# changelog

author: Filipe Rosset <rosset.filipe@gmail.com> - 0.9.5-5
changelog:
  - Modernized spec file for rawhide/epel10 - Removed redundant %%global
    _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
    %%make_build for better compliance - Updated %%install to use more
    idiomatic install commands - Listed binaries explicitly in %%files to
    avoid warnings - Improved man page globs to be compression-neutral -
    Ensured correct directory ownership for logs


author: Michel Lind <salimma@fedoraproject.org> - 25.01-1
changelog:
  - Update to 25.01
  - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
  - Backport Debian patch to disable echo-ing password; Resolves:
    rhbz#2412315


author: Michel Lind <salimma@fedoraproject.org> - 26.01-1
changelog:
  - Update to 26.01; Resolves: rhbz#2440915
  - Fixes CVE-2026-48092: Information disclosure in 32-bit builds
  - Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler
  - Fixes CVE-2026-48101: Information disclosure in UEFI capsule parser
  - Fixes CVE-2026-48102: Information disclosure and DOS via crafted UDF
    image
  - Fixes CVE-2026-48103: Off-by-one buffer over-read in WIM archive handler
  - Fixes CVE-2026-48104: Uninitialized heap read in SquashFS archive handler
  - Fixes CVE-2026-48111: Off-by-one OOB read in UEFI firmware image parser
  - Fixes CVE-2026-48112: Heap-based buffer over-read in Ar handler BSD
    SYMDEF parser


author: Richard Shaw <hobbes1069@gmail.com> - 4.4.0-8
changelog:
  - Add patch to fix #2091514 where saving a configuration change in the web UI
    would replace {} with () in the config file.


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:22.0.0-1
changelog:
  - Updated to v22.0.0, using the archive available on GitHub.
  - Changed the epoch, to mark the new upstream version scheme.
  - Removed year/version from the patch filenames; version control should suffice.
  - Added a build step to make the GtkAda User's Guide (in HTML and PDF).
  - Removed the GtkAda Reference Manual; build requires Gnatdoc which is not
    available yet on Fedora.
  - License fields now contain SPDX license expressions.
  - Use 'gprinstall' instead of 'make_install' to have better control of what goes
    where.
  - The file 'testgtk.gpr' is now updated during prep to handle the artifacts
    properly.
  - Fixed the package version and so-version.
  - The build is now staged to allow gtkada-dialog to be a position-independent
    executable.
  - Now using the python3 macro to reference the python3 interpreter (option to
    make generate).
  - Updated the doc package license.
  - Removed a reference to the GtkAda Reference Manual from the GNAT Studio
    plugin.
  - Improved spec file readability.


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:23.0.0-1
changelog:
  - Updated to v23.0.0, using the archive available on GitHub.
  - The subpackage GtkAda3-gl and the library libgtkada_gl.so are gone because
    GTK.GLarea is now included in libgtkada.so.
  - Removed patch GtkAda3-3.14.2-libs.patch; the unused direct dependencies are no
    longer there.
  - Added a new build dependency: Sphinx theme from readthedocs.org
    (commit 7b446c4).
  - The version string in 'gtkada.gpr' (SOURCE4) is now updated automatically.


author: Peter Bieringer <pb@bieringer.de> - 8.6.0-6
changelog:
  - update to 8.6.0
  - minor spec file alignment with upstream
  - exclude "make check" for arch s390x as it segfaults for unknown reason


author: Peter Bieringer <pb@bieringer.de> - 8.6.0-7
changelog:
  - reenable "make check" for arch s390x and wait for upstream fix
  - add IP2Location-8.6.0-bigendian.patch


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.2-1
changelog:
  - Updated to 1.52.2 release which has experimental IPv6 support.
  - Update CVE-2025-9615 related Requires and BuildRequires.
  - Fix typos found by codespell.


author: Sérgio Basto <sergio@serjux.com> - 2.8.0-1
changelog:
  - Update SDL2_mixer to 2.8.0 (#2259608)
  - Migrate to SPDX license
  - Add Provides: bundled(timidity) (#2103502)


author: Sérgio Basto <sergio@serjux.com> - 2.8.0-4
changelog:
  - Remove libmikmod dependency and add support to wavpack, because version 2.6.0
    removed support for libmikmod as a MOD music backend and version 2.8.0 added
    support for loading wavpack sound files


author: Sérgio Basto <sergio@serjux.com> - 3.1-1
changelog:
  - Update VirtualGL to 3.1
  - Do not rely on hostname package (#1860323)
    (Fri Jul 24 2020 Pavel Zhukov <pavel@pzhukov-pc.home.redhat.com>)


