# changelog

author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - Fix LDAP socket timeout, duplicate log messages and Samba CLI
    Resolves: rhbz#1817869, rhbz#2024248, rhbz#2028530


author: Sérgio Basto <sergio@serjux.com> - 4.1-57
changelog:
  - ncurses-compat-libs was dropped in F37, to workaround and fix FTI (fails to
    install), since F37 we use ncurses-libs


author: Nathan Scott <nathans@redhat.com> - 6.2.5-1
changelog:
  - Upstream 6.2.5 release (RHBZ #1984631).
  - Fix CVE-2021-32761: 32-bit systems BITFIELD command integer overflow.


author: Sérgio Basto <sergio@serjux.com> - 0.9.12-6
changelog:
  - Drop BR java-atk-wrapper to let java-atk-wrapper be retired
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/YS3TQM3N5TDMQASL7OPJAWS5HVFRY2SX/


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 7.7-30
changelog:
  - Drop BuildRequires: pkgconfig(xxf86misc), X servers haven't implemented that
    extension in 10+ years.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.6-40
changelog:
  - Bump Release to 40 to ensure a working update path. rgb was a separate
    package in xorg-x11-server-utils (not just a Provides) and took the
    Release from that.


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Jonny Heggheim <hegjon@gmail.com> - 6.22.1-2
changelog:
  - Disabled armv7hl https://bugzilla.redhat.com/show_bug.cgi?id=1997416
  - Disabled s390x https://bugzilla.redhat.com/show_bug.cgi?id=1997426


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Jan Kratochvil <jan@jankratochvil.net> - 3.2.3-10
changelog:
  - Re-enable xxh128 xxh3 xxh64 disabled during 3.2.2 update.
  - Enforce openssl xxhash zstd lz4 ipv6 features by --enable-*.


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-1
changelog:
  - rebase to upstream version 8.2102.0
    resolves: rhbz#1905363
  - enable additional plugins: imkafka, mmutf8fix


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  - Remove rsyslog-recover-qi.pl from bindir, so it does not add dep on /usr/bin/perl
    resolves: rhbz#1939556


author: Attila Lakatos <alakatos@redhat.com> - 8.2204.0-1
changelog:
  - rebase to 8.2204.0
    resolves: rhbz#1951970
  - CVE-2022-24903 rsyslog: Heap-based overflow in TCP syslog server
    resolves: rhbz#2082302


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-129
changelog:
  - Add ruby-default-gems subpackage shipping all extra default gem content.
  - Bundle Racc into StdLib.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.3.2-4
changelog:
  - Apply upstream patch to support ruby 2.7
  - Unpack test tarball beforehand, as the above patch needs applying
  - Rebuild against ruby27


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.16.0-10
changelog:
  - Backport some patches from the upstream
  - Ruby 3.0: apply the upstream WIP patch for keyword separation


author: Vít Ondruch <vondruch@redhat.com> - 1.2.7-10
changelog:
  - Disable two more test cases failing without network connectivity with
    systemd-resolved.
    Resolves: rhbz#1866021
  - Adjust to tightened Fedora crypto policies.
    Resovles: rhbz#1863726


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.3.6-8
changelog:
  - Patch to support ruby 3.0
    - Use binding.source_location for test
    - Properly accept argument and keywords
    - Relax error message on test a bit


author: Vít Ondruch <vondruch@redhat.com> - 4.2.2-10
changelog:
  - jQuery {1,2}.x were dropped from Fedora while jQuery 3.x available in
    more recent version.
    Related: rhbz#1863662
    Related: rhbz#1863663


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.2.1-8
changelog:
  - Wrap rexml depedency with fedora release
  - Add upstream patch for rouge change
  - Add upstream patch to silence warnings from minitest


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.13.1-2
changelog:
  - Set NOKOGIRI_TEST_GC_LEVEL to major on ppc64le as
    ruby31 does not seem to support GC.compat on the platform


author: Vít Ondruch <vondruch@redhat.com> - 4.12.1-8
changelog:
  - Modernize .spec file.
  - Add rubygem(bigdecimal) dependency, which is in independent package in Fedora.
  - Add rubygem(xmlrpc) dependency, which was in Ruby 2.4 extracted into
    independent library.


author: Jun Aruga <jaruga@redhat.com> - 4.3.3-1
changelog:
  - Update to puma 4.3.3.
  - Fix newline characters to insert malicious content (CVE-2020-5247).
  - Fix carriage return character to insert malicious content (CVE-2020-5249).


author: Vít Ondruch <vondruch@redhat.com> - 4.3.6-1
changelog:
  - Update to Puma 4.3.6.
    Resolves: rhbz#1837148
    Resolves: rhbz#1863729
    Resolves: rbhz#1842535
    Resolves: rbhz#1842540
  - Fix the man pages generation and move them into the main package.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
  - Regenerate spec file with gem2rpm.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Add BRs for tests, enable tests in %check.
  - Require /usr/bin/groff, not the package in case the file is moved.
  - Keep the license file in the original location.
  - Adjust various macros and invocations.


author: Daiki Ueno <dueno@redhat.com> - 3.3.2-4
changelog:
  - Drop unnecessary debuginfo generation to fix armv7hl OOM problems
    https://src.fedoraproject.org/rpms/rust-cargo/c/37083edf76ed56f3e83169a6fab0e78c389ae66d?branch=rawhide


author: Rémi Lauzier <remilauzier@protonmail.com> - 0.3.1-1
changelog:
  - Update to 0.3.1.
  - Fixes RHBZ#1958601
  - COPYING and README.md file include in crate (https://github.com/jmesmon/build-env/issues/7)


author: Olivier Lemasle <o.lemasle@gmail.com> - 0.74.0-2
changelog:
  - Exclude unsupported architectures (arm 32bits, x86 32 bits, ppc64)
  - Remove pre-generated peephole optimizer
  - Remove features with unsatisfied dependencies


author: Olivier Lemasle <o.lemasle@gmail.com> - 0.74.0-2
changelog:
  - Exclude arch unsupported by Cranelift
  - Ignore tests which depend on x86_64 on other architectures


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.16.3-2
changelog:
  - Drop bear-lib-terminal and blt-backend features due to missing dependencies
    (#1961856)
  - Remove timestamps from changelog


author: Dusty Mabe <dusty@dustymabe.com> - 0.17.0-1
changelog:
  - Update to 0.17.0
  - License was updated upstream to be MIT or Apache-2.0
      - https://github.com/achanda/ipnetwork/commit/fa128680b51fbcf9c37db99f011c91204c4a3b0d


author: Jan Staněk <jstanek@redhat.com> - 1.0.5-1
changelog:
  - Initial package
  - Manually specify provides for libc++/libstdc++ (https://pagure.io/fedora-rust/rust2rpm/pull-request/123)


author: Fabio Valentini <decathorpe@gmail.com> - 0.3.20-1
changelog:
  - Update to version 0.3.20.
  - Drop "lints" and "paw" features with broken dependencies.
  - Fixes RHBZ#1886429


author: Fabio Valentini <decathorpe@gmail.com> - 0.3.3-1
changelog:
  - Update to version 0.3.3.
  - Remove features with broken dependencies (frunk, redis).
  - Fixes RHBZ#1890860


author: Fabio Valentini <decathorpe@gmail.com> - 0.20.3-1
changelog:
  - Update to version 0.20.3.
  - Enable all available features on appropriate architectures.
  - Fixes RHBZ#1951801


author: Olivier Lemasle <o.lemasle@gmail.com> - 0.30.0-1
changelog:
  - Fixes CVE-2021-39216, CVE-2021-39218, CVE-2021-39219
    (rhbz#2006114, rhbz#2006116, rhbz#2006110, rhbz#2006113, rhbz#2006105,
    rhbz#2006108)
  - Update to upstream 0.30.0


