# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Michel Lind <salimma@fedoraproject.org> - 25.01-1
changelog:
  - Update to 25.01
  - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
  - Backport Debian patch to disable echo-ing password; Resolves:
    rhbz#2412315


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7-2
changelog:
  - Porting to qt6
  - Add %{name}-3.7-qwtconfig.pri.patch
  - Remove "env QT_QPA_PLATFORM=xcb" from GoldenCheetah.desktop


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7.1-1
changelog:
  - This is a patch release update for v3.7 to include high priority fixes for
    stability and security and to make new planning and calendar functionality
    available to a wider audience


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.13.3-29
changelog:
  - Use the bundled gtest. GTest 1.17.1 will require C++17, and this version of
    ITK can’t be compiled as C++17.


author: Michal Schorm <mschorm@redhat.com> - 1.0.5-42
changelog:
  - Start providing the lower-case 'judy-devel' name for compatibility with
    other RPM based distributions (rhbz#2435466)


author: Jerry James <loganjerry@gmail.com> - 1.24.11-1
changelog:
  - Version 1.24.11
  - Drop upstreamed vector overrun patch
  - Add patch to fix mismatched options to codim
  - BR e-antic-devel
  - BR and Recommend msolve
  - Move configuration steps to %conf
  - Remove pessimization on s390x


author: Jerry James <loganjerry@gmail.com> - 1.25.05-1
changelog:
  - Version 1.25.05
  - Drop upstreamed patches: no_gftables, fplll, codim-option, rightarrow
  - Add patch to avoid the deprecated strstream C++ header
  - Unbundle memtailor, mathic, and mathicgb


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.3-1
changelog:
  - Update to 1.54.3
  - Partially fixes CVE-2025-9615. To protect totally from it, see:
    https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2325.


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.24-1
changelog:
  - Update to 1.2.24 release
  - Fixes a local privilege escalation bug with severity "important" (CVE-2024-9050)


author: Dan Fruehauf <malkodan@gmail.com> - 1.3.0-1
changelog:
  - Update from upstream to version 1.3.0
  - Support for no tunnel (dummy interface)
  - Support for SOCKS, local and remote binds


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.1-1
changelog:
  - Update to upstream 1.4.1
  - Local bind support
  - Remote bind support
  - Support for no remote device, sudo command, and no remote command


author: Jerry James <loganjerry@gmail.com> - 4.4.0p4-1
changelog:
  - Version 4.4.0p4
  - Add upstream patch to fix id_Saturate
  - Upstream moved modules from libexecdir to libdir


author: Jerry James <loganjerry@gmail.com> - 4.4.1-1
changelog:
  - Version 4.4.1
  - Drop upstreamed type-mismatch and fix-id-saturate patches
  - Drop unused Java BRs (thanks to Marián Konček)
  - Remove dependency on surf-geometry


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.2-1
changelog:
  - update to 0.6.2 (resolves rhbz#2432808)
  - drop obsolete patches
  - backport upstream patches
  - use HTTPS in URLs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-1
changelog:
  - Version 0.5.0
  - New "zip" handler
  - Improved behaviour for zip/jar handlers when $SOURCE_DATE_EPOCH is not
    set


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.6.1-10
changelog:
  - Fix a typo in the License expression
  - Fix build not respecting distribution compiler flags; this means executables
    are now PIE, and the debuginfo package is now useful


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.3-1
changelog:
  - Updated to 4.0.3 release
  - Bundled antlr4-cpp-runtime-4.13.2
  - List packaged executables explicitly
  - Correct/update and better document the License expression


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.12-3
changelog:
  - follow upstream convention in option naming
  - drop custom miniz detection and require a fixed build instead


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2024.11.21.0-2
changelog:
  - Add an AppStream metainfo file
  - Include full license text in the packages
  - Include documentation in the package


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jan Macku <jamacku@redhat.com> - 1.31-1
changelog:
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (French)
  - Update translation files
  - Translated using Weblate (Turkish)


author: Jan Macku <jamacku@redhat.com> - 1.32-1
changelog:
  - Allow paths with /usr/sbin and /usr/bin as equivalent
  - mkosi: update conf to match latest mkosi version
  - Translated using Weblate (Italian)


author: Richard W.M. Jones <rjones@redhat.com> - 4.30c-1
changelog:
  - New version 4.30c (RHBZ#2330187)
  - Enable s390x again.
  - Start removing afl-gcc/afl-clang as they are obsolete.
  - Add header files.


author: Diego Herrera <dherrera@redhat.com> - 4.2.6-1
changelog:
  - Release 4.2.6 * Added angband_homedir to be able to play saving files to
    homedir * Added simple launcher to be able to pick what version to play *
    Added sound assets since now they are distributed under a compatible
    license


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Chad Lemmen <rpm@stansoft.org> - 1.6.1.p4-1
changelog:
  - added BuildRequires: rpcgen libtirpc-devel
  - added configure option --enable-minimal=yes to not build aace or glade
  - updated to 1.6.1.p4


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Mateus Rodrigues Costa <mateusrodcosta@gmail.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Switch to new upstream meson build system
  - Start using manual RPM changelogs and add previous missing changelogs


author: Dominik Mierzejewski <dominik@greysector.net> - 120-1
changelog:
  - update to 120 (#2310544)
  - review and correct License tag
  - add WebAssembly spec testsuite as separate source
  - backport fix for failing TypeSSA tests on i686


author: Dominik Mierzejewski <dominik@greysector.net> - 121-1
changelog:
  - update to 121 (rhbz#2332707)
  - drop obsolete patch
  - avoid copying in and deleting test tools for tests (based on a PR by Zephyr Lykos)


author: Dominik Mierzejewski <dominik@greysector.net> - 122-1
changelog:
  - update to 122 (resolves rhbz#2342841)
  - rebase patch for using system GTest
  - fix setting the RPATH to private shared library
  - skip v8 tests (not available in Fedora)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Simone Caronni <negativo17@gmail.com> - 30.0-1
changelog:
  - Update to 30.0
  - Drop version for bundles, it contains snapshots for most libraries.
  - Drop removed BDB bits, adjust docs and information.
  - Add new metapackage with multiprocess bitcoin programs and new meta
    command "bitcoin".
  - Package a standalone libbitcoinkernel, which is used by the new IPC
    programs.
  - Set a shared object version on libbitcoinkernel that matches with the
    major release.


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to 1.2.0 (close RHBZ#2401888)
  - Stop trying to support EPEL7, which is end-of-life
  - Port to pyproject-rpm-macros (close RHBZ#2377212)
  - Test the Python extension


author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Thomas E. Dickey <dickey@invisible-island.net> - 5.0.20250116
changelog:
  - update license (https://invisible-island.net/cdk/CHANGES.html#t20221018)
  - update URLs
  - update changelog


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Than Ngo <than@redhat.com> - 144.0.11^chromium144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
  - * CVE-2026-1861: Heap buffer overflow in libvpx
  - * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
  - * CVE-2026-2313: Use after free in CSS
  - * CVE-2026-2314: Heap buffer overflow in Codecs
  - * CVE-2026-2315: Inappropriate implementation in WebGPU
  - * CVE-2026-2316: Insufficient policy enforcement in Frames
  - * CVE-2026-2317: Inappropriate implementation in Animation
  - * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  - * CVE-2026-2319: Race in DevTools
  - * CVE-2026-2320: Inappropriate implementation in File input
  - * CVE-2026-2321: Use after free in Ozone
  - * CVE-2026-2322: Inappropriate implementation in File input
  - * CVE-2026-2323: Inappropriate implementation in Downloads
  - Hoshino Lina: Update to cef-145.0.25+g265860d


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.75-1
changelog:
  - Update to 145.0.7632.75
  - * CVE-2026-2441: Use after free in CSS
  - Fix FTFS on aarch64/ppc64le caused by missing include file (el9)
  - Enable rustc_nightly_capability


author: Hector Martin <marcan@marcan.st> - 2:19.2.3-7
changelog:
  - Work around mgr `restful` module PyO3 failures
  - Fix NOTIFY_TYPES exceptions during module import (rhbz#2361850)


author: Richard W.M. Jones <rjones@redhat.com> - 0.79.20-3
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.0-1
changelog:
  - Update to v3.1.0
  - Drop Patch0 (duplicate definitions in code - backport from this release)
  - Drop Fedora-specific metainfo file (now provided by upstream)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.1-1
changelog:
  - Update to v3.1.1
  - Drop Patch2 (C99 issues) - backport from this release
  - Drop Patch3 (missing includes) - merged upstream


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.6.0-1
changelog:
  - 1.6.0 release RHBZ#2391533
  - Includes fixes for Cmake 4 RHBZ#2381184 RHBZ#2380497
  - re-enable tests. They no longer require external artifacts


author: Than Ngo <than@redhat.com> - 144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
    * CVE-2026-0899: Out of bounds memory access in V8
    * CVE-2026-0900: Inappropriate implementation in V8
    * CVE-2026-0901: Inappropriate implementation in Blink
    * CVE-2026-0902: Inappropriate implementation in V8
    * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    * CVE-2026-0904: Incorrect security UI in Digital Credentials
    * CVE-2026-0905: Insufficient policy enforcement in Network
    * CVE-2026-0906: Incorrect security UI
    * CVE-2026-0907: Incorrect security UI in Split View
    * CVE-2026-0908: Use after free in ANGLE


author: Than Ngo <than@redhat.com> - 144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
    * CVE-2026-1861: Heap buffer overflow in libvpx
    * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
    * CVE-2026-2313: Use after free in CSS
    * CVE-2026-2314: Heap buffer overflow in Codecs
    * CVE-2026-2315: Inappropriate implementation in WebGPU
    * CVE-2026-2316: Insufficient policy enforcement in Frames
    * CVE-2026-2317: Inappropriate implementation in Animation
    * CVE-2026-2318: Inappropriate implementation in PictureInPicture
    * CVE-2026-2319: Race in DevTools
    * CVE-2026-2320: Inappropriate implementation in File input
    * CVE-2026-2321: Use after free in Ozone
    * CVE-2026-2322: Inappropriate implementation in File input
    * CVE-2026-2323: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
    * CVE-2026-2648: Heap buffer overflow in PDFium
    * CVE-2026-2649: Integer overflow in V8
    * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
    * CVE-2026-3061: Out of bounds read in Media
    * CVE-2026-3062: Out of bounds read and write in Tint
    * CVE-2026-3063: Inappropriate implementation in DevTools


