# changelog

author: Kalev Lember <klember@redhat.com> - 0.0.26-3
changelog:
  - Fix a self test failure when building under systemd-nspawn based mock
  - Re-enable self tests for all arches


author: Simone Caronni <negativo17@gmail.com> - 1:1.4.36-1
changelog:
  - All references to 1.4.36.0 have disappeared completely from the git
    repository and 1.4.36 has been released in place. Bump Epoch to point to
    a real release.


author: Sérgio Basto <sergio@serjux.com> - 2.8.0-1
changelog:
  - Update SDL2_mixer to 2.8.0 (#2259608)
  - Migrate to SPDX license
  - Add Provides: bundled(timidity) (#2103502)


author: Sérgio Basto <sergio@serjux.com> - 2.8.0-4
changelog:
  - Remove libmikmod dependency and add support to wavpack, because version 2.6.0
    removed support for libmikmod as a MOD music backend and version 2.8.0 added
    support for loading wavpack sound files


author: Sérgio Basto <sergio@serjux.com> - 3.1-1
changelog:
  - Update VirtualGL to 3.1
  - Do not rely on hostname package (#1860323)
    (Fri Jul 24 2020 Pavel Zhukov <pavel@pzhukov-pc.home.redhat.com>)


author: Maxwell G <gotmax@e.email> - 1-7
changelog:
  - Implement %ansible_test_unit and add ansible-packaging-tests metapackage.
  - Require ansible-core at buildtime


author: Maxwell G <gotmax@e.email> - 1-8.1
changelog:
  - Refactor %ansible_collection_url, %ansible_collection_install,
    %ansible_test_unit.
  - Specfiles no longer need to define %collection_namespace or %collection_name
    for the macros to work.
  - Add new %ansible_collections_dir, %ansible_roles_dir, and
    %ansible_collection_filelist macros.
  - Prepare to deprecate %ansible_collection_files
  - Undefine %_package_note_file to stop that file from leaking into collection
    artifacts.


author: Maxwell G <maxwell@gtmx.me> - 1-10
changelog:
  - %ansible_collection_install - disable spurious collections path warnings
  - ansible-packaging-tests - don't depend on pytest-forked with ansible-core 2.16
  - ansible-srpm-macros - include license file in the package


author: Dominik Mierzejewski <rpm@greysector.net> - 3.8.0-3
changelog:
  - ensure arpackicb.h is installed (#1990366)
  - spec clean-up: drop support for building with other blas libs on F34+
  - drop obsolete ldconfig scriptlet macro


author: Peter Oliver <rpm@mavit.org.uk> - 50:2020.12.07-3
changelog:
  - Recommend the installation of these dictionaries when both aspell and an English langpack are installed.


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 3.1.3-1
changelog:
  - Update to upstream release 3.1.3
  - Remove conditionals for Fedora 33 (it is now EOL)
  - Unbundle sqlite and use the system version (rhbz: #1973455)
  - Force X11 backend in GTK to fix cursor scroll (rhbz: #2024019)
  - Fix builds when using wxWidgets 3.1.6 (rhbz: #2072823)


author: Carl George <carlwgeorge@fedoraproject.org> - 1.2.26-1
changelog:
  - Update to version 1.2.26
  - CVE-2023-49084, CVE-2023-49085, CVE-2023-49086, CVE-2023-49088, CVE-2023-50250, CVE-2023-51448


author: Carl George <carlwgeorge@fedoraproject.org> - 1.2.27-1
changelog:
  - Update to version 1.2.27
  - CVE-2024-25641, CVE-2024-29894, CVE-2024-31443, CVE-2024-31444, CVE-2024-31445, CVE-2024-31458, CVE-2024-31459, CVE-2024-31460, CVE-2024-34340


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.1-3
changelog:
  - fix rhbz (#2249632)
  - use upstream commit https://github.com/mate-desktop/caja-extensions/commit/91cc466


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.14-3
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current build


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Drop a no longer required invocation from the spec file
  - Don’t install docs at all, rather than removing them after the fact
  - Build and run “extra” tests


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 3.7.0-5
changelog:
  - Ensure /usr/bin/animalsay file mode is 0755
  - Use "install" command for installing dirs and files
  - Change name of bash completion file to just "cowsay"
  - Define and use macro for cows directory
  - Install empty site-cows directory for site specific cows
  - Fix bash completion to look in actual cows/ directory


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20231101gitdad6419-1
changelog:
  - Update to 0^20231101gitdad6419
  - Upstream has fixed bugs in string_algo, program_options, and thread_pool
    snippets/libraries


author: Petr Pisar <ppisar@redhat.com> - 0-22.20211216git6c10c30
changelog:
  - Rebased to 6c10c305e8dde193546e6b33cf8a785d5dc123e2 (fixes building on AIX,
    Sun; fixes an undefined behavior whith unaliagned memory access)


author: Simone Caronni <negativo17@gmail.com> - 2.43-2
changelog:
  - Allow mirroring Debian repositories that do not follow the Debian/Ubuntu
    structure (JFrog, Hashicorp, NVIDIA, Spotify, etc.).


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.18-28
changelog:
  - Fully patch obsolete FSF postal address in license text
  - Since upstream merged the PR for this, we now patch the license text file


author: Ding-Yi Chen <dchen@redhat.com> - 1.27.0-1
changelog:
  - Fixes Bug 2255716 - efl-1.27.0 is available
  - Add BuildRequires: libjxl-devel
  - Documents:
    + Remove NEWS, because upstream no-longer have it
    + Rename README to README.md


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98-1
changelog:
  - New version
    Resolves: rhbz#2297124
  - Fixed incorrect parsing of multiline rfc2231 header filename
    Resolves: CVE-2024-39929
  - Enabled SRS support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96-2
changelog:
  - Fixed "tainted search query is not properly quoted" for greylisting,
    patch provided by Marcel Härry <mh+fedora@scrit.ch>


author: Sérgio Basto <sergio@serjux.com> - 1.35.1-1
changelog:
  - Update to 1.35.1
  - Update to version 1.35 (Wed Jun 05 2024 Packit <hello@packit.dev>)
  - Resolves: rhbz#2290632


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.9-1
changelog:
  - New version
    Resolves: rhbz#2080085
  - Avoided MITM attack on non-DNSSEC XMPP connections
    Resolves: CVE-2022-26491


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 8.1.1-4
changelog:
  - Backport fix handling of formattable types implicitly convertible to pointers (fixes: rhbz#2059736)


author: Alastor Tenebris <livingnightmare@thelivingnightmare.xyz> 0.4.5-16
changelog:
  - Allow desktop file to be shown in other desktop environments
  - Use more rpm macros
  - Fix typo in build script


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 3.6.1-2
changelog:
  - cleanup spec
  - support building on EPEL8
  - use --with offensive to skip removing offensive cookies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-4
changelog:
  - Modernize and clean up the spec file
  - Make it harder to miss any .so version change
  - Properly install the license file
  - Remove an obsolete sed-patch
  - Move documentation and examples to a -doc subpackage
  - Build PDF instead of HTML documentation


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.7.0-10
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Fix cmake build


author: Robert Scheck <robert@fedoraproject.org> 11.3.1-5
changelog:
  - backport from 11.3.1-4.4: s390x: add support for register arguments preserving (#2168204)
  - backport from 11.3.1-4.3: compile the cross binaries as PIE/-z now (#2155452)
  - backport from 11.3.1-4.2: ship libitm.spec in cross-gcc (#2154462)
  - backport from 11.3.1-4.1: add cross compiler functionality for non-production uses (#2149650)
  - backport from 11.3.1-4: update from releases/gcc-11-branch (#2117632)
  - backport from 11.3.1-4: fix the detection of Sapphire Rapids in host_detect_local_cpu
  - backport from 11.3.1-4: fix -Wmismatched-dealloc documentation (#2116635)


author: Robert Scheck <robert@fedoraproject.org> 11.4.1-3
changelog:
  - backport from 11.4.1-2.3: fix member vs global template (RHEL-2607)
  - backport from 11.4.1-2.2: guard the bit test merging code in if-combine (RHEL-6068)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2.1: use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2: update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release


author: Robert Scheck <robert@fedoraproject.org> 11.5.0-2
changelog:
  - backport from 11.5.0-2: fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - backport from 11.5.0-2: libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - backport from 11.5.0-2: fix wrong code with memcpy from _Complex (PR tree-optimization/116034)
  - backport from 11.5.0-1: update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
  - backport from 11.5.0-1: fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - backport from 11.5.0-1: fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)
  - backport from 11.4.1-3: update from releases/gcc-11-branch (RHEL-17638)
  - backport from 11.4.1-3: use -fno-stack-protector in some aarch64 tests


author: Robert Scheck <robert@fedoraproject.org> 11.5.0-5
changelog:
  - backport from 11.5.0-5: rebuild for CVE-2020-11023 (RHEL-78377)
  - backport from 11.5.0-4: revert the PR middle-end/57245 patch (RHEL-76359)
  - backport from 11.5.0-3: honor -frounding-math in real truncation (PR middle-end/57245, RHEL-73749)


author: Filip Janus <fjanus@redhat.com> - 3.4.3-5
changelog:
  - Initial GDAL 3.4 version with alternate naming to avoid conflicts with RHEL gdal
  - Renamed package from gdal to gdal3.4
  - Library and headers remain unchanged (libgdal.so, /usr/include/gdal/)
  - Renamed all binaries with gdal3.4- prefix (e.g., gdal3.4-gdalinfo)


author: Sandro <devel@penguinpee.nl> - 3.0.12-7
changelog:
  - Apply security patches
  - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288)
  - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292)
  - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296)


author: Jens Petersen <petersen@redhat.com> - 8.10.4-113
changelog:
  - rebase to 8.10.4 from ghc:8.10 module stream
  - https://downloads.haskell.org/ghc/8.10.4/docs/html/users_guide/8.10.1-notes.html
  - use llvm10 for ARM


author: Jens Petersen <petersen@redhat.com> - 8.10.5-115
changelog:
  - update to 8.10.5 with patch for missing rts symbols
  - use llvm 11 for ARM
  - https://downloads.haskell.org/~ghc/8.10.5/docs/html/users_guide/8.10.5-notes.html


author: Jens Petersen <petersen@redhat.com> - 2.7.2-1
changelog:
  - improve ghc_delete_rpaths to delete trailing :_libdir
  - extra: add ghc_merge_filelist from ghc.spec


author: Jens Petersen <petersen@redhat.com> - 2.7.2-2
changelog:
  - Obsoletes for F41 (with macro): ConfigFile, MonadCatchIO-*, cprng-aes,
    crypto-random, cryptohash, x509*, highlighting-kate, libxml-sax,
    monad-journal, regexpr


author: Jens Petersen <petersen@redhat.com> - 2.7.3-1
changelog:
  - changes for ghc-9.12
  - add -W option (no ghc override) to: ghc_lib_build_without_haddock,
    ghc_lib_build, and ghc_libs_build
  - add -P option (no prof) to ghc_lib_build_without_haddock
  - append short hash to ghcplatform


author: Jens Petersen <petersen@redhat.com> - 2.7.4-1
changelog:
  - add -P to ghc_libs_build and ghc_lib_build to disable profiling
  - extra: remove haskell-platform special case from ghc_libs_build


author: Jens Petersen <petersen@redhat.com> - 2.7.5-1
changelog:
  - add -H to ghc_libs_build and ghc_lib_build to disable haddock docs
  - cabal_configure: place -fhide-source-paths first in --ghc-options
  - drop conditions for rhel < 7


author: Jens Petersen <petersen@redhat.com> - 2.7.6-1
changelog:
  - fix 2.7.5 regression preventing haddock generation for libraries
    caused by bad -H macro conditional expansion (thanks decathorpe and qulogic)