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.32-5
changelog:
  - 1976507 - [genesys 600dpi only] Canon LiDE 120 produces zoomed-in image which doesn't fit into A4 size


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - Rebase to upstream v1.4.2
  - Conflict with pacemaker that doesn't have pacemakerd-api
  - Set default to not do startup/shutdown-syncing via pacemakerd-api
    but enable in template-config


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-2
changelog:
  - remove deprecated dist.depcheck from gating
  - add tier0 to push_stable to have rawhide gated as well


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-1
changelog:
  - sync with upstream spec-file
  - Rebase to upstream v1.5.0
  - added fix from upstream for build-regression
  - added fix from upstream for handling leading space in devices


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - Having de-allocation in the reverse order compared to
    allocation seems to make gcc-12 static analysis of
    dynamic-memory-management happy.


author: Neal Gompa <ngompa@fedoraproject.org> - 0.19.0^git20220130.85cbf3f-1
changelog:
  - Update to snapshot release
  - Drop upstreamed patches
  - Drop Xauth patch due to inability to apply it
  - Update status on remaining patches
  - Add support for using a Wayland greeter
  - Clean up Wayland conditionals


author: Zdenek Pytela <zpytela@redhat.com> - 34.15-1
changelog:
  - Disable seccomp on CI containers
  - Allow systemd-machined stop generic service units
  - Allow virtlogd_t read process state of user domains
  - Add "/" at the beginning of dev/shm/var\.lib\.opencryptoki.* regexp
  - Label /dev/crypto/nx-gzip with accelerator_device_t
  - Update the policy for systemd-journal-upload
  - Allow unconfined domains to bpf all other domains
  - Confine rhsm service and rhsm-facts service as rhsmcertd_t
  - Allow fcoemon talk with unconfined user over unix domain datagram socket
  - Allow abrt_domain read and write z90crypt device
  - Allow mdadm read iscsi pid files
  - Change dev_getattr_infiniband_dev() to use getattr_chr_files_pattern()
  - Label /usr/lib/pcs/pcs_snmp_agent with cluster_exec_t
  - Allow hostapd bind UDP sockets to the dhcpd port
  - Unconfined domains should not be confined


author: Zdenek Pytela <zpytela@redhat.com> - 34.16-1
changelog:
  - Allow systemd-timesyncd watch system dbus pid socket files
  - Allow firewalld drop capabilities
  - Allow rhsmcertd execute gpg
  - Allow lldpad send to kdump over a unix dgram socket
  - Allow systemd-gpt-auto-generator read udev pid files
  - Set default file context for /sys/firmware/efi/efivars
  - Allow tcpdump run as a systemd service
  - Allow nmap create and use netlink generic socket
  - Allow nscd watch system db files in /var/db
  - Allow cockpit_ws_t get attributes of fs_t filesystems
  - Allow sysadm acces to kernel module resources
  - Allow sysadm to read/write scsi files and manage shadow
  - Allow sysadm access to files_unconfined and bind rpc ports
  - Allow sysadm read and view kernel keyrings
  - Allow journal mmap and read var lib files
  - Allow tuned to read rhsmcertd config files
  - Allow bootloader to read tuned etc files
  - Label /usr/bin/qemu-storage-daemon with virtd_exec_t


author: Zdenek Pytela <zpytela@redhat.com> - 34.17-1
changelog:
  - Add support for at-spi
  - Add permissions for system dbus processes
  - Allow various domains work with ICA crypto accelerator
  - Add ica module
  - Revert "Support using ICA crypto accelerator on s390x arch"
  - Allow systemd to delete fwupd var cache files
  - Allow vmtools_unconfined_t domain transition to rpm_script_t
  - Allow dirsrv read slapd tmpfs files
  - Revert "Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label"
  - Rename samba_exec() to samba_exec_net()
  - Support using ICA crypto accelerator on s390x arch
  - Allow systemd delete /run/systemd/default-hostname
  - Allow tcpdump read system state information in /proc
  - Allow rhsmcertd to create cache file in /var/cache/cloud-what
  - Allow D-bus communication between avahi and sosreport
  - Label /usr/libexec/gdm-runtime-config with xdm_exec_t
  - Allow lldpad send to kdumpctl over a unix dgram socket
  - Revert "Allow lldpad send to kdump over a unix dgram socket"
  - Allow chronyc respond to a user chronyd instance
  - Allow ptp4l respond to pmc
  - Allow lldpad send to unconfined_t over a unix dgram socket
  - Allow sssd to set samba setting


author: Zdenek Pytela <zpytela@redhat.com> - 34.18-1
changelog:
  - Allow ModemManager create a qipcrtr socket
  - Allow ModemManager request to load a kernel module
  - Label /usr/sbin/virtproxyd as virtd_exec_t
  - Allow communication between at-spi and gdm processes
  - Update ica_filetrans_named_content() with create_file_perms
  - Fix the gnome_atspi_domtrans() interface summary


author: Zdenek Pytela <zpytela@redhat.com> - 34.19-1
changelog:
  - Update the dhcp client local policy
  - Allow firewalld load kernel modules
  - Allow postfix_domain to sendto unix dgram sockets.
  - Allow systemd watch unallocated ttys


author: Zdenek Pytela <zpytela@redhat.com> - 35.12-1
changelog:
  - Fix badly indented used interfaces
  - Allow domain transition to sssd_t
  - Dontaudit sfcbd sys_ptrace cap_userns
  - Label /var/lib/plocate with locate_var_lib_t
  - Allow hostapd talk with unconfined user over unix domain dgram socket
  - Allow NetworkManager talk with unconfined user over unix domain dgram socket
  - Allow system_mail_t read inherited apache system content rw files
  - Add apache_read_inherited_sys_content_rw_files() interface
  - Allow rhsm-service execute its private memfd: objects
  - Allow dirsrv read configfs files and directories
  - Label /run/stratisd with stratisd_var_run_t
  - Allow tumblerd write to session_dbusd tmp socket files


author: Zdenek Pytela <zpytela@redhat.com> - 35.13-1
changelog:
  - Allow systemd services watch dbusd pid directory and its parents
  - Allow ModemManager connect to the unconfined user domain
  - Label /dev/wwan.+ with modem_manager_t
  - Allow alsactl set group Process ID of a process
  - Allow domtrans to sssd_t and role access to sssd
  - Creating interface sssd_run_sssd()
  - Label utilities for exFAT filesystems with fsadm_exec_t
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  - Allow init delete generic tmp named pipes
  - Allow timedatex dbus chat with xdm


author: Zdenek Pytela <zpytela@redhat.com> - 36.1-1
changelog:
  - Label exFAT utilities at /usr/sbin
  - policy/modules/contrib: Support /usr/lib/sysimage/rpm as the rpmdb path
  - Enable genfs_seclabel_symlinks policy capability
  - Sync policy/policy_capabilities with refpolicy
  - refpolicy: drop unused socket security classes
  - Label new utility of NetworkManager nm-priv-helper
  - Label NetworkManager-dispatcher service with separate context
  - Allow sanlock get attributes of filesystems with extended attributes
  - Associate stratisd_data_t with device filesystem
  - Allow init read stratis data symlinks


