: Simplify count() algorithm selection
  - S2_hard.cpp: Remove obsolete SIMD-specialized thread code
  - pi_lmo_parallel.cpp: Remove obsolete SIMD-specialized thread code
  - pi_lmo5.cpp: Remove bit counting algorithm status output


author: Kim Walisch <walki@fedoraproject.org> - 8.5-1
changelog:
  - ci.yml: Add FreeBSD GitHub Actions CI tests
  - PiTable.cpp: Annotate OpenMP barrier with nowait
  - main.cpp: Set LLVM OpenMP environment variables to tune performance
  - CMakeLists.txt: Set WITH_DIV32=OFF by default to fix Clang-22 performance regression in the D algorithm
  - CMakeLists.txt: Add support for building primecount as a shared library (primecount.dll) on Windows using MSVC
  - CMakeLists.txt: Remove WITH_MSVC_CRT_STATIC option
  - FactorTable.hpp: Fix 64-bit integer overflow
  - CmdOptions.cpp: Validate alpha tuning factor command-line options
  - calculator.hpp: Fix std::tolower() undefined behavior
  - util.cpp: Improve get_time() precision
  - StatusS2.cpp: Support use in lockfree code
  - LoadBalancerS2.cpp: Use lockfree implementation, get rid of mutex
  - LoadBalancerAC.cpp: Use lockfree implementation, get rid of mutex
  - LoadBalancerP2.cpp: Use lockfree implementation, get rid of mutex
  - nth_prime.cpp: Use new nth_prime_sieve() implementation
  - nth_prime_sieve.cpp: Improved multi-threading
  - RiemannR.cpp: Add RiemannR(psi(x)) implementation
  - CmdOptions.cpp: Add --RiemannR-psi & --RiemannR-psi-inverse
  - README.md: Document --RiemannR-psi & --RiemannR-psi-inverse
  - doc/primecount.txt: Add --RiemannR-psi & --RiemannR-psi-inverse
  - doc/primecount.1: Add --RiemannR-psi & --RiemannR-psi-inverse
  - test/nth_prime_sieve.cpp: Update nth_prime_sieve() test
  - test/RiemannR_psi.cpp: New test for RiemannR(psi(x)) implementation


author: Jerry James <loganjerry@gmail.com> - 8.5-4
changelog:
  - Stop building for 32-bit x86
  - Remove obsolete ldconfig_scriptlets macro
  - Use macros for architecture families
  - Enable future use of AVX2/AVX512 with libdivide


author: Kim Walisch <walki@fedoraproject.org> - 8.6-1
changelog:
  - count_simd.hpp: Prevent loop unrolling to reduce branch mispredictions
  - Sieve.cpp: New sieving algorithm for small primes
  - Sieve_count_simd.hpp: Fix undefined behavior
  - Sieve.hpp: Use Vector<uint64_t> sieve to fix undefined behavior
  - Move the sieve source files into the new src/sieve directory
  - Fix LLVM/Clang -Wunused-template warning
  - Improve ARM SVE runtime dispatch
  - multiarch_arm_sve.cmake: Update the ARM SVE compiler support check to match


author: Kim Walisch <walki@fedoraproject.org> - 12.9-1
changelog:
  - CMakeLists.txt: Speed up build by removing compile dependencies
  - Move private header files from /include to /src
  - src/CMakeLists.txt: Update for private header files in /src
  - test/CMakeLists.txt: Update for private header files in /src
  - Vector.hpp: Get rid of std::is_trivial which is deprecated in C++26


author: Kim Walisch <walki@fedoraproject.org> - 12.10-1
changelog:
  - Fix undefined behavior in Bucket allocation
  - Enable ARM SVE for Mingw-w64 on ARM64
  - Improve Windows libprimesieve.dll support
  - BUILD.md: Add WebAssembly/Emscripten build instructions


author: Kim Walisch <walki@fedoraproject.org> - 12.11-1
changelog:
  - calculator.hpp: Update to version 2.0 with improved error handling
  - test/calculator.cpp: Add much more tests for calculator.hpp
  - PreSieve.cpp: Simplify SIMD runtime dispatching
  - CountPrintPrimes.cpp: Faster printing of primes to stdout
  - CmdOptions.cpp: Prevent multiple different --print options
  - CMakeLists.txt: Set CMAKE_VISIBILITY_INLINES_HIDDEN=ON by default
  - BUILD.md: Update MSVC build instructions


author: Kim Walisch <walki@fedoraproject.org> - 12.12-1
changelog:
  - CMakeLists.txt: Fix CMAKE_PROJECT_VERSION not defined
  - doc/Doxyfile.in: REVERSE workaround for Doxygen/LaTeX broken tables
  - Automated building Windows binaries using GitHub Actions CI
  - build_clang_x64.ps1: New Clang Windows x64 build script
  - build_clang_arm64.ps1: New Clang Windows ARM64 build script


author: Kim Walisch <walki@fedoraproject.org> - 12.14-1
changelog:
  - malloc_vector.h: Fix undefined behavior
  - calculator.hpp: Fix std::tolower undefined behavior
  - CpuInfo.cpp: Fix std::isdigit undefined behavior
  - CmdOptions.cpp: Fix 64-bit integer overflow in optionTimeout()
  - PrimeSieveClass.cpp: Reduce mutex contention
  - iterator-c.cpp: Fix use after free in primesieve_free_iterator()
  - config.hpp: Add MAX_CACHE_LINE_SIZE
  - macros.hpp: Add MAYBE_UNUSED
  - Vector.hpp: Improve Vector exception safety
  - GitHub Actions CI: Fix node 20 deprecation warning
  - CMakeLists.txt: On Windows rename static library to primesieve_static.lib #183
  - CMakeLists.txt: Remove WITH_MSVC_CRT_STATIC option


author: Kim Walisch <walki@fedoraproject.org> - 12.15-1
changelog:
  - Fix LLVM/Clang -Wunused-template warning
  - CpuInfo.cpp: Use primesieve::Vector instead of std::vector
  - nthPrime.cpp: Fix undefined behavior
  - util.hpp: Fix undefined behavior in littleendian_cast<T>()
  - PrimeGenerator_x86_avx512.hpp: Fix undefined behavior
  - CountPrintPrimes.cpp: Fix undefined behavior
  - popcount.hpp: Fix undefined behavior
  - PreSieve_arm_sve.hpp: Improve ARM SVE multiarch runtime dispatch
  - multiarch_sve_arm.cmake: Update the ARM SVE compiler support check to match
  - CMakeLists.txt: Fix Emscripten (WebAssembly) compiliation failure