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: Dominik Mierzejewski <rpm@greysector.net> 1.4.2-1
changelog:
  - updated to 1.4.2
  - include ABI version in shared library filename to prevent accidental bumps
  - drop obsolete patch


author: Neal Gompa <ngompa13@gmail.com> - 1.10.0-1
changelog:
  - Rebase to 1.10.0 (rhbz#1810432)
  - Remove upstreamed patches
  - Backport fixes from upstream for pkgconfig files
  - Refresh pkgconfig dependency information patch


author: Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
changelog:
  - Update on 2025-12-23
  - Use stable branch instead of master
  - Add next generation of Gnulib the python release of Gnulib
  - Fix building tests
  - Re-struct for gnulib ng with python base
  - Update dependencies


author: Sérgio Basto <sergio@serjux.com> - 0-78.20260302git4a3650d
changelog:
  - Update to git4a3650d branch stable-202601 with ISO C23 fixes
  - The git-merge-changelog binary has been removed from the source and is now maintained in a separate repository.


author: Maxwell G <maxwell@gtmx.me> - 3.3.0-1
changelog:
  - Update to new source git source
  - Remove go_mod_vendor.prov from this package. It's already upstream.
  - Add -L flag to %gometa and %gorpmname
  - Add direct dependency on go-rpm-macros-golist-symlink


author: Ken Dreyer <kdreyer@ibm.com> - 2.9.1-3
changelog:
  - enable general dynamic tls on s390x (Thanks Tom Callaway
    <spot@fedoraproject.org>) (rhbz#2290376)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.22-1
changelog:
  - update to 3.22
  - keep all python modules in python subpackage
  - move gpsprof to clients subpackage
  - disable LTO on aarch64


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.46.7-2
changelog:
  - More-correct .pc file path fix
  - When passing paths to the build system, they are now correctly relative
    to the prefix rather than absolute.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.8.104-4
changelog:
  - Backporting upstream fixes
  - Fixes CVE: CVE-2020-13574 CVE-2020-13575 CVE-2020-13577 CVE-2020-13578
  - Fixes CVE: CVE-2020-13576


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.8.117-1
changelog:
  - Update to 2.8.117
  - Drop patches previously backported
  - Add /usr/share/gsoap to soapcpp2's default import path


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Kalev Lember <klember@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - Switch to meson build system
  - Remove manual pkgconfig requires from -devel package
  - Fix various issues with directory ownership
  - Tighten soname globs


author: Antonio Trande <sagitter@fedoraproject.org> - 4.2.15-6
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
  - Use bundled junit
  - Fix hamcrest symlinks in Fedora 35+


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Robert Scheck <robert@fedoraproject.org> - 1.8.8-8
changelog:
  - Switch from Java 11 to 17 for Red Hat Enterprise Linux 9
  - Add patches for Java 21 support (#2323983, #2340633, #2363798)


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.21.pre4
changelog:
  - Added patch from upstream to choose first "running" interface,
    rather than first "up" interface (#1403025)
  - Added patch from upstream to support scales beyond 1 Gbps


author: Tomas Smetana <tsmetana@redhat.com> - 1.6.1-1
changelog:
  - New upstream version
  - Fix rhbz#1834969 - CVE-2020-12761 integer overflow in ICO color maps handling


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-3
changelog:
  - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
    Latex2e-translated-notice"


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-4
changelog:
  - Fix a heap overread in search_brace/lexi
  - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919)


author: Simon Guilbault <simon.guilbault@calculquebec.ca> 0.0.3-1
changelog:
  - Adding ca_name option
  - Adding a real logging output instead of print()
  - Adding scrape duration and status
  - Detect when ibqueryerrors is not executable


author: Dominik Mierzejewski <rpm@greysector.net> - 20.2.1-1
changelog:
  - update to 20.2.1 (#1827296)
  - fix build with recent cmake macro changes
  - put the new Media SDK Tracer in a separate subpackage


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Guido Aulisi <guido.aulisi@gmail.com> - 1.9.17-1
changelog:
  - Update to 1.9.17
  - Drop dependency on main package for example-clients (#1939083)
  - Use license tag


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Björn Esser <besser82@fedoraproject.org> - 1.9.4-1
changelog:
  - Update to version 1.9.4 (rhbz#1882874)
  - Package all files generated by doxygen
  - Run tests single threaded


author: Neal Gompa <ngompa@fedoraproject.org> - 39.1-1
changelog:
  - Add fontconfig snippet to enable RGBA subpixel rendering for KDE
  - Reland: feat: remove KDE Action Restrictions
  - Set the default theme for sddm


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.16.1.el9_8]
changelog:
  - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
  - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
  - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
  - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
  - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
  - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
  - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
  - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
  - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
  - dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
  - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.17.1.el9_8]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
  - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
  - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.18.1.el9_8]
changelog:
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
  - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
  - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
  - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
  - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
  - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
  - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
  - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
  - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
  - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
  - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
  - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
  - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
  - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
  - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
  - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
  - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
  - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
  - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
  - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
  - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
  - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
  - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
  - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
  - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
  - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
  - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
  - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
  - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
  - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
  - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
  - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
  - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
  - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
  - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
  - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
  - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
  - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
  - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
  - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
  - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
  - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
  - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
  - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
  - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
  - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
  - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
  - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
  - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
  - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
  - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
  - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
  - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
  - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
  - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
  - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
  - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
  - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
  - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
  - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
  - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
  - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
  - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
  - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
  - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
  - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
  - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
  - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
  - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
  - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
  - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
  - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
  - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
  - net: Fix typos (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
  - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
  - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
  - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
  - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
  - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
  - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
  - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
  - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
  - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
  - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
  - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
  - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
  - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
  - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
  - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
  - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
  - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
  - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
  - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
  - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
  - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
  - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
  - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
  - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
  - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.19.1.el9_8]
changelog:
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
  - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
  - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
  - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
  - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
  - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
  - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
  - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
  - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
  - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
  - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
  - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
  - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.20.1.el9_8]
changelog:
  - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
  - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
  - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.21.1.el9_8]
changelog:
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
  - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
  - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.22.1.el9_8]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.23.1.el9_8]
changelog:
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773]
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180773]
  - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
  - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.24.1.el9_8]
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
  - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 5.108.0-4
changelog:
  - Rebuilt for libimobiledevice and libplist soname bump
  - Remove solid-power from files listing, since WIP APIs are no longer enabled (rhbz#2225952)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.109.0-2
changelog:
  - Restore the power management backend, needed for plasma-pk-updates (#2233613)
  - But do not build the solid-power executable that conflicts with KF6 Solid


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.3.0-36
changelog:
  - Regenerate autotool generates sourcs at build-time to work around defects
    in rpm (F35FTFS, RHBZ 1987639).


author: Sérgio M. Basto <sergio@serjux.com> - 0.5.93-4
changelog:
  - Force replacement of packages of
    copr:copr.fedorainfracloud.org:sergiomb:libayatana-appindicator repo


author: Xavier Bachelot <xavier@bachelot.org> - 1.3.2-1
changelog:
  - Update to 1.3.2 (RHBZ#2112605, RHBZ#2113476, RHBZ#2089046)
  - Don't build bdj on i386 (RHBZ#2104068)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.13-5
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Fix cmake changes


author: Simone Caronni <negativo17@gmail.com> - 2.2.6-7
changelog:
  - SPEC file cleanup.
  - Use proper macros everywhere.
  - Fix permissions for binaries.
  - Fix rpmlint issues.
  - Trim changelog.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14-1
changelog:
  - Rebase to 1.14.
  - Use newer upstream fork at https://github.com/ofalk/libdnet
  - Drop multilib fix now uptream (RHBZ#342001 RHBZ#1915838).
  - Drop unapplied shrext patch, no longer needed.


author: Simone Caronni <negativo17@gmail.com> - 1.2.6-12
changelog:
  - Drop ldconfig scriptlets.
  - Be more explicit for files.
  - Use cmake macros everywhere.
  - Small cleanups.
  - Trim changelog.
  - Adjust tests properly.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1-28
changelog:
  - Update URLs
  - Adjust whitespace to match personal preference
  - Add a build conditional for autoreconf
  - Use pkgconfig(…) dependencies where appropriate
  - Upgrade source hash from MD5 to SHA-512
  - Reduce spec file macro indirection and modernize macros
  - Use stricter globs to ensure so-version changes are detected
  - Make dependency on base package from -devel arched


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.36-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - add gtk-doc to build requirements (#1942967)


author: Bastien Nocera <bnocera@redhat.com> - 1.2.1-0.1
changelog:
  + libimobiledevice-1.2.1-0.1
  - Add support for newer devices
  - This is a snapshot of the in-development 1.2.1 version


author: Peter Fordham <peter.fordham@gmail.com> - 3.3.11.1-14
changelog:
  - Fix autoconf check for C99 and update build to run autoreconf.
    https://sourceforge.net/p/mikmod/bugs/29/


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.12-1
changelog:
  - New version
    Resolves: rhbz#2316447
  - Dropped privileges when operating on user files
    Resolves: CVE-2024-47191


author: Matt Domsch <mdomsch@fedoraproject.org> 2.11.0-0.32
changelog:
  - fix systemd service type=simple patch to apply cleanly
  - Use systemd RuntimeDirectory for socket file


author: Bastien Nocera <bnocera@redhat.com> - 2.2.0-1
changelog:
  + libplist-2.2.0-1
  - Update to 2.2.0, breaking the ABI
  - Stop linking python module against libpython


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 3.3-1
changelog:
  - Update to v3.3-latest
  - Update license to Apache-2.0 (according to LICENSE.txt)
  - Convert License tag to SPDX


author: Remi Collet <remi@remirepo.net> - 1.0.18-9
changelog:
  - Security: `crypto_core_ed25519_is_valid_point()` now properly
    rejects small-order points that are not in the main subgroup
    CVE-2025-69277


author: Peter Fordham <peter.fordham@gmail.com> - 1.2.11-5.20210922git4915c308
changelog:
  - Add missing include of string.h for memset in spf_utils.c
    https://github.com/shevek/libspf2/issues/41


author: Paul Howarth <paul@city-fan.org> - 1.11.0-1
changelog:
  - Update to 1.11.0 (rhbz#2211200)
    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake "unity" builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: Now parses attribute extensions if they exist
    - SFTP: No longer will busy loop if SFTP fails to initialize
    - SFTP: Now clear various errors as expected
    - SFTP: No longer skips files if the line buffer is too small
    - SCP: Add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed "old gex" build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files
  - Avoid use of deprecated patch syntax
  - Build static library but don't package it since it's required for the
    test suite (https://github.com/libssh2/libssh2/issues/1056)
  - Remove redundant references to %{_libdir} from pkgconfig file
  - Add patch to work around strict permissions issues for sshd tests


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Frantisek Sumsal <frantisek@sumsal.cz> - 1.2.0-7
changelog:
  - Initial EPEL 9 build for BZ#2029481
  - Temporarily skip building docs due to work around BZ#2031879


author: Adam Williamson <awilliam@redhat.com> - 0.9.13-8
changelog:
  - Rebase all patches so Patch12 applies
  - Backport PR #444 to fix crash on all runs after the first (#1882718)


author: Miro Hrončok <mhroncok@redhat.com> - 10.2.1-1
changelog:
  - Update to 10.2.1
  - Update the license tag to SPDX, acknowledge GPL version >2 is allowed
  - Fixes: rhbz#2176842