author: Zdenek Pytela <zpytela@redhat.com> - 36.2-1
changelog:
  - Allow sysadm_passwd_t to relabel passwd and group files
  - Allow confined sysadmin to use tool vipw
  - Allow login_userdomain map /var/lib/directories
  - Allow login_userdomain watch library and fonts dirs
  - Allow login_userdomain watch system configuration dirs
  - Allow login_userdomain read systemd runtime files
  - Allow ctdb create cluster logs
  - Allow alsa bind mixer controls to led triggers
  - New policy for insight-client
  - Add mctp_socket security class and access vectors
  - Fix koji repo URL pattern
  - Update chronyd_pid_filetrans() to allow create dirs
  - Update NetworkManager-dispatcher policy
  - Allow unconfined to run virtd bpf
  - Allow nm-privhelper setsched permission and send system logs
  - Add the map permission to common_anon_inode_perm permission set
  - Rename userfaultfd_anon_inode_perms to common_inode_perms
  - Allow confined users to use kinit,klist and etc.
  - Allow rhsmcertd create rpm hawkey logs with correct label


author: Zdenek Pytela <zpytela@redhat.com> - 36.3-1
changelog:
  - Update NetworkManager-dispatcher policy to use scripts
  - Allow init mounton kernel messages device
  - Revert "Make dbus-broker service working on s390x arch"
  - Remove permissive domain for insights_client_t
  - Allow userdomain read symlinks in /var/lib
  - Allow iptables list cgroup directories
  - Dontaudit mdadm list dirsrv tmpfs dirs
  - Dontaudit dirsrv search filesystem sysctl directories
  - Allow chage domtrans to sssd
  - Allow postfix_domain read dovecot certificates
  - Allow systemd-networkd create and use netlink netfilter socket
  - Allow nm-dispatcher read nm-dispatcher-script symlinks
  - filesystem.te: add genfscon rule for ntfs3 filesystem
  - Allow rhsmcertd get attributes of cgroup filesystems
  - Allow sandbox_web_client_t watch various dirs
  - Exclude container.if from policy devel files
  - Run restorecon on /usr/lib/sysimage/rpm instead of /var/lib/rpm


author: Zdenek Pytela <zpytela@redhat.com> - 36.4-1
changelog:
  - Update NetworkManager-dispatcher cloud and chronyc policy
  - Update insights-client: fc pattern, motd, writing to etc
  - Allow systemd-sysctl read the security state information
  - Allow init create and mounton to support PrivateDevices
  - Allow sosreport dbus chat abrt systemd timedatex


author: Zdenek Pytela <zpytela@redhat.com> - 36.5-1
changelog:
  - Add support for nm-dispatcher console helper scripts
  - Allow nm-dispatcher plugins read its directory and sysfs
  - Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
  - devices: Add a comment about cardmgr_dev_t
  - Add basic policy for BinderFS
  - Label /var/run/ecblp0 pipe with cupsd_var_run_t
  - Allow rpmdb create directory in /usr/lib/sysimage
  - Allow rngd drop privileges via setuid/setgid/setcap
  - Allow init watch and watch_reads user ttys
  - Allow systemd-logind dbus chat with sosreport
  - Allow chronyd send a message to sosreport over datagram socket
  - Remove unnecessary /etc file transitions for insights-client
  - Label all content in /var/lib/insights with insights_client_var_lib_t
  - Update insights-client policy


author: Zdenek Pytela <zpytela@redhat.com> - 36.6-1
changelog:
  - Add support for systemd-network-generator
  - Add the io_uring class
  - Allow nm-dispatcher dhclient plugin append to init stream sockets
  - Relax the naming pattern for systemd private shared libraries
  - Allow nm-dispatcher iscsid plugin append to init socket
  - Add the init_append_stream_sockets() interface
  - Allow nm-dispatcher dnssec-trigger script to execute pidof
  - Add support for nm-dispatcher dnssec-trigger scripts
  - Allow chronyd talk with unconfined user over unix domain dgram socket
  - Allow fenced read kerberos key tables
  - Add support for nm-dispatcher ddclient scripts
  - Add systemd_getattr_generic_unit_files() interface
  - Allow fprintd read and write hardware state information
  - Allow exim watch generic certificate directories
  - Remove duplicate fc entries for corosync and corosync-notifyd
  - Label corosync-cfgtool with cluster_exec_t
  - Allow qemu-kvm create and use netlink rdma sockets
  - Allow logrotate a domain transition to cluster administrative domain


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-39
changelog:
  - Used gethostbyname2 instead of gethostbyname to fix FTBFS caused by
    glibc update dropping support for obsolete RES_USE_INET6
    Resolves: rhbz#1736650


author: Martin Osvald <mosvald@redhat.com> - 2.13.10-1
changelog:
  - Move /var/log/lastlog ownership to systemd (#1798685)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2019874)
  - 'history -a' doesn't belong in /etc/bashrc (#1871744)
  - localhost.localdomain in wrong order /etc/hosts (#1724539)


author: Martin Osvald <mosvald@redhat.com> - 2.14.1-1
changelog:
  - bashrc sets hardcoded umask (#1902166)
  - bashrc: clean up unused references to VTE
  - uidgid: simplify table format and other format enhancements
  - uidgid: fix news and lock entries, move basic groups to systemd


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - login.defs: include HMAC_CRYPTO_ALGO key
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-8
changelog:
  - getsubids: provide system binary and man page (#1980780)
  - pwck: fix segfault when calling fprintf() (#2021339)
  - newgrp: fix segmentation fault (#2019553)
  - groupdel: fix SIGSEGV when passwd does not exist (#1986111)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-9
changelog:
  - nss: get shadow_logfd with log_get_logfd() (#2038811)
  - lib: make shadow_logfd and Prog not extern
  - lib: rename Prog to shadow_progname
  - lib: provide default values for shadow_progname
  - libsubid: use log_set_progname in subid_init


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.11.1-1
changelog:
  - Rebase to version 4.11.1 (#2034038)
  - Fix release sources
  - Add explicit subid requirement for subid-devel


author: Björn Esser <besser82@fedoraproject.org> - 2:4.8.1-16
changelog:
  - Add a patch to obtain random bytes using getentropy()
  - Update shadow-4.8-crypt_h.patch with the upstreamed version
  - Add a patch to make use of crypt_gensalt() from libxcrypt