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Julio Faracco <jfaracco@redhat.com> - 3.5.2-1
changelog:
  - Adds .NET counter integration (3.5.2)
  - Adds a custom core dumper (corex) (3.5.2)
  - Add support for RHEL10, Debian 13, Ubuntu 26.04, Fedora 43 and updated dependencies (3.5.1)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.9b-1
changelog:
  - Update to 1.3.9b
    - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
      CVE-2026-44331)
    - Additional fix for session management with OpenSSL 3.2.x or later, when
      using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
    - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
      expected (GH#2098)
    - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
      in mod_sftp (GH#2102)
    - SSH packet with empty payload triggered null pointer dereference in
      mod_sftp (GH#2104)
    - Bad DSA signatures could lead to out-of-bounds read of heap memory in
      mod_sftp (GH#2106)
    - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
      mod_sftp (GH#2108)
    - SFTP request payload length underflow calculation in mod_sftp
      (GH#2115, CVE-2026-53994)
    - Several modules failed to build using OpenSSL 4.0 (GH#2120)
  - Update mod_proxy to 0.9.7
    - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
    - Set the payload_len field before checking its value (GH#292)
    - Keep the SSH packet reading code in mod_proxy more in line with what is
      done in mod_sftp, for legibility (GH#294)
    - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
      (GH#295, GH#296)
    - Correct misspellings noted by codespell (GH#297)
    - Use clang-tidy to start polishing the codebase (GH#298)
    - Disable the Nagle algorithm by default on our TCP connections to back-end
      servers (GH#299)
    - Require OpenSSL for building (GH#249, GH#300)
    - Documentation fixes
    - Implement a limit on the number of EXT_INFO extensions we'll be willing to
      accept (GH#303)
    - Comparison of expected/provided MAC data should be done in a constant-time
      manner
    - Support PKCS11-stored private keys
    - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
      post-quantum SSH key exchange mechanisms (GH#306)
    - Add sanity check for SRV record lengths
    - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
      does not underflow
    - If we detect a bad DSA signature length, properly error out
    - Ensure that RSA/DSA signatures match their expected algorithm types, and
      avoid null pointer dereferences
    - Update to build against OpenSSL 4.x (GH#313)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-1
changelog:
  - Update to 1.3.9c
    - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
    - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
    - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
    - AdminControlsACLs for config, get actions not honored as they should be
      (GH#2163)
    - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
      buffers without bounds checking (GH#2166)
    - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
      to reject illegal characters (GH#2173)
    - SQL group name lookup concatenates client-provided group names without
      escaping (GH#2188)
    - Authenticated SFTP sessions can overflow the SFTP packet buffer
      (GH#2190, CVE-2026-63090)
    - Default Controls socket ACLs unintentionally allow all users access for
      sending Controls requests (GH#2210)
    - Exercise caution when reading the client-provided file size for SCP
      uploads, as it could possibly overflow our size type (CVE-2026-63091)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-3
changelog:
  - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
    /proc/self/root path prefix); this module disallows file accesses via procfs
    filesystems


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-6
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/boost-1.89.patch.


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jerry James <loganjerry@gmail.com> - 2.6.4-1
changelog:
  - Version 2.6.4
  - Drop upstreamed remove-redundant-ref patch
  - Drop upstreamed workaround for swig 4.3
  - Add patch for incompatible pointer types
  - Add patch for incompatible format specifiers


author: Mike FABIAN <mfabian@redhat.com> - 0.5.5-11
changelog:
  - Stop using deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/pyhunspell-0.5.5-build/BUILDROOT --prefix /usr macros
    rm -rfv /builddir/build/BUILD/pyhunspell-0.5.5-build/BUILDROOT/usr/bin/__pycache__

    Resolves: rhbz#2377393


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-5
changelog:
  - Import upstream patch to fix problem introduced by upgrade proj to v9.7.1
  - Remove old patch for proj v9.6.2 that is no longer needed.


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-11
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431977


author: Jerry James <loganjerry@gmail.com> - 1.5.0-1
changelog:
  - Version 1.5.0
  - Stop building for 32-bit x86
  - Update the License field to BSD-2-Clause
  - Use the pyproject declarative buildsystem
  - Do not build documentation for RHEL


author: Troy Curtis Jr <troy@troycurtisjr.com> - 0.27.1-1
changelog:
  - Update to 0.27.1.
  - Fixes rhbz#2349293
  - Drop the no longer needed 72.patch
  - Open up the rapidfuzz-cpp build version to allow build against 3.3.3
  - Update URL to the new rapidfuzz GitHub organization.


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - Update to new upstream release 1.27.1 (rhbz#2412929)
  - compatibility with mupdf 1.27.1
  - new method `Document.repair()`
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.2.2-1
changelog:
  - Update to new upstream release 1.27.2.2 (rhbz#2446026)
  - Works with mupdf 1.27.2
  - Improved get_textpage_ocr()
  - Various fixes


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.25.0-9
changelog:
  - Workaround to pass the tests, removed --mpl image comparison enforcement,
    as Matplotlib 3.11 and FreeType 2.14 in Fedora Rawhide generate slightly
    updated pixel outputs relative to cartopy 0.25 baseline images.


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.4.0-1
changelog:
  - Update to 5.4.0 (close RHBZ#2368139)
  - Drop the plotly dependency from the “vis” extra until the python-plotly
    package can be updated


author: Kevin Fenzi <kevin@scrye.com> - 3.3.0-1
changelog:
  - Update to 3.3.0. Fixes rhbz#2359810
  - Apply upsteam patch to allow building with python 3.15. Fixes rhbz#2424580


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Jerry James <loganjerry@gmail.com> - 0.9-39.20231204.a6987c8
changelog:
  - Rebuild for polymake 4.15
  - Add patch to fix polymake shell usage
  - Add patches to fix compiler warnings
  - Use the pyproject declarative buildsystem


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.0-10
changelog:
  - Drop the hypothesmith test dependency (omit fuzz tests)
  - Also drop hypothesis since it is also only used for fuzz tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.0-13
changelog:
  - F45+: Stop shipping sassutils.wsgi
  - This avoids a difficult-to-remove pkg_resources dependency, for
    https://fedoraproject.org/wiki/Changes/Setuptools_82+


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.47.0~rc1-1
changelog:
  - Update to 0.47.0~rc1 (close RHBZ#2447070)
  - Fixes compatibility with recent setuptools, including
    https://fedoraproject.org/wiki/Changes/Setuptools_82+.


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.2.0-1
changelog:
  - Update to 3.2.0 (final); Fixes RHBZ#2435482
  - Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)


author: Miro Hrončok <miro@hroncok.cz> - 7.0.0-8
changelog:
  - python3-psutil-tests: Add dependencies, don't package test_scripts
  - pytest is Recommended as it is optional but preferred
  - procps-ng is needed to run some tests


author: Michel Lind <salimma@fedoraproject.org> - 7.2.2-1
changelog:
  - Update to 7.2.2 upstream release
  - Resolves: rhbz#2396273
  - Refactor test runs
  - Drop the tests subpackage, removed in 7.2.0
  - Enforce that license file is shipped


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.9.12-1
changelog:
  - Update to 2.9.12 fixes rhbz#2414801 and rhbz#2459947
  - Spec cleanup and modernization per Fedora guidelines
  - Fix rpmlint spelling, non-executable scripts, and hidden files warnings


author: Nils Philippsen <nils@tiptoe.de> - 2.3.13-2
changelog:
  - Drop build dependency on unmaintained pytest-subtests on Fedora >= 45
  - Relax build dependency on setuptools_scm on Fedora >= 45