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 0.10.0-1
changelog:
  - update to 0.10.0 (resolves rhbz#2424290)
  - add missing dependency on graphviz-devel for GStreamer pipeline previews


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.1.1-1
changelog:
  - Update package to release v2.1.1
  - Resolves: rhbz#2367642, rhbz#2360623
  - Fixes a critical vulnernability (CVE-2025-47290)
  - rhbz # 2367666 is for F42 and rhbz # 2367665 is for F41 which have
    versions of containerd not affect by CVE-2025-47290
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.1.5-1
changelog:
  - Update to release v2.1.5
  - Resolves: GHSA-pwhc-rpq9-4c8w (CVE-2024-25621)
  - Resolves: GHSA-m6hq-p25p-ffr2
  - Resolves: rhbz#2408134 rhbz#2408696 rhbz#2409604 rhbz#2410555
  - Resolves: rhbz#2412671
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.6-1
changelog:
  - rebase to latest upstream version (rhbz#2338620)
  - sync i18n patch with SUSE (Kudos to Berny Völker!)


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/107536, ada/113536, ada/117517, ada/118343, c/122188, c++/120757,
  	c++/121981, c++/122302, fortran/108581, fortran/121616,
  	fortran/121939, go/104290, libstdc++/122062, libstdc++/122322,
  	middle-end/121922, middle-end/122133, target/110812, target/121599,
  	target/121652, target/121742, target/121780, target/121781,
  	target/121845, target/121875, target/122119, target/122177,
  	target/122187, target/122210, target/122220, target/122222,
  	target/122223, tree-optimization/121772, tree-optimization/122104,
  	tree-optimization/122213
  - package libgcobol.spec (#2401679)


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/81087, ada/118208, ada/118782, c++/122192, c++/122253, c++/122310,
  	c++/122381, c++/122421, fortran/107968, fortran/114023,
  	fortran/122206, fortran/122386, rtl-optimization/122321,
  	target/99930, target/118460, target/119079, target/120674,
  	target/121604, target/122097, target/122270, target/122323,
  	target/122516, target/122527, tree-optimization/122012,
  	tree-optimization/122394, tree-optimization/122408,
  	tree-optimization/122505
    - fix ICE while building firefox with LTO+PGO (#2395476, PR lto/122620)


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/111433, ada/115305, ada/122640, ada/123037, c/121506, c/123018,
  	c++/119580, c++/120529, c++/120876, c++/121325, c++/121445,
  	c++/122625, c++/122658, c++/122677, c++/122789, fortran/122709,
  	fortran/122977, libstdc++/122661, libstdc++/122726, libstdc++/122743,
  	libstdc++/122842, libstdc++/122921, lto/122515, middle-end/120052,
  	middle-end/120564, middle-end/121581, middle-end/122624,
  	rtl-optimization/122627, target/110796, target/118446, target/119275,
  	target/121853, target/122175, target/122189, target/122216,
  	target/122446, target/122539, target/122652, target/122656,
  	target/122692, target/122695, target/122858, target/122867,
  	target/122991, tree-optimization/121776, tree-optimization/122126,
  	tree-optimization/122225, tree-optimization/122943
  - create gnatgcc symlink only when building Ada
  - avoid building libssp and disabled libraries
  - remove various unpackaged files from the buildroot


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-6
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122668, c++/122752, c++/122772, c++/122834, c++/122922,
  	c++/123331, debug/121964, diagnostics/120063, fortran/107406,
  	libfortran/122936, libstdc++/120446, libstdc++/122812,
  	libstdc++/122907, middle-end/111817, middle-end/123392,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123523, target/117575,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	testsuite/123353, tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch
    - PRs c++/122070, c++/122550, c++/123597, libstdc++/123147,
  	middle-end/123107, middle-end/123703, target/119130, target/123742,
  	tree-optimization/122793, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-1
changelog:
  - This fixes a long standing bug; see the heading 02-14 on
  - https://cppad.readthedocs.io/latest/whats_new_24.html


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-2
changelog:
  - This fixes a bug in fun2val.hpp. This change will not be necessary
  - once the upstream source advances to 20240000.4.


author: Brad Bell <bradbell at seanet dot com> - 20250000.0-3
changelog:
  - 1. Add the year macro and use it to define soversion and Version.
  - 2. Remove the cppad-doc subpackage because documantion for this stable 
       version is not available at https://cppad.readthedocs.io/stable-2025/ .
  - 3. Change include_doc=true, cmake_install_docdir=NOTFOUND, and add
       make doc_user to test building, but not installing, user documentation.
  - 4. The ppc64le arch has been fixed and now the CppAD to_string test pass
       for long double (so we do not need to skip that test).
  - 5. Use get_started.cpp to test the installed version of CppAD.


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.6-2
changelog:
  - Fix infinite loop during module symbols initialization
  - Fix for "help -r" segfault in case of ramdump
  - arm64: add cpu context registers to better support gdb stack unwind
  - x86_64: Mark #VC stack unavailable when CONFIG_AMD_MEM_ENCRYPT is not set
  - Fix incorrect 'bt -v' output suggesting overflow


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.6-4
changelog:
  - Doc: add compilation requirements note in README
  - Fix "net -a" option on Linux 6.13 and later kernels
  - kmem: fix the determination of slab page due to invalid page_type
  - Enhance "kmem -i[=shared]" to display(or not) shared pages
  - Fix misleading CPU count in display_sys_stats()
  - arm64: add pac mask to better support gdb stack unwind
  - x86_64: Fix 'bt -S/-I' segfault issue
  - Fix build failure in readline lib
  - tools.c: do not use keywords 'nullptr' as a variable in code
  - Fix build failure on 32bit machine(i686)


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-4
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-5
changelog:
  - Add blk_mq shared tags support for dev -d/-D
  - Support running on X86_64 with RISCV target
  - RISCV64: Add 'PAGE DIRECTORY' property to the 'vtop' command
  - vmware_vmss: support segment registers
  - vmware_guestdump: support segment registers
  - Fix the segfault issue caused by "dis -s" command
  - Add a rustfilt command to demangle a mangled Rust symbol
  - Enable demangling a mangled Rust support
  - Enable resolving mangled Rust symbol in lockless ring buffer
  - Fix a compilation error on the old gcc version 8.5.0
  - Fix for log command printed a couple of empty lines
  - Optimize extensions's compiler from gcc to $(CC)
  - Fix get_pathname() not handling stacked mounts
  - Fix "mount <address>" fail when "super_block.s_files" unavaliable
  - Fix "mount" MNT_CURSOR entries (kernels 5.8-6.7)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.13-1
changelog:
  - Update to release v1.31.13
  - Resolves: rhbz#2333357, rhbz#2398406, rhbz#2398661, rhbz#2399063,
    rhbz#2399337
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2407593, rhbz#2407864, rhbz#2408140, rhbz#2408571
  - Resolves: rhbz#2408638, rhbz#2408701, rhbz#2409048, rhbz#2409331
  - Resolves: rhbz#2409610, rhbz#2409996, rhbz#2410283, rhbz#2410561
  - Resolves: rhbz#2410928, rhbz#2411196, rhbz#2411459, rhbz#2412524
  - Resolves: rhbz#2412676, rhbz#2412756


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.11-2
changelog:
  - Remove unneeded completions generation
  - Removes call to compiled crio binary to generate completions output.
  - Upstream release already contains generated content


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.12-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.13-1
changelog:
  - Update to release v1.32.13
  - Final v1.32 release
  - Upstream fix
  - Fix for updated binutils config in rawhide (f44, f45) that blocks cri-o
    build


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release 1.33.6
  - Resolves: rhbz#2407594, rhbz#2407865, rhbz#2408141, rhbz#2408575
  - Resolves: rhbz#2408639, rhbz#2408702, rhbz#2409049, rhbz#2409332
  - Resolves: rhbz#2409611, rhbz#2409997, rhbz#2410284, rhbz#2410562
  - Resolves: rhbz#2410929, rhbz#2411197, rhbz#2411460, rhbz#2412525
  - Resolves: rhbz#2412677, rhbz#2412757


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release 1.34.2
  - Resolves: rhbz#2407595, rhbz#2407866, rhbz#2408142, rhbz#2408577
  - Resolves: rhbz#2408640, rhbz#2408703, rhbz#2409050, rhbz#2409333
  - Resolves: rhbz#2409612, rhbz#2409998, rhbz#2410285, rhbz#2410563
  - Resolves: rhbz#2410930, rhbz#2411198, rhbz#2411461, rhbz#2412526
  - Resolves: rhbz#2412678, rhbz#2412758


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-2
changelog:
  - Remove potential race condition
  - Removes unneeded calls to compiled crio binary that appear to cause an
    occasional race condition on ppc64le koji builders