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9
  - usermod: allow all group types with -G option (#1975327)
  - Clean spec file


author: Peter Jones <pjones@redhat.com> - 15.4-2
changelog:
  - Update to shim 15.4
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-3
changelog:
  - Mark signed shim packages as protected in dnf.
    Resolves: rhbz#1874541
  - Conflict with older fwupd, but don't require it.
    Resolves: rhbz#1877751


author: Javier Martinez Canillas <javierm@redhat.com> - 15.4-4
changelog:
  - Fix handling of ignore_db and user_insecure_mode (pjones)
  - Fix booting on pre-UEFI Macs (pjones)
  - Fix mok variable storage allocation region (glin)
    Resolves: rhbz#1948432
  - Fix the package version in the .sbat data (pjones)


author: Peter Jones <pjones@redhat.com> - 15.3-0~1
changelog:
  - Update to shim 15.3
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Rex Dieter <rdieter@fedoraproject.org> - 0.22-14
changelog:
  - patch out -Werror move -no-rtti for tests/ only (#1891251)
  - use %autosetup, %make_build, %make_install
  - add %check


author: Neal Gompa <ngompa13@gmail.com> - 1.55-1
changelog:
  - Update to 1.55
  - Add new APIs for download and logout actions
  - Add support for snap store logout
  - Fix QSnapdAuthData () constructor not copying discharge strings correctly
  - Remove obsolete screenshot parsing code
  - Make all snapd 404 errors return SNAPD_ERROR_NOT_FOUND


author: Neal Gompa <ngompa13@gmail.com> - 1.57-1
changelog:
  - Update to 1.57
  - Add snapd_interface_make_label
  - Add support for new snap types: "core", "base" and "snapd"
  - Change way GTK documentation is generated to avoid a Meson bug
  - Fix leak in markdown parser
  - Fix leak in logout code
  - Make build reproducible by fixing comment in generated file


author: Neal Gompa <ngompa13@gmail.com> - 1.58-1
changelog:
  - Update to 1.58
  - Fix GIR annotations on snapd_client_get_snap_conf
  - Put more information into error messages for unknown errors


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: David Woodhouse <dwmw2@infradead.org> - 2.6.1-3
changelog:
  - Resolves: rhbz#1831086 softhsm use-after-free on process exit
    Fix crash introduced by initial patch


author: Sandro Bonazzola <sbonazzo@redhat.com> - 4.5.1-1
changelog:
  - Update to 4.5.1
  - Resolves: rhbz#2174576
  - Drpped build dependency on gettext after upstream ac17ca4f460b67f438f3bef7b4eacc2c133a7643
  - Dropped dependency on bzip after upstream 6150afbbc7db76743553b7284d382f4ce8b99d94
  - Added dependency on python3-setuptools after upstream 58118340be133ced5374fdd2004f21a05224d128


author: Uwe Klotz <uwe.klotz@gmail.com> - 2.1.2-1
changelog:
  - Update to new upstream version 2.1.2
    Bump version to 2.1.2 to correct incorrect version info in configure.ac


author: Sérgio Basto <sergio@serjux.com> - 2.3.0-2
changelog:
  - Continuing to use the autotools build instead of new CMake
    https://gitlab.com/soundtouch/soundtouch/-/issues/45


author: Volker Fröhlich <volker27@gmx.at> - 1.9.2-1
changelog:
  - New upstream release
  - Use github as source
  - Use license macro and remove the now-gone README
  - Remove merged patch


author: Kalev Lember <klember@redhat.com> - 0.9.0-2
changelog:
  - Split new baratinoo and kali modules out into separate subpackages
  - Install man pages
  - Update the source URL


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - Fix CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Bruno Wolff III <bruno@wolff.to> - 4.5-24.20220308git8b6ee89
changelog:
  - Continue testing upstream patches prior to 4.5.1 release.
  - Minor fixes
  - Man page tweaks
  - Tentative 4.5.1 change log


author: Stephen Gallagher <sgallagh@redhat.com> - 2.6.2-1
changelog:
  - Update to 2.6.2
  - Handle very short and very long passphrases properly (fixes rhbz#1850183)
  - Drop upstreamed patch


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.0-1
changelog:
  - Release 3.0.0
  - Support for OpenSSL 3.0
  - Support for outputting named Diffie-Hellman parameter groups
  - Support for CentOS Stream 9


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20220908git8b5f1f3-0.1
changelog:
  - Update to 8b5f1f3
  - The stb_perlin-devel subpackage has been restored, as upstream believes
    all relevant patents are now expired.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20220908git8b5f1f3-0.4
changelog:
  - Patch in a candidate fix for ossfuzz issue 24232
  - Improves handling of certain invalid PNGs by stb_image


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20230129git6199bf7-0.1
changelog:
  - Update to 6199bf7 (stb_image 2.28)
  - Security-related patches for stb_image have been merged upstream, and
    there are other bugfixes.


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Radovan Sroka <rsroka@redhat.com> - 1.9.2-1
changelog:
  - rebase to 1.9.2
  Resolves: rhbz#1859577
  - added logsrvd subpackage
  - added openssl-devel buildrequires
  Resolves: rhbz#1860653
  - fixed sudo runstatedir path
  - it was generated as /sudo instead of /run/sudo
  Resolves: rhbz#1868215
  - added /var/lib/snapd/snap/bin to secure_path variable
  Resolves: rhbz#1691996


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Peter Czanik <peter@czanik.hu> - 1.9.7p2-1
changelog:
  - update to 1.9.7p2
  - follow up path change in strip patch
  - added --enable-zlib=system configure parameter, so sudo uses system zlib,
    autoconf is no more needed


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.7p2-2
changelog:
  - drop obsolete requirement for post script that doesn't exist anymore 
    (thanks @scfc)
  - remove commented-out lines from prior PR


author: Dominik Mierzejewski <rpm@greysector.net> - 4.4.6-14
changelog:
  - use openblas instead of atlas (#1506933)
  - enable parallel make for faster builds and drop duplicate -fPIC
  - drop non-standard -O3 and duplicate -fexceptions from default CFLAGS
  - build and run demos in check section
  - drop redundant ldconfig scriptlets


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Jerry James <loganjerry@gmail.com> - 1.5.1-1
changelog:
  - Update to 1.5.1
  - Drop upstreamed patches
  - Drop upstreamed workaround for numpy with a release candidate version