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 1.6.2-1
changelog:
  - Update to v1.6.2
  - Added support for the low level AEAD AES bindings.
  - Added support for crypto_core_ed25519_from_uniform.
  - Added support for free-threaded Python 3.14.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 2.14.0-2
changelog:
  - Enable tests, patching the suite to pass with qcint and FlexiBLAS.
  - Fix a stack buffer overflow in the Dirac-Hartree-Fock (SS|LL) J/K build.
  - Read the FCI test Hamiltonian in the native byte order, since the solvers
    reject the little-endian arrays h5py hands out on big-endian machines.
  - Loosen the DKS veff fingerprints, whose reference values depend on how libxc
    rounds the correlation potential in the fully polarized limit, and drop the
    EA-CCSD* assertion that divides by a vanishing left-right overlap.


author: Troy Curtis Jr <troy@troycurtisjr.com> - 3.14.1-1
changelog:
  - Update to 3.14.1.
  - Fixes rhbz#2357336
  - Update the URL to point to the new rapidfuzz GitHub organization.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to version 0.8.0; Fixes RHBZ#2415927
  - Don’t remove source files associated with unpackaged extras


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 5.12.0-1
changelog:
  - update to 5.12.0 (resolves rhbz#2458888)
  - fix building with newer ruamel-yaml
  - keep building as noarch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.1-1
changelog:
  - Update to 0.23.1 and patch for PyO3 0.29
  - PyO3 0.29 fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.0-1
changelog:
  - Update to 3.8.0 (close RHBZ#2492139)
  - Run tests with pytest, as upstream is gradually adopting it


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Danny Colin <contact@dannycolin.com> - 0.36.0-1
changelog:
  - New release 0.36.0
  - Update license information. We only need to keep MIT since the GPLed
    widgets have been removed from the repository.
  - Update pyproject_buildrequires declaration.


author: Manish Tiwari <matiwari@redhat.com> - 1.4.0-1
changelog:
  - Update to 1.4.0 version
  - Bundled whisper.cpp
  - Remove pybind11 to use system available pybind11-devel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main pyyhon package
  - New subpackages: root-package graf3d-glad, root-package net-curl,
    root-package tmva-sofie-parser-python, root-package tree-ml,
    root-package histv7util
  - Dropped patches: 2
  - New patches: 7


author: Panu Matilainen <pmatilai@redhat.com - 6.0.1-5
changelog:
  - Enable enforcing signature checking by default, make it easy to flip back
    https://fedoraproject.org/wiki/Changes/Enforcing_signature_checking_by_default


author: Panu Matilainen <pmatilai@redhat.com - 6.0.91-3
changelog:
  - Revert file trigger refactor for further investigation (#2492628)
  - Fix a silly thinko causing a %define regression (#2492483)


author: Antonio Trande <sagitter@fedoraproject.org> - 1:9.2.1-1
changelog:
  - Release 9.2.1
  - Fix License expression
  - Exclude static libraries
  - Add Python libraries as sub-packages
  - Add EXAMPLE files as sub-packages


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.24.0-1
changelog:
  - Thrift 0.24.0 GA, h/t to Justin Caratzas <jcaratza@ibm.com>
    https://src.fedoraproject.org/rpms/thrift/pull-request/7


author: Benjamin A. Beasley <code@musicinmybrain.net> - 26.03-3
changelog:
  - Backport several OpenEXRCore security fixes
  - Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493
  - Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534
  - Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505
  - Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501
  - Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497


author: Miro Hrončok <mhroncok@redhat.com> - 3.10.20-2
changelog:
  - Explicitly build with OpenSSL 3
  - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: Karel Volný <kvolny@redhat.com> 2.3.0-1
changelog:
  - new version 2.3.0 (rhbz#2403550)
  - see the upstream changelog at http://qmmp.ylsoftware.com/
  - removes mms plugin (moves to plugin pack)


author: Karel Volný <kvolny@redhat.com> 2.2.2-1
changelog:
  - new version 2.2.2 (rhbz#2355923)
  - update source URL
  - see the upstream changelog at http://qmmp.ylsoftware.com/


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.2-3
changelog:
  - drop unused yasm from BuildRequires:, part of:
    https://fedoraproject.org/wiki/Changes/DeprecateYASM


author: Karel Volný <kvolny@redhat.com> 2.3.0-1
changelog:
  - new version 2.3.0 (rhbz#2403551)
  - add MMS plugin (moved from qmmp)
  - add mpv plugin
  - see the upstream changelog at http://qmmp.ylsoftware.com/


author: Dmitry Belyavskiy <beldmit@gmail.com> - 6.11.1-4
changelog:
  - Backport of upstream OpenSSL4 commit
    https://github.com/qt/qtbase/commit/e806630e694d89f567cffa9c982d1f471089ecd8


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Dominik Mierzejewski <dominik@greysector.net> - 1.18.5-2
changelog:
  - Use generic dependency names
  - Run tests using standard macro and stop ignoring failures
  - Skip test_bsu which requires network connectivity
  - Add missing build dependency on libv4l
  - Drop non-existent CMake option
  - Use SPDX expression in License: tag


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.0.20-2
changelog:
  - Switched to autotools build system (upstream preferred)
  - Dropped useless subpackages
  - Fixed requirement
    Resolves: rhbz#2355068


author: Michal Schorm <mschorm@redhat.com> - 0.7.2-45
changelog:
  - Fix SPDX license tag: 'LicenseRef-Callaway-LGPLv2+' -> 'LGPL-2.1-or-later AND MIT'
  - MIT: Mesa platform-detection macros in 'include/GL/glc.h' (shipped in -devel)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.11.0-1
changelog:
  - Update to v0.11.0
  - Fix license file not being installed
  - Fix .so.0 file being put in -devel package
  - Fix running the test suite in %check
  - Add help2man-generated man pages


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Sumit Bose <sbose@redhat.com> - 0.17.1-14
changelog:
  - Various fixes for issues found by static code scanners
  - Systemd security setting and CacheDirectory
  - use 'dnshostname' with net ads join
  - Install dbus policy in /usr/share, not /etc


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: mhorky <mhorky@redhat.com> - 1:0.3.9-2
changelog:
  - Update RPM dependencies
  - insights-client is has never been available in Fedora.
  - yggdrasil-worker-package-manager will not be shipped in RHEL 11, we are
    dropping it from Fedora as well.


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-1
changelog:
  - Modernize BuildRequires and License sections
  - Remove deprecated intltool and dbus-glib-devel
  - Update GTK and other dependencies to modern versions
  - Use SPDX license tag and HTTPS for URLs
  - Add missing build dependencies


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-2
changelog:
  - Modernize %install and %files sections
  - Switch to appstreamcli validate
  - Use more specific file paths in %files
  - Add comments and use modern macros


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-3
changelog:
  - Fix build dependencies and locale directories
  - Replace libmagic-devel with file-devel
  - Fix Armenian locale directory name (hye -> hy)
  - Add empty %check section to satisfy rpmlint


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-4
changelog:
  - Fix locale directory and add %check section
  - Rename Armenian locale directory from hye to hy
  - Add empty %check section to satisfy rpmlint


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-1
changelog:
  - Draft release
  - Update to new maintained fork at Codeberg:
    https://codeberg.org/schilytools/schilytools