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-3
changelog:
  - Release v1.35
  - Initial release of v1.35 for Fedora rawhide (F44) and F43
  - Requires golang 1.25
  - Upstream new features and fixes
  - Urgent Upgrade Note from upstream: "Action required:
    container_spec_memory_limit_bytes has moved from the memory metrics
    category to the new spec category. Update your CRI-O configuration to
    include spec in included_pod_metrics if you rely on this metric."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-1
changelog:
  - Release CRI-Tools v1.35.0
  - Resolves: rhbz#2390054
  - Initial Fedora release
  - Upstream fixes from v1.34


author: Petr Menšík <pemensik@redhat.com> - 1.3.2-2
changelog:
  - New package dependency of dnscap (rhbz#2418607)
  - Modernize upstream RPM spec according to Fedora Packaging Guidelines
  - Provide also lowercase devel package name
  - Remove Group: and ldconfig obsolete features
  - Uploaded new sources
  - Include LICENSE file


author: Alexander Bokovoy <abokovoy@redhat.com> - 2:4.23.0-13
changelog:
  - Fix DLZ crash on unconfigured Samba AD system and rebuild against Python
    3.14.0rc3
  - Resolves: rhbz#2396621
  - Resolves: rhbz#2397242


author: Günther Deschner <gd@samba.org> - 2:4.23.2-1
changelog:
  - Update to Samba 4.23.2
  - resolves: rhbz#2404204
  - resolves: rhbz#2391698 - Security fix for CVE-2025-9640
  - resolves: rhbz#2394377 - Security fix for CVE-2025-10230


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.1-6
changelog:
  - CUPS restart has to happen after universal filter is gone for good (in posttrans) (fedora#2370978)


author: Jan Macku <jamacku@redhat.com> - 8.14.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2025-5025 - No QUIC certificate pinning with wolfSSL
      CVE-2025-4947 - QUIC certificate check skip with wolfSSL
  - fix regression: curl_multi_add_handle() returning OOM when using more than 400 handles


author: Jan Macku <jamacku@redhat.com> - 8.14.1-1
changelog:
  - new upstream release
  - drop: 0001-curl-8.14.0-multi-fix-add_handle-resizing.patch (no longer needed)


author: Packit <hello@packit.dev> - 19.2-1
changelog:
  - Update to version 19.2
  - Resolves: rhbz#2363940
  - Remove 0003-let-dbg_assert-format-the-string.patch
  - Disable s390x again due to several errors in check


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.7-10
changelog:
  - Use the journal for stdout/stderr
  - Move audio levels example to README.fedora
  - Backport upstream PR to use system libraries


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.2-1
changelog:
  - Update to v0.25.2
  - CVE-2025-58183; Resolves: rhbz#2412529
  - CVE-2025-58188; Resolves: rhbz#2412380, rhbz#2411476, rhbz#2410945
  - CVE-2025-58185; Resolves: rhbz#2410578, rhbz#2410299, rhbz#2410013
  - CVE-2025-61723; Resolves: rhbz#2409627, rhbz#2409349, rhbz#2409065
  - CVE-2025-58189; Resolves: rhbz#2408157, rhbz#2407880, rhbz#2407612
  - Upstream updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.0-1
changelog:
  - Update to release v0.26.0
  - Resolves: rhbz#2412681, rhbz#2412761
  - Upstream new features and fixes
  - dependency override for moby/policy-helper needed for license (default
    version does not a a license file)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.29.0-1
changelog:
  - Update to release v0.29.0
  - Resolves: rhbz#2397747, rhbz#2398425, rhbz#2398679, rhbz#2399082,
    rhbz#2399355
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves: rhbz#2413270
  - Resolves: rhbz#2407614, rhbz#2407881, rhbz#2408158, rhbz#2409066
  - Resolves: rhbz#2409350, rhbz#2409628, rhbz#2410014, rhbz#2410300
  - Resolves: rhbz#2410579, rhbz#2410946, rhbz#2411477, rhbz#2412381
  - Resolves: rhbz#2412530, rhbz#2412682, rhbz#2412762
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.3-1
changelog:
  - Update to release v29.1.3
  - Resolves: rhbz#2417969
  - Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.5-2
changelog:
  - Add rpminspect.yaml with temporary skip
  - the stack-prot annocheck test is failing on ppc64le and s390x but not
    other arch. Normally should skip
  - skip: stack-prot test because function fatalf is part of the CGO runtime
    library which is compiled without stack protection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Than Ngo <than@redhat.com> - 7.5.3-1
changelog:
  - Update to 7.5.3
    * Fix: Exit with non-zero code if the conversion is aborted due to a binary file
    * Fix: Exit with zero code when an unicode conversion error occurs in quiet mode
    * Updated translations


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.0-1
changelog:
  - Update to 3.3.0 (close RHBZ#1684966)
  - Drop obsolete ldconfig_scriptlets macro
  - Drop and Obsolete the static library (-static subpackage)
  - Properly mark the LICENSE file
  - Update License to SPDX


author: Clemens Lang <cllang@redhat.com> - 1.7.17-1
changelog:
  - Rebase to 1.7.17
  - Convert license to SPDX format
  - Drop i686 package, since dovecot is no longer available in i686
  - Do not depend on sqlite and xapian-core manually, rely on library dependency auto-detection instead


author: Than Ngo <than@redhat.com> - 2:1.13.2-3
changelog:
  - Introduce js-doxygen subpackage and unbundle Javascript during RPM builds
  - Use system spdlog and sqlite3


author: Jens Petersen <petersen@redhat.com> - 1.4.5-3
changelog:
  - build with opengl (#2260290, Benson Muite)
  - check: run help command (#2260290, Benson Muite)
  - khrplatform.h is under Khronos License (#2260290, Benson Muite)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.1-1
changelog:
  - Update to 2.7.1
  - Add patches to fix the build
  - Add extra source for build-only dxbc-spirv submodule


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.4.0.5-24
changelog:
  - Remove python-cups build requirement
  - Mention dymo-cups-drivers-lw5xx in description
  - Add additional provides


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-3
changelog:
  - Add calling a little python script in the install stage to revert
    the (upstream) replacing of directories by a symlinks 
    which causes upgrade problems with rpm for the data package.


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-4
changelog:
  - Add a LUA script in a pretrans section to assist in replacing a directory
    by a symlink (this removes the need for the python script added in
    the previous commit)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-5
changelog:
  - Forgot to update the changelog date for the previous commit, so fixed this
    with this update.
  - Also fix a typo in the ghost definitions.


author: Aaron Merey <amerey@fedoraproject.org> - 0.192-5
changelog:
  - Enable debuginfod IMA verification
  - Add elfutils-0.192-fix-configure-conditional.patch
  - Add elfutils-0.192-fix-zsh-profile.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.5.0-1
changelog:
  - Update to 5.5.0 (#2325175)
  - Require util-linux-core to get logger command for logging capabilities


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.6.0-1
changelog:
  - Update to 5.6.0 (#2385838)
  - Add envml(1) man page
  - Use shell completion path macros
  - Install Emacs addon files
  - Use 'vimfiles_root' macro provided by vim-filesystem


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.6.1-1
changelog:
  - Update to 5.6.1 (#2417160)
  - Update-alternatives is now available from _bindir
  - Update URL to https://envmodules.io
  - Add missing command to byte compile Elisp file


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Update to 3.2.0 (fedora#2395772)
  - Add xrizer subpackage for build deps management (fedora#2395971)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Michel Lind <salimma@fedoraproject.org> - 6.2.1-14
changelog:
  - Unbundle cpp-httplib (rhbz#2169585)
  - Eliminate almost all sed usage
  - Use find_package to find cxxopts
  - Use pkg_check_modules to find easylogging++
  - Enable SELinux support
  - Enable unwind support


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.1.0-1
changelog:
  - Update to v2.1.0
  - Drop Patch0 (CXXFLAGS issues) - fixed upstream
  - Drop Patch1 (remove CC0 licensed code) - removed upstream
  - Add a patch to fix endianness issues


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.5-2
changelog:
  - Modify queue to use ring buffer
  - Fix memory leaks in the AVL tests
  - Do not exit in do_database_reload when stop in progress
  - Add /var/lib/fapolicyd to tmpfiles
  - Fix owner:group of /etc/fapolicyd on boot
  - Change /usr/share/fapolicyd to root:root


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Neal Gompa <ngompa@fedoraproject.org> - 7.1.1-8
changelog:
  - Reorganize spec to group subpackage definitions together
  - Add freeworld conditional for third-party builds
  - Drop unneeded scriptlets


author: Simone Caronni <negativo17@gmail.com> - 7.1.2-1
changelog:
  - Update to 7.1.2.
  - Enable VANC processing for SDI.
  - Explicitly list all implicitly enabled/disabled options.


author: Miroslav Lichvar <mlichvar@redhat.com> 1.5.0-5
changelog:
  - add back version-specific requirement on libs subpackage
  - set cmake build type to release (#2416751)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-2
changelog:
  - Fix upgrade to Samba 4.23 when there is already established trust
  - Upstream PR: https://github.com/freeipa/freeipa/pull/8046


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-2
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Antonio Torres <antorres@redhat.com> - 3.2.7-4
changelog:
  - Update logrotate postrotate script with `systemctl try-reload-or-restart`
    Resolves: rhbz#2371329


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 1.0.13-1
changelog:
  - Version 1.0.13
  - Add patch to adapt the tests to changed output
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 0.3-3
changelog:
  - Update to git HEAD for bug fixes
  - Drop upstreamed documentation patch
  - Use the GAP declarative buildsystem


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Rename 'gdb-add-rpm-suggestion-script.patch' to
    'gdb-rpm-suggestion-script.patch' and
    'gdb-6.3-rh-testversion-20041202.patch' to
    'gdb-test-show-version.patch'.  The new names better reflect the
    patch contents.