author: Javier Martinez Canillas <javierm@redhat.com> - 6.04-0.13
changelog:
  - Fix a bunch of annocheck problems (pjones)
  - Drop x86_64 ExclusiveArch for tftpboot subpackage
  - Make tftpboot subpackage completely noarch (yselkowi)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249~rc2-1
changelog:
  - Latest upstream prerelease with various bugfixes, see
    https://github.com/systemd/systemd/blob/v249-rc2/NEWS.
  - Ignore FORCERENEW DHCP packets (TALOS-2020-1142, CVE-2020-13529, #1959398)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249~rc3-1
changelog:
  - Latest upstream prerelease with various bugfixes, see
    https://github.com/systemd/systemd/blob/v249-rc3/NEWS.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249-1
changelog:
  - Latest upstream release with minor bugfixes, see
    https://github.com/systemd/systemd/blob/v249/NEWS.
  - systemd-oomd cpu usage is reduced (#1944646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.1-1
changelog:
  - Various minor documentation and correctness fixes.
  - CVE-2021-33910, #1984020: an unchecked stack allocation could be used to
    crash systemd and cause the system to reboot by creating a very long
    fuse mountpoint path.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 249.2-1
changelog:
  - Build with -Ddefault-dns-over-tls=opportunistic
    (https://fedoraproject.org/wiki/Changes/DNS_Over_TLS, #1889901)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.2-1
changelog:
  - Latest bugfix release (a minor hwdb regression bugfix, and correction
    to kernel commandline handling when reexecuting PID 1 in a container)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.3-1
changelog:
  - Latest bugfix release: improved compatibility with latest glibc,
    various small documentation fixes, and fixes for systemd-networkd bridging,
    other minor fixes.
  - systemctl set-property accepts glob patterns now (#1986258)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.4-1
changelog:
  - Latest bugfix release: various fixes for systemd-networkd,
    systemd-resolved, systemd, systemd-boot.
  - Backport of macros to restart systemd user units (#1993244)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250~rc1-4
changelog:
  - Move systemd-boot-update.service to -udev subpackage
    and add it the the installation scriptlets (#2031400)
  - Move libcryptsetup-token-systemd plugins to -udev (#2031873)
  - Create /etc/resolv.conf symlink if nothing is present yet (#2032085)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250~rc3-1
changelog:
  - Latest prerelease, see
    https://raw.githubusercontent.com/systemd/systemd/v250-rc3/NEWS for
    details.
  - Fixes rhbz#2006761, rhbz#2027627, rhbz#1926323, rhbz#1919538.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250-1
changelog:
  - Version 250, only some very small changes since -rc3.
  - Switch unit status name format to 'combined' (#2028169)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250-2
changelog:
  - Fix warning about systemd-boot-update.service not existing on
    non-uefi architectures
  - Enable all bpf features (#2035608)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.1-1
changelog:
  - First stable version after v250: various bugfixes, in particular for
    sd-boot, systemd-networkd, and various build issues.
  - Fixes #2036517, #2035608, #2036217.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.2-1
changelog:
  - Second stable release after v250: various bugfixes
    (systemd-resolved, systemd-journald, userdbctl, homed).
  - The manager should now gracefully handle the case where BPF LSM
    cannot be initialized (#2036145). The BPF filters are enabled again
    on all architectures, so *other* filter should also work on the
    affected architectures.
  - kernel-install now checks paths used by grub2 before sd-boot paths again
    (#2036199)
  - fstab-generator now ignores root-on-nfs/cifs/iscsi and live (#2037233)
  - CVE-2021-3997, #2024639: systemd-tmpfiles would exhaust the stack and crash
    during excessive recursion on a very deeply nested directory structure.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-1
changelog:
  - Third stable release after v250: fixes for sd-boot on fringe hardware (e.g. VirtualBox),
    various man page updates, sd-journal file verification is now stricter,
    systemd-networkd by default will not add routes for wireguard AllowedIPs=
    systemd nss modules shouldn't try to read kernel command line
  - Don't do sd-boot updates when not installed (#2038289)
  - xdg-autostart-service will ignore ExecCondition= when the helper binary is missing
  - kernel-install does cleanup better (#2016630)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-3
changelog:
  - Add pam_namespace to systemd-user pam config (rhbz#2053098)
  - Drop 20-grubby.install plugin for kernel-install (rhbz#2033646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-4
changelog:
  - Drop scriptlet for handling nobody user upgrades from Fedora <28
  - Specify owner of /var/log/journal as root in the rpm listing (#2018913)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-5
changelog:
  - Move part of %post scriptlet for resolved to %posttrans (#2018913)
  - Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.4-1
changelog:
  - Move libcryptsetup plugins to -udev (#2031873)
  - Move systemd-cryptenroll to -udev (David Tardon)
  - Disable default DNS over TLS (#1889901) (Michael Catanzaro)


author: Serhei Makarov <me@serhei.io> - 4.6-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Pavel Raiskup <praiskup@redhat.com> - 1.31-1
changelog:
  - the latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2019-01/msg00001.html


author: Pavel Raiskup <praiskup@redhat.com> - 1.32-1
changelog:
  - the latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2019-02/msg00010.html
  - admit that we bundle paxutils project


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Jan Macku <jamacku@redhat.com> - 6.23.00-1
changelog:
  - Update to tcsh-6.23.00 (#2022337)
  - Drop tcsh-6.22.04-expose-HIST_PURGE.patch                   - applied by upstream
  - Drop tcsh-6.22.04-modifiers-no-longer-breaks-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Tom Callaway <spot@fedoraproject.org> - 9:2021-41
changelog:
  - add tfm font provides to texlive-cm
  - add beamerthemenord component package to resolve broken deps
  - add latex-firstaid-dev component package to resolve broken deps
  - fix typo in Requires for texlive-pst-optexp
  - fix deps for texlive-kvmap


author: Tom Callaway <spot@fedoraproject.org> - 10:2022-62
changelog:
  - Update to TeXLive 2022 (finally)
  - update all the things
  - add new packages
  - rename packages (tl seems to have standardized on lowercase)


author: Tom Callaway <spot@fedoraproject.org> - 10:2022-63
changelog:
  - add missing dependencies to texlive-lua-uni-algos (bz2158837)
  - hack up tabu a bit to try to fix longtable (bz2158820)


author: Tom Callaway <spot@fedoraproject.org> - 9:2019-14
changelog:
  - update noto to resolve issue with missing .enc file
  - update noto provides to reflect current state


author: Tom Callaway <spot@fedoraproject.org> - 9:2019-15
changelog:
  - fix texlive-kerkis to only include the type1 kerkis fonts, not all of the type1 fonts in texlive
    (bz1790867)
  - properly package up the type1 fonts which were previously only in texlive-kerkis


author: Tom Callaway <spot@fedoraproject.org> - 9:2019-19
changelog:
  - drop Requires: stix-fonts stix-math-fonts from texlive-stix (bz1806271)
    this was more of a courtesy requires, but now that stix-fonts is 2.0, totally unnecessary


author: Tom Callaway <spot@fedoraproject.org> - 9:20210325-34
changelog:
  - add texlive-gsftopk as a dependency on texlive-texlive-scripts for mktexpk
  - add texlive-psnfss as a dependency on texlive-latex
  - drop Requires: tex(psfonts.map), died with updmap-map
  - conditionalize removing rpath from binaries which aren't always built


author: Tom Callaway <spot@fedoraproject.org> - 9:20210325-37
changelog:
  - fix fonts/map/dvips ownership
  - rename dvipdfm35.map to dvipdfm35.oldmap to prevent it from being included in pdftex.map
  - fix lyluatex versioning


author: Tom Callaway <spot@fedoraproject.org> - 10:20220321-54
changelog:
  - 10:20220321
  - epoch bump so we can use accurate versions for the component packages here
  - reminder: release does not reset here due to koji limitations
  - fix context-doc package to be noarch
    in theory, this might break some upgrades, but... i bet the number of people
    who have texlive-context-doc (all 90M of it) installed is very very low


author: Tom Callaway <spot@fedoraproject.org> - 7:20190410-7
changelog:
  - fix python3 issue with pdfbook2 (thanks to "Mildred", bz1733794)
  - fix python3 issue with latex-papersize (thanks to Silas S. Brown, bz1783964)


author: Marek Kasik <mkasik@redhat.com> - 7:20190410-8
changelog:
  - Rebuild for poppler-0.84.0
  - Don't include C++ headers in C sources
  - Temporarily break circular dependency on texlive-latex (will be reverted)


author: Carl George <carl@george.computer> - 2.2.0-3.2020704git5a1c8d8
changelog:
  - Update to latest upstream commit
  - Add patch to use correct shell completion locations
  - Run test suite
  - Add provides for ag and bundled uthash


author: Carl George <carl@george.computer> - 2.2.0^2020704.5a1c8d8-1
changelog:
  - Switch to caret versioning
  - Build against system uthash
  - Add patch for zsh completion of new flags


author: Eike Rathke <erack@redhat.com> - 91.7.0-1
changelog:
  - Update to 91.7.0
  - plus patches to bundled expat against CVE-2022-25235 CVE-2022-25236 CVE-2022-25315


author: Parag Nemade <pnemade AT redhat DOT com> - 91.8.0-2
changelog:
  - Update hunspell dictionary path
    F36 Change https://fedoraproject.org/wiki/Changes/Hunspell_dictionary_dir_change