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-2
changelog:
  - Bump release to include rmt package as requested
  - Added provides/obsoletes
  - Fixed up package versioning to avoid the use of epoch
  - Switch to autorelease


author: David Wang <cryptic.triangles@gmail.com> - 2024.03.21-3
changelog:
  - Fix bogus date warning in spec
  - Added missing generaldocs macro for rmt
  - Unsuccessfully tried fixing check. Leaving it disabled as Fedora Sources 
    variant presently does not have this


author: Petr Khartskhaev <pkhartsk@redhat.com> - 2024.03.21-4
changelog:
  - Update license info
  - Replace spax and scpio subpackages with Provides due to them being compiled as symlinks
  - Re-add rmt's epoch
  - Re-add linker flags and add default rpm flags to make
  - Make tests functional by adding LD_LIBRARY_PATH and enable them
  - Re-add post and preun scriptlets for alternatives
  - Change rmt's location to bin instead of sbin in a cleaner way
  - Exclude 32bit architectures since the build was failing on them
  - Convert star 5 manfile to UTF-8


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Jerry James <loganjerry@gmail.com> - 5.4.5-41
changelog:
  - Fix FTBFS due to ncurses change
  - Update license to BSD-3-Clause
  - Stop building for 32-bit x86
  - Build in C17 mode to avoid FTBFS with GCC 15


author: Robert Scheck <robert@fedoraproject.org> 9.8-3.git20260609
changelog:
  - Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
    (portable) and 829f183 (openbsd) for OpenSSL 4.0 support


author: Aaron Merey <amerey@redhat.com> - 5.9.0-8
changelog:
  - Backport upstream fix for MADV_GUARD_INSTALL/REMOVE (kernel >= 6.13)
    to unbreak recording of multi-threaded programs (upstream commit 34ff3a70).


author: Aaron Merey <amerey@redhat.com> - 5.9.0-9
changelog:
  - Fix FTBFS on rawhide (gcc 16, glibc 2.43+) by including <limits.h>
    in src/test/util.h, which several test files rely on for INT_MAX
    and other limit macros.


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.0.6-36
changelog:
  - Update to Ruby 4.0.6
    Resolves: rhbz#2499884
  - Resolves: CVE-2026-42245 (rhbz#2484324)
  - Resolves: CVE-2026-42246 (rhbz#2492090)
  - Resolves: CVE-2026-42256
  - Resolves: CVE-2026-42257
  - Resolves: CVE-2026-42258 (rhbz#2487319)
  - Resolves: CVE-2026-47240 (rhbz#2498917)
  - Resolves: CVE-2026-47241
  - Resolves: CVE-2026-47242


author: Michal Schorm <mschorm@redhat.com> - 0.5.5-9
changelog:
  - Re-enable test cases, the FTBFS due to mariadb-connector-c-3.4.1-1.fc42 was fixed in
    mariadb-connector-c-3.4.3-10
    Related: rhbz#2323148


author: Björn Esser <besser82@fedoraproject.org> - 0.6.1.2-1
changelog:
  - New upstream release
  - Add patch with last upstream commits
  - Set GCC in C99 mode explicitly
  - Build devel package archful
  - Drop explicit Requires and Provides


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.19.4-1
changelog:
  - 1.19.4
  - Fixes CVE-2026-57234 CVE-2026-57235 CVE-2026-57236
  - Fixes CVE-2026-57434 CVE-2026-57435 CVE-2026-57436 CVE-2026-57437 CVE-2026-57438


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.10.0-35
changelog:
  - Adjust to mesa 24.2.2 change that swrast with dril does not expose
    accum buffers anymore
  - Adjust test result message with recent mesa


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.4.2-9
changelog:
  - Backport upstream change for updating SSL certs again for testsuite
  - Backport upstream fix for some OpenSSL method removal for ruby4_0


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.2-1
changelog:
  - Update to 0.9.2
  - Unpin sev, reqwest, x509-parser, and asn1-rs deps. from exact versions
  - Allow x509-parser 0.18 and asn1-rs 0.7


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.0-3
changelog:
  - 2377132 - sane-backends: "scanimage --device=test --batch-count=2" hangs: Turns on unsafe asynchronous cancellation


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-32
changelog:
  - Fix buffer overflow in CIMMethod header handling
  - Fix buffer overflow in CIMObject namespace handling


author: Tom Callaway <spot@fedoraproject.org> - 2.2.2-1
changelog:
  - update to 2.2.2
  - fix hardcoded versioning (with sed, not patch)
  - fixup .pc file
  - fix old minimum cmake version which breaks the build


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Remi Collet <remi@remirepo.net> - 1:2.0.3-6
changelog:
  - fix build with GCC 15 using patch from
    https://github.com/sclorg/scl-utils/pull/57
  - FTBFS rhbz#2385622 workaround to rhbz#2386537


author: Remi Collet <remi@remirepo.net> - 1:2.0.3-8
changelog:
  - raise cmake minimum version to 3.5
  - use arch-agnostic test for packaging /usr/lib64 (Joe Orton, PR #2)


author: Michal Schorm <mschorm@redhat.com> - 44-43
changelog:
  - Fix SPDX license tag: replace 'LicenseRef-Callaway-CC-BY-SA' with
    'CC-BY-SA-3.0' based on upstream license text


author: Dave Love <loveshack@fedoraproject.org> - 10.0-1
changelog:
  - Update to version 10.0 (resolves #2493585)
  - BR otf2 >= 3.2
  - Remove patch
  - Add AMD GPU support
  - Work around libbfd bug


author: Christian Krause <chkr@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 (#2330987)
  - Fix FTBFS (#2341334)
  - Remove patch already included upstream
  - Add BR: pipewire-jack-audio-connection-kit (needed for fluidsynth)


author: Christian Iseli <christian.iseli@epfl.ch> - 5.1-1
changelog:
  - New upstream version
  - Fix FTBFS bugzilla 2385624
  - Update license definition according to upstream


author: Jakub Martisko <jamartis@redhat.com> - 4.9-6
changelog:
  - The manpage should no longer mention whether the SELinux is enabled/disabled on the system
  - It was based on the build system anyway
  - Resolves: rhbz#2396649


author: Jakub Martisko <jamartis@redhat.com> - 4.9-8
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Related: RHEL-144026


author: Jakub Martisko <jamartis@redhat.com> - 4.10-1
changelog:
  - Update to 4.10
  - Remove the --without-included-regex build option
    There were some fixes regarding the backrefences in the new release. 
    Removing the option fixed a testsuire failure in the backref test.