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2023.06.20-1
changelog:
  - Update to 2023.06.20
  - Update license tag and convert it to SPDX
  - Tweak package summary and description
  - Rework specfile to follow the Fedora packaging guidelines


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-1
changelog:
  - Update to 9.2.1 (close RHBZ#2273352, fix CVE-2024-27982)
  - Switch from xz to zstd compression for the “dev” bundle archive


author: Richard Shaw <hobbes1069@gmail.com> - 0.2-2
changelog:
  - Update per reviewer comments.
  - Renamed package to lpcnetfreedv (same as library), repo will be renamed in
    the near future.
  - Made library private as it is essentially a plugin for freedv.


author: Charles R. Anderson <cra@alum.wpi.edu> - 2.2.3-1
changelog:
  - Update to 2.2.3
  - Add patches to fix build with lua-5.4
  - Add Restart=on-failure to service file
  - Add sysctl.d file to increase inotify watches


author: Andreas Schneider <asn@redhat.com> - 2.1.0-0.21beta3
changelog:
  - Rebase onto https://github.com/LuaJIT/LuaJIT/tree/v2.1
  - Dropped support for ppc64le
  - Dropped support for s390x


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 3.9.1-1
changelog:
  - New upstream release, drop upstreamed patch
  - Raise lua-devel from Suggests to Recommends, add new Requires: gcc
    and Recommends: make and cmake (rhbz#2091484)


author: Simone Caronni <negativo17@gmail.com> - 1.18.8-1
changelog:
  - Update to 1.18.8, switch to Meson.
  - Update docs installation.
  - Drop gcc/python-devel build requirements.
  - Avoid exclude directives in the files section so build ids are not duplicated.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.18.8-3
changelog:
  - Remove all symlinks in previous -devel subpackage in %pre_trans
    to ensure update transaction (#2123422)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.0-3
changelog:
  - fix %files ownership
  - drop explicit BR: make (already pulled in by cmake)
  - drop needless ldconfig scriptlet


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.2-1
changelog:
  - update to 1.26.2
  - Add setting to raise windows on alt+tab popup
  - add https://github.com/mate-desktop/marco/commit/d83cb24


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-4
changelog:
  - add dummy subpackage mate-desktop-systemd
  - use earlyoom instead of systemd-oomd-defaults
  - fixes rhbz (#2068699)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-5
changelog:
  - obsolete mate-desktop-systemd
  - use earlyoom instead of systemd-oomd-defaults
  - make earlyoom uninstallable
  - fixes rhbz (#2068699)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.1-3
changelog:
  - use https://github.com/mate-desktop/mate-panel/commit/0be9b20
  - use https://github.com/mate-desktop/mate-panel/commit/82cb82b
  - use https://github.com/mate-desktop/mate-panel/commit/82cb82b
  - use https://github.com/mate-desktop/mate-panel/commit/0be9b20


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - use https://github.com/mate-desktop/mate-screensaver/commit/ec813df
  - use https://github.com/mate-desktop/mate-screensaver/pull/262
  - fix rhbz (#1997852)


author: Miro Hrončok <mhroncok@redhat.com> - 2022.02-3
changelog:
  - Fix build failure with GCC 13
  - Declare bundled e57 library by providing bundled(e57) and adding Boost to the list of licenses
  - Fixes: rhbz#2162550


author: Parag Nemade <pnemade AT redhat DOT com> - 2.3.2-3
changelog:
  - Update hunspell-dir path
    F36 Change https://fedoraproject.org/wiki/Changes/Hunspell_dictionary_dir_change


author: Sandro Mani <manisandro@gmail.com> - 3.0.0-2
changelog:
  - Attempt to compute openssl modules dir dynamically from executable path if not set by OPENSSL_MODULES


author: Simone Caronni <negativo17@gmail.com> - 2.2.3-1
changelog:
  - Update to 2.2.3.
  - Update SPEC file (license, tabs/spaces, trim changelog, etc.)
  - Switch to CMake build.
  - Drop static libraries.
  - Drop test client and obsolete documentation.
  - Do not use static library when building Python module.


author: Petr Pisar <ppisar@redhat.com> - 2.2.0-2
changelog:
  - Fix an unitialized memory in tinfl_decompress_mem_to_callback() (GH#197)
  - Fix an unaligned memory access
  - Fix setting MZ_ZIP_GENERAL_PURPOSE_BIT_FLAG_UTF8
  - Fix an undefined behaviour in tinfl_decompress() (GH#216)
  - Fix mz_zip_reader_extract_to_heap() to read correct sizes (GH#220)


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.2-2
changelog:
  - drop ldconfig scriptlets (https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets)
  - drop explicit BR: make (already pulled in via cmake)
  - %build: one cmake option per line
  - %check: drop 'make test', does nothing
  - -devel: drop explicit cmake dep (autodeps should add cmake-filesystem already)


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-4
changelog:
  - Patch whitespace in spec file
  - Fix syntax for applying patches during rpm build
  - Bump BuildRequires to use pcre2-devel


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-8
changelog:
  - Rebase to upstream be1e01ea173defc9837bd1b90dc72ed63c8131e7
  - Remove patches that were merged upstream
  - BZ2249532 - Fix tilde operator


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.67-1
changelog:
  - Update to 0.67
  - Convert to rpmautospec
  - Update home and source URLs
  - Update perl's requires to use virtual naming
  - Use make_build and make_install macros
  - Add check section
  - Fix rpmlint error on description
  - Add conflict to moreutils-parallel against parallel package


author: Jerry James <loganjerry@gmail.com> - 3.6.2-13
changelog:
  - Fix 100% CPU after restarting sound devices (bz 2055986)
  - Fix Aeolus crash at exit
  - Do not swizzle license names after SPDX conversion


author: Richard Shaw <hobbes1069@gmail.com> - 32.0-5.67.20221020gitba52c13223
changelog:
  - Update to 32.0.67.20221020gitba52c13223 from branch fixes/32
  - Move git checkout in update script to use https as the git protocol seems to be down.


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 32.0-6.76.20221129gitg44f88ed46
changelog:
  - Update to latest fixes/32
  - Take a minimalist approach with devel subpackage dependencies by removing most. See bz 6501


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 33.1-1.14.20230714gitggbeaf2bacb
changelog:
  - Update to latest fixes/33
  - add firewalld config for new web frontend
  - adjust runtime requirements


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 33.1-1.15.20230725gitg402c6d775
changelog:
  - Update to latest fixes/33 to fix ftbs on 6.5 kernel
  - recommend gnome-shell-extension-no-overview for mythfrontend


author: Ondrej Sloup <osloup@redhat.com> - 5.0-1
changelog:
  - Use autosetup
  - Change source links
  - Redo patch files and remove obsolete ones
  - Add runtests.sh
  - Rebase to the latest upstream version (rhbz#1924029)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.7-8
changelog:
  - Regenerate autotools; Fixes: RHBZ#2143996
  - Backport upstream fix for IPv6 support
  - Backport an upstream fix and a pending PR for the ssh plugin


author: Ron Olson <tachoknight@gmail.com> 3.6.6-5
changelog:
  - Fixed some issues under Fedora 35 not building properly and
    not being able to run correctly when installed


author: Lee Yarwood <lyarwood@redhat.com> - 1.3.0-2
changelog:
  - Add novnc_proxy and associated man pages
  - Drop various utilities, tests and other files not required from the package
  - Add docs/API.md docs/EMBEDDING.md docs/LIBRARY.md as docs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.14.1-9
changelog:
  - Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf,
    so that it ends up before 'resolve' (#1867830)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.9.10-13
changelog:
  - Add missing Requires on shadow-utils for user creation in pre
    Fixes: RHBZ#2208017
  - Convert license tag to SPDX


author: Ondrej Sloup <osloup@redhat.com> - 3.2-1
changelog:
  - Rebase to the latest upstream version (rhbz#2218893)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 2:2022.5.17-1
changelog:
  - New upstream version 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: David Sommerseth <davids@openvpn.net> - 2.5.9-2
changelog:
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-28
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix the build by moving desktop files from kde4/services/ServiceMenus/ to kservices5


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Paul Howarth <paul@city-fan.org> - 0.10-16
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Set metadata for static dependency list and install
    - Move repository to GitHub
    - Minor test clean-ups
    - Fix Makefile.PL to work for authors in perl 5.26+
  - Package new LICENSE file


author: Petr Pisar <ppisar@redhat.com> - 1.446-21
changelog:
  - Modernize a spec file
  - Run-require SDL developmental package
  - Alien::SDL::ConfigData is architecture-specific
  - Specify all dependencies
  - Do not set unnecessary rpath
  - Package the tests


author: Paul Howarth <paul@city-fan.org> - 1.94-5
changelog:
  - Don't pull in modules from mod_perl as it will not work with the default
    httpd setup in recent Fedora/EL releases and will not be available in EL-9
    (https://bugzilla.redhat.com/show_bug.cgi?id=2030601#c2)


author: Paul Howarth <paul@city-fan.org> - 0.11-12
changelog:
  - For EPEL, don't bother with optional test requiring Parallel::ForkManager
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1:0.08-1
changelog:
  - Update to 0.08
    - Switched to Dist::Zilla
    - Added version dependency for Algorithm::Diff in Array/Diff.pm
    - Added a bunch of entries to SEE ALSO


author: Paul Howarth <paul@city-fan.org> - 1:0.09-1
changelog:
  - Update to 0.09
    - Set minimum Perl version in metadata (GH#1)
    - Clarified in the doc that the arrays must be sorted (CPAN RT#39184)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Add version to Test::More use to ensure correct version
    - Remove useless MIN_PERL_VERSION_FOR_COW
    - Update CI workflow
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Relax bogus blead test failures
    - Add reverse test: if @Barewords are covered on keywords.h
    - Move some @Barewords not in keywords.h to @BarewordsExtra
    - Add %main, %CORE, %CORE::GLOBAL:: to @Hashes
    - Fixed versions for EQ, CORE, state, break, given, when, default, UNITCHECK


author: Paul Howarth <paul@city-fan.org> - 0.27-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.400002-13
changelog:
  - Avoid optional test dependency perl(Moo) for EPEL builds
  - Use author-independent source URL
  - Simplify find command using -delete


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.11-1
changelog:
  - Update to 0.11
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_install} instead of make
  - Add %license macro


author: Paul Howarth <paul@city-fan.org> - 1.08-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.08-16
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.010-7
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Follow upstream guidance (META.json) on run-time dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.07-10
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 3.8-14
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop comments referring to older versions of the package
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.027-1
changelog:
  - Update to 0.027
  - Replace calls to %{__perl} with /usr/bin/perl
  - Use %{make_build} instead of make
  - Use %{make_install} instead of "make pure_install"


author: Paul Howarth <paul@city-fan.org> - 2.26-1
changelog:
  - Update to 2.24
    - Merge in clean-up patches from Karen Etheridge
    - Add back file t/0, required for t/05.zero.t
    - Update Makefile.PL to switch issue tracker from rt.cpan.org to GitHub
    - Update POD to change RT to GitHub
    - Reformat Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 2.27-1
changelog:
  - Update to 2.27
    - Add the option of passing a hashref to the constructor, where it is
      turned into an object of the class (see POD under new([$config]) for
      details)
    - Move test.conf back into t/, where it was years ago, before someone tried
      to remove all uses of File::Spec; since File::Spec is used often now,
      there is no point in keeping test.conf in the root directory of the distro


author: Paul Howarth <paul@city-fan.org> - 4.38-1
changelog:
  - Update to 4.38
    - Encode real core booleans as boolean notation (GH#224)
    - Minor test fixes
    - Fix docs typo (GH#225)