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.6.0-6
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Orion Poplawski <orion@nwra.com> - 3.5.3-1
changelog:
  - Update to 3.5.3
  - Fixes CVE-2022-37703 (bz#2126849) CVE-2022-37704 (bz#2168789) CVE-2022-37705 (bz#2168797)


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:30.0.5p1-1
changelog:
  - Switch to linux-friendly upstream
  - Use Android SDK versions for versioning(Epoch 1 introduced)
  - Resolves: rhbz 1937578 1873878 1923681 1776001


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:31.0.2-1
changelog:
  - GCC 11 compatibility
  - Add bash complitions
  - Specify golang build dependencies
  - Resolves: rhbz 1923681 1987363 1674645


author: Onuralp Sezer <thunderbirdtr@fedoraproject.org> - 0.9.0-5
changelog:
  - 00-fix-update-override.patch add into git source for fix build problem (#2024145)
  - cosmetic fixes


author: Scott K Logan <logans@cottsay.net> - 3.4.2-1
changelog:
  - Update to 3.4.2
  - Drop cmake version suffix from macros
  - Use ctest now that upstream added some tests


author: Alexandre Detiste <alexandre.detiste@gmail.com> - 3.7.4-1
changelog:
  - New upstream release
  - Workaround some remapping bug
    https://salsa.debian.org/blade/apt-cacher-ng/-/issues/13
  - Re-create /run/apt-cacher-ng on boot. (Bugs #1734712, #1738884, #1500085)
  - Depends on "xz" for cron job
  - Fix 404 error on http://localhost:3142/acng-doc/html/index.html
    [Jonathan Wright]
  - use a versionned libsupacng.so


author: Jitka Plesnikova <jplesnik@redhat.com> - 3.7.4-2
changelog:
  - Drop perl(:MODULE_COMPAT_XXX) dependency
    (https://fedoraproject.org/wiki/Changes/Perl_replace_MODULE_COMPAT_by_generator)


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Dominik Mierzejewski <rpm@greysector.net> - 3.8.0-3
changelog:
  - ensure arpackicb.h is installed (#1990366)
  - spec clean-up: drop support for building with other blas libs on F34+
  - drop obsolete ldconfig scriptlet macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.0.1-7
changelog:
  - Security fix for CVE-2022-28041
  - Drop dependency on pkgconfig(zzip-zlib-config), no longer available in
    zziplib; use zlib directly instead


author: Richard W.M. Jones <rjones@redhat.com> - 18.12.1-1.10
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Sérgio Basto <sergio@serjux.com> - 0.21-1
changelog:
  - Update atf to 0.21
  - Use make macros ( https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro )
  - The 
    EPEL 8. But it is required on EPEL 7.


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.4-0.3.beta1
changelog:
  - Use Meson build system.
  - Upgrade to 4.4-beta1 (now with Qt 6 and GTK 3).
  - Update -devel package dependencies.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.4-2
changelog:
  - If building with autotools, temporarily install with LIB_PATCH=0 because of
    a bug in the buildsys macros in the released tarball.


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 3.1.3-1
changelog:
  - Update to upstream release 3.1.3
  - Remove conditionals for Fedora 33 (it is now EOL)
  - Unbundle sqlite and use the system version (rhbz: #1973455)
  - Force X11 backend in GTK to fix cursor scroll (rhbz: #2024019)
  - Fix builds when using wxWidgets 3.1.6 (rhbz: #2072823)


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 6.4-2
changelog:
  - Install built documentation directly to %{_pkgdocdir}
  - Fix file locations in man page, texinfo docs
  - Upstream already has fixed these files' x bits
  - Disable silent rules to help with build problems
  - Stop granting user access to ALL /dev/tty{ACM,USB}* devices
  - Enable parallel port support
  - Update BuildReqs for libusb* to use pkgconfig(...)
  - Update URLS from http: to https: in spec file
  - Fix date of 6.4-1 changelog entry


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 7.2-1
changelog:
  - Updated to upstream avrdude-7.2 release from github.com (rhbz#2251649)
  - Filter upstream release tarball to remove pdf docs due to licensing
  - Migrated to SPDX license
  - Switched to cmake build system
  - Fixed upstream cmake detection of libreadline.so
  - Switched to upstream's new URL (github instead of nongnu.org)
  - Stop shipping PS doc format in favour of just avrdude.pdf
  - Keep avrdude.conf at the old Fedora location /etc/avrdude/ for now