author: Kevin Buettner <kevinb@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
    Deleted: gdb-fix-bg-execution-repeat.patch
  - Backport upstream commit ce106639c20 from Tom de Vries, fixing a
    a gdb.threads/thread-specific-bp.exp failure.
  - Made spec file change to build gdb with --disable-gdb-compile due to
    this feature's brokenness.  With it disabled, failing tests skip
    cleanly without timeouts.  Also reduces binary size and attack
    surface.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 70b66cf338b14336 to fix RH BZ 2402580.
    This backport will not be needed once we rebase to GDB 18.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Jens Petersen <petersen@redhat.com> - 8.10.7-14
changelog:
  - explicit requires binutils-gold
  - ppc64le: NCG fix for ccall target hints (Peter Trommler, #2172771)
  - llvm patch from @stefansf (IBM) to fix alignment in data sections
    which should fix certain runtime crashes (#2248097)


author: Jens Petersen <petersen@redhat.com> - 9.0.2-20
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Jens Petersen <petersen@redhat.com> - 9.12.1.20250219-4
changelog:
  - 9.12.2 RC1
  - https://downloads.haskell.org/~ghc/9.12.1.20250219/docs/users_guide/9.12.2-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2-5
changelog:
  - 9.12.2
  - https://downloads.haskell.org/~ghc/9.12.2/docs/users_guide/9.12.2-notes.html
  - bump llvm to 18


author: Jens Petersen <petersen@redhat.com> - 9.12.2-6
changelog:
  - move ghc-internal into base subpackage
  - make ghc-filesystem arch for now for index.html
  - avoid pulling in nodejs via *.mjs scripts
  - own ghclibdir/share/{,ghcplatform}
  - add obsoletes for ghc-internal


author: Jens Petersen <petersen@redhat.com> - 9.12.2-7
changelog:
  - enable debug_info for release builds
  - use 'release' flavor instead of 'perf'
  - bump boot compiler to ghc9.8
  - use new NCG for riscv64 (thanks to supersven)
  - add conflicts for other ghcX.Y-compiler-default packages
  - also munge haddock paths in .conf files


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20250819-0.3
changelog:
  - pass --no-ar-files to find-debuginfo to workaround long generation times
    with debugedit-5.2 (#2390105)


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20250908-0.4
changelog:
  - 9.14.1 alpha2
  - https://downloads.haskell.org/ghc/9.14.1-alpha2/docs/users_guide/9.14.1-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251007-0.6
changelog:
  - 9.14.1 alpha3
  - https://downloads.haskell.org/ghc/9.14.1-alpha3/docs/users_guide/9.14.1-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251028-0.7
changelog:
  - 9.14.1 rc1
  - https://downloads.haskell.org/ghc/9.14.1-rc1/docs/users_guide/9.14.1-notes.html
  - unix-2.8.8.0
  - adds template-haskell-lift and template-haskell-quasiquoter


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251128-0.10
changelog:
  - Update to 9.14.1 RC3
  - https://downloads.haskell.org/ghc/9.14.1-rc3/docs/users_guide/9.14.1-notes.html


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.05.1-2
changelog:
  - CVE-2025-48708 ghostscript: Ghostscript Argument Sanitization Vulnerability (fedora#2368149, fedora#2368134)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.05.1-6
changelog:
  - security fix for CVE-2025-59798, CVE-2025-59799, CVE-2025-59800 (fedora#2431544, fedora#2431548, fedora#2431546)


author: Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
changelog:
  - Update on 2025-12-23
  - Use stable branch instead of master
  - Add next generation of Gnulib the python release of Gnulib
  - Fix building tests
  - Re-struct for gnulib ng with python base
  - Update dependencies


author: Florian Weimer <fweimer@redhat.com> - 2.42-1
changelog:
  - Drop 0001-Revert-Linux-Keep-termios-ioctl-constants-strictly-i.patch,
    merged upstream.
  - Auto-sync with upstream branch release/2.42/master,
    commit bc13db73937730401d592b33092db6df806d193e:
  - inet-fortified: fix namespace violation (bug 33227)
  - Bump version number to 2.42
  - math: Update auto-libm-tests-in with ldbl-128ibm compoundn/pown failures
  - INSTALL: Update newest tested binutils version
  - elf: Compile _dl_debug_state separately (bug 33224)
  - sframe: Add support for SFRAME_F_FDE_FUNC_START_PCREL flag
  - Disable SFrame support by default
  - math: xfail some pown and compoundn tests for ibm128-libgcc
  - posix: Fix double-free after allocation failure in regcomp (bug 33185)
  - Revert "Linux: Keep termios ioctl constants strictly internal"
  - termios: manual: document the SPEED_MAX and BAUD_MAX constants
  - termios: SPEED_MAX and BAUD_MAX constants
  - termios: move the baud_t interface from __USE_MISC to __USE_GNU
  - termios: manual: improve the explanation of various tty concepts
  - termios: manual: remove duplicate cfgetospeed() definition
  - termios: manual: fix typo: tcsettattr -> tcsetattr
  - elf: Initialize GLRO (dl_read_only_area) after static dlopen (bug 33139)
  - x86-64: Properly compile ISA optimized modf and modff
  - x86-64: Compile ISA versions of modf/modff with -fno-stack-protector
  - iconv: iconv -o should not create executable files (bug 33164)


author: Florian Weimer <fweimer@redhat.com> - 2.42-2
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit 5e298d2d937b6da06500478be956abeb24357e05:
  - elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
  - elf: Extract rtld_setup_phdr function from dl_main
  - stdlib: resolve a double lock init issue after fork [BZ #32994]


author: Frédéric Bérat <fberat@redhat.com> - 2.42-3
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit c5476b7907d01207ede6bf57b26cef151b601f35:
  - hurd: support: Fix running SGID tests
  - Revert "tst-freopen4-main.c: Call support_capture_subprocess with chroot"
  - tst-env-setuid: Delete LD_DEBUG_OUTPUT output
  - tst-freopen4-main.c: Call support_capture_subprocess with chroot
  - tst-fopen-threaded.c: Delete temporary file
  - Delete temporary files in support_subprocess
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Florian Weimer <fweimer@redhat.com> - 2.42-4
changelog:
  - Add marker symbol versions GLIBC_ABI_DT_X86_64_PLT, GLIBC_ABI_GNU2_TLS,
    GLIBC_ABI_GNU_TLS, following upstream.
  - Auto-sync with upstream branch release/2.42/master,
    commit 7a8f3c6ee4b565a02da4ba0dad9aaeaeed4639ce:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - malloc: Fix checking for small negative values of tcache_key
  - malloc: Make sure tcache_key is odd enough
  - malloc: Fix MAX_TCACHE_SMALL_SIZE
  - malloc: Remove redundant NULL check


author: Frédéric Bérat <fberat@redhat.com> - 2.42-5
changelog:
  - Auto-sync with upstream branch master,
    commit b11411fe2ee7a8f3c3a2c1ee99c1729adb9a0efe:
  - posix: Fix invalid flags test for p{write,read}v2 (Yury Khrustalev)
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nptl: Fix MADV_GUARD_INSTALL logic for thread without guard page (BZ 33356) (Adhemerval Zanella)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - libio: Define AT_RENAME_* with the same tokens as Linux (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129] (H.J. Lu)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-6
changelog:
  - Auto-sync with upstream branch master,
    commit f122d0b4d145814869bf10c56db1d971bcba55c5:
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704) (Sunil K Pandey)
  - support: Exit on consistency check failure in resolv_response_add_name (Florian Weimer)
  - support: Fix FILE * leak in check_for_unshare_hints in test-container (Florian Weimer)
  - sprof: fix -Wformat warnings on 32-bit hosts (Collin Funk)
  - sprof: check pread size and offset for overflow (DJ Delorie)


author: Florian Weimer <fweimer@redhat.com> - 2.42-8
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit cbf39c26b25801e9bc88499b4fd361ac172d4125:
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
  - memalign: reinstate alignment overflow check (CVE-2026-0861)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-10
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit ebd45473f5421e0fced5ba2cde0f1aaa36e79b61:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)
  - Remove patches already applied upstream:
    - glibc-rh2429016.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.4-1
changelog:
  - New GCT release v6.2.20251212
  - Drop patches included in the release
  - Drop old system V init scripts


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.9-1
changelog:
  - New GCT release v6.2.202660123
  - Drop patch globus-gsi-proxy-core-gcc16-lto.patch (included in the release)


author: josef radinger <cheese@nosuchhost.net> - 3.4.2-5
changelog:
  - missed the release being still on -4
  - Patch3: 0003-Host-Gimp-convert-to-new-GimpProcedureConfig-APIs.patch no longer needed


author: josef radinger <cheese@nosuchhost.net> - 3.5.0-2
changelog:
  - try to fix compilation
  - switch to new git-repo (https://github.com/GreycLab/gmic-qt
    instead of https://github.com/c-koi/gmic-qt)


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2.4.8-4
changelog:
  - add a root certificate bundle due to changes in ca-certificates (#2380121)
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Clemens Lang <cllang@redhat.com> - 2.4.9-1
changelog:
  - New upstream release 2.4.9
  - Fixes CVE-2025-68973 (https://gpg.fail/memcpy)
  - Fixes https://gpg.fail/sha1
  - Fixes https://gpg.fail/detached


author: Marcus Müller <mueller_fedora@hostalia.de> - 3.10.12.0-1
changelog:
  - New version
  - Corrected stated license to actually be GPLv3 (or later)
  - Remove unused python3-click-plugins dependency (GNU Radio now only needs python3-click)
  - Add python3-jsonschema dependency, needed for JSON configuration blocks
  - Include the shell completion scripts for gr_modtool in the installed files


author: Emir Akdag <infraw.linux@proton.me> - 3.8.2-1
changelog:
  - Unretire package and update to 3.8.2
  - Fix CVE-2025-58188
  - Switch to modern go-vendor-tools packaging