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 2.14-16
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 3.04-13
changelog:
  - Fix decryption of ciphertext created with 'header' => 'randomiv'
    https://bugzilla.redhat.com/show_bug.cgi?id=2235322
    https://github.com/lstein/Lib-Crypt-CBC/issues/6
    https://github.com/lstein/Lib-Crypt-CBC/pull/7


author: Paul Howarth <paul@city-fan.org> - 3.07-1
changelog:
  - Update to 3.07 (rhbz#2383870)
    - New upstream maintainer
    - Fix CVE-2025-2814 by using Crypt::URandom
    - Fix decryption of ciphertext created with 'header' => 'randomiv'
    - Fixed bug in which manually-specified key and -pkdf=>"none" was not having
      any effect
    - Converted build process to Dist::Zilla
    - Miscellaneous minor Dist::Zilla related changes
  - Switch upstream source URL from cpan.metacpan.org to www.cpan.org to skip a
    redirect
  - Package new LICENSE, SECURITY.md and vulnerabilities.txt files


author: Paul Howarth <paul@city-fan.org> - 1.10-11
changelog:
  - BR: gcc
  - Remove some legacy cruft
    - Drop BuildRoot: and Group: tags
    - Drop explicit %clean section
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.4.0-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify Digest::MD5 versioned dependency generation using a patch
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.4.1-1
changelog:
  - Update to 1.41
    - Adopt new repo structure - see:
      http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
    - Reformat Makefile.PL
    - Add t/00.*
    - Update POD to change RT to GitHub
  - Package new LICENSE file


author: Paul Howarth <paul@city-fan.org> - 0.050-1
changelog:
  - Update to 0.050
    - Update author contact info
    - Add perl-support section in docs
  - Use author-independent source URL
  - Classify buildreqs by usage
  - Use %{make_build} and %{make_install}
  - Fix permissions verbosely
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.002011-1
changelog:
  - Update to 0.002011
    - Adds head and tail methods for Array
    - @tobyink is now maintainer
    - Pod clean-ups


author: Paul Howarth <paul@city-fan.org> - 0.07-17
changelog:
  - Spec tidy-up
    - Use author-independent URLs
    - Specify all build dependencies
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 3.03-22
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, %clean and buildroot cleaning
  - Drop Group: and BuildRoot: tags
  - Use %license
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.06-12
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.07.01-1
changelog:
  - Update to 0.0701
    - If microseconds are set on provided DateTime object to time_format, use
      them (CPAN RT#136549)


author: Paul Howarth <paul@city-fan.org> - 0.03-36
changelog:
  - Spec tidy-up
    - Simplify find command using -delete
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.0011-1
changelog:
  - Update to 0.0011
    - @INC hook should die directly (CPAN RT#120220)
    - Match core error more closely (CPAN RT#120221)
    - Add -quiet option to suppress some notices


author: Paul Howarth <paul@city-fan.org> - 0.0012-1
changelog:
  - Update to 0.0012
    - Add -lexically argument to import() to support hiding modules just during
      the current scope


author: Paul Howarth <paul@city-fan.org> - 0.0015-1
changelog:
  - Update to 0.0015
    - Test warnings more carefully to avoid spurious test failures caused by a
      bug in Test2::Util


author: Paul Howarth <paul@city-fan.org> - 0.10-27
changelog:
  - Spec tidy-up
    - Specify all dependencies
    - Use author-independent source URL
    - Fix permissions verbosely
    - Make %files list more explicit
    - Use %license
    - Simplify find command using -empty and -delete
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant removal of empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 1.912-5
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.953-1
changelog:
  - Update to 1.953
    - As promised, this release no longer works on v5.8; in fact, due to some
      upstream libraries, it hasn't in some time
    - Documentation has been cleaned up to stop referencing long-dead other
      libraries or methods
    - Some small code changes to benefit from v5.10 and v5.12 improvements
  - Use SPDX-format license tag
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.954-1
changelog:
  - Update to 1.954 (rhbz#2280644)
    - Fix for CVE-2024-4140: An excessive memory use issue (CWE-770) exists in
      Email-MIME before version 1.954, which can cause denial of service when
      parsing multipart MIME messages; the fix is the new $MAX_PARTS
      configuration, which limits how many parts we will consider parsing
      (the default $MAX_PARTS is 100)


author: Paul Howarth <paul@city-fan.org> - 1.022-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.024-1
changelog:
  - Update to 1.024
    - Silence an uninitialized value warning
    - Avoid allowing non-Latin digits in numbers
    - Add new functions build_content_type() and build_content_disposition()


author: Paul Howarth <paul@city-fan.org> - 1.406-14
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.216-1
changelog:
  - Update to 2.216
    - Do not re-fold folded lines
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Drop provides/obsoletes for perl-Email-Simple-Creator added in 2010
  - Make %files list more explicit
  - Simplify find command using -delete
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 1.12-17
changelog:
  - Spec tidy-up
    - Specify all build requirements
    - Simplify find command using -delete
    - Drop redundant buildroot cleaning in %install section
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.008-13
changelog:
  - Specify all build dependencies
  - Simplify find command using -delete
  - Use %license where possible
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.8001-1
changelog:
  - Update to 0.8001
    - Remove hack (see CPAN RT#45224); the hijacking of EUMM's 'static_lib'
      method is now obsolete, as well as causing problems
    - Also added a couple of code tidy-ups


author: Paul Howarth <paul@city-fan.org> - 0.026-8
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.012-1
changelog:
  - Update to 0.012
    - Allow an argument to install_map with source dirs
    - Make tests prove and 5.6 friendly
  - Release tests moved to xt/, so don't bother with them
  - Simplify find command using -delete
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.15-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Replace source files filter patch with a less invasive workaround
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Add rules files for 'prove' and Test::Harness to specify that tests need to
      be run serially for now
    - Support spaces (and other special characters too) in share files (GH#2)
  - BR: perl(CPAN::Meta::YAML) so we can process testrules.yml


author: Paul Howarth <paul@city-fan.org> - 2.71-1
changelog:
  - Update to 2.71
    - Skip Test::Fork on freebsd (GH#25)
  - Filter unversioned provide of perl(GD::Polygon)


author: Paul Howarth <paul@city-fan.org> - 2.72-1
changelog:
  - Update to 2.72
    - Fix for colorMatch with older unpatched libgd versions, which has an
      exploitable heap overflow (CVE-2019-6977)
  - Note: libgd in Fedora is already patched for CVE-2019-6977


author: Paul Howarth <paul@city-fan.org> - 2.73-1
changelog:
  - Update to 2.73
    - Allow Makefile.PL --options to override the libgd options; not recommended
      (see GH#33 and CPAN RT#130045)


author: Paul Howarth <paul@city-fan.org> - 1:1.55-1
changelog:
  - Update to 1.55
    - Fix failing XBM test resulting from some upstream changes (CPAN RT#140940)
    - Skip samples tests if libgd has image support disabled, which is the
      default starting with version 2.3.3
      (see https://github.com/libgd/libgd/issues/428)
  - Use SPDX-format license tag
  - Drop perl(:MODULE_COMPAT_XXX) dependency
    (https://fedoraproject.org/wiki/Changes/Perl_replace_MODULE_COMPAT_by_generator)


author: Paul Howarth <paul@city-fan.org> - 0.86-42
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.106-1
changelog:
  - Update to 0.106
    - Improved formatting of switches
    - When available, use Term::ReadKey to get terminal width
    - When an option name is defined twice, warn about it (this will become fatal
      in a future version)
  - Run the test suite using expect so as to make a pty available


author: Paul Howarth <paul@city-fan.org> - 0.107-1
changelog:
  - Update to 0.107
    - Term::ReadKey has been dropped; caused too many problems
    - Minimum version is now v5.10.1, not v5.10.0
  - Don't need to use expect for the test suite any longer


author: Paul Howarth <paul@city-fan.org> - 0.109-1
changelog:
  - Update to 0.109
    - Eliminate warnings-count failure by requiring an ExtUtils::MakeMaker from
      late 2013 or later; without this, very old EUMM could pass -w to the tests,
      enabling more warnings than we wanted
  - Use %{make_build} and %{make_install}


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.07-18
changelog:
  - Replace %{__perl} with /usr/bin/perl
  - Use %{make_build} and %{make_install} where appropriate
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL
  - Minor improvements to the spec file


author: Paul Howarth <paul@city-fan.org> - 0.26-2
changelog:
  - Spec tweaks for EPEL
    - Use author-independent source URL
    - Classify build dependencies by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.97-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Add Suggests: for modules providing optional functionality
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit
    - Use %license


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.17-22
changelog:
  - Replace %{__perl} with /usr/bin/perl everywhere
  - Use %{make_build} and %{make_install} where appropriate


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - t/orig/03_class.t failed if FamilyTreeInfo-2.3.24 was installed (GH#1)
  - Classify buildreqs by usage
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.15-7
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)


author: Paul Howarth <paul@city-fan.org> - 0.300-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.1104-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all dependencies
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Package CONTRIBUTING.mkdn and LICENSE files
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.03-23
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.32-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Switch to upstream's preferred flow, using Module::Build::Tiny
    - Classify buildreqs by usage
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.3-40
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.00-39
changelog:
  - Rework dependencies
  - migrated to SPDX license
  - Replace calls to %{__perl} with /usr/bin/perl
  - Use %{make_build} and %{make_install} where appropriate


author: Paul Howarth <paul@city-fan.org> - 1.004001-1
changelog:
  - Update to 1.004001
    - Document when is_bool became available
    - Now favouring Cpanel::JSON::XS over JSON::XS in more situations (the former
      is always added to prereqs when a compiler is available, although JSON::XS
      is still used at runtime if new enough and Cpanel::JSON::XS is not
      installed); this makes boolean handling more predictable and consistent
  - Package LICENSE file
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.004002-1
changelog:
  - Update to 1.004002
    - Fix test that fails when JSON::XS is installed, but below version 3.0
      (CPAN RT#132578)


author: Paul Howarth <paul@city-fan.org> - 1.004003-1
changelog:
  - Update to 1.004003
    - Fix another test that fails when JSON::XS is installed, but below version
      3.0


author: Paul Howarth <paul@city-fan.org> - 0.011-6
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)
  - Drop explicit gcc build-require as EU::CB is effectively our compiler here
  - Add build-require coreutils for %{_fixperms}
  - Simplify find command using -empty


author: Petr Pisar <ppisar@redhat.com> - 2.70-2
changelog:
  - Correct perl(Apache2::Log) dependency (bug #1914939)
  - Move Log::Dispatch::ApacheLog to perl-Log-Dispatch-ApacheLog subpackage
    (bug #1914939)
  - Disable perl-Log-Dispatch-ApacheLog on RHEL ≥ 9 (bug #1914939)
  - Modernize a spec file
  - Do not send e-mails when running tests (bug #1414996)


author: Paul Howarth <paul@city-fan.org> - 5.509-11
changelog:
  - Modernize spec
    - Drop bundled modules and depend on them instead
    - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 3.012-1
changelog:
  - Update to 3.012
  - Use author-independent source URL
  - Classify buildreqs by usage
  - Drop redundant %{?perl_default_filter}
  - Drop recoding of Mail::Message::Field manpage since it has changed to UTF-8
    coding upstream
  - Package README.md too (guide for contributors)
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 3.004-3
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.004-38
changelog:
  - Reorder dependencies
  - Use perl instead of sed
  - Replace %{__perl} with /usr/bin/perl
  - Pass NO_PERLLOCAL to Makefile.PL
  - Use %{make_build} and %{make_install} where appropriate