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.49.13-1
changelog:
  - Update to 1.49.13
  - Remove ExcludeArch: ppc64le since it is now fixed:
    https://github.com/Drive-Trust-Alliance/sedutil/issues/489


author: Peter Robinson <pbrobinson@gmail.com> - 0.2.1-1
changelog:
  - Update to 0.2.1
  - Fixes CVE-2026-1260 (rhbz#2432139 rhbz#2432139)
  - Minor package updates for new rev


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-5
changelog:
  - Update GPL2 license texts to the latest version
  - Limit RPC request size in RequestReceiver to prevent memory exhaustion


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-122982)
  - rescan-scsi-bus.sh: Replace 'which' with built in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix missing output fields in --export format (RHEL-119246)
  - sg_inq: re-add Unit serial number field (RHEL-119246)


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304308)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0 (rhbz#2316879)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323726)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329755)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 (rhbz#2359282)
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Michal Schorm <mschorm@redhat.com> - 1.0-40
changelog:
  - Fix FTBFS with GCC 16 due to 'std::abs(__int128)' redefinition (BZ#2435106)
  - Drop '-D__STRICT_ANSI__' flag from Makefile: it conflicts with GCC 16 internal
    handling of '__int128' overloads in '<cstdlib>' and is not needed by the source


author: Michal Schorm <mschorm@redhat.com> - 1.0-41
changelog:
  - Fix annocheck failures: pass '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  ' via LDFLAGS to the linker


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.11.0-28
changelog:
  - Convert the spec from tabs to spaces
  - Refactor and update the spec to follow the latest packaging guidelines


author: Michal Schorm <mschorm@redhat.com> - 0.42c-11
changelog:
  - Pass '-Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  ' to the Makefile to fix annocheck 'bind-now' and 'pie'
    hardening failures
  - Mark 'sjasm.txt' as 'Zlib' instead of '%doc' (contains Zlib license text)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.70.0-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

  - Tue Aug 27 2024 Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-3
  - Fixed initialization regression that caused compat tree never be populated


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f45-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Than Ngo <than@redhat.com> - 4.14.3-30
changelog:
  - Fix rhbz#2381451, FTBFS with change proposal CMake 4.0
  - Fix rhbz#2381128, FTBFS with change proposal CMake: Use ninja generator by default
  - Fix rhbz#2381525, FTBFS with change proposal CMake drop non-standard variables
  - Fix rhbz#2504679, FTBFS in Fedora rawhide/f45


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Pavol Žáčik <pzacik@redhat.com> - 2.7.0-0.1.rc1.4
changelog:
  - Bring back the patch that prevents access to global C++ variables
    once they are destroyed (with a minor adjustment).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.7.0-1
changelog:
  - Update to upstream release 2.7.0
  - Skip SHA-1 signing, DSA, and single DES tests when not supported
  - Fix fork tests to properly terminate child processes
  - Enable command-line test suite selection in p11test


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Peter Hanecak <hany@hany.sk> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - build_type_safety_c lowered to work around several "incompatible pointer type"
    errors


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.3.1-1
changelog:
  - Update to 1.3; Fixes: RHBZ#2379679
  - Backport upstream commit to use the systemd journal; Fixes: RHBZ#2375403


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.3-14
changelog:
  - Remove macros obsolete in Fedora
  - Use CMake RPM macros to build and install
  - Build and run the tests
  - Do not glob over the .so version
  - Test with the system gtest instead of the bundled one


author: Martin Gansser <martinkg@fedoraproject.org> - 1:2.4.1-1
changelog:
  - Update to 2.4.1
  - Add 9ae2b6cc83ce5cdaec58cb4d2aed2fb5ae60b7c8.patch to restore FindSOLID.cmake
    so that the FreeSOLID library can be found again


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Emir Akdag <infraw.linux@proton.me> - 1.5.3-1
changelog:
  - Update spoofdpi to 1.5.3
  - Update to 1.5.3 to fix CVE-2026-27145
  - Add missing license for go-localereader
  - Fix build directory case sensitivity issue
  - Resolves: rhbz#2494220, rhbz#2494389


author: Artem Polishchuk <ego.cordatus@gmail.com> - 0.274-8
changelog:
  - Modernize Cmake
  - https://fedoraproject.org/wiki/Changes/CMake_ninja_default
  - https://fedoraproject.org/wiki/Changes/CMake_drop_install_vars


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.1-1
changelog:
  - rebuilt for version 2.3.1 fixes rhbz#1856025 rhbz#2454296 rhbz#2128374
  - modernized packaging, enabled generator, templates, and libev support


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Michael Bauer <mb.bauer@siemens.com> - 0.9.0-1
changelog:
  - Version 0.9.0
  - fix(git-cred-helper): ask for consent if needed when acquiring token by
    @fmoessbauer in #43
  - chore(sso-mib-tool): fix build without libjwt by @yselkowitz in #41
  - chore(doc): Added project's license information to meson.build by
    @fmoessbauer in #39
  - chore: remove debian packaging as package is in official debian by
    @fmoessbauer in #38


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Clark Williams <williams@redhat.com> - 1.28.1-1
changelog:
  - stalld: bump version to 1.28.1
  - tests: Fix journal flush race in logging destinations test
  - Merge remote-tracking branch 'wander/dev' into devel
  - stalld: fix format string type mismatch in set_cpu_affinity
  - stalld: fix error return in queue_track_get_cpu
  - stalld: fix snprintf truncation check in is_runnable
  - stalld: fix missing null-termination in is_runnable
  - stalld: guard nextline() returns in sched_debug parsing
  - stalld: remove NULL deref in fill_waiting_task error handler
  - stalld: fix type mismatches in detect_task_format
  - stalld: fix format string type mismatch for time_t
  - stalld: use CLOCK_MONOTONIC for starvation detection
  - stalld: remove async-signal-unsafe calls from signal handler
  - stalld: fix data race on config_buffer_size
  - stalld: fix signed integer overflow in set_reservation
  - stalld: check pthread_create return in conservative_main
  - stalld: check pthread_create return in aggressive_main
  - stalld: fix buffer underflow in sched_debug_get
  - stalld: fix buffer underflow in read_proc_stat
  - stalld: fix uninitialized buffer use in find_debugfs_mount_point
  - stalld: fix inverted DAEMON_UMASK value
  - stalld: fix data race on thread_running
  - bpf: Replace linear task scan with hash map
  - tests: Fix async-signal-unsafe handler
  - tests: Reduce timing and replace sleeps with event waits
  - tests: Remove redundant sleeps after start_stalld
  - tests: Drop redundant sleeps in test_pidfile
  - tests: Replace init sleeps in test_affinity
  - tests: Reduce starvation_gen durations
  - tests: Reduce default wait timeouts
  - tests: Extract wait_for_process_exit helper
  - tests: Introduce and adopt process helpers
  - tests: Remove dead code after making fail() fatal
  - tests: Abort immediately on test failure
  - tests: Remove if-wrappers around assert calls
  - tests: Replace wait conditionals with asserts
  - tests: Introduce and adopt assert_success() helper
  - tests: Remove weak, redundant, and assertion-free test blocks
  - tests: Introduce and adopt assert_log_contains() helper
  - tests: Remove redundant pkill from cleanup
  - tests: Add idle CPU skipping assertion
  - tests: Fix CPU selection grep substring matches
  - tests: Add assertions to SCHED_OTHER restoration test
  - chore: Remove legacy test infrastructure and stale docs
  - tests: Fix repeated log match finding same line
  - tests: Fix subshell swallowing test results
  - tests: Fix boost verification in runtime and duration tests
  - tests: Introduce assert_stalld_rejects() helper
  - tests: Consolidate and adopt init_functional_test()
  - tests: Fix task exit timing in test_boost_restoration
  - tests: Introduce find_starved_child() helper
  - tests: Introduce starvation and boost asserts
  - tests: Introduce cleanup_scenario() helper
  - tests: Introduce test_section() helper
  - stalld: Reject --force_fifo in single-threaded mode


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Tom Callaway <spot@fedoraproject.org> - 8.0.3-3
changelog:
  - lua-devel is no longer needed, suricata is getting lua support from a bundled rust crate
  - this seems weird and wrong, but whatever
  - added libunwind-devel as BR since the configure script wants it (and Fedora has it)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Josue Hernandez <josherna@redhat.com> - 6.04-0.36
changelog:
  - Update zlib version to zlib-1.2.11
  - Resolves: CVE-2022-37434 CVE-2018-25032 CVE-2016-9840 CVE-2016-9843


author: Peter Czanik <peter@czanik.hu> - 4.12.0-1
changelog:
  - update to 4.12.0
  - remove openssl 4.0 patch (part of the 4.12.0 release)
  - comment out secure logging related files (feature
    disabled by default by upstream)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.9-1
changelog:
  - update upstream URL
  - add tmpfiles configs for Image Mode
  - rebase to the latest upstraem release (rhbz#2419756)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 261.2-1
changelog:
  - Version 261.2
  - a bugfix release with correctness and security-relevant fixes too. 276
    patches, so too much to describe here.