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-6
changelog:
  - Backport upstream fix allowing Tigervnc to specify boolean valus in configuration
  - Revert removal of vncserver for F32 and F33


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.0-7
changelog:
  - Require xkbcomp directly, not xorg-x11-xkb-utils. The latter has had
    Provides xkbcomp for years.


author: Coty Sutherland <csutherl@redhat.com> 1:9.0.45-2
changelog:
  - Remove examples webapps from subpackage
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed the maven artifacts as they aren't very useful anyway
  - Drop JSVC support as it's not very useful these days
  - Drop geronimo-saaj as it's no longer required


author: Coty Sutherland <csutherl@redhat.com> 1:9.0.45-3
changelog:
  - Drop geronimo-jaxrpc, which provided the webservices naming factory resources that are generally unused


author: Coty Sutherland <csutherl@redhat.com> 1:9.0.45-4
changelog:
  - Add back logrotate config file per devel list request
  - Add mvn virtual provides back for the servlet, el, and jsp spec impls


author: Sonia Xu <sonix@amazon.com> - 1:9.0.59-1
changelog:
  - Update to 9.0.59
  - Resolves: rhbz#2047419 - CVE-2022-23181 tomcat: local privilege escalation vulnerability


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.13-3
changelog:
  - Remove OSGi MANIFEST files, these are now included in the upstream Tomcat distribution (as of 9.0.10)
  - Remove unused dependencies, apache-commons-collections, apache-commons-daemon, apache-commons-pool, junit


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.26-1
changelog:
  - Update to 9.0.26
  - Resolves: rhbz#1523112 tomcat systemd does not cope with - in service names
  - Resolves: rhbz#1510896 Problem to start tomcat with a user whose group has a name different to the user


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.31-1
changelog:
  - Update to 9.0.31
  - Resolves: rhbz#1806398 - CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability


author: Miro Hrončok <mhroncok@redhat.com> - 3.24.0-2
changelog:
  - Remove Recommends Python 3.5
  - Add Recommends for Python 3.10
  - https://fedoraproject.org/wiki/Changes/RetirePython3.5
  - https://fedoraproject.org/wiki/Changes/Python3.10


author: Miro Hrončok <mhroncok@redhat.com> - 3.24.4-2
changelog:
  - Always BuildRequire runtime dependencies to avoid non-installable builds
  - Remove no longer needed obsoletes of python3-detox


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.8a-2
changelog:
  - Add patches from upstream git fixing a couple of issues which may have
    security implications (CVE-2021-3561)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.14-4
changelog:
  - Fix for CVE-2020-24330 (RHBZ#1874824)
  - Fix for CVE-2020-24331 (RHBZ#1870057)
  - Fix for CVE-2020-24332 (RHBZ#1870053)


author: Tom Stellard <tstellar@redhat.com> - 3.0.9-59
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d including changes from tzdata-2020c
    - Palestine will end summer time on 2020-10-24 rather than the
      predicted 2020-10-31.
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021b-1
changelog:
  - Rebase to tzdata-2021b
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c
    - Revert most 2021b changes to the 'backward' file.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data reported in tzdata-2021b.
    - Fix two Link line typos from tzdata-2021b.
    - Distribute the new SECURITY file.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not 2022-03-26.
    - zdump -v now outputs better failure information.
    - bug fixes for code that reads corrupted TZif data.


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Andreas Schneider <asn@redhat.com> - 1.2.8-1
changelog:
  - Update to version 1.2.8
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.2.8/ChangeLog


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.0-1
changelog:
  - Add ioctls necessary to record/replay hidraw devices (thanks Daiki Ueno)
  - meson: Respect includedir option (thanks Florentin Dubois)
  - tests: Fix for Fedora koji emulated architectures s390x and arm
  - Enable automatic Fedora package updates with packit


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.2-1
changelog:
  - preload: Wrap statx() and fstatat(), to fix `ls` and other tools on
    recent glibc versions. (#160)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.6-1
changelog:
  - Increase uevent buffer size (#167)
  - Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
    builds for the time being, as it is brittle on several architectures (#169)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.8-1
changelog:
  - Fix some potential crashes spotted by Coverity
  - Enable Fedora builds and bodhi updates via packit


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.3-8
changelog:
  - Subpackage python2-unbound has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Wouters <pwouters@redhat.com> - 1.9.3-1
changelog:
  - Updated to 1.9.3
  - Resolves: rhbz#1672578 unbound-1.9.2 is available
  - Resolves: rhbz#1694831 [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/
  - Resolves: rhbz# 1667387 [abrt] unbound: memmove(): unbound killed by SIGABRT


author: Paul Wouters <pwouters@redhat.com> - 1.9.4-1
changelog:
  - Fix build on rhel/centos systems
  - Resolves: rhbz#1767955 (CVE-2019-16866) uninitialized memory accesses leads to crash via a crafted NOTIFY query


author: Michal Schorm <mschorm@redhat.com> - 2.3.9-3
changelog:
  - Bump release after fix of the default configuration for MySQL driver
    comming from "mysql-connector-odbc" package


author: Jakub Martisko <jamartis@redhat.com> - 6.0-52
changelog:
  - Sync the zipbomb false postives fixes with rhel
  - zipbomb-part4 patch introduced in 6.0-51 has been renamed to part6 and part4 and part5 have been ported from rhel
  Resolves: 1953565


author: Richard Lescak <rlescak@redhat.com> 20200910-11
changelog:
  - Substituted badly monospaced Nimbus Mono PS with Dejavu Sans Mono (#2021366)
  - added substitution for Century


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Jiri Kucera <jkucera@redhat.com> - 1.114-2
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1969918


author: Jiri Kucera <jkucera@redhat.com> - 1.112-3
changelog:
  - Dropped need to run autotools
  - <sys/sysmacros.h> must be now included manually
    Resolves #1606624
  - Fixed bad FSF address


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> - 3.1-1
changelog:
  - update to 3.1
  - include cmake import file
  - symlink headers in the previous location for compatibility


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> - 2.3.6-1
changelog:
  - update to 2.3.6
  - new upstream location
  - use cmake and run tests
  - switch main package to archful per
    https://docs.fedoraproject.org/en-US/packaging-guidelines/#_do_not_use_noarch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.18.1-2
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.18.1-3
changelog:
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.17.0-12
changelog:
  - Add valgrind-3.17.0-vgdb-queued-signals.patch
  - Add valgrind-3.17.0-ppc64-test-isa-3-1.patch
  - Add valgrind-3.17.0-ppc64-pstxvp.patch


author: Mark Wielaard <mjw@fedoraproject.org>
changelog:
  - Add valgrind-3.18.1-ppc64-cmov.patch
  - Add valgrind-3.18.1-arm64-atomics-rdm.patch
  - Add valgrind-3.18.1-rust-demangle-suffix.patch


author: Cole Robinson <crobinso@redhat.com> - 3.2.0-1
changelog:
  - Update to version 3.2.0
  - Slim down filesystem device editor UI
  - Fix TOCTTOU virt-install bugs (Martin Pitt)
  - Several other bug fixes