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.08.0001-21
changelog:
  - Migrated to SPDX license
  - Use /usr/bin/perl instead of %{__perl}
  - Use %{make_build} and %{make_install} where appropriate
  - Pass NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 0.109-1
changelog:
  - Update to 0.109
    - Use "-r" test instead of "-f" test, to allow use on (say) named pipes
    - Update author information
    - Add perl support section to docs


author: Petr Pisar <ppisar@redhat.com> - 2.548-17
changelog:
  - Fix an implicit function declaration (bug #2177189)
  - Correct a license to "LGPL-2.1-or-later AND (GPL-1.0-or-later OR
    Artistic-1.0-Perl)"
  - Use a system-provided Gentium Book Basic font


author: Paul Howarth <paul@city-fan.org> - 0.039-15
changelog:
  - Use author-independent URLs
  - Work around ExtUtils::CBuilder in EL-8 having no dependency on gcc or gcc-c++
    (#1547165)


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Support pure-perl build
  - BR: perl-devel for test suite
  - Drop redundant BuildRoot: tag


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Remove Module::Build::Tiny from deps
  - Drop explicit perl-devel test dependency as it's pulled in by
    perl-ExtUtils-CBuilder, which is a more sane place for the dependency to be


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - Use File::Copy::Recursive::Reduced instead of File::Copy::Recursive (GH#13)
  - Treat perl-devel as a runtime dependency


author: Paul Howarth <paul@city-fan.org> - 0.99-1
changelog:
  - Update to 0.99
    - Module::CPANTS::Kwalitee now uses Module::Find to find Kwalitee modules
      (instead of Module::Pluggable, which unconditionally spits a deprecation
      warning); you usually don't need to care but if you have your custom
      Kwalitee plugin loader (such as Module::CPANTS::SiteKwalitee), you need to
      change it - sorry for the inconvenience
    - Allow dash and dot in script name in the NAME section for
      non-pm, non-pod files
    - Added has_meta_json metric (CPAN RT#107885)
    - Accept a few more README extensions
    - Accept two more Moose modules as strict equivalents
    - Various micro optimization for performance
    - Dropped a few dependencies
    - Various documentation updates
    - Not to check use_strict/use_warnings for Perl 6 modules in a Perl 5
      distribution
    - Worked around a File::Find::Object issue
    - Fixed dynamic_config handling
    - Improved LICENSE file detection (CPAN RT#114247)
    - Skip everything in MANIFEST.SKIP while testing symlinks (GH#33)
  - Simplify find command using -delete
  - Add file xt/kwalitee/mas_meta_json.t missing from dist, needed for
    xt/kwalitee.t (GH#38)


author: Paul Howarth <paul@city-fan.org> - 1.00-1
changelog:
  - Update to 1.00
    - Module::CPANTS::Kwalitee::Uses now uses a different prereq scanner
      (Perl::PrereqScanner::NotQuiteLite)
    - Added new kwalitee metrics:
      no_maniskip_error, no_missing_files_in_provides, no_files_to_be_skipped
    - Delayed plugin loading
  - Upstream no longer ships the extra tests, so don't try to run them


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Fixed not to set an error message when extracted nicely
    - Fixed to restore mtime of MANIFEST.SKIP if it is modified by
        - Improved primary module detection
    - Fixed to catch CPAN::Meta::YAML's warnings (of duplicate keys)
    - Improved test_prereqs_match to handle t::lib::Util, and ignore files that
      contain but don't end with .t
    - Fixed to store multiple licenses in META files


author: Paul Howarth <paul@city-fan.org> - 0.13-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Keep timestamp of Changes file constant
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - Removed file readability check (GH#4, CPAN RT#99055)
    - Now supports @INC hooks (GH#6)
    - Now filters out filenames starting with a dot (GH#7)
    - Now uses strict (GH#8)
    - Fixed CPAN RT#122016: test/ files show up in metacpan
    - Module::Find now uses @ModuleDirs (if specified) for loading modules
      (CPAN RT#127657); previously, when using setmoduledirs() to set an array
      of directories that did not contain @INC, Module::Find would find the
      modules correctly, but load them from @INC


author: Paul Howarth <paul@city-fan.org> - 1.09-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Be verbose about permissions changes
    - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.17-25
changelog:
  - Spec tidy-up
    - Escape '%' in %summary
    - Specify all dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.001009-1
changelog:
  - Update to 0.001009
    - New maintainer (@mattp → @tobyink)
    - Update repo links
    - Mention Sub::HandlesVia in documentation


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.29-18
changelog:
  - Replace "make pure_install" with %{make_install}
  - Replace make with %{make_build}
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 0.25-19
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Note in %summary and %description that distribution is deprecated
    - Classify build requirements by usage
    - Drop redundant %?perl_default_filter
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.106-28
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list even more explicit


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Remove MooseX::Role::WithOverloading from test dependencies
      (CPAN RT#130075)
  - Specify all build dependencies
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.17-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Simplify find command using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.06-24
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Drop ancient obsoletes/provides for old -tests sub-package
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.22-1
changelog:
  - Update to 0.22
    - Improve several error messages
    - Allow unabbreviated IPv6 addresses
  - Use %{make_build} and %{make_install} where appropriate


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26 (rhbz#2374271)
    - cidrvalidate() should accept IPv6 addresses with one uncompressed 0


author: Paul Howarth <paul@city-fan.org> - 1.26-20
changelog:
  - Use upstream-approved fix for zero networks (CPAN RT#60439)
  - Fix shellbangs in utility scripts
  - Specify all dependencies
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.250-1
changelog:
  - Update to 1.250
    - Support postfix dereference
    - Add support for lexical subroutines from perl-5.26
    - Support key-value and index-value slices in PPI::Token::Symbol symbol
      method
    - Support indented here-docs
    - Parse list-embedded curlies as hash constructors
    - Keep exponents of 2 or more zeroes from trapping PPI in an endless loop
    - Remove dependencies on vars, base and List::MoreUtils
    - Remove dependency on File::Remove
    - Reduce globals and cross-package variables
    - Move to Dist::Zilla
    - Add some tests including a TODO test for misparse bug on '(1)-1'
    - Allow tests to run without pre-determined module versions
    - Make xt/api.t skip/run properly
    - Fix some typos and formatting in Changes
    - Add travis-perl helper to be run before install
    - Update versions of Perl Travis tests on
  - Modernize spec using %{make_build} and %{make_install}
  - Don't try to run the release tests in the package build


author: Paul Howarth <paul@city-fan.org> - 1.262-1
changelog:
  - Update to 1.262
    - Add support for the double diamond (<<>>) input operator
    - Adjust position of a todo marker to not catch a passing test
    - Recognize `for (;<$foo>;) {}` as containing a readline operator
    - Remove accidentally included use of Test::InDistDir
    - Allow all PPI::Document instances to have a filename attribute
    - Allow underscores in vstrings
    - Convert newlines in some raw test files from win32 to unix


author: Paul Howarth <paul@city-fan.org> - 1.266-1
changelog:
  - Update to 1.266
    - Prevent heredoc terminator detection triggering regex errors
    - Small clean-ups
  - Work around test failures caused by DOS line endings in test data files
    (https://github.com/adamkennedy/PPI/issues/243)


author: Paul Howarth <paul@city-fan.org> - 1.08-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.16-1
changelog:
  - Update to 0.16
    - The subs installed into the caller are now named with Sub::Name; this makes
      these subs appear to be part of the caller, as opposed to an import, which
      is what we want, since each installed sub is constructed uniquely for a
      given package
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Remove use of namespace::autoclean
  - BR: perl-generators
  - Simplify find command using -delete
  - Author and Release Tests moved to xt/ so don't bother trying to run them


author: Paul Howarth <paul@city-fan.org> - 1.40-1
changelog:
  - Update to 1.40
    - Features enabled via the 'experimental' pragma are now recognized (GH#5)
    - Depend on PPIx::Utils instead of Perl::Critic::Utils (GH#6)
    - Recognize several new features and their minimum required Perl versions
      (GH#10, GH#20): 'say', 'smartmatch', 'postderef', 'postderef_qq',
      'signatures', 'refaliasing', 'bitwise', 'declared_refs', 'isa', 'indirect'


author: Paul Howarth <paul@city-fan.org> - 0.9911-1
changelog:
  - Update to 0.9911
    - Changed ::App->run to return processed cpanfile object if 'cpanfile' option
      is set
    - Changed ::App->run not to print unless 'print' option is set
    - Remove cached cpanmeta if prereqs are replaced


author: Paul Howarth <paul@city-fan.org> - 0.9913-1
changelog:
  - Update to 0.9913
    - Fix not to dedupe core modules needlessly
    - Use a main module to represent modules that belong to the same distribution
    - Dedupe build requires as well
    - Add URI::cpan to cpanfile


author: Petr Pisar <ppisar@redhat.com> - 0.11-5
changelog:
  - Break build cycle (perl-Alien-pkgconf → perl-Alien-Build
    → perl-PkgConfig-LibPkgConf)
  - Package tests


author: Petr Pisar <ppisar@redhat.com>, Jitka Plesnikova <jplesnik@redhat.com> - 1.0048-3
changelog:
  - Specify all dependencies
  - Move Apache httpd 2 mod_perl handler to perl-Plack-Handler-Apache2
  - Move FCGI handler to perl-Plack-Handler-FCGI
  - Move Log::Log4Perl middleware to perl-Plack-Middleware-Log4perl


author: Paul Howarth <paul@city-fan.org> - 0.07-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Switch to upstream's preferred flow, using Module::Build::Tiny
    - Fix permissions verbosely
    - Package CONTRIBUTING file
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.100004-1
changelog:
  - Update to 0.100004
    - Report more usefully when a regex can't be compiled
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.094002-1
changelog:
  - Update to 0.094002
    - Fix typo
    - Update author contact info
    - Document perl version policy
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 2017060201-11
changelog:
  - Tidy up for EPEL-8 build
    - Specify all build dependencies
    - Expand %description
    - Add patch to fix POD so we get properly-coded manpage
    - Modernize spec using %{make_build} and %{make_install}
    - Make %files list more explicit
    - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Fixed test bug (CPAN RT#133221)
    - New caretaker maintainer, new repository:
      https://github.com/uperl/Return-MultiLevel
  - This release by PLICEASE → update source URL


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Remove most uses of stringy eval (GH#6); one still remains
    - Remove dependency on Data::Munge (GH#6)
  - Package new LICENSE file


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Bugfix: Thing expected to be an array isn't always an array but is still a
      reference
    - Added: :ReturnType(Void) shortcut


author: Paul Howarth <paul@city-fan.org> - 1.000006-1
changelog:
  - Update to 1.000006
    - Now falling back to $obj->isa if DOES/does is not implemented on the
      object, to avoid fatal errors on perls too old to have their own DOES
      (CPAN RT#100866)
  - This release by HAARG → update source URL
  - Clarify %description
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.000007-1
changelog:
  - Update to 1.000007
    - Added new interface: $obj->$_call_if_can
  - This release by ETHER → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.000009-1
changelog:
  - Update to 1.000009
    - Fix handling of DOES and does (they no longer fall back to isa in most
      situations outside of Moo/Moose)


author: Paul Howarth <paul@city-fan.org> - 0.46-19
changelog:
  - Spec tidy-up
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.100052-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.004-10
changelog:
  - Spec tweaks for EPEL-8
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.08-22
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.25-24
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.50-15
changelog:
  - Use author-independent source URL
  - Specify all build dependencies
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 0.52-1
changelog:
  - Update to 0.52
    - Create fail_if_returned_late (GH#23)
    - Change bugtracker link to point GitHub issues instead of RT
    - Remove some old and broken links
    - Test fix (GH#32)
    - Fix reporting caller information (file+line) when number of tests does not
      match
    - Use better class names in t/runtests_return.t
    - Fix documentation to be more accurate regarding support and author activity
    - Ensure metadata is processed as v2
    - Remove unnecessary shebangs
    - chmod ugo-x