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.1.94-1
changelog:
  - Update to 1.1.94 and adopt Go Vendor Tools - Closes rhbz#2247447
    rhbz#2333252 rhbz#2340458 rhbz#2352242 rhbz#2359396rhbz#2360599
    rhbz#2360639


author: Jerry James <loganjerry@gmail.com> - 0.0.14-8
changelog:
  - Minor packaging enhancements
  - BR gpgverify instead of gnupg2
  - Add a VCS field
  - Run pdflatex in nonstop mode


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-6
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - fix CVE-2025-30204
  - fix CVE-2024-47875
  - move grafana home directory from /usr/share/grafana to /var/lib/grafana


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Added selinux rules for ldap and other observed selinux denials
  - Reworked the spec file selinux sections
  - Fixed the priority of the selinux policy


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 13.1.2-3
changelog:
  - Temporarily disable gdk plugin in Fedora 43 (and later),
    due to undiagnosed issues with GDKPixbuf 2.44.
    Ref: rhbz#2395533
  - Also disable GTK2 with GDKPixbuf, and obsolete graphviz-gtk2
    to provide up/downgrade paths.
  - Add GDKPixbuf as an explicit build dependency (when enabled)


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Felix Kaechele <felix@kaechele.ca> - 6.2.0-1
changelog:
  - Update to 6.2.0
  - clean up spec file
  - use forge macros
  - use cmake to build
  - fix License tag
  - use rpmautospec


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.1-1
changelog:
  - New upstream development version 1.55.1
  - Ensure minimum libguestfs is 1.57.1 (for guestfs_setfiles)


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.2-3
changelog:
  - hp-plugin failed checksum due usage of different hashes (fedora#2361230)
  - output is not seen after installing plugin (fedora#2361230)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Christoph Junghans <junghans@votca.org> - 1.10.0-8
changelog:
  - Fix build with Ninja
  - Drop s390x and ppc64le build - unsupported by upstream
  - Fixes: rhbz#2381020


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33~rc2-1
changelog:
  - Fix memory leak in Wayland IM protocol
  - Fix reset signal w/ GTK_IM_MODULE=ibus and GTK3, GTK4 in Wayland
  - Update gdm bits based on new gdm changes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33~rc2-2
changelog:
  - Rebuild for cldr-emoji-annotation-48~beta1-1.fc43 and
    gnome-shell-extension-no-overview-49-1.fc43


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-2
changelog:
  - Resolves: #2413790 - Load EN compose file in pt-BR locale
  - Update simple.xml with xkeyboard-config 2.46


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-3
changelog:
  - Resolves: #2237664 Fix mouse position in Emojier category list
  - Resolves: #2326455 Free IBusInputContext in input_method_activate()
  - Resolves: #2346033 Fix SEGV with allocation fail in _Xi18nChangeIC()
  - Resolves: #2392358 Refer QT_IM_MODULES to check Wayland
  - don't build in parallel in ui/gtk3
  - Fix GCC `-Wunused-but-set-variable` flag
  - '--enable-wayland-im' option without daemon
  - Fix memory leaks with fail safe
  - Fix memory leaks #2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-4
changelog:
  - Resolves: #2321990#c10 Keep xinit postun in ibus for back compatibility
  - Resolves: #2418564 Do not install ibus-xinit in COSMIC desktop
  - Resolves: #2418670 Disable X11 display in GTK3 Wayland with hibernation
  - Fix GTK3 build in src/tests/ibus-keypress
  - Add warning to clean VALA files in configure


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33-5
changelog:
  - Resolves: #2419469 Fix SEGV with double bus_name_acquired_cb()
  - Resolves: #2424256 Delete Requires desktop-file-utils in spec
  - Resolves: #2425585 Separate lxqt-wayland-session and lxqt-x11-session in spec
  - Resolves: #2428238 Add awesome in spec
  - Rebase: #1797120 Fix assertion in panel_binding_construct()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.34-1
changelog:
  - Update to 1.4.34
  - Add the “S-” prefix to msymbols for non-ASCII characters only if the
    character “is not graph”. “is not graph” is the same as “is space or is
    not printable”. (Resolves: https://github.com/ibus/ibus-m17n/issues/90)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.35-1
changelog:
  - Update to 1.4.35
  - Generate translations into metainfo.xml files with autotools Related:
    https://github.com/mike-fabian/ibus-m17n/issues/2
  - Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml
    (Resolves: https://github.com/mike-fabian/ibus-m17n/issues/2)
  - Fix match pattern for layout for inscript
  - Fix match pattern for rank for inscript2


author: Mike FABIAN <mfabian@redhat.com> - 1.4.37-1
changelog:
  - Update to 1.4.37
  - Port UI to GTK4 (Resolves: github-issue#99). Configure option for Gtk4
    added: “--with-gtk=2.0|3.0|4.0|no” (default: 4.0)
  - Translation update from Weblate (cs 100%, de 100%, el 100%, es 100%,
    new: fi 100%, fr 100%, ja 100%, ka 100%, kab 100%, lt 100%, pt_BR
    100%, ro 96%, ru 100%, sv 100%, tr 100%, uk 100%, zh_CN 100%,
    zh_TW 28%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.38-1
changelog:
  - Update to 1.4.38
  - Convert png icons from 16-bit to 8-bit color (Resolves:
    https://github.com/ibus/ibus-m17n/issues/107)


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Packit <hello@packit.dev> - 48-1
changelog:
  Changes with 48
  ----------------
    - Add pxe-tar-xz to bib types and add boot tests for f43, stream9, and stream10 (#436)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support rootless bootc-image-builder (#445)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: fix constant format string (#438)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - tests: Fix bootc pxe testing (#439)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Mikhail Medvedev 1.4.5-1
changelog:
  - Fix: Incorrect block/page size after first read procedure
  - Fix: Incorrect reading/writing I2C low speed chips
  - Added support for MXIC MX25V8035F
  - Added I2C bus speed combobox to the main form


author: Mikhail Medvedev 1.5.1-1
changelog:
  - Fix: Incorrect install dir for udev while cross compiling
  - Added form for working with security registers for SPI NOR flash memory chips


author: Mikhail Medvedev 1.5.2-1
changelog:
  - Fix: Memory leaks
  - Fix: Gigadevice status registers write error
  - Added new SPI chip sizes
  - Added Fidelix, Zetta, MXIC OTP algorithm
  - Added support for new Boya, Winbond chips


author: Mikhail Medvedev 1.5.3-1
changelog:
  - Last version of QHexEdit used
  - Hex-functions optimised
  - Added support GIANTEC, DOSILICON NOR FLASH chips
  - Fix: incorrect uninstall script
  - Fix: i2C 128K size is repeated twice
  - Fix: error calculating file size


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7    
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Jan Macku <jamacku@redhat.com> - 10.26-1
changelog:
  - Translated using Weblate (Turkish)
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - Translated using Weblate (Turkish)


author: Jan Macku <jamacku@redhat.com> - 10.27-1
changelog:
  - spec: add missing license files
  - build(deps): bump actions/checkout from 5 to 6
  - build(deps): bump actions/upload-artifact from 4 to 5
  - build(deps): bump github/codeql-action from 3 to 4
  - ci: fix issues with missing base commit
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Turkish)
  - man: add ifdown.8
  - build(deps): bump actions/checkout from 4 to 5
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Portuguese (Brazil))
  - Translated using Weblate (Polish)
  - Translated using Weblate (Greek)
  - Translated using Weblate (Greek)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Greek)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Chinese (Traditional) (zh_TW))
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Finnish)
  - retry arping one more time in ifup-eth when sendto failed
  - Translated using Weblate (French)
  - ci: add dependency glib-2.0
  - network-functions: Fix a bug in is_nm_handling()


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 1.8.11-9
changelog:
  - Reapply the change to keep symlinks managed by alternatives under /usr/bin,
    this time with a scriptlet create symlinks if /usr/sbin is unmerged.


author: Patrick Monnerat <patrick@monnerat.net> 4.3.2-2
changelog:
  - Include shared library info in debuginfo subpackage.
  - Require proper Tcl ABI version.
    https://bugzilla.redhat.com/show_bug.cgi?id=2337721


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Augusto Caringi <acaringi@redhat.com> [6.18.9-0]
changelog:
  - Add a couple of bzs to be fixed with the 6.18.9 build (Justin M. Forbes)
  - media: ipu-bridge: Add DMI quirk for Dell XPS laptops with upside down sensors (Hans de Goede)
  - media: ov02c10: Remove unnecessary hflip and vflip pointers (Hans de Goede)
  - media: ov02c10: Fix the horizontal flip control (Hans de Goede)
  - media: ov02c10: Adjust x-win/y-win when changing flipping to preserve bayer-pattern (Hans de Goede)
  - media: ov02c10: Fix bayer-pattern change after default vflip change (Hans de Goede)
  - media: ov02c10: Support hflip and vflip (Sebastian Reichel)
  - media: ov02c10: Fix default vertical flip (Sebastian Reichel)
  - Linux v6.18.9


author: Jerry James <loganjerry@gmail.com> - 4.0.4-1
changelog:
  - Version 4.0.4
  - Add patch to fix bitwise NOTs that should be logical NOTs
  - BR 7zip instead of p7zip-plugins


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Julien Rische <jrische@redhat.com> - 1.21.3-3
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: rhbz#2304071
  - Fix various issues detected by static analysis
    Resolves: rhbz#2322704
  - Remove RSA protocol for PKINIT
    Resolves: rhbz#2322706
  - Make TCP waiting time configurable
    Resolves: rhbz#2322711


author: Julien Rische <jrische@redhat.com> - 1.21.3-5
changelog:
  - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    Resolves: rhbz#2342798
  - Support PKCS11 EC client certs in PKINIT
    Resolves: rhbz#2341962
  - kdb5_util: fix DB entry flags on modification
    Resolves: rhbz#2336555
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: rhbz#2214326
  - Remove dependency of krb5-libs on gawk and sed
    Resolves: rhbz#2323859


