# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.8.0-1
changelog:
  - Update SDL2_mixer to 2.8.0 (#2259608)
  - Migrate to SPDX license
  - Add Provides: bundled(timidity) (#2103502)


author: Maxwell G <maxwell@gtmx.me> - 1-10
changelog:
  - %ansible_collection_install - disable spurious collections path warnings
  - ansible-packaging-tests - don't depend on pytest-forked with ansible-core 2.16
  - ansible-srpm-macros - include license file in the package


author: Than Ngo <than@redhat.com> - 130.0.6723.69-1
changelog:
  - Update to 130.0.6723.69
    * High CVE-2024-10229: Inappropriate implementation in Extensions
    * High CVE-2024-10230: Type Confusion in V8
    * High CVE-2024-10231: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 130.0.6723.91-1
changelog:
  - Update to 130.0.6723.91
    * Critical CVE-2024-10487: Out of bounds write in Dawn
    * High CVE-2024-10488: Use after free in WebRTC


author: Than Ngo <than@redhat.com> - 130.0.6723.116-1
changelog:
  - Update to 130.0.6723.116
    * High CVE-2024-10826: Use after free in Family Experience
    * High CVE-2024-10827: Use after free in Serial


author: Than Ngo <than@redhat.com> - 131.0.6778.69-1
changelog:
  - Update to 131.0.6778.69
    * High CVE-2024-11110: Inappropriate implementation in Blink
    * Medium CVE-2024-11111: Inappropriate implementation in Autofill
    * Medium CVE-2024-11112: Use after free in Media
    * Medium CVE-2024-11113: Use after free in Accessibility
    * Medium CVE-2024-11114: Inappropriate implementation in Views
    * Medium CVE-2024-11115: Insufficient policy enforcement in Navigation
    * Medium CVE-2024-11116: Inappropriate implementation in Paint
    * Low CVE-2024-11117: Inappropriate implementation in FileSystem


author: Than Ngo <than@redhat.com> - 131.0.6778.139-1
changelog:
  - Update to 131.0.6778.139
    * High CVE-2024-12381: Type Confusion in V8
    * High CVE-2024-12382: Use after free in Translate


author: Than Ngo <than@redhat.com> - 131.0.6778.204-1
changelog:
  - Update to 131.0.6778.204
    * High CVE-2024-12692: Type Confusion in V8
    * High CVE-2024-12693: Out of bounds memory access in V8
    * High CVE-2024-12694: Use after free in Compositing
    * High CVE-2024-12695: Out of bounds write in V8


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241216git660795b-1
changelog:
  - Update to 0^20241216git660795b
  - dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve
    detection of ARM64EC.
  - dr_mp3 0.6.40: Improve detection of ARM64EC
  - dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded
    files. Improve detection of ARM64EC.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.18-35
changelog:
  - Fully patch obsolete FSF postal address in license text
  - Since upstream merged the PR for this, we now patch the license text file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24-3
changelog:
  - Remove explicit %set_build_flags, not needed since F36 > >
    https://www.fedoraproject.org/wiki/Changes/SetBuildFlagsBuildCheck


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.1.6-3
changelog:
  - Do not run exhaustive tests by default
  - We can always manually run scratch builds with them enabled, especially
    after significant upstream changes.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.1-5
changelog:
  - Correction: .so version is “2.0”, not “2”
  - This is a spec file fix, and does not change the installed library


author: Pavel Raiskup <praiskup@redhat.com> 5.2-1
changelog:
  - Fix '~' user source expansion for --copyout
  - Compatibility fix with EL 8
  - Log out the command-line arguments
  - Make sure that 'state' is always finished
  - README.md: cleaning up
  - Post-release administrivia


author: Pavel Raiskup <praiskup@redhat.com> 5.3-1
changelog:
  - orphanskill: log command line arguments of the terminated process
  - docs: migrate the community from IRC to Matrix
  - dnf5: don't output to a PTY (mail@evangoo.de)
  - new rpmautospec plugin (sgallagh@redhat.com, nils@redhat.com)
  - fix bash completion with multiple file arguments (orion@nwra.com)
  - only %prep once when running %generate_buildrequires multiple times (miro@hroncok.cz)
  - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro@hroncok.cz)
  - Identify buildroot package management earlier (praiskup@redhat.com)
  - Dump also dnf5 info into logs