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Properly skip potentially-problematic tests when needed, due to circular
      dependencies between Moose and Test::CleanNamespaces (CPAN RT#125678)


author: Paul Howarth <paul@city-fan.org> - 1.014-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Install into vendor directory
    - Use %{make_build} and %{make_install}
    - Drop redundant find commands in %install section
    - Drop redundant explicit dependencies and filtering of them
    - Avoid need to remove *.list files in %check
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.02-1
changelog:
  - Update to 2.02
    - Better matching on files, directories to be ignored, e.g. no longer
      confuses directory "vincent" for "inc" (CPAN RT#133862, GH#1)
    - Handle long @INC lines by passing through $PERL5LIB (CPAN RT#123448)
  - Use %license and BR: perl(CPAN::Meta) unconditionally


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.008-25
changelog:
  - Replace %{__perl} with /usr/bin/perl
  - Use %{make_build} and %{make_install} where appropriate
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 1.28-1
changelog:
  - Update to 1.28
    - Fix taint-mode tests to accommodate failures with Module::CPANTS::Analyse
      0.99 (insecure loading of a backend implementation)
  - Modernize spec using %make_build and %make_install


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Point issue tracker at GitHub
  - Upstream no longer uses Module::Install
  - Unconditionally include tests as documentation


author: Paul Howarth <paul@city-fan.org> - 1.06-13
changelog:
  - Modernize spec using %{make_build} and %{make_install}
  - Use author-independent source URL
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> = 0.101082-11
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant permission fixing in %prep section
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.002009-1
changelog:
  - Update to 0.002009
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace %{__perl} with /usr/bin/perl
  - Pass NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 2.02-1
changelog:
  - Update to 2.02
    - Altered a test to not bake @INC into -I options for a subprocess, to avoid
      too-long commands


author: Paul Howarth <paul@city-fan.org> - 1.10-1
changelog:
  - Update to 1.10
    - Switch packaging to Dist::Zilla, which makes the distribution installable
      again on perl 5.27.7 (CPAN RT#123867)
  - This release by ETHER ⇒ update source URL
  - Use %license where possible
  - Enhance %description
  - Drop EL-5 support
    - Drop legacy BuildRoot: and Group: tags
    - Drop redundant buildroot cleaning


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Mention related module Test::Synopsis::Expectation in docs (GH#22)
  - Use %license unconditionally


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.08-10
changelog:
  - Use %{make_build} and %{make_install} where appropriate
  - Replace %{__perl} with /usr/bin/perl
  - Pass NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 0.17-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Explicitly specify more build requirements
    - Simplify find command using -delete
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.20-17
changelog:
  - Replace %{__perl} with /usr/bin/perl
  - Use %{make_build} and %{make_install} where appropriate
  - Pass NO_PERLLOCAL to Makefile.PL
  - Minor cleanups


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.201000-1
changelog:
  - Update to 0.201
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Document that Clone::clone will not work (CPAN RT#127576)
    - Set up Storable hooks to play nice with Storable::dclone
    - Support Hash::Util::FieldHash::Compat as an alternative to
      Hash::FieldHash because it seems to pass its tests better on Perl 5.8


author: Paul Howarth <paul@city-fan.org> - 7.900057-11
changelog:
  - Tweak for EPEL-8 build
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Paul Howarth <paul@city-fan.org> - 2.000004-1
changelog:
  - Update to 2.000004
    - Update bundled ExtUtils::HasCompiler to 0.021
    - Update internal list of warnings (no behavior change)


author: Remi Collet <remi@remirepo.net> - 3.5.0-1
changelog:
  - update to 3.5.0
  - drop all patches merged upstream
  - run test suite in parallel
  - add new options in configuration file


author: Remi Collet <remi@remirepo.net> - 3.5.1-2
changelog:
  - fix #457 failed test with ImageMagick 6.9.12-23
    using patch from https://github.com/Imagick/imagick/pull/458


author: Remi Collet <remi@remirepo.net> - 8.0-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php82
  - add patch for PHP 8.2 from
    https://github.com/websupport-sk/pecl-memcache/pull/104


author: Remi Collet <remi@remirepo.net> - 3.2.0-9
changelog:
  - build out of sources tree
  - fix incompatible pointer types using patch from
    https://github.com/php-memcached-dev/php-memcached/pull/555


author: Remi Collet <remi@remirepo.net> - 5.2.3-1
changelog:
  - update to 5.2.3 (2025-10-08, bugfix release)
  - fix patch to system CA certificates
  - always build with composer-generators


author: Kalev Lember <klember@redhat.com> - 1.27.0-1
changelog:
  - Update to 1.27.0
  - Use make_build and make_install macros
  - Tighten soname globs
  - Use license macro for COPYING*
  - Tighten requires with _isa macro


author: Kalev Lember <klember@redhat.com> - 1.27.0-2
changelog:
  - Update pkcs11-helper-rfc7512.patch from
    https://github.com/OpenSC/pkcs11-helper/pull/4 (#1849259)


author: Hans de Goede <hdegoede@redhat.com> - 19-34
changelog:
  - Deal with pipewire jack identifiers containing chars which have special meanings in regexes
    Resolves rhbz#1939749


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Michel Lind <salimma@fedoraproject.org> - 3.2.25-1
changelog:
  - Update to 3.2.25
  - Mark as deprecated due to EOL
  - Update list of bundled dependencies
  - Declare licenses of bundled dependencies
  - Add virtual Provides and Conflicts to allow swapping Django stacks
  - Drop unneeded patches


author: Carl George <carl@george.computer> - 20.1.0-7
changelog:
  - Convert to pyproject macros
  - Build docs with make
  - Sync eventlet worker patch with upstream, resolves rhbz#2082925


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.0-3
changelog:
  - Fix a file conflict with python3-jaraco
  - Rename the binary rpms to conform to the packaging guidelines
  - Misc packaging fixes


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.11.0-4
changelog:
  - Port to pyproject-rpm-macros
  - Add metapackage for coverage_plugin extra
  - Update upstream URL
  - Hardlink identical entry point scripts


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.11.0-5
changelog:
  - Build Sphinx documentation as a PDF
  - Package from the GitHub archive instead of the PyPI sdist
  - Add a -doc subpackage
  - Use tox for running tests


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.11.0-7
changelog:
  - A few dependency fixes
  - Drop versioning on sphinx dependency (matching backported commit fb770f4)
  - Drop spurious sphinx-issues BR
  - Stop generating unwanted BR’s from the “dev” extra via tox


author: Michal Ambroz <rebus AT_ seznam.cz> - 0.46-8
changelog:
  - rebuild for new version of oletools
  - conditional stop building python2 subpackage on fc>32 and rhel>8
  - split doc to separate subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.0-4
changelog:
  - Assorted minor spec file cleanup
  - Build Sphinx-generated documentation as PDF instead of HTML
  - Switch to pyproject-rpm-macros (“new Python guidelines”)


author: Paul Howarth <paul@city-fan.org> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2140281)
    - Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
      to gain more control over early Transport setup and manipulation (GH#2054,
      GH#2125)
    - Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
      socket object upon encountering socket errors at connection time; this
      should help somewhat with certain classes of memory leaks, resource
      warnings, and/or errors (though we hasten to remind everyone that Client
      and Transport have their own '.close()' methods for use in non-error
      situations!) (GH#1822)
    - Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
      key data is loaded, instead of the natural result of 'IndexError'; this
      should help more bits of Paramiko or Paramiko-adjacent codebases to
      correctly handle this class of error (GH#1599, GH#1637)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.12.0-2
changelog:
  - Address CVE 2023-48795 (a.k.a. the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    - The vulnerability only impacts encrypt-then-MAC digest algorithms in tandem
      with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko currently only
      implements ``hmac-sha2-(256|512)-etm`` in tandem with 'AES-CBC'
    - As the fix for the vulnerability requires both ends of the connection to
      cooperate, the below changes will only take effect when the remote end is
      OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
      patch version) and configured to use the new "strict kex" mode
    - Paramiko will always attempt to use "strict kex" mode if offered by the
      server, unless you override this by specifying 'strict_kex=False' in
      'Transport.__init__'
    - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
      when protocol messages are received in unexpected order; this includes
      situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
      exchange, which are no longer allowed during strict mode
    - Key (re)negotiation, i.e. 'MSG_NEWKEYS', whenever it is encountered, now
      resets packet sequence numbers (this should be invisible to users during
      normal operation, only causing exceptions if the exploit is encountered,
      which will usually result in, again, 'MessageOrderError')
    - Sequence number rollover will now raise 'SSHException' if it occurs during
      initial key exchange (regardless of strict mode status)
  - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the original
    implementation made assumptions based on an OpenSSH implementation detail
  - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
    packet-handler class used internally; this is mostly for testing, but advanced
    users may find this useful when doing deep hacks
  - A handful of lower-level classes (notably 'paramiko.message.Message' and
    'paramiko.pkey.PKey') previously returned 'bytes' objects from their
    implementation of '__str__', even under Python 3, and there was never any
    '__bytes__' method; these issues have been fixed by renaming '__str__' to
    '__bytes__' and relying on Python's default "stringification returns the
    output of '__repr__'" behavior re: any real attempts to 'str()' such objects


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.10.1-1
changelog:
  - Update to 3.10.1 (#1782385).
  - https://github.com/mongodb/mongo-python-driver/blob/3.10.1/doc/changelog.rst


author: Robert Scheck <robert@fedoraproject.org> - 1.2.3-1
changelog:
  - Upstream 1.2.3 (bugfixes, RHBZ#2088869)
  - Fix %check by using %pytest (and provide ps(1) to run tests)


author: Jerry James <loganjerry@gmail.com> - 4.5.0-1
changelog:
  - Version 4.5.0 (bz 1475058)
  - Add bootstrap conditional to break circular dependency when testing
  - Add doc subpackage to hold Sphinx-built documentation
  - Add tox and python3 patches to fix build and test failures
  - Modernize the spec file


author: Jerry James <loganjerry@gmail.com> - 5.4.0-4
changelog:
  - BR gcc to build the optimized interface
  - Add doc subpackage to hold Sphinx-built documentation
  - Modernize the spec file


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.18-38
changelog:
  - Fix a build failure with GCC 14
  - Fix errors in configure script with GCC 14
  Resolves: rhbz#2147519


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.4.4.post2-5
changelog:
  - Migrate to pyproject macros
  - Remove unused dependencies and linters
  - Use SPDX license identifier
  - credit: Steve Traylen <steve.traylen@cern.ch> for original PR


author: Carl George <carl@george.computer> - 3.5.0-1
changelog:
  - Latest upstream rhbz#2007952
  - Enable test suite
  - Only run test on Fedora
  - Only build docs on Fedora


author: Carl George <carlwgeorge@fedoraproject.org> - 3.7.2-1
changelog:
  - Update to 3.7.2, resolves rhbz#2209379
  - Remove mypy build requirement
  - Run tests directly with pytest to avoid tox build requirement
  - Run import check when tests are disabled
  - Remove duplicate license file


author: Steve Traylen <steve.traylen@cern.ch> - 4.10.0-3
changelog:
  - New bcond flag to disable/enable soupsieve dependency
  - New bcond flag to disable/enable testing
  - Test module loading in check section