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: rhbz#2370259
  - PKINIT: implement paChecksum2 from MS-PKCA v20230920
    Resolves: rhbz#2357215
  - Disallow RC4 HMAC-MD5 session keys by default (CVE-2025-3576)
    Resolves: rhbz#2359705


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Hans de Goede <hdegoede@redhat.com> - 0.5.2-4
changelog:
  - Add upstream patch to enable IPU7 (Lunar Lake) support (rhbz#2333383)
  - Add upstream patches to fix AGC oscillation (rhbz#2368538)
  - Add upstream patches to fix various swstats problems including
    a reproducable divide by zero crash in the AGC code


author: Germano Massullo <germano.massullo@gmail.com> - 3.17.1-1
changelog:
  - 3.17.1 release
  - Replaced Add-zlib-header.patch and Increase_version_control.patch with minizip.patch
  - Removed CONTRIBUTING.md in the spec file


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Kate Hsuan <hpa@redhat.com> - 1.94.9-1
changelog:
  - Update to the upstream version 1.94.9
  - Update to version 1.94.9
  - Add openssl-devel dependency
  - Add a file /usr/share/metainfo/org.freedesktop.libfprint.metainfo.xml


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.4-2
changelog:
  - Require passt
  - https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/YDHKKQSDURTMSKSN6GW3QGQI43DTFXNH/


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.0-1
changelog:
  - New upstream stable version 1.58.0
  - Require qemu >= 7.2.0 and passt.
  - Libvirt >= 11.10.0 is needed but don't hard require it for F43


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Ondrej Holy <oholy@redhat.com> - 1.1.22-2
changelog:
  - Use 
  %setup        -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-doc-Don-t-document-internal-endian-macros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-disabled-foxconn-487-e111-id.-https-github.com-libmt.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: Jerry James <loganjerry@gmail.com> - 2.8.9-1
changelog:
  - Version 2.8.9
  - Drop upstreamed or irrelevant patches: autoconf, autotoolization,
    includes, noreturn
  - Drop tool-prefix patch; ship binaries with upstream names
  - Add shared patch to link shared libraries with Fedora linker flags
  - Use zlib-ng directly instead of via the compatibility interface
  - Minor spec file simplifications


author: Richard W.M. Jones <rjones@redhat.com> - 1.23.9-1
changelog:
  - New upstream development version 1.23.9
  - Fixes security issue with nbd+ssh URIs
    https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/YZMBF3SJRWTRVT5L3KWSNHITFTRMQNTT/


author: Packit <hello@packit.dev> - 2.0.0-1
changelog:
  - Update to version 2.0.0
  - License changed to Apache-2.0 by upstream in version 2.0.0
  - Upstream moved to https://github.com/OpenIDC/liboauth2
  - Resolves: rhbz#2307691


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.1-1
changelog:
  - Update to v7.10.1
    Fixes rhbz#2357284
  - Add patch to fix deprecation of the <ciso646> header for C++17


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.3-1
changelog:
  - Update to v7.10.3
    Fixes rhbz#2401105
  - Drop patch to fix deprecation of the <ciso646> header for C++17,
    solved upstream


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation
  - Refactor parse_entitlement_data()
  - Fix relocating certificate paths to /etc/rhsm-host


author: Remi Collet <remi@remirepo.net> - 0.18.1-1
changelog:
  - update to 0.18.1 for CVE-2025-13402
  - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64


author: Jakub Jelen <jjelen@redhat.com> - 0.11.3-1
changelog:
  - New upstream release fixing the following security weaknesses:
    - CVE-2025-8114: Fix NULL pointer dereference after allocation failure
    - CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX


author: Jakub Jelen <jjelen@redhat.com> - 0.11.4-1
changelog:
  - New upstream release fixing following security issues:
    - CVE-2025-14821: libssh loads configuration files from the C:\etc directory on Windows
    - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request()
    - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files
    - CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input
    - CVE-2026-0967: Specially crafted patterns could cause DoS
    - CVE-2026-0968: OOB Read in sftp_parse_longname()


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-5
changelog:
  - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#2383827)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
changelog:
  - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
  - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


author: Stefan Berger <stefanb@linux.ibm.com> - 0.9.6-8
changelog:
  - Apply patch for fixing build without engine.h
  - Apply patch for returning proper error code upon RSA decryption failure


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Jerry James <loganjerry@gmail.com> - 3.6.2-1
changelog:
  - Version 3.6.2
  - Use zlib-ng directly instead of via the compatibility interface
  - Temporarily disable one failing test on ppc64le


author: Jerry James <loganjerry@gmail.com> - 3.6.2-2
changelog:
  - Work around a test failure
  - The failure appears to be due to changes in bsearch behavior in newer
    glibc builds


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-4
changelog:
  - Omit build-time license auditing on i686
  - This keeps llhttp from blocking licensecheck’s dependencies or askalono-
    cli from dropping i686 support.


author: Timm Bäder <tbaeder@redhat.com> - 18.1.8-6
changelog:
  - Fix missing cstdint include that broke the build.
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2338982


author: Jerry James <loganjerry@gmail.com> - 7.3-1
changelog:
  - Version 7.3
  - Use environment modules instead of modifying binary names
  - Stop building for 32-bit x86


author: Terje Rosten <terjeros@gmail.com> - B.02.20-10
changelog:
  - Improve cmake patch to get all required flags added
  - Increase required cmake version
  - Update to latest commit 209f83


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.8-4
changelog:
  - Move the license file to lua-libs, so it is always present if any combination of subpackages is installed
  - Fixes: rhzb#2418960


author: Wolfgang Ulbrich <raveit65.sun@gmail.com> - 1.28.0-5
changelog:
  - use some upstream commits
  - tabpopup: Report the window as active to a11y when it's showing
  - tabpopup: Stop spamming the ATs with label changes at startup
  - fix Firejail/Flatpak applications display "as superuser" on window title


author: Pavol Sloboda <psloboda@redhat.com> - 3.2.6-3
changelog:
  - [Fedora Change] [tmt] Migrated from STI test format to tmt as specified
    in this fedora change: https://fedoraproject.org/wiki/Changes/DisableSTI


author: Michal Schorm <mschorm@redhat.com> - 3.2.6-6
changelog:
  - [bugfix] Fix debug builds
  - transform the bcond macro to the modern form
  - move the debug build flags to the CMake argument
  - enable listing the cmake cache (LAH), but add the "N" option to make the
    cache read-only


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sandro Mani <manisandro@gmail.com>
changelog:
  - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082,
    CVE-2025-11081, CVE-2025-11083


author: Sandro Mani <manisandro@gmail.com> - 2.86.3-3
changelog:
  - Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489
  - Remove ancient, obsolete downstream patch from 2012 (RHBZ#2431179)


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.8-2
changelog:
  - Fix memleak in XmString from:
    https://sourceforge.net/p/motif/code/merge-requests/10/
  - Add NET_WORKAREA and GTK_WORKAREAS support from:
    https://sourceforge.net/p/motif/code/merge-requests/11/


author: Antonio Trande <sagitter@fedoraproject.org.com> - 20240319-9
changelog:
  - Make Jacop conditionally required (rhbz#2343005)
  - Disable Jacop (currently unmaintained)
  - Fix packaging of installed files


author: Link Dupont <link@sub-pop.net> - 0.2.8-1
changelog:
  - Update to 0.2.8 (RHBZ#2423020, RHBZ#2423010, RHBZ#2411647, RHBZ#2410751,
    RHBZ#2409801, RHBZ#2408328)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-4
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - rebase to 1.27.1 (rhbz#2412002)
  - changes to mutool run to bring it into sync with WASM library
  - improvements for text extraction
  - improved HTML+CSS support
  - mutool grep: new tool to search for text in documents
  - various bugfixes


author: Jerry James <loganjerry@gmail.com> - 4.6.2-27
changelog:
  - Version 4.6.2
  - Rework which license/doc file is installed in which package
  - Add %lang markings to translation files


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.16-4
changelog:
  - Change private key cipher to aes-256-cbc
  - Remove obsolete system V conditionals in the specfile
  - Move user/group creation logic to sysusers.d fragments


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: Richard Russon <rich@flatcap.org> - 20250113-1
changelog:
  - Bug Fixes
    - #4477 fix crash in folder-hook
    - #4480 fix memory leak in compose message preview (fixes #4478)
    - #4483 query: fix comma-separated names
    - #4485 lua: fix `lua_mutt_call()`
    - #4490 notmuch: refresh the Email if the filename changes
    - fix: no new mail message
    - fix display of certificate fingerprints
    - fix prompt colour
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovakian
    - 100% Turkish
    - 91% French
    - 41% Chinese (Traditional)
  - Build
    - #4479 Fix DT_NUMBER entries on 32-bit endian platforms
  - Code
    - #4481 Simplify `mutt_file_fopen()`
    - colour refactoring
    - standardise variable names for temporary files