author: Pavel Raiskup <praiskup@redhat.com> 5.5-1
changelog:
  - allow chroot_scan to create archive instead of directory (tkopecek@redhat.com)
  - handle greedy options in Bash completion
  - fix root_cache invalidation (not) triggered by config changes
  - new '{{ repo_arch }}' Jinja2 template support
  - package_manager: disable %-interpolation in dnf.conf parser
  - only `chown` the in-chroot home files with the --rebuild mode
  - all non-privileged actions performed wiht EGID=135 (mock group)
  - mock newly requires a precise version of mock-filesystem
  - allow shadow-utils to run in buildroot by exception if necessary (martjack@redhat.com)
  - hw_info now reports file system type (vondruch@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 5.6-1
changelog:
  - scm: Open stdout in text mode for Git timestamp subprocesses
    (fedora.dm0@gmail.com)
  - always set ownership of homedir (but not recursively) (msuchy@redhat.com)
  - Do not create temporary Buildroot.tmpdir for disabled nosync
    (praiskup@redhat.com)
  - bash-completion: add mock-parse-buildlog (pastalian46@gmail.com)
  - Rewrites "original_name" method to check if "cls" has a "backmap"
    (nikitych@yandex.ru)
  - Don't use --allowerasing for more DNF commands (frostyx@email.cz)
  - bash-completion: pre-build the list of mock known options
    (praiskup@redhat.com)
  - Avoid Traceback for resultdir ENOSPC (praiskup@redhat.com)
  - Post-release administrivia (praiskup@redhat.com)
  - Fix Version in %changelogs (praiskup@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Jakub Kadlcik <frostyx@email.cz> 40.3-1
changelog:
  - Add initial c10s mock configs (Koji BUILDROOT only) (miro@hroncok.cz)
  - configs: use repo_arch, not target_arch with openSUSE (praiskup@redhat.com)
  - configs: Drop modular repositories from Fedora Branched
    (ngompa@fedoraproject.org)
  - configs: Drop modular repositories from Fedora Rawhide
    (ngompa@fedoraproject.org)
  - Configs 40.2 release notes && post-release administrivia
    (praiskup@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 40.4-1
changelog:
  - configs: BuildWithDNF5 for ELN (praiskup@redhat.com)
  - Add Circle Linux 9 configs (bella@cclinux.org)
  - configs: Replace Mageia 10 and Cauldron i586 configs with i686
    (wally@mageia.org)
  - Post-release administrivia (frostyx@email.cz)


author: Pavel Raiskup <praiskup@redhat.com> 41.1-1
changelog:
  - branch F41 from Rawhide (frostyx@email.cz)
  - added centos-stream+epel-10 configs
  - Enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - Rawhide to accept GPG key from future Fedora Rawhide+1
  - openEuler 24.03 LTS (nucleo@fedoraproject.org)
  - drop fedora-eln-i386 (yselkowi@redhat.com)
  - Switch CentOS 7 to vault.centos.org (robert@fedoraproject.org)
  - Fix GPG keys for CentOS Stream 10 repositories (daan.j.demeyer@gmail.com)
  - EOL epel-7 configuration
  - CentOS 7 is EOL
  - Fedora 41+ configuration images are "dnf5 ready"
  - Use metalinks for c10s {baseos,appstream,crb}-{source,debuginfo} (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 41.3-1
changelog:
  - move anolis-7 to eol directory (msuchy@redhat.com)
  - move opensuse-leap-15.4 to eol directory (msuchy@redhat.com)
  - configs: the stream9 image is "ready" for Mock bootstrap
  - enable bootstrap container for CentOS Stream 10 (carlwgeorge@gmail.com)
  - configs: replace `powerpc64le` with `ppc64le` in the `%_host_cpu` macro
  - fix EOL template locations for CentOS7/EPEL7 (thomas.mendorf@ebf.com)


author: Pavel Raiskup <praiskup@redhat.com> 41.5-1
changelog:
  - Fedora 39 EOL
  - fix openSUSE-tumbleweed update failure during the second build (duli4868@gmail.com)
  - use non development bootstrap image for CentOS Stream 10 (romain.geissler@amadeus.com)
  - remove ELN ResilientStorage repos (yselkowi@redhat.com)
  - update ELN bootstrap image (yselkowi@redhat.com)
  - Add epel and epel-testing repos to the EPEL 10 config (carlwgeorge@gmail.com)


author: Kim B. Heino <b@bbbs.net> - 2.0.72-1
changelog:
  - Upgrade to 2.0.72
  - Add munin-get plugin directory
  - Mangle /var/lib/munin-node SELinux
  - Fix service startup order


author: David Sommerseth <davids@openvpn.net> - 2.7-20241212gitbaa9192
changelog:
  - First packaging attempt for EPEL-10 - OpenVPN 2.7 git master snapshot build
  - Update to git master baa9192851006e2dbb90b410011e61ecf2e01870


author: Paul Howarth <paul@city-fan.org> - 1.3.13-1
changelog:
  - Update to 1.3.13
    - Add Cassandra support via DBD::Cassandra
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Remi Collet <remi@remirepo.net> - 2.2.3-4
changelog:
  - fix incompatible-pointer-types using patch from
    https://github.com/php/pecl-file_formats-yaml/pull/74