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-5
changelog:
  - Subpackage python2-betamax has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Packit <hello@packit.dev> - 1.2.14-1
changelog:
  - Drops seemingly unused importlib-metadata dev dep (Colin Dean)
  - Fixes comment on which version is development branch (Colin Dean)
  - Adds Pythons dropped notice to changelog (Colin Dean)
  - Drops limitation on tox < 4 since bug was fixed (Colin Dean)
  - Adds srpm_build_deps to Packit config (Colin Dean)
  - Try explicitly setting AppVeyor image to VS2022 (Colin Dean)
  - Exclude pypy3 on ppc64le on Travis builds (Colin Dean)
  - Drops old Pythons and adds newer ones for Appveyor build (Colin Dean)
  - Drop the .9 from pypy3 in tox.ini (Colin Dean)
  - Use specifically pypy3.9 v7.3.9 (Colin Dean)
  - Adds Python 3.12 config to tox (Colin Dean)
  - Limit tox to <4 on Travis because of outdatedness (Colin Dean)
  - Try installing importlib_metadata for tox run (Colin Dean)
  - Use newer Travis environment, Focal (Ubuntu 20.04) (Colin Dean)
  - Adds importlib-metadata to dev deps (Colin Dean)
  - Split and fix tox config for more better coverage (Colin Dean)
  - Dropping support for Python older than v3.7 in build systems like pytest and tox, while ensuring the library remains production-compatible. (Colin Dean)
  - Drops Python 2.7, 3.5, 3.6 builds from Travis; add 3.12 (Colin Dean)
  - Upgrades some actions versions in Actions python builds (Colin Dean)
  - Drops Actions builds for Python 2.7, 3.5, 3.6; condense 3.7+ (Colin Dean)
  - Bump checkout to v3 in CodeQL Analysis workflow (Colin Dean)
  - Add support for Python 3.11 (Hugo van Kemenade)
  - edit changelog (Pierrick Rambaud)
  - add test for D213 docstrings (Pierrick Rambaud)
  - work with empty docstring (Pierrick Rambaud)
  - fix: digest D212 and D213 docstring (Pierrick Rambaud)
  - Add support for Python 3.10 (Hugo van Kemenade)
  - Prepare next version 1.2.14 (unreleased) (Laurent LAPORTE)
  - Minor change in bumpversion  configuration to also bump the project version in "appveyor.xml". (Laurent LAPORTE)


author: Christian Schuermann <spike@fedoraproject.org> 3.12.0-1
changelog:
  - Update to 3.12.0
  - Add new duckdns extra package
  - Add localzone and oci extra packages since dependancies are now available on Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.18-1
changelog:
  - Update to 0.18 (close RHBZ#2126965)
  - The separate -doc subpackage is dropped since upstream switched from
    sphinx to mkdocs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-4
changelog:
  - Skip tests that are buggy on certain architectures
  - Restore the UUID tests, as the bug was fixed some time ago


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:2.41.1-2
changelog:
  - Migrate to pyproject-rpm-macros (fix RHBZ#2377753)
  - Add missing extras metapackages
  - Run the tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.0-6
changelog:
  - EPEL9: allow python-setuptools_scm 6.0.1
  - Skip test_fallback, as upstream does for Python 2.7, due to the
    downgraded setuptools-scm version.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.3.0-1
changelog:
  - Update to 0.3.0 (close RHBZ#2152320)
  - We can now rely on pyproject-rpm-macros >= 1.2.0
  - The LICENSE.txt file is now handled in pyproject_files
  - The setuptools_scm 7 patch is now merged upstream


author: Pavel Cahyna <pcahyna@redhat.com> - 0.19.0-2
changelog:
  - Remove unused python3-pytest-cov build dependency
  - Use mock from the standard library, remove build dependency
    on the deprecated python-mock package


author: Fabian Affolter <mail@fabian-affolter.ch> 0.19.0-1
changelog:
  - * Thu Aug 26 2021 Fabian Affolter <mail@fabian-affolter.ch> - 0.19.0-1 -
    Update to latest upstream release 0.19.0


author: Miro Hrončok <mhroncok@redhat.com> - 6.6.0-1
changelog:
  - Update to 6.6.0
  - Add subpackages with extras
  - Fix python-bytecode-inconsistent-mtime of learned_dfas.py
  - Fixes: rhbz#1902400


author: Ondrej Mosnáček <omosnacek@gmail.com> - 4.0.0-2
changelog:
  - Fix the install command to comply with guidelines
  - Use %{pyproject_[save_]files}
  - Fix EPEL9 build


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.0-3
changelog:
  - Switch URL to the GitHub project page
  - Stop using deprecated zero-argument form of pypi_source
  - Remove workarounds for EL7/8 and end-of-lifed Fedoras
  - Update description and stop implying there is a Python 2 version
  - Drop obsolete python_provide macro
  - Port to pyproject-rpm-macros
  - Re-enable GPG verification
  - Update License to SPDX


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.1-2
changelog:
  - Subpackage python2-ldap3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.3.0-5
changelog:
  - Whitespace adjustments
  - Drop obsolete %python_provide macro
  - Precisely name the egg-info directory rather than using a glob
  - Use the srcname macro in the package name
  - Share ownership of the opencensus namespace package directory
  - Allow re-generating the Python bindings from .proto sources
  - Use pyproject-rpm-macros


author: Carl George <carlwgeorge@fedoraproject.org> - 1.2.0-1
changelog:
  - Update to version 1.2.0, resolves rhbz#2097140
  - Switch to SPDX license identifier
  - Always run tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.1-4
changelog:
  - Fix nose2-0.12.0 compatibility: do not use the python-versioned entry point
    for nose2, e.g. nose2-3.11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.1-5
changelog:
  - Update License field to SPDX
  - Drop dependency on deprecated python-nose
  - Port to pyproject-rpm-macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.2-1
changelog:
  - Update to 2.5.2; accommodate upstream’s switch to hatchling build backend
  - Add a build conditional for the tests


author: Matthew Davis <fedoraproject@virtual.drop.net> - 1.1-11
changelog:
  - Converted tests from python-nose to pytest
  - Removed Python 2 support
  - Converted to pyproject macros


author: Merlin Mathesius <mmathesi@redhat.com> - 3.4.1-4
changelog:
  - Fix Rawhide FTBFS error by pulling in upstream patch
  - Fix ELN FTBFS error by making minor conditional fixes


author: Dan Callaghan <djc@djc.id.au> - 3.5.0-1
changelog:
  - new upstream release 3.5.0, including license change to MIT:
    https://github.com/pytest-dev/pytest-randomly/blob/3.5.0/HISTORY.rst


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.0-3
changelog:
  - Add metapackage for rfc3986[idna2008]
  - https://fedoraproject.org/wiki/Changes/PythonExtras
  - Fixes: rhbz#1875490


author: Carl George <carl@george.computer> - 1.14.2-5
changelog:
  - Convert to pyproject macros
  - Skip test_no_fd_leak test by removing lsof build requirement rhbz#2033204


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.35.1-1
changelog:
  - We have fixed a bug that caused changes to get lost when a spec file passed as a path was replaced or deleted. (#470)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Carl George <carlwgeorge@fedoraproject.org> - 0.4.2-14
changelog:
  - Switch to correct SPDX license
  - Enable tests
  - Backport patch to fix CVE-2023-30608
  - Backport patch to fix CVE-2024-4340


author: Fabian Affolter <mail@fabian-affolter.ch> - 3.0.1-1
changelog:
  - Update to latest upstream release 3.0.1 (closes rhbz#2017563)
  - Remove doc subpackage (missing dependency)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.10-1
changelog:
  - Update to 0.8.10 (close RHBZ#2099766)
  - Drop EPEL9 numpy workaround; the flexiblas-related crashes have been fixed


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.10-2
changelog:
  - Use pyproject-rpm-macros
  - Adjust packaged documentation files
  - Run doctests; see tox.ini, not in the sdist
  - Tidy up package description
  - Switch URL from PyPI project to GitHub project
  - Add a man page


author: Petr Viktorin <pviktori@redhat.com> - 2.0.1-1
changelog:
  - Version 2.0.1
    - Removed support for text file objects as load input
    - First argument of load and loads can no longer be passed by keyword
    - Raise an error when dotted keys define values outside the "current table"
    - Prepare for inclusion in stdlib


author: Miro Hrončok <miro@hroncok.cz> 2.26.1-4
changelog:
  - Allow \
    PATH="/builddir/build/BUILDROOT/python-types-requests-2.26.1-4.sdl9.x86_64/usr/bin:$PATH"\
    PYTHONPATH="${PYTHONPATH:-/builddir/build/BUILDROOT/python-types-requests-2.26.1-4.sdl9.x86_64/usr/lib64/python3.9/site-packages:/builddir/build/BUILDROOT/python-types-requests-2.26.1-4.sdl9.x86_64/usr/lib/python3.9/site-packages}"\
    _PYTHONSITE="/builddir/build/BUILDROOT/python-types-requests-2.26.1-4.sdl9.x86_64/usr/lib64/python3.9/site-packages:/builddir/build/BUILDROOT/python-types-requests-2.26.1-4.sdl9.x86_64/usr/lib/python3.9/site-packages"\
    PYTHONDONTWRITEBYTECODE=1\
    /usr/bin/python3 -s /usr/lib/rpm/redhat/import_all_modules.py on EPELs


author: Miro Hrončok <mhroncok@redhat.com> - 20.21.1-1
changelog:
  - Update to 20.21.1
  - Backport from 20.23.0: Don't install setuptools and wheel to Python 3.12+ environments
  - Add RPM Requires needed for Python 3.12


author: Miro Hrončok <miro@hroncok.cz> - 20.21.1-6
changelog:
  - When getting wheels for /usr/bin/python3 interpreter, look for them in
    proper directories
  - Fixes: rhbz#2272958


author: Lumir Balhar <lbalhar@redhat.com> - 20.21.1-12
changelog:
  - Prevent command injection by quoting template strings in activation
    scripts
  - Fixes: rhbz#2328747


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.11-12
changelog:
  - Exact-version dependency on googleapis-common-protos
  - Improve documentation on unbundled dependencies