author: Richard Russon <rich@flatcap.org> - 20250404-1
changelog:
  - Features
    - #4493 config: don't quote enums
    - #4493 link config dump to docs
    - #4494 refactor the Help Page for clarity
    - #4554 CLI: `neomutt -DD` -- Dump Different
    - #4593 browser: tag select rather than descend
  - Bug Fixes
    - #3469 source: fix variable interpretation
    - #4370 `mutt_oauth2`: refactor `sasl_string` computation
    - #4536 expand tabs to spaces in compose preview
    - #4537 fix dumping of initial values
    - #4538 move `real_name` init
    - #4542 Remove `MUTT_NEWFOLDER`, fix appending to mbox
    - #4546 Respect Ignore when modifying an email's headers
    - #4549 fix refresh on toggle `hide_thread_subject`
    - #4550 buffer: fix seek
    - #4551 add comma to single `<complete-query>` match
    - #4595 notmuch: check for parse failure
    - #4596 query: allow `<>`s around email addresses
    - pager: fix normal/stripe colour
    - fix colour leaks in pager
    - fix array leak in the verify certificate dialog
  - Translations
    - 100% German
    - 100% Turkish
    - 96% Lithuanian
    - 86% French
    - 49% Chinese (Traditional)
  - Build
    - #4552 Deprecate some configure options that aren't used anymore
    - build: workaround for unused-result warning
  - Code
    - #4492 colour refactoring
    - #4543 debug: Chain old SEGV Handler
    - #4545 Allow nested `ARRAY_FOREACH()`
    - #4553 config: API `has_been_set()`
    - #4557 config: drop ConfigSet from API functions
    - #4558 drop obsolete pgp/smime menus
    - #4559 array: `foreach_reverse()`
    - #4560 Change description of verify-key to be crypto-scheme agnostic
    - #4561 expando: move EnvList out of library
    - #4570 Simplify the management of NeoMutt Commands
    - #4571 libcli - parse the command line
    - #4580 Split CLI Usage into sections
    - #4582 pager: fix lost `NT_PAGER` notifications
    - #4591 pager: fix refresh on config/colour changes
    - array: upgrade `get_elem_list()`
    - Buffer refactoring
    - coverity: fix defects
    - improve `localise_config()`
    - main: drop -B (batch mode) option
    - merge init.[ch] into main.c
    - refactor version code
    - neomutt: `home_dir`, `username`, `env`
    - query: unify NeoMutt `-D` and `-Q`
    - refactor `main.c`/`init.c`
    - sidebar: streamline expando callbacks
    - test: lots of parse coverage
    - window refactoring
    - window: force recalc|repaint on new windows
  - Upstream
    - Update mutt/queue.h
    - Fix NULL pointer dereference when calling `imap_logout_all()`


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Andreas Schneider <asn@redhat.com> - 0.11.4-1
changelog:
  - Update to version 0.11.4
  - https://github.com/neovim/neovim/releases/tag/v0.11.4
  - resolves: rhbz#2392274


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Gabriel Somlo <gsomlo@gmail.com> - 1-51.20250211gite4115e8
changelog:
  - remove cmake reference to tests submodule (to avoid having to pull it in)
  - update to newer snapshot


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.1-3
changelog:
  - cleanups and fixes
  - remove RHEL 7 compatibility
  - add RHEL 9 compatibility and EOL comments
  - restore RHEL 8 compatibility


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-1
changelog:
  - Update to 1.28.2
  - fixes CVE-2026-1642
  - move log directory to nginx-filesystem subpackage (PR#20)
  - delete Maxim Dounin's key, it's no longer listed on the nginx website


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Jens Petersen <petersen@redhat.com> - 2.31.2-33
changelog:
  - ghost /nix/var/nix/* and sockets
  - add builds/ ghost back to daemon (since it creates it)
  - db/ and gcroots/auto/ remain after uninstalling


author: Jens Petersen <petersen@redhat.com> - 2.31.2-36
changelog:
  - trivial spec changes
  - list nix-daemon files without glob
  - commented TEST_ROOT: doesn't actually work


author: Jan Staněk <jstanek@redhat.com> - 1:22.22.0-2
changelog:
  - Fix c-ares unbundling bits
  - gate %check section behind a conditional
  - gate ./configure flag behind a conditional


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Michael J Gruber <mjg@fedoraproject.org> - 0.40-1
changelog:
  - rebase with upstream release 0.40 (rhbz#2432525)
  - additions to C and python API
  - generate Emacs autoload file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.3-4
changelog:
  - Patch for gcc-15 "error: expected identifier or '(' before 'false'"
  - Use gcc -std=gnu17 to avoid md5wrap.c:48:5: error: too many arguments to function ‘MD5Init’


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - [MIDI] loading files would cause crash (null dereference) if ~/.timidity.cfg not present


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-2
changelog:
  - [MIDI] Add patch to prefer /etc/timidity++.cfg to /etc/timidity.cfg
  - [MIDI] Add upstream patch to set comment to .pat filename without full path
  - Recommends: fluid-soundfont-gm


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.0^20241204git8ac191c-1
changelog:
  - Update to last git commit
  - Add 0001-fix-qt6-arg-format.patch
  - Add 0002-fix-qt6-arg-sampleformat.patch


author: John Wolfe <john.wolfe@broadcom.com> - 12.4.0-1
changelog:
  - Package a new upstream version of open-vm-tools-12.4.0-23259341.
    - A number of Coverity reported issues have been addressed.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.2.0.4-1
changelog:
  - update to 0.2.0.4 (resolves rhbz#2399635)
  - generate SO version from release version automatically


author: Peng Wu <pwu@redhat.com> - 1.1.9-4
changelog:
  - Update for https://fedoraproject.org/wiki/Changes/CMake_drop_install_vars
  - Resolves: RHBZ#2381327


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-13
changelog:
  - Remove /usr/sbin from the default path
    Resolves: rhbz#2352387
  - Export and accept COLORTERM
    Resolves: rhbz#2352653


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.0p1-2
changelog:
  - Provide better diagnostics for non-supported private keys
    (https://github.com/openssh/openssh-portable/pull/564)
  - Ignore too short hostkeys in known_hosts file
    (https://github.com/openssh/openssh-portable/pull/567)
  - Switch to systemd-socket activation for ssh-agent
    Resolves: rhbz#2181353


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.0p1-4
changelog:
  - Update sshd@.service to follow upstream, mostly support ephemeral sshd keys
    Submitted by Allison Karlitskaya (https://src.fedoraproject.org/rpms/openssh/pull-request/101)
    Needs a SELinux counterpart.
    Related: rhbz#2374928


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Rebase to OpenSSL 3.5 final release, sync patches with RHEL. Restoring POWER8 support
    Resolves: rhbz#2359082


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.4-2
changelog:
  - Resolves: CVE-2025-15467
  - Resolves: CVE-2025-15468
  - Resolves: CVE-2025-15469
  - Resolves: CVE-2025-66199
  - Resolves: CVE-2025-68160
  - Resolves: CVE-2025-69418
  - Resolves: CVE-2025-69420
  - Resolves: CVE-2025-69421
  - Resolves: CVE-2025-69419
  - Resolves: CVE-2026-22795
  - Resolves: CVE-2026-22796
  - Resolves: CVE-2025-11187


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-1
changelog:
  - Update to latest git
  - Backport #2727 to fix multi-machine script on Fedora
  - Backport #2728 to fix tests without Inline::Lua


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-3
changelog:
  - Backport PR #2750 to allow slow typing with (assert_)script_run
  - Backport PR #2751 to fix tests with IPC::Run 20250809.0


author: Packit <hello@packit.dev> - 152-1
changelog:
  Changes with 152
  ----------------
    - Remove internal/runner/ (#4874)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Gianluca Zuccarelli, Lukáš Zapletal, Michael Vogt
    - Weldr API endpoints & store: don't use `rpmmd` package structs for serialization (HMS-9376) (#4868)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane, Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4872)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - cloudapi/v2: recover from panics in serializeManifest (HMS-9379) (#4869)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller
    - go.mod: update osbuild/images to v0.198.0 (HMS-9444) (#4877)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update to v0.197.0 (#4873)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - templates/packer/worker: remove unbound variable (#4871)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Tomáš Hozza
    - worker/executor: drop cloudwatch logging from executor (HMS-9304) (#4870)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 157-1
changelog:
  Changes with 157
  ----------------
    - .github/renovate: disable dockerfile updates (#4945)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane
    - Red Hat Konflux update osbuild-composer-maintenance (HMS-9721) (#4951)
      - Author: red-hat-konflux[bot], Reviewers: Florian Schüller, Sanne Raymaekers
    - build(deps): bump golangci/golangci-lint-action from 6 to 9 (#4914)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4948)
      - Author: red-hat-konflux[bot], Reviewers: Florian Schüller, Tomáš Hozza
    - cloudapi: add job progress to compose status (HMS-9341) (#4947)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzbot: don't print the slack webhook url (#4944)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - templates/packer: retry vector start multiple times (#4953)
      - Author: Sanne Raymaekers, Reviewers: Ondřej Budai, Tomáš Hozza
    - test: disable cloud-image-validator (#4954)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Dumitru Ceara <dceara@redhat.com> - 24.03.90-7
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 76bd54eb36d52d1b3fa663d185f53dcaa2cff06b
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.3.rc1
changelog:
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook
  - Enable fencing regression tests again


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - seems as if pre-tasks need to have tags to be executed
    at least that worked on a pull request via pagure


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-11
changelog:
  - Convert STI tests to TMT (rhbz#2383013)
  - Update for new upstream release tarball: Pacemaker-3.0.1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1
  - now you can add a new revision
    rpmdev-bumpspec -c "test" pacemaker.spec
  - or run tests locally
    tmt run discover provision prepare execute --how tmt --verbose -v -v --debug
  - Removed tier1 test again as it was just for investigation of a CI issue


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.0-1
changelog:
  - Rebase to release 1.7.0 (#2321512)
  - Rebase to pam-redhat-1.2.0
  - build: update to meson build system
  - doc: disable build for i686


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.1-2
changelog:
  - FSWC: Migrate to lastlog2
    Link: <https://fedoraproject.org/wiki/Changes/Migrate_to_lastlog2>
    Resolves: #2361594


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Nathan Scott <nathans@redhat.com> - 7.0.0-1
changelog:
  - Fix openmetrics PMDA handling of epoch timestamps (BZ 2373868)
  - Add selinux policy for pmsignal with pmie scripts (BZ 2375937)
  - Fix tmpfiles.d handling of some config dirs (BZ 2372945)
  - Latest upstream release (BZ 2382655)


author: Sam Feifer <sfeifer@redhat.com> - 7.0.2-2
changelog:
  - Update selinux policy to fix pmda-hdb selinux issue
  - Patch pmda-hdb to fail gracefully when connection fails