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Jonathan Wright <jonathan@almalinux.org> - 1.98.4-1
changelog:
  - update to 1.98.4
  - Allow nftables to satisfy firewall dependency in lieu of iptables rhbz#2453924
  - Fix 45s timeout on shutdowns in certain cases rhbz#2440864
  - Fixes CVE-2026-34165 rhbz#2454571
  - Fixes CVE-2026-33762 rhbz#2454572


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream fix for savannah bug 65838, commit 1e6ce98e (fedora#2427654)
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS) (fedora#2389217)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582 (fedora#2380007)


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.9.6-0.1
changelog:
  - Snapshot of upcoming upstream release 0.9.6
  - New upstream source at github
  - Removed patches and hacks merged upstream
  - Installs a default systemd unit tayga.service that points to a default config
    (similar to Debian and upstream)
  - Pulled support for older EL releases


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.15-3
changelog:
  - Fixed SPDX license case, it was according to the SPDX standard, but
    now it should be more easy to validate with some XML validators


author: Peter Bieringer <pb@bieringer.de> - 7.6-110
changelog:
  - add patch to fix errors on GCC 15 (#2341423)
  - add patch to fix some warnings
  - change URLs to GitHub repository


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.18.4-23
changelog:
  - Patch for libxml2 2.12.0 API constness change
  - Patch for variable name confusion with errno
  - Use libsoup-3, linking with both libsoup-2 and -3 is not supported


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.13.16-42
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (Zbigniew Jędrzejewski-Szmek)
  - Fix GCC build, compiling with -std=gnu17


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3-3
changelog:
  - apply following patches from RHEL 10
    - tftp: propagate exit codes in non-interactive mode
    - fix creation of /var/lib/tftpboot on bootc systems


author: Peter Robinson <pbrobinson@gmail.com> - 2.5.12-1
changelog:
  - Update to 2.5.12
  - Enable aarch64 support
  - Drop (and obsolete) monitor subpackage (removed upstream)
  - Minor associated cleanups


author: Neal Gompa <ngompa@fedoraproject.org> - 2.5.12-2
changelog:
  - Backport fixes to allow thermald to work on "non-mobile platforms"
    (rhbz#2512758)
  - Modernize spec file


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-4
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259
          CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
          CVE-2026-50264


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 0.34.0-2
changelog:
  - Remove older patches
  - QEMU is no longer broken for the cases we need.
  - The optional package suggestion was never fully implemented, so drop it
    for now.


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.3-2
changelog:
  - Backport upstream CVE fixes
  - Fixes rhbz#2452969 CVE-2026-3945
  - Fixes rhbz#2455913 CVE-2026-31842
  - Run upstream test suite


author: Miro Hrončok <mhroncok@redhat.com> - 1:8.4.3-44
changelog:
  - Drop needles runtime requirements on tk-devel and tcl-devel
  - Make the package installable with tk/ctl 8 as well as tk8/tcl8 compat packages
    Resolves: #2337797


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Stewart Smith <trawets@amazon.com> - 1.4.48-29
changelog:
  - Update project and source URLs.
  - Update description to include the author's suggestions of successors


author: Dimitris Soumis <dsoumis@redhat.com> - 1:2.0.14-2
changelog:
  - The old description is from the 1.x era when tomcat-native provided broad
    APR integration. In 2.x it's focused solely on TLS/OpenSSL.


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.11-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-9-11/21786 bz#2483769


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-5
changelog:
  - Fix tests for F41 https://bugzilla.redhat.com/show_bug.cgi?id=2301337
  - Revert exclude broken test on s390


author: Adrian Freihofer <adrian.freihofer@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0
  - Drop sha1/sha256 Fedora patches (already upstream in 1.3.0)
  - Replace downstream OpenSSL 4.0 patch with upstream cherry-pick (6dcc3b2)


author: Vincent Mihalkovic <vmihalko@redhat.com> - 2.3.1-1
changelog:
  - update to 2.3.1, switch source to GitLab unix-tree archive
  - refresh patches for 2.3.1 (tree-static-analysis.patch tree.c hunk)


author: Akira TAGOH <tagoh@redhat.com> - 1.9.0-1
changelog:
  - New upstream release.
    Resolves: rhbz#2347165
  - Disable OpenSSL support.
    OpenSSL plugin isn't packaged. should be no harm.


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Packit <hello@packit.dev> - 0.19.8-1
changelog:
  - preload: Fix libc name on alpha architecture (Thanks Michael Cree!)
  - preload: Check dlopen(libc) failure
  - ioctl: Fix array.resize(0) to work with gcc 16 static analyzer
  - tests: Fix Gentoo tests, re-enable them in CI


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 16.0.01-1
changelog:
  - Version 16.0.01
  - License tag is updated and converted to proper SPDX
  - The ttf subpackage is dropped and will be removed from systems


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-4
changelog:
  - [cleanup] Drop obsolete MySQL-5 driver config from odbcinst.ini
  - [bugfix] Own /usr/lib/unixODBC/ directory for ODBC connector plugins
  - [bugfix] Update MariaDB driver path in odbcinst.ini
  - [workaround] Remove broken Setup/Setup64 entries from PostgreSQL driver
    config
  - [bugfix] Update PostgreSQL driver path in odbcinst.ini


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-6
changelog:
  - [bugfix] Fix MySQL driver path in odbcinst.ini
  - [bugfix] Fix FreeTDS driver path in odbcinst.ini (rhbz#2453060)
  - Drop multilib-rpm-config usage on RHEL


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-7
changelog:
  - [refactor] Use consistent '/usr/lib' macro syntax in '%files devel'
  - [enhancement] Add 'MDBTools' driver entry to 'odbcinst.ini'
  - [enhancement] Add missing 'Suggests' for all ODBC driver packages
  - [bugfix] Fix incorrect 'FileUsage' values in 'odbcinst.ini'
  - [bugfix] Remove dead 'Port' key from [FreeTDS] driver definition
  - [cleanup] Drop obsolete 'keep-typedefs.patch'
  - [design change] Enable ODBC driver search path, use bare library names in
    'odbcinst.ini'


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-11
changelog:
  - [cleanup] Remove dead 'Conflicts: iodbc' from spec
  - [bugfix] Use 'mkdir -p' for ODBC plugin directory creation
  - [Fedora 45 Change] Add drop-in directory infrastructure for ODBC driver registration