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.6.3-1
changelog:
  - Tests are disaabled for now (approx. 10 % failures)
  - Update to latest upstream release 1.6.3 (#1887712)


author: Miro Hrončok <mhroncok@redhat.com> - 4.0.8-15
changelog:
  - Subpackage python2-zope-exceptions has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Howarth <paul@city-fan.org> - 2.10.3-1
changelog:
  - Update to 2.10.3
    - Certificate-based pubkey auth was inadvertently broken when adding SHA2
      support in version 2.9.0 (GH#1963, GH#1977)
    - Switch from module-global to thread-local storage when recording thread IDs
      for a logging helper; this should avoid one flavor of memory leak for
      long-running processes (GH#2002, GH#2003)


author: Paul Howarth <paul@city-fan.org> - 2.10.4-1
changelog:
  - Update to 2.10.4
    - Update 'camelCase' method calls against the 'threading' module to be
      'snake_case'; this and related tweaks should fix some deprecation warnings
      under Python 3.10 (GH#1838, GH#1870, GH#2028)
    - '~paramiko.pkey.PKey' instances' '__eq__' did not have the usual safety
      guard in place to ensure they were being compared to another 'PKey' object,
      causing occasional spurious 'BadHostKeyException', among other things
      (GH#1964, GH#2023, GH#2024)
    - Servers offering certificate variants of hostkey algorithms (e.g.
      'ssh-rsa-cert-v01@openssh.com') could not have their host keys verified by
      Paramiko clients, as it only ever considered non-cert key types for that
      part of connection handshaking (GH#2035)


author: Paul Howarth <paul@city-fan.org> - 2.11.0-1
changelog:
  - Update to 2.11.0
    - Align signature verification algorithm with OpenSSH re: zero-padding
      signatures that don't match their nominal size/length; this shouldn't
      affect most users, but will help Paramiko-implemented SSH servers handle
      poorly behaved clients such as PuTTY (GH#1933)
    - OpenSSH 7.7 and older has a bug preventing it from understanding how to
      perform SHA2 signature verification for RSA certificates (specifically
      certs - not keys), so when we added SHA2 support it broke all clients using
      RSA certificates with these servers; this has been fixed in a manner similar
      to what OpenSSH's own client does - a version check is performed and the
      algorithm used is downgraded if needed (GH#2017)
    - Recent versions of Cryptography have deprecated Blowfish algorithm support;
      in lieu of an easy method for users to remove it from the list of
      algorithms Paramiko tries to import and use, we've decided to remove it
      from our "preferred algorithms" list, which will both discourage use of a
      weak algorithm, and avoid warnings (GH#2038, GH#2039)
    - Windows-native SSH agent support as merged in 2.10 could encounter
      'Errno 22' 'OSError' exceptions in some scenarios (e.g. server not cleanly
      closing a relevant named pipe); this has been worked around and should be
      less problematic (GH#2008, GH#2010)
    - Add SSH config token expansion (eg '%h', '%p') when parsing 'ProxyJump'
      directives (GH#1951)
    - Apply unittest 'skipIf' to tests currently using SHA1 in their critical
      path, to avoid failures on systems starting to disable SHA1 outright in
      their crypto backends (e.g. RHEL 9) (GH#2004, GH#2011)


author: Paul Howarth <paul@city-fan.org> - 3.0.0-1
changelog:
  - Update to 3.0.0 (rhbz#2162914)
    - Remove some unnecessary '__repr__' calls when handling bytes-vs-str
      conversions; this was apparently doing a lot of unintentional data
      processing, which adds up in some use cases, such as SFTP transfers,
      which may now be significantly faster (GH#2110)
    - Streamline some redundant (and costly) byte conversion calls in the
      packetizer and the core SFTP module; this should lead to some SFTP
      speedups at the very least (GH#2165)
    - 'paramiko.util.retry_on_signal' (and any internal uses of same, and also
      any internal retries of 'EINTR' on e.g. socket operations) has been
      removed; as of Python 3.5, per PEP 475 (https://peps.python.org/pep-0475/),
      this functionality (and retrying 'EINTR' generally) is now part of the
      standard library
      Note: This change is backwards incompatible if you were explicitly
      importing/using this particular function; the observable behavior otherwise
      should not be changing
    - '~paramiko.config.SSHConfig' used to straight-up delete the 'proxycommand'
      key from config lookup results when the source config said
      'ProxyCommand none'; this has been altered to preserve the key and give it
      the Python value 'None', thus making the Python representation more in line
      with the source config file
      Note: This change is backwards incompatible if you were relying on the old
      (1.x, 2.x) behavior for some reason (e.g. assuming all 'proxycommand'
      values were valid subcommand strings)
    - The behavior of private key classes' (i.e. anything inheriting from
      '~paramiko.pkey.PKey') private key writing methods used to perform a
      manual, extra 'chmod' call after writing; this hasn't been strictly
      necessary since the mid 2.x release line (when key writing started giving
      the 'mode' argument to 'os.open'), and has now been removed entirely; this
      should only be observable if you were mocking Paramiko's system calls
      during your own testing, or similar
    - 'PKey.__cmp__' has been removed - ordering-oriented comparison of key files
      is unlikely to have ever made sense (the old implementation attempted to
      order by the hashes of the key material) and so we have not bothered
      setting up '__lt__' and friends at this time; the class continues to have
      its original '__eq__' untouched
      Note: This change is backwards incompatible if you were actually trying to
      sort public key objects (directly or indirectly); please file bug reports
      detailing your use case if you have some intractable need for this
      behavior, and we'll consider adding back the necessary Python 3 magic
      methods so that it works as before
    - A handful of lower-level classes (notably 'paramiko.message.Message' and
      'paramiko.pkey.PKey') previously returned 'bytes' objects from their
      implementation of '__str__', even under Python 3; and there was never any
      '__bytes__' method; these issues have been fixed by renaming '__str__' to
      '__bytes__' and relying on Python's default "stringification returns the
      output of '__repr__'" behavior re: any real attempts to 'str()' such objects
    - 'paramiko.common.asbytes' has been moved to 'paramiko.util.asbytes'
      Note: This change is backwards incompatible if you were directly using this
      function (which is unlikely)
    - Remove the now irrelevant 'paramiko.py3compat' module
      Note: This change is backwards incompatible - such references should be
      search-and-replaced with their modern Python 3.6+ equivalents; in some
      cases, still-useful methods or values have been moved to 'paramiko.util'
      (most) or 'paramiko.common' ('byte_*')
    - Drop support for Python versions less than 3.6, including Python 2; so long
      and thanks for all the fish! Our packaging metadata has been updated to
      include 'python_requires', so this should not cause breakage unless you're
      on an old installation method that can't read this metadata
      Note: As part of this change, our dependencies have been updated; e.g. we
      now require Cryptography>=3.3, up from 2.5


author: Paul Howarth <paul@city-fan.org> - 3.1.0-1
changelog:
  - Update to 3.1.0 (rhbz#2177436)
    - Add an explicit 'channel_timeout' keyword argument to
      'paramiko.client.SSHClient.connect', allowing users to configure the
       previously-hardcoded default value of 3600 seconds (GH#2009, GH#2013, and
       others)
    - Accept single tabs as field separators (in addition to single spaces) in
      'paramiko.hostkeys.HostKeyEntry.from_line' for parity with OpenSSH's
      KnownHosts parser (GH#2173)
    - Apply 'codespell' to the codebase, which found a lot of very old minor
      spelling mistakes in docstrings; also, modernize many instances of '*largs'
      vs. '*args' and '**kwarg' vs. '**kwargs' (GH#2178)


author: Robert Scheck <robert@fedoraproject.org> - 1.0.0-32
changelog:
  - Updated license identifier to SPDX expression
  - Added missing build dependency on python3-setuptools (#2142035)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.10.0-4
changelog:
  - Fix for CMake macro changes
  - Add ability to disable Qt4 build (makes it easier to maintain EPEL8 branch)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.68.2-1
changelog:
  - Update to 1.68.2 - Closes rhbz#2311287 rhbz#2326578 rhbz#2333262
    rhbz#2333238 rhbz#2331989 rhbz#2331961


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.6-40
changelog:
  - Bump Release to 40 to ensure a working update path. rgb was a separate
    package in xorg-x11-server-utils (not just a Provides) and took the
    Release from that.


author: Remi Collet <remi@remirepo.net> - 1.5.10-1
changelog:
  - update to 1.5.10
  - use composer-generators
  - check tarball signature
  - use SPDX license identifiers


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.13.1-2
changelog:
  - Set NOKOGIRI_TEST_GC_LEVEL to major on ppc64le as
    ruby31 does not seem to support GC.compat on the platform


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
  - Regenerate spec file with gem2rpm.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Add BRs for tests, enable tests in %check.
  - Require /usr/bin/groff, not the package in case the file is moved.
  - Keep the license file in the original location.
  - Adjust various macros and invocations.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.0-1
changelog:
  - Initial package (close RHBZ#2328487)
  - Re-generate with rust2rpm 27 for a slightly nicer spec file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.6.0-2
changelog:
  - Convert operators to upper-case for SPDX license expressions ... - Fix
    cmake parameter `-WANT_NOHEADERINSTALL=1` to `-DWANT_NOHEADERINSTALL=1`


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.6.1-1
changelog:
  - Update to 1.6.1 ...(#2256351) - Use pkgconfig for podofo-0.9 build
    requirment - Drop unused noheadinstall cmake parameter


author: Michal Josef Špaček <mspacek@redhat.com> - 5.2.8-9
changelog:
  - Rewrite gethostbyname2 and inet_ntop to newer getaddrinfo and getnameinfo
    Remove depencency to perl-Socket6.


author: Rex Dieter <rdieter@fedoraproject.org> - 0.22-14
changelog:
  - patch out -Werror move -no-rtti for tests/ only (#1891251)
  - use %autosetup, %make_build, %make_install
  - add %check


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Jerry James <loganjerry@gmail.com> - 1.392-1
changelog:
  - Version 1.392
  - Add font organization
  - Small fixes to the metainfo
  - Validate metainfo with appstream


author: Jerry James <loganjerry@gmail.com> - 1.065-1
changelog:
  - Version 1.065
  - Add font organization
  - Small fixes to the metainfo
  - Validate metainfo with appstream


author: Nils Philippsen <nils@tiptoe.de> - 0.10.18-1
changelog:
  - Update to 0.10.18
  - Fix license and URLs
  - Build with meson instead of waf
  - Fix typos and trailing white space
  - Use package name macro consistently


author: Than Ngo <than@redhat.com> - 20200406-35
changelog:
  - fixed rhbz#2284575, add texlive-mdframed
  - fixed rhbz#2275109, add texlive-picinpar
  - add texlive-selinput, texlive-lipsum, texlive-picture, texlive-kantlipsum, texlive-ntheorem


author: Miro Hrončok <mhroncok@redhat.com> - 3.24.4-2
changelog:
  - Always BuildRequire runtime dependencies to avoid non-installable builds
  - Remove no longer needed obsoletes of python3-detox


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.14-4
changelog:
  - Fix for CVE-2020-24330 (RHBZ#1874824)
  - Fix for CVE-2020-24331 (RHBZ#1870057)
  - Fix for CVE-2020-24332 (RHBZ#1870053)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.21-5
changelog:
  - faad2 plugin was moved to Fedora
  - update license tag as there's no BSD licensed code in binary RPMs


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


author: Sérgio Basto <sergio@serjux.com> - 0.9.16^20230801gita61f364-1
changelog:
  - Update to a61f364e385d98677c04070a994397b287385219 git snapshot from
    2023-08-01 (a support for acquiring a DRM framebuffer with a drm schema
    in -rawfb option)


author: Dominik Mierzejewski <rpm@greysector.net> - 0.161-3.20200912gitd198931
changelog:
  - Drop non-asm build for i686 and ppc64 (rfbz#5855)
  - Use set_build_flags instead of configure macro for non-autotools script (rfbz#5854)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Ondrej Sloup <osloup@redhat.com> - 4.2.3-17
changelog:
  - Update license tag to the SPDX format (GPL-2.0-only)
  - Fix /etc/passwd flags for locked and deactivated account (rhbz#2093381)


author: Timm Bäder <tbaeder@redhat.com> - 4.2-6
changelog:
  - Get rid of an implicit int during configure time
  - See https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Orion Poplawski <orion@nwra.com> - 1:6.0.36-1
changelog:
  - Update to 6.0.36 (CVE-2024-42330 rhbz#2329219, CVE-2024-42332 rhbz#2329222,
    CVE-2024-42333 rhbz#2329225)


author: Ben Woodard <woodard@redhat.com> - 4.3.4-2
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