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-5
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-6
changelog:
  - Fix support for building with no ENGINE support in OpenSSL (GH#1816)
  - Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-8
changelog:
  - Drop EL-7 support
    - Drop mod_geoip support
    - Drop mod_wrap support
    - Always build mod_proxy
    - Always use libpcre2
    - Always use maridb client library in preference to mysql
    - Always use libpq client library in preference to postgresql
    - Always use OpenSSL Cipher Profiles
  - Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
    onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.1.rc2
changelog:
  - Update to 1.3.9rc2
    - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
    - Fix mod_sftp not advertising standard extensions for protocol version 3
      (GH#1570)
    - Fix mod_sftp "check-file" extension using wrong block size when offset and
      length are specified (GH#1569)
    - Use JSON for Controls protocol messages (GH#379)
    - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
    - Enforce requirement of preceding RewriteCondition for RewriteRule directives
      to avoid confusion (Bug #4495)
    - Implement LogFormat variable for data transfer average speed (GH#535)
    - Optimize per-connection file I/O when reading SFTPHostKey from disk
      (GH#1596)
    - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
      (GH#1610)
    - Reduce latency due to signal handling in the daemon process (GH#1623)
    - SSH key exchange requests should be classified into the "SEC" ExtendedLog
      class (GH#1626)
    - Update mod_exec to use the Jot API for resolving variables (GH#1630)
    - Use system TCP backlog value by default (GH#1636)
    - Gracefully handle directory creation requests when the directory already
      exists (GH#1639)
    - Remove asynchronous FTP responses emitted while computing digest values
      (GH#1661)
    - Support terminating connection after USER command when TLS is required
      (GH#1640)
    - Support OPTS commands for querying configured policy for resumed uploads,
      downloads (GH#1676)
    - MaxStoreFileSize for single user was not properly honored for SFTP uploads
      (GH#1686)
    - DisplayChdir using absolute path should work properly with DefaultRoot
      (GH#1688)
    - Clients should be disconnected when unable to be added to the
      ScoreboardFile (GH#1700)
    - Support injecting random delay when clients connect via DelayOnEvent
      (GH#1701)
    - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
    - Support obtaining default UID/GID values for AD directories in mod_ldap
      (GH#1716)
    - Update upload progress in scoreboard when throttling (GH#1433)
    - Null pointer reference encountered for FTPS connection due to config
      parser ignoring Include file problem (GH#1721)
    - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
    - mod_auth_otp should require per-user OTP entries by default (GH#1562)
    - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
      when using older OpenSSL versions (GH#1730)
    - Error resolving DNS name for implicit "server config" vhost lead to
      DelayTable not being found (GH#1746)
    - Log message for exceeding quota did not include the user/group/class quota
      type (GH#1749)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)
  - Additional C compatibility fix


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.2.rc3
changelog:
  - Update to 1.3.9rc3
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - Using mod_facl and mod_vroot at same time caused unexpected permissions
      issues (GH#1780)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
    - Implement limits@openssh.com SFTP extension (GH#1798)
    - Implement SFTPAuthPublicKeys directive for configuring the list of public
      key algorithms allowed for authentication (GH#1806)
    - Fix stack trace changing to directory with DisplayChdir file using %F
      variable on a large filesystem (GH#1819)
    - Remove inherited supplemental groups when started with root privileges
      (GH#1836)
    - SSH ECDSA host key algorithms were not being used as expected despite
      configuring appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.3.rc3
changelog:
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.1-1
changelog:
  - Update to 0.7.1 (close RHBZ#2239611)
  - The hard dependency on python-psutil is dropped; there is a new
    memory_info extra and a corresponding metapackage, upon which we carry a
    weak (Recommends:) dependency.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.10.0-1
changelog:
  - Update to 0.10.0
  - Switch to psf fork
  - Adopt rpmautospec
  - Adopt pyproject-rpm-macros
  - Misc clean-ups


author: Karolina Surma <ksurma@redhat.com> - 2.2.0-1
changelog:
  - Update to 2.2.0, includes the fix for CVE-2023-26302
  Resolves: rhbz#2172373 rhbz#2177154
  - Provide extra subpackages: linkify and plugins


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.0.1-3
changelog:
  - epel10
  - add BR for python-soupsieve to eliminate an error
  - temp remove %check due to 11 new failing tests. To be restored at some
    future date


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240806git39e2663-1
changelog:
  - Update to 0^20240806git39e2663
  - Add `static inline` to `PyUnicodeWriter_WriteStr()` and
    `PyUnicodeWriter_WriteRepr()`.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241009git669c882-1
changelog:
  - Update to 0^20241009git669c882
  - Add `PyUnicode_Equal()` function
  - Add `PyBytes_Join()` function
  - Add `Py_HashBuffer()` function
  - Add `PyIter_NextItem()` function
  - Add `PyLong_FromUInt64()` and `PyLong_AsUInt64()`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241115git03e441d-1
changelog:
  - Update to 0^20241115git03e441d
  - Add `PyLong_IsPositive`/`Negative`/`Zero()` functions
  - Relax `PYPY_VERSION_NUM` requirements for hash macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.8-1
changelog:
  - Update to version 0.8.8; Fixes RHBZ#2311783
  - Add upstream link for fixing mixture of newline styles
  - Backport commit from upstream to fix s390x issues
  - Where possible, patch out "support for common crates" features


author: Ron Olson <tachoknight@gmail.com> 5.8.1-6
changelog:
  - Made 5.8.1 work for EPEL 10 as it is the last version of
    Swift that could be built without another version of
    Swift being present


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-4
changelog:
  - Tidy up BuildRequires/Requires
  - BR: tzdata, which is not pulled from dependencies on F39+ (RHBZ#2261742)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Richard W.M. Jones <rjones@redhat.com> - 6.1.8.1-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