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-4
changelog:
  - [cleanup] Drop obsolete MySQL-5 driver config from odbcinst.ini
  - [bugfix] Own /usr/lib64/unixODBC/ directory for ODBC connector plugins
  - [bugfix] Update MariaDB driver path in odbcinst.ini
  - [workaround] Remove broken Setup/Setup64 entries from PostgreSQL driver
    config
  - [bugfix] Update PostgreSQL driver path in odbcinst.ini


author: Michal Schorm <mschorm@redhat.com> - 2.3.14-7
changelog:
  - [refactor] Use consistent '/usr/lib64' macro syntax in '%files devel'
  - [enhancement] Add 'MDBTools' driver entry to 'odbcinst.ini'
  - [enhancement] Add missing 'Suggests' for all ODBC driver packages
  - [bugfix] Fix incorrect 'FileUsage' values in 'odbcinst.ini'
  - [bugfix] Remove dead 'Port' key from [FreeTDS] driver definition
  - [cleanup] Drop obsolete 'keep-typedefs.patch'
  - [design change] Enable ODBC driver search path, use bare library names in
    'odbcinst.ini'


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Zipinfo: remove the extra %c that cause invalid reads
  - Zipinfo: fix the whitespace formating of the help message
  Related: RHEL-59972


author: Jakub Martisko <jamartis@redhat.com> - 6.0-71
changelog:
  - Port some RHEL downstream patches to fedora
  - Fixes for RHEL-86228, RHEL-45997 + some issues found by coverity and other scans
  - Fixes for CVE-2022-0529 and 2022-0530 (Thanks Stewart Smith for the Heads up about these)


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Michal Hlavinka <mhlavink@redhat.com> - 1.114-14
changelog:
  - drop console.apps files as pam no longer uses those and pam_console
    was dropped https://fedoraproject.org/wiki/Changes/RemovePamConsole


author: Michael Jeanson <mjeanson@efficios.com> - 0.15.0-1
changelog:
  - New upstream release
  - The 'signal' flavour of liburcu was removed upstream
  - Enable compiler atomics


author: Charles R. Anderson <cra@alum.wpi.edu> - 0.5.20^20241111git7ef9e26-2
changelog:
  - Rebuilt for Tcl/Tk 9.0 (#2337805)
  - Patch to always set -D_REENTRANT since Tcl 9.0 no longer sets TCL_THREADS,
    and add -std=gnu17 to CFLAGS since GCC 15 changed to gnu23 which fails.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@remirepo.net> - 9.1.1-1
changelog:
  - Valkey 9.1.1 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639
  - own /etc/logrotate.d as its owner is an optional dependency
  - refresh the documentation
  - drop OpenSSL 4 patch merged upstream


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1
changelog:
  - update to 1.37.1 rhbz#2510094
  - Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
  - Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Jeremy Sanders <jeremy@jeremysanders> - 4.2.1-1
changelog:
  - Update to new Python packaging guidelines
  - Update appdata location to _metainfodir
  - Copy icons rather than symlink
  - Remove line for versioned docdir
  - Remove examples from documentation
  - Cleanup dependencies and build dependencies
  - Update to Veusz 4.2.1


author: Carl George <carlwgeorge@fedoraproject.org> - 2.8.0-9
changelog:
  - Port to new golang packaging guidelines
  - Use vendor tarball for build dependencies
  - Remove golang-github-vrothberg-vgrep-devel subpackage rhbz#2446694


author: Alex Tereschenko <frozen.and.blue@gmail.com> - 7.2.12-1
changelog:
  - Update Virtualbox Guest Additions to 7.2.12 (rhbz#2489301)
  - Switch to building with nasm instead of yasm


author: Alex Tereschenko <frozen.and.blue@gmail.com> - 7.2.14-1
changelog:
  - Update Virtualbox Guest Additions to 7.2.14 (rhbz#2503394)
  - Drop i686 architecture builds as no longer relevant (rhbz#2499679)
  - Correct Bugzilla record number reference in the changelog for 7.2.12 update (rhbz#2499698)


author: Petr Pisar <ppisar@redhat.com> - 1.2.4-41
changelog:
  - Adapt to GCC 15 (bug #2341514)
  - Correct a license tag to "BSD-3-Clause AND MIT-open-group AND SMLNJ"


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3^20241114.git11e15a1-2
changelog:
  - Fix issues with /usr/bin/ and /usr/sbin/ merge (#2363531)
  - Always use consolehelper, implicitly allowed for root,
    remove consoleuser sub-package
  - Remove pam_console.so from vpnc.pam (not available anymore)


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Major Hayden <major@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Fixes CVE-2025-11065: go-viper/mapstructure updated to v2.4.0
  - Resolves: rhbz#2390882, rhbz#2399729, rhbz#2397062


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-3
changelog:
  - use upstream way of running tests
  - run unit tests
  - re-enable most tests on s390x now that they pass
  - skip failing test on ppc64le and s390x with GCC 15


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.37-1
changelog:
  - update to 1.0.37 (resolves rhbz#2349655)
  - skip new failing tests on i686 and ppc64le
  - re-enable wasm2c/spec/float_exprs.txt test, now that GCC 15 is fixed


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.8.3-1
changelog:
  - update to 1.8.3 spec cleanup and modernization fixes rhbz#2505136 waffle:
    FTBFS in Fedora rawhide/f45


author: hydai <hydai@hyd.ai> - 0.17.0-1
changelog:
  - Release 0.17.0
  - Bump C API library version (capi_version) to 0.1.1
  - Drop Patch0: Poller context refactor merged upstream in 0.17.0
    (WasmEdge/WasmEdge#4509)


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Neal Gompa <ngompa@fedoraproject.org> - 0.5.0-3
changelog:
  - Refresh build dependencies to match actual build requirements
  - Refresh free codec patch
  - Drop ffmpeg 7 compatibility patch as its included in this release


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Joe Doss <joe@solidadmin.com> - 1.0.20260223-1
changelog:
  - Update to 1.0.20260223
  - syncconf: account for persistent keepalive removed from config file
  - config: preserve const correctness
  - wg-quick@.service: add deps on wg-quick.target
  - wg-quick: linux: do not unnecessarily set sysctl
  - wg-quick: use addconf instead of setconf
  - wg-quick: linux: deal with resolvconf migration more gracefully
  - wg-quick: pass on # comments to {Pre,Post}{Up,Down}
  - syncconf: account for psks removed from config file
  - wg-quick: linux: use smallest mtu, not largest


author: Shawn W Dunn <sfalken@opensuse.org> - 0.7-1
changelog:
  - Update to 0.7
  - Add 0001-fix-config-path.patch to put configs in the correct place
  - Add 0002-remove-google-chrome.patch to remove Google Chrome and enable
    Firefox as default browser
  - Update to libbase-aa0da7a355b04b1dd8572a94261a0b0c497e1a85
  - Change Recommends: to firefox, foot, and wdisplays for functionality