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Dominik Wombacher <dominik@wombacher.cc> - 0.9.0-2
changelog:
  - Remove Patch 'aws-c-auth-cmake.patch', not needed anymore, included upstream
  - Patch '0001-disable-tests-that-require-internet-connectivity.patch' updated to work with new release


author: Dominik Wombacher <dominik@wombacher.cc> 0.9.0-2
changelog:
  - Remove patch 'aws-c-cal-cmake.patch', not required anymore
  - Update patch '0001-patch-Disable-SHA1-related-tests.patch' to work with current release


author: Dominik Wombacher <dominik@wombacher.cc> - 0.12.2-2
changelog:
  - Remove unused and obsolete .patch files to fix build issues
  - Simplify file definition of devel sub-package by using '*.cmake' instead of individual names


author: Dominik Wombacher <dominik@wombacher.cc> 0.9.7-2
changelog:
  - Remove Patch 'aws-c-http-cmake.patch', not needed anymore, included upstream
  - Update Patch '0001-disable-tests-that-require-internet-connectivity.patch' to work with new release


author: Dominik Wombacher <dominik@wombacher.cc> - 0.18.1-2
changelog:
  - Remove Patch 'aws-c-io-cmake.patch', not needed anymore, included upstream
  - Patch '0001-disable-tests-that-require-internet-connectivity.patch' updated to work with new release


author: Dominik Wombacher <dominik@wombacher.cc> - 0.7.7-2
changelog:
  - Patch '0001-disable-tests-that-require-internet-connectivity.patch' updated to work with current release.


author: Dominik Wombacher <dominik@wombacher.cc> - 0.7.15-2
changelog:
  - Patch 'aws-c-s3-cmake.patch' removed, not needed anymore, included upstream
  - Patch '0001-disable-tests-that-require-internet-connectivity.patch' updated to work with new release


author: Ding-Yi Chen <dchen@redhat.com> - 2.3.2-2
changelog:
  - Address review comments:
    + Use better URL
    + BuildRequires added: gcc-c++
    + Requires add: hicolor-icon-theme
  - BuildRequires remove: qt-devel


author: Ding-Yi Chen <dchen@redhat.com> - 2.4.0-1
changelog:
  - Upstream update to 2.4.0
    - Fixed CVE-2021-42072 (RHBZ 2022094)
  - BuildDepends added: gmock-devel, gulrak-filesystem-devel
  - Address the issue from pull request #1, thanks aekoroglu.


author: Rasmus Ory Nielsen <ron@ron.dk> - 1.23-1
changelog:
  - Updated to 1.23
  - Removed obsolete vcf_plugin_tests patch
  - Remove invalid `-errors` from PERL_LIBS to fix linker warnings


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 1.4.11-3
changelog:
  - only use %doc with absolute paths (removes duplicate listings)
  - stop using env vars in favour of rpm macros
  - remove non-functional explicit %attr


author: Dominik Mierzejewski <rpm@greysector.net> 104-1
changelog:
  - update to 104 (#2033827)
  - fixes CVE-2021-45290 (#2037323, #2037325)
  - fixes CVE-2021-45293 (#2037324, #2037326)


author: Dominik Mierzejewski <dominik@greysector.net> 111-1
changelog:
  - update to 111 (#2144160)
  - backport upstream fixes for OOB reads in string_view
  - disable multi_unit_abbrev_noprint.wasm test running out of memory on i686


author: Peter Robinson <pbrobinson@fedoraproject.org> - 2.38-1
changelog:
  - Rebase on GNU Binutils 2.38.
  - Add support for specifying a section type in linker scripts. (#2052801)


author: Paul Howarth <paul@city-fan.org> - 2.2.12-1
changelog:
  - Update to 2.2.12
    - This is a minor maintenance release with some minor new features
    - Most important is a fix for a crash in simple search
    - Python 3 compatibility has been further improved
    - Encoding detection in python files has been improved
    - Triple click now selects the line
    - On Mac OSX, Bluefish deals better with the new permission features
    - Using the correct language in the Bluefish user interface is fixed for
      certain languages on OSX
    - Several programming languages have improved syntax highlighting
    - Bluefish now works fine with Enchant2 for spell checking
  - Python support now requires Python ≥ 3.3, available from Fedora 18 onwards
  - Add patch to clean up appdata file so it passes validation