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 2.4-2
changelog:
  - Review fixes:
  - Fix Obsoletes
  - Use the prefix macro in the dictionary path
  - Use the license macro
  - Do not own the whole data directory, just the version 5 subdirectory


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-38
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-44
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-47
changelog:
  - Temporary pass -Wno-deprecated-declarations to gcc to ignore
    deprecated warnings to be able to build against OpenSSL-3.0
  - Resolves: rhbz#1962603


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-17
changelog:
  - Change URLs from HTTP to HTTPS
  - Add source file signature verification
  - Use %make_build and %make_install macros
  - Reformatting and minor changes for personal style preference
  - Fix man page glob
  - Use less broad globs
  - Add ABOUT-NLS, BACKLOG, and THANKS as %doc files
  - Rebuild configure script at build time
  - Add a %check section and run the tests
  - Add ncurses-devel BR for termcap/curses support
  - Add missing BR on gcc
  - Rebuild man pages in RPM build
  - Properly install license file (COPYING)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-18
changelog:
  - Improve summary and description text
  - Build HTML and PDF versions of the documentation
  - Add Latex2e to License field


author: Wolfgang Stöggl <c72578@yahoo.de> - 0.8.2-1
changelog:
  - New upstream version
  - Drop patches (fixed upstream):
    websocketpp-0.8.1-boost_1.70.patch
    websocketpp-0.8.1-fix_CMakeLists.txt_version_number.patch


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 7.0.93-1
changelog:
  - Update to RC1 for Weston 8.0 (version 7.0.93)
  - Remove have_simple_dmabuf_drm_client variable
  - The executable weston-simple-dmabuf-drm is gone


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.0-1
changelog:
  - New version 3.6.0
  - Fix for CVE-2021-39920, CVE-2021-39921, CVE-2021-39922, CVE-2021-39923, CVE-2021-39924, CVE-2021-39925, CVE-2021-39926, CVE-2021-39928, CVE-2021-39929


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.1-1
changelog:
  - New version 3.6.1
  - Fix for CVE-2021-4181, CVE-2021-4182, CVE-2021-4183, CVE-2021-4184, CVE-2021-4185, CVE-2021-4190


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.2-1
changelog:
  - New version 3.6.2
  - Fix for CVE-2022-0581, CVE-2022-0582, CVE-2022-0583, CVE-2022-0585, CVE-2022-0586


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Davide Caratti <dcaratti@redhat.com> - 1:2.7-5
changelog:
  - fix SAE and EAP_PWD vulnerabilities:
    CVE-2019-9494 (cache attack against SAE)
    CVE-2019-9495 (cache attack against EAP-pwd)
    CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP)
    CVE-2019-9497 (EAP-pwd server not checking for reflection attack)
    CVE-2019-9498 (EAP-pwd server missing commit validation for scalar/element)
    CVE-2019-9499 (EAP-pwd peer missing commit validation for scalar/element)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.8-1
changelog:
  - Update to 2.8 upstream release, to include latest fix for NULL
    pointer dereference when EAP-PWD peer receives unexpected EAP
    fragments (CVE-2019-11555, rh #1701759)


author: Mat Booth <mat.booth@redhat.com> - 4.15-5
changelog:
  - Remove springframework conditionals, the deps are a long time removed from
    Fedora and this simplifies the spec a bit
  - Disable unused modules that can't build on JDK 11


author: Justin Zobel <justin@1707.io> - 5.24.4-1
changelog:
  - Update to 5.24.4

  Thu Mar 10 2022 Marc Deop <marcdeop@fedoraproejct.org> - 5.24.3-2
  - Rebuild (qt5)


author: Jerry James <loganjerry@gmail.com> - 21.5.34-33.20190323hgc0ed7ef9a5a1
changelog:
  - Update to latest mercurial snapshot for miscellaneous bug fixes
  - Switch from NSS to OpenSSL
  - Build with openldap support
  - Compress the Lisp source files


author: Tim Landscheidt <tim@tim-landscheidt.de> - 21.5.34-33.20190323hgc0ed7ef9a5a1
changelog:
  - Obsolete -el subpackage
  - Remove needless use of %defattr
  - Simplify generation of file list
  - Enable test suite


author: Jerry James <loganjerry@gmail.com> - 20200216-1
changelog:
  - Update to the latest cc-mode and time packages
  - Add gdbm patch due to XEmacs switch from libdb to gdbm


author: Michael Young <m.a.young@durham.ac.uk> - 4.15.0-1
changelog:
  - update to xen-4.15.0
    adjust xen.canonicalize.patch
    remove or adjust patches now included or superceded upstream
    renumber patch
    update libxendevicemodel libxenevtchn libxenforeignmemory versions
    /etc/bash_completion.d/xl.sh is now xl
    package xen-access xen-memshare xenstorepvh-stubdom.gz
  	xl-pci-configuration.5.gz
  - adjust xen.ocaml.4.12.fixes.patch to work with earlier ocaml
  - re-copy grub modules if they have changed


author: Michael Young <m.a.young@durham.ac.uk> - 4.15.0-3
changelog:
  - xen/arm: Boot modules are not scrubbed [XSA-372, CVE-2021-28693]
    (#1970542)
  - inappropriate x86 IOMMU timeout detection / handling
  	[XSA-373, CVE-2021-28692] (#1970540)
  - Speculative Code Store Bypass [XSA-375, CVE-2021-0089, CVE-2021-26313]
  	(#1970531)
  - x86: TSX Async Abort protections not restored after S3
  	[XSA-377, CVE-2021-28690] (#1970546)


author: Michael Young <m.a.young@durham.ac.uk> - 4.15.0-6
changelog:
  - IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694,
  	CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568)
  	(#1997537)
  - grant table v2 status pages may remain accessible after de-allocation
  	[XSA-379, CVE-2021-28697] (#1997520)
  - long running loops in grant table handling [XSA-380, CVE-2021-28698]
  	(#1997526)
  - inadequate grant-v2 status frames array bounds check [XSA-382,
  	CVE-2021-28699] (#1997523)
  - xen/arm: No memory limit for dom0less domUs [XSA-383, CVE-2021-28700]
  	(#1997527)
  - grub x86_64-efi modules now go into /boot/grub2


author: Michael Young <m.a.young@durham.ac.uk> - 4.15.0-7
changelog:
  - Another race in XENMAPSPACE_grant_table handling [XSA-384, CVE-2021-28701]
  	(#2002786)
  - bugfix for XSA-380
  - stop editing grub files in /boot/efi/EFI/fedora


author: Michael Young <m.a.young@durham.ac.uk> - 4.15.1-1
changelog:
  - update to xen-4.15.1
    remove or adjust patches now included or superceded upstream
    update libxencall version


author: Jerry James <loganjerry@gmail.com> - 2.12.1-1
changelog:
  - Version 2.12.1
  - Drop upstreamed getcontentdocument patch
  - Drop no longer used taglet sources
  - Verify the source tarball
  - Compute cvs_version so it doesn't have to be updated in sync with Version
  - Build with JDK 11
  - Generate the scripts with jpackage_script


author: Mat Booth <mat.booth@redhat.com> - 2.12.1-3
changelog:
  - Update OSGi metadata, use import-package instead of require-bundle
    in order to avoid some tricky OSGi breakage on Java 11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-3
changelog:
  - Adjust whitespace and ordering to personal preference
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Slightly nicer description
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Peter Hutterer <peter.hutterer@redhat.com> 2.32-1
changelog:
  - xkeyboard-config 2.32
  - build with meson now
  - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev
    these days.