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: Michal Schorm <mschorm@redhat.com> - 1:1.0.4-2
changelog:
  - Fix SPDX license expression: 'GPL-2.0-only AND CC-BY-3.0 AND CC-BY-SA-3.0'
  - 'ogg_to_pcm.c' is GPL-2.0-only (from vorbis-tools), not GPL-2.0-or-later


author: Michel Lind <salimma@centosproject.org> - 0.4-1
changelog:
  - Update to version 0.4
  - Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
    querying KASLR


author: Michel Lind <salimma@centosproject.org> - 0.5-1
changelog:
  - Update to version 0.5
  - Apply build flags consistently
  - Update licenses to account for bundled dependencies


author: Michel Lind <salimma@centosproject.org> - 0.5-2
changelog:
  - fix to show SHA commit in help text
  - also ensure `make install` uses the right build flags
  - include all bundled projects' licenses


author: Michel Lind <salimma@fedoraproject.org> - 0.5-3
changelog:
  - Drop rust_arches; no longer needed. But limit builds to the architectures
    strobelight-libs supports


author: Sun Haiyong <sunhaiyong@zdbr.net> - 3.2.9-3
changelog:
  - Add loongarch64 to the condition for using lib64 in the wx-config file.
  - Skip failing tests on riscv64


author: Tom Callaway <spot@fedoraproject.org> - 4.2.6-1
changelog:
  - so, funny story. turns out this thing is still being actively developed.
    and... i just noticed. whoops. sorry.
  - anyways, new achievement: Back From The Dead
  - update to 4.2.6


author: Patrick Monnerat <patrick@monnerat.net> 2.9.0-5
changelog:
  - Patch "openssl4" for openssl version 4 compatibility.
  - Remove BR openssl-devel-engine for Fedora > 44.
  - Perform tests.


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.1.3-2
changelog:
  - spec cleanup and modernization - use https for spec urls - sort BR in
    alphabetical order - silent rpmlint


author: Neal Gompa <ngompa@fedoraproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races (#2319081)
  - Fix minor spec formatting inconsistencies


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
  	[XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-6
changelog:
  - x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487]
  - domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490]
  - Arm: Completion of memory accesses not guaranteed by completion of a TLBI
  	 [XSA-493, CVE-2025-10263]
  - x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]


author: Hans de Goede <hans@hansg.org> - 3.2.9a-1.20250317gitce9782a
changelog:
  - Update to 3.2.9a + latest git changes to fix build with -std=c11
  - Switch to upstream appdata/metainfo and desktop file
  - Drop all patches (all upstreamed)
  - Resolves: rhbz#2341567
  - Resolves: rhbz#2385740


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


author: Marcus Müller <mueller_fedora@baseband.digital> - 3.3.0-1
changelog:
  - Bump to new upstream release 3.3.0
  - Fix wrong license (see doc/COPYING in source code)
  - Fix installation location in a less hacky way
  - Fix keyring source. (you need to git clone the kernel gpgkeys repo and then
    grep for the key needed, then replace the Source here. This is not a
    sustainable system.)
  - Fix description typo
  - Remove stray tab byte from description, which was shown as \x09 in
    `dnf info xfsdump` (huh?)


author: Pavel Reichl <preichl@redhat.com> - 7.0.1-1
changelog:
  - Update to upstream v7.0.1
  - Move xfs_healer systemd units from xfsprogs-xfs_scrub to main xfsprogs package
  - Related: rhbz#2467694


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Greg Hellings <greg.hellings@gmail.com> - 4.3.1-1
changelog:
  - New upstream version 4.3.1 which already has editor fixed
  - Updated dependencies
  - Removed all patches


author: Greg Hellings <greg.hellings@gmail.com> - 4.4.0-1
changelog:
  - New upstream release 4.4.0
  - Introduction of speech services for TTS
  - Restoration of editor through GTK-native technologies


author: Tom spot Callaway <spotaws@amazon.com> - 3.0.7-5
changelog:
  - revert 6ca325d Fix libsv include path, while libsv upstream has moved
    their header location, the libsv in fedora has not moved it yet as of
    1.2-7


author: Tom Callaway <spot@fedoraproject.org> - 4.7-39
changelog:
  - am i wrong for keeping a motif app alive in 2025? No, it is the kids who are wrong.
  - uh, apply fix for compiling with c23 (gcc15)


author: Jonathan Wright <jonathan@almalinux.org> - 1.60.4-1
changelog:
  - update to 1.60.4 rhbz#2334236
  - re-enable builds against libxml2, no more bundled libexpat
  - fixes rhbz#2310136
  - fixes rhbz#2310146
  - fixes rhbz#2310152


author: Simone Caronni <negativo17@gmail.com> - 23.0.0-6
changelog:
  - Clean up SPEC file.
  - Trim changelog.
  - Do not disable debug stripping (caught by rpminspect) tests.


author: Dominik Mierzejewski <dominik@greysector.net> - 25.0.0-1
changelog:
  - Update to 25.0.0 (resolves rhbz#2384262)
  - Download and validate GPG signature
  - Switch to meson build system


author: Simone Caronni <negativo17@gmail.com> - 0.6.604^20230328git857d892-1
changelog:
  - Update to latest snapshot.
  - Clean up SPEC file.
  - Trim changelog.
  - Drop devel subpackage (no headers?).


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.23-1
changelog:
  - Update to xserver 21.1.23
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 24.1.12-1
changelog:
  - Update to xwayland 24.1.12
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.7-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix build with GCC15 (Dominik Mierzejewski)


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.8.3-1
changelog:
  - New upstream version 5.8.3 (fixes RHBZ#2453487, CVE-2026-34743)
  - Add Arabic language translations


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.6.1-1
changelog:
  - update to 2.3.6.1 fixes rhbz#1933807 rhbz#2381649
  - Switched to HTTPS for URL and Source0, consolidated patches
  - Use macros in %prep, %cmake macros, honor build flags


author: Gabriel Somlo <gsomlo@gmail.com> - 0.67.2.20260713git22c15a7
changelog:
  - update to newer 0.67 snapshot
  - simplify downstream (un-bundling) patch since some upstream support added


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 4.1.5^git20251117.c9a0e98-1
changelog:
  - Removed debug package creation opt-out.
  - Updated to Git revision c9a0e98 (Nov 17, 2025).
  - Updated the SPDX license expression.
  - The examples can now be found in the package documentation directory.
  - All package summaries and descriptions have been updated.
  - The README-file has been removed from the package as it doesn't contain any
    useful information for Fedora users.
  - The license file can now be found in the package license directory.
  - Made the generated project file architecture-independent.


author: Martin Gieseking <martin.gieseking@uos.de> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Dropped rpath patch which is no longer required
  - Updated license (libzint is now licensed under BSD-3-Clause)


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to v1.1.0
  - Upstream bug fixes: out-of-bounds array access, missing unistd.h header,
    localtime prototype, curses header preprocessor guard
  - Upstream build improvements: LDFLAGS support in Makefile
  - Migrate to %autorelease
  - Remove unnecessary %global _hardened_build 1 (default since F23)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.0.0-1
changelog:
  - Update to upstream 7.0.0 (fixes rhbz#2307507)
  - License audit and update to SPDX license expressions (fixes rhbz#2118200)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.1.0-1
changelog:
  - Update to upstream 7.1.0 (fixes rhbz#2330000, rhbz#2331292)
  - Update license string with final SPDX expression


author: Jakub Sencak <jsencak@redhat.com> - 0.13.78-6
changelog:
  - Replaced make macros with cmake macros; the cmake macro defaults to ninja generator instead of make
  - Removed obsolete files
  - Ship CMake config files in -devel package