author: Paul Howarth <paul@city-fan.org> - 2.2.12-6
changelog:
  - Drop support for EL-6 and ancient Fedora releases of similar vintage
    - Always use gtk3, never gtk2
    - Always able to use Python 3
    - No longer need to filter rpm provides for private shared objects
    - %license macro always available


author: Germano Massullo <germano.massullo@gmail.com> - 7.18.1-1
changelog:
  - 7.18.1 release
  - added openssl3.patch for Fedora > 35
  - added some pkgconfig
  - added BuildRequires: systemd-rpm-macros
  - temporarily disabled all patches except openssl3.patch
  - added openssl3.patch


author: Lukáš Zaoral <lzaoral@redhat.com> - 1.78.0-1
changelog:
  - Adapted from Boost 1.78.0 on Rawhide, version released by Jonathan Wakely
  - Boost.Math does not support 'long double' of ppc64le on EPEL
  - Resolves rhbz#2165584


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.0-3
changelog:
  - Update circular-buffer dependency to version 2
  - Update License field based on a current build in Rawhide


author: Christian Kellner <ckellner@redhat.com> - 0.4-1
changelog:
  - New upstream release (0.4)
  - Add patch to use systemd-logind, modified from upstream PR 33 with
    modifications to not install the binary as suid.


author: James Elford <james.p.elford@gmail.com> - 0.5.1-1
changelog:
  - New upstream release (0.5.1)
  - Remove patches for systemd-logind interface to brightness as functionality
    is now included in upstream


author: Petr Pisar <ppisar@redhat.com> - 1.3.1-2
changelog:
  - Fix a memory allocation in bz3_compress() (upstream bug #120)
  - Fix bz3grep error message on an invalid argument (upstream bug #127)
  - Fix a decoding failure on specific sizes (upstream bug #131)
  - Do not create an output file in case an input argument is a directory
    (upstream bug #138)


author: Petr Pisar <ppisar@redhat.com> - 1.3.1-4
changelog:
  - Improve memory estimation in bz3_compress()
  - Fix a memory leak in bz3_decompress() (upstream bug #159)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 16^20220314gitbd22b0e-1
changelog:
  - Update to snapshot from 20220314; remove patch working around thrift
    issue; enable aarch64 (resolves: rhbz#2036121); build tests


author: Carl George <carlwgeorge@fedoraproject.org> - 2.6.4-1
changelog:
  - Update to version 2.6.4
  - Add man pages
  - Use generated shell completion files instead of static ones
  - Add fish shell completions


author: Carl George <carlwgeorge@fedoraproject.org> - 2.6.4-2
changelog:
  - Update poweredby logos
  - Add symlink for system_noindex_logo.png on EL9
  - Symlink directly to fedora-testpage directory on Fedora


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.1-3
changelog:
  - fix rhbz (#2249632)
  - use upstream commit https://github.com/mate-desktop/caja-extensions/commit/91cc466


author: Matthew Miller <mattdm@fedoraproject.org> - 2.13.0.1-1
changelog:
  - update to new "stable" upstream release, which is the same as 
    2.13.0.0 but adds PREFIX to the makefile. So, change this spec file
    to use that instead of setting BINDIR, MANDIR, etc. separately.
    (Still need LIBDIR for lib64 though.)


author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Neal Gompa <ngompa@fedoraproject.org> - 0.9.1-1
changelog:
  - Rebase to 0.9.1
  - Add patch to fix running tests
  - Disable flaky/broken test per upstream guidance


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.14-3
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current build


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Björn Esser <besser82@fedoraproject.org> - 4.0-3
changelog:
  - Apply two upstream patches fixing verbose file allocation table printout
  - Tweak Makefile to build all targets in parallel
  - Compile and link test binary during %build stage


author: Björn Esser <besser82@fedoraproject.org> - 4.0-4
changelog:
  - Patch Makefile to be thread-safe on all targets
  - Clean trailing white-space in some files during %prep


author: Todd Zullinger <tmz@pobox.com> - 1.2.3-5
changelog:
  - include output of cgit.conf and git/config.mak in build logs
  - explicitly disable expat, perl, python, and tcl/tk in git build
  - use %{gpgverify} macro to verify tarball signature
  - use %{build_cflags} and %{build_ldflags}
  - preserve timestamps when running install
  - clean up & improve dist conditionals
  - remove %_python_bytecompile_extra
  - limit *.py[co] %exclude to el7
  - refresh highlight v3 patch
  - use git to apply patches