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-3
changelog:
  - Add BR: gcc
  - Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
  - Unset test envars


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-5
changelog:
  - Drop conditional around ExcludeArch, no i686 valkey build anywhere
  - Directly BR: valkey rather than valkey-compat-redis
  - Drop duplicate BR:


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 8.4.15-2
changelog:
  - Fix GH-20528 regression breaks mysql connexion using an IPv6 address enclosed
    in square brackets (upstream patch)


author: Remi Collet <remi@remirepo.net> - 2.2.0-1
changelog:
  - update to 2.2.0
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Remi Collet <remi@fedoraproject.org> - 4.2.4-8
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add upstream patch for libcurl 8.9
  - Fix build with PHP 8.4 using patch from
    https://github.com/m6w6/ext-http/pull/135


author: Remi Collet <remi@fedoraproject.org> - 4.2.6-3
changelog:
  - fix incompatible pointer type FTBFS #2341063
    using patch from https://github.com/m6w6/ext-http/pull/143
  - re-license spec file to CECILL-2.1


author: Remi Collet <remi@fedoraproject.org> - 3.7.0-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/Imagick/imagick/pull/690


author: Remi Collet <remi@remirepo.net> - 3.2.0-9
changelog:
  - build out of sources tree
  - fix incompatible pointer types using patch from
    https://github.com/php-memcached-dev/php-memcached/pull/555


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.2.3-4
changelog:
  - fix incompatible-pointer-types using patch from
    https://github.com/php/pecl-file_formats-yaml/pull/74


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Hans de Goede <hdegoede@redhat.com> - 24.004.60-17
changelog:
  - Fix Dvorak layout icon not showing when the evdev keyboard driver is used
    (rhbz#2341810)
  - Fix label plugin not finding fonts
  - Add UseSimpledrm setting support to configfile (rhbz#2346150)


author: Hans de Goede <hdegoede@redhat.com> - 24.004.60-18
changelog:
  - Update simpledrm hiDPI scaling heuristics (rhbz#2347519)
  - Ignore simpledrm when EFI fb is running at 1024x768/800x600
    (rhbz#2347519)
  - Update spinner theme to match latest libadwaita spinner (rhbz#2325399)


author: Hans de Goede <hansg@kernel.org> - 24.004.60-19
changelog:
  - Don't use simpledrm together with LUKS (rhbz#2359283, rhbz#2339072)
  - Fix crash when using 2 GPUs with displays attached (rhbz#2368186)
  - Fix crash caused by calling ply_event_loop_watch_fd () with a -1 fd
    (rhbz#2370979)
  - Fix /usr/lib64/plymouth/tribar dir not being owned (rhbz#2279776)
  - Fix keymap and capslock icons not shown on monitor on second GPU
    (rhbz#2375854)
  - Make the prompt on the diskunlock screen look a bit better (rhbz#2356893)
  - Add patches from upstream to fix messages being logged twice on serial
    consoles


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 24.004.60-22
changelog:
  - Fix crash in drm plugin close_input_source() (rhbz#2416551)
  - Fix wrong KBD layout when a user has configured multiple layouts
    (rhbz#2416197)
  - Fix race in fb_device_has_drm_device () causing frame-buffer plugin to
    sometimes load while drm plugin is already handling the display


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-7
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
  - sepolicy: Fix detection of writeable locations


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: José Matos <jamatos@fedoraproject.org> - 2.4.0-2
changelog:
  - All the changes below come from Jerry James <loganjerry@gmail.com> (from Fri Feb 23 2024)
  - Use virtual Provides instead of empty packages
  - Link with flexiblas instead of gslcblas
  - Move documentation into a doc subpackage
  - Various minor spec file cleanups
  - Add patch to fix FTBFS on big endian systems


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jerry James <loganjerry@gmail.com> - 2.6.4-1
changelog:
  - Version 2.6.4
  - Drop upstreamed remove-redundant-ref patch
  - Drop upstreamed workaround for swig 4.3
  - Add patch for incompatible pointer types
  - Add patch for incompatible format specifiers


author: Jerry James <loganjerry@gmail.com> - 1.5.0-1
changelog:
  - Version 1.5.0
  - Stop building for 32-bit x86
  - Update the License field to BSD-2-Clause
  - Use the pyproject declarative buildsystem
  - Do not build documentation for RHEL


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.4-1
changelog:
  - Update to new upstream release 1.26.4 (rhbz#2390816)
  - adjust to mupdf 1.26.7 (and 8)
  - various bugfixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.5-1
changelog:
  - Update to new upstream release 1.26.5 (rhbz#2403129)
  - adjust to mupdf 1.26.9 (and 10)
  - improve the Python type annotations
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - Update to new upstream release 1.27.1 (rhbz#2412929)
  - compatibility with mupdf 1.27.1
  - new method `Document.repair()`
  - various fixes


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Jerry James <loganjerry@gmail.com> - 0.9-39.20231204.a6987c8
changelog:
  - Rebuild for polymake 4.15
  - Add patch to fix polymake shell usage
  - Add patches to fix compiler warnings
  - Use the pyproject declarative buildsystem


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Sandro <devel@penguinpee.nl> - 2.3.3-2
changelog:
  - limit number of tests
  - patch tests accomodating changes in dependencies
  - drop pytz and xarray as BRs (both optional)
  - Close RHBZ#2332196


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Martin Kutlak <mkfedora@outlook.com> - 1.3.14-1
changelog:
  - Update to upstream version 1.3.14 rhbz#2273502 rhbz#2261617
  - Fix build with -Wincompatible-pointer-types PR#5


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.32.0-5
changelog:
  - Unretirement request: pagure.io/releng/issue/12906 Revert "Retired: Fails
    to install: https://pagure.io/releng/issue/12871"


author: Manish Tiwari <matiwari@redhat.com> - 1.4.0-1
changelog:
  - Update to 1.4.0 version
  - Bundled whisper.cpp
  - Remove pybind11 to use system available pybind11-devel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-4
changelog:
  - Disable 5 tests that does not work on F43/rawhide
  - Update files section with macros and add patch comments


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc license
  - Add COPYING to rauc-doc license
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Tim Flink <tflink@fedoraproject.org> - 6.4.0-5
changelog:
  - add patch for option to disable roctracer logging
  - disable roctracer logging for rhel builds
  - allow for builds on rhel with ninja


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.2-1
changelog:
  - Update to 6.4.2
  - Rebase patch1
  - Fix some tabs to spaces in the specfile for consistent formatting


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.2-1
changelog:
  - Update to 0.9.2
  - Unpin sev, reqwest, x509-parser, and asn1-rs deps. from exact versions
  - Allow x509-parser 0.18 and asn1-rs 0.7


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f43-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Artem Polishchuk <ego.cordatus@gmail.com> - 0.274-8
changelog:
  - Modernize Cmake
  - https://fedoraproject.org/wiki/Changes/CMake_ninja_default
  - https://fedoraproject.org/wiki/Changes/CMake_drop_install_vars


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 258.2-1
changelog:
  - Version 258.2
  - A bunch of fixes in many components.
  - Stop creating user namespace for system services (rhbz#2391343)
  - Systemd trigger scriptlets are updated


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Rebuild (xorg-x11-server)
    Fixes: CVE-2025-49175 / CVE-2025-49176 / CVE-2025-49177
           CVE-2025-49178 / CVE-2025-49179 / CVE-2025-49180


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.30-2
changelog:
  - Rebuilt with jsonwebtoken patched for CVE-2026-25537
  - Fixes RHBZ#2437472; fixes RHBZ#2437467; fixes RHBZ#2437461


author: Mark Wielaard <mjw@fedoraproject.org> - 3.25.1-3
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Remi Collet <remi@fedoraproject.org> - 8.1.3-3
changelog:
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@fedoraproject.org> - 8.1.6-1
changelog:
  - Valkey 8.1.6 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.17.1-1
changelog:
  - Update to 8.17.1
  - Resolves: rhbz#2351373
  - Migrate API documentation to gi-docgen
  - Drop dependency on python3-cairo (due to vipsprofile removal)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.3-1
changelog:
  - New upstream development version 2.9.3
  - Ensure minimum libguestfs is 1.57.1 (for guestfs_setfiles)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.5-1
changelog:
  - New upstream development version 2.9.5
  - Use new ./configure --disable/--enable flags for excluding RHEL features


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.7-1
changelog:
  - New upstream development version 2.9.7
  - Backport non-upstream patch to improve Windows conversions


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - fix fd leak (probably #2290715)
  - enable lz4 compression by default
  - add supprt for av1 software encoding/decoding
  - add support for vsock transport
  - fix build with gcc-14


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - don't abort on double-^C (#2262447)
  - fix for compositors using drm_syncobj protocol


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - New release: 36.1 (bcl)
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (49699333+dependabot[bot])
  - test: iot-qcow2-image does not support packages (bcl)
  - test: qcow2 renamed to server-qcow2 (bcl)
  - build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 4 to 5 (49699333+dependabot[bot])
  - tests: Use current host arch in info and list tests (bcl)


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-1
changelog:
  - update to xen 4.20.1
    remove old qemu code for spac file
    remove armv7hl and ix86 code from spec file
    update configuration in xen.hypervisor.config 
    minios is now a separate file
    package extra ocaml files
    unset -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 for hypervisor build
    rebase xen.efi.build.patch
    includes fixes for security vulnerabilites
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
  	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-5
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
  	CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
  	CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-7
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434046)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434048)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.2.6-1
changelog:
  - "Update to 1.2.6" * Fixed compass outline drawing * Exposed selected text
    to the windowing system Details on [release
    notes](https://github.com/xournalpp/xournalpp/releases/tag/v1.2.6)


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