author: Paul Wouters <pwouters@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1761700 xl2tpd-1.3.15 is available
  - Resolves: rhbz#1875262 Unsupported options 'crtscts' and 'lock' in /etc/ppp/options.xl2tpd
  - Resolves: rhbz#1869420 xl2tpd.service:8: PIDFile= references a path below legacy directory /var/run/


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0
  - Drop patch 0001-dri3-Always-flush-glamor-before-sharing-pixmap-stora.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-5
changelog:
  - Add patch 0001-Only-include-dri.h-with-older-versions-of-xserver.patch
    to fix build against current xorg-x11-server (rhbz#1923708)


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-29
changelog:
  - BuildRequire mkfontscale now that it's separated out from
    xorg-x11-font-utils (#1938069)
  - Use the make_build rpm macro


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-30
changelog:
  - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro
    doing the same thing, removing our runtime reliance on
    xorg-x11-font-utils (#1938074)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-31
changelog:
  - Drop the daewoo-misc fonts, they have no upstream license terms and may be
    proprietary (#1952723)


author: Peter Hutterer <peter.hutterer@redhat.com> 2021.2-1
changelog:
  - xorgproto 2021.2
  - Remove two header files that belong to libX11/libXv and are now part of
    the --enable-legacy build only


author: Peter Hutterer <peter.hutterer@redhat.com> 2021.3-1
changelog:
  - xorgproto 2021.3 (no changes except the tarball no longer fails with meson)
  - clean up the gitignore file


author: Olivier Fourdan <ofourdan@redhat.com> 1.20.5-5
changelog:
  - Do not include <sys/io.h> on ARM with glibc to avoid compilation failure.
  - Do not force vbe and int10 sdk headers as this enables int10 which does
    not build on ARM without <sys/io.h>


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.7-1
changelog:
  - xserver 1.20.7
  - backport from stable "xserver-1.20-branch" up to commit ad7364d8d
    (for mutter fullscreen unredirect on Wayland)
  - Update videodrv minor ABI as 1.20.7 changed the minor ABI version
    (backward compatible, API addition in glamor)
  - Rebase Xwayland randr resolution change emulation support patches


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.7-2
changelog:
  - Fix a crash on closing a window using Present found upstream:
    https://gitlab.freedesktop.org/xorg/xserver/issues/1000


author: Olivier <ofourdan@magic.com> - 1.20.14-1
changelog:
  - xserver 1.20.14
    CVE-2021-4008/ZDI-CAN-14192 (#2026059, #2032941)
    CVE-2021-4009/ZDI-CAN-14950 (#2026072, #2032943)
    CVE-2021-4010/ZDI-CAN-14951 (#2026073, #2032944)
    CVE-2021-4011/ZDI-CAN-14952 (#2026074, #2032945)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.1.2-1
changelog:
  - xbitmaps 1.1.2
  - Use make macros, see
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Tom Callaway <spot@fedoraproject.org> - 1:4.04-5
changelog:
  - pull in all the headers
  - apply null fix for default var in GlobalParams()
  - make a libxpdfcore for texlive-base to use


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.1-3
changelog:
  - Restore Recommends: cpp lost in the package split
    xorg-x11-server-utils used mcpp but that one is unmaintained and broken in
    some cases, let's use the standard cpp instead.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.0.2-1
changelog:
  - Unretire package
  - Switch source to GitHub and update to 1.0.2
  - Use cmake instead of scons
  - Install systemd user service
  - Misc specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.7.4-1
changelog:
  - Update to version 0.7.4
  - Enable runtime detection of sse2/avx2/avx512 on intel architectures
  - Fix compiler warning for 32 bit architectures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.0-1
changelog:
  - Update to version 0.8.0
  - Drop patches xxhash-compiler-warning-32-bit.patch (accepted upstream)
    and xxhash-pkgconfig.patch (issue fixed upstream)
  - Fix empty version in .pc file


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.1-1
changelog:
  - Update to version 0.8.1
  - Drop patch xxhash-pkgconfig-version.patch (accepted upstream)
  - Fix compilation on RHEL 7 ppc64le (gcc 4.8)
  - The x86 dispatch code now enables sse2 and avx2 separately, it can now use
    sse2 on EPEL 7 without trying to use avx2 which is not supported by gcc 4.8
  - Add documentation package - doxygen mark-up was added


author: Todd Zullinger <tmz@pobox.com> - 5.2.5-9
changelog:
  - verify upstream GPG signature
  - xzgrep: arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.21.1-1
changelog:
  - Resolves: RHBZ#1627748, #1687099, #1788329
  - Update to 1.21.1
  - Provides /usr/bin/yarn
  - Resolves CVE-2019-10773


author: zsvetlik@redhat.com - 1.22.10-1
changelog:
  - Update to 1.22.10
  - Resolves: RHBZ#1816262, RHBZ#1851876
  - Long resolved CVEs, just not mentioned in changelog


author: Neal Gompa <ngompa@fedoraproject.org> - 1.22.10-4
changelog:
  - Work around broken brp-mangle-shebangs behavior (see RHBZ#1998924)
  - Fix broken macro variable for legacy "nodejs-yarn" binary name (RHBZ#1904279)


author: zsvetlik@redhat.com - 1.22.17-1
changelog:
  - Update to latest upstream release
  - use --force in yarnpkg-tarball.sh to workaround dependency conflincts


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Maxwell G <gotmax@e.email> - 2021.12.17-1
changelog:
  - Update to 2021.12.17. Fixes rhbz#2033616.
  - Properly own shell completions directories
  - Remove obsolete epel6 code.


author: James Antill <james at fedoraproject.org> - 3.4.3-60
changelog:
  - update to latest HEAD.
  - Auto expire caches on repo errors.
  - Use xattrs for cache checksum speedup.


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.1-2
changelog:
  - Fix compilation on GCC 4.4.7 so it builds on EL6
  - Add missing sources
  - Also, zchunk will now automatically do all your taxes


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.2-2
changelog:
  - Fix multipart range handling to work with quotes, fixes #1706627
  - Fix file creation permissions so they respect umask
  - Actually push new sources


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.0-1
changelog:
  - Add `--uncompressed` option to zck, allowing for embedding of uncompressed
    digests in the header
  - Various small bug fixes


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.1-1
changelog:
  - Fixed bug that limited size of file that could be compressed using zchunk to 2GB
  - Fixed memory leak


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 4.3.4-1
changelog:
  - Upstream upgrade
  - Fixes #1921879, #1921972, #1921973, #1921975, #1921976, #1921979, #1921981,
  - #1921983, #1921983, #1921985, #1921987, #1921989, #1921992, #1921994


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.22-1
changelog:
  - New upstream version
    https://github.com/coreos/zincati/releases/tag/v0.0.22
  - Temporarily use bundled crates from vendor tarball


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.13.72-1
changelog:
  - 0.13.72
  - Fixes CVE-2020-18442
  - Resolves: rhbz#1973831
  - Switch build to CMake, drop 32-bit patches as checks integrated in CMake already