author: Todd Zullinger <tmz@pobox.com> - 1.2.3-7
changelog:
  - update SELinux README
  - simplify install commands
  - improve httpd config file creation
  - explicitly list the cgit cgi-bin script
  - create /var/lib/git to improve SELinux compatibility


author: Than Ngo <than@redhat.com> - 149.0.7827.200-1
changelog:
  - Update to 149.0.7827.200
     CVE-2026-13281: Integer overflow in Mojo
     CVE-2026-13282: Use after free in Payments
     CVE-2026-13283: Use after free in AdFilter


author: Than Ngo <than@redhat.com> - 150.0.7871.46-1
changelog:
  - Update to 150.0.7871.46
    * CVE-2026-13774: Use after free in Extensions
    * CVE-2026-13775: Use after free in GPU
    * CVE-2026-13776: Type Confusion in Dawn
    * CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb
    * CVE-2026-13778: Use after free in WebUSB
    * CVE-2026-13779: Use after free in Chromoting
    * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-13781: Insufficient validation of untrusted input in Skia
    * CVE-2026-13782: Use after free in Browser
    * CVE-2026-13783: Use after free in Views
    * CVE-2026-13784: Use after free in Views
    * CVE-2026-13785: Use after free in Bluetooth
    * CVE-2026-13786: Use after free in Ozone
    * CVE-2026-13787: Use after free in Chromoting
    * CVE-2026-13788: Use after free in Fullscreen
    * CVE-2026-13789: Use after free in GPU
    * CVE-2026-13790: Side-channel information leakage in Scroll
    * CVE-2026-13791: Insufficient validation of untrusted input in Downloads
    * CVE-2026-13792: Use after free in Touchbar
    * CVE-2026-13793: Insufficient policy enforcement in SVG
    * CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-13796: Integer overflow in Chromecast
    * CVE-2026-13797: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-13798: Heap buffer overflow in Chromecast
    * CVE-2026-13799: Use after free in QUIC
    * CVE-2026-13800: Inappropriate implementation in Updater
    * CVE-2026-13801: Integer overflow in Chromecast
    * CVE-2026-13802: Use after free in Views
    * CVE-2026-13803: Type Confusion in Chrome Tabs
    * CVE-2026-13804: Use after free in Chromecast
    * CVE-2026-13805: Use after free in GFX
    * CVE-2026-13806: Insufficient validation of untrusted input in Accessibility
    * CVE-2026-13807: Use after free in Import
    * CVE-2026-13808: Insufficient data validation in Chrome for iOS
    * CVE-2026-13809: Side-channel information leakage in Safe Browsing
    * CVE-2026-13810: Inappropriate implementation in Input
    * CVE-2026-13811: Use after free in IME
    * CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13814: Use after free in Views
    * CVE-2026-13815: Use after free in Blink
    * CVE-2026-13816: Insufficient validation of untrusted input in File Input
    * CVE-2026-13817: Insufficient validation of untrusted input in Glic
    * CVE-2026-13818: Inappropriate implementation in Passwords
    * CVE-2026-13819: Out of bounds read in ANGLE
    * CVE-2026-13820: Out of bounds read in Skia
    * CVE-2026-13821: Use after free in Canvas
    * CVE-2026-13822: Inappropriate implementation in Extensions
    * CVE-2026-13823: Use after free in Glic
    * CVE-2026-13824: Insufficient validation of untrusted input in Extensions
    * CVE-2026-13825: Uninitialized Use in Dawn
    * CVE-2026-13826: Inappropriate implementation in Autofill
    * CVE-2026-13827: Use after free in Updater
    * CVE-2026-13828: Inappropriate implementation in Enterprise
    * CVE-2026-13829: Insufficient validation of untrusted input in Settings
    * CVE-2026-13830: Use after free in Chromoting
    * CVE-2026-13831: Use after free in GPU
    * CVE-2026-13832: Use after free in Headless
    * CVE-2026-13833: Uninitialized Use in ANGLE
    * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-13835: Inappropriate implementation in XML
    * CVE-2026-13836: Inappropriate implementation in CSS
    * CVE-2026-13837: Inappropriate implementation in CSS
    * CVE-2026-13838: Inappropriate implementation in CSS
    * CVE-2026-13839: Inappropriate implementation in CSS
    * CVE-2026-13840: Insufficient policy enforcement in Canvas
    * CVE-2026-13841: Integer overflow in Skia
    * CVE-2026-13842: Incorrect security UI in Chrome for iOS
    * CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13844: Use after free in Updater
    * CVE-2026-13845: Use after free in DOM
    * CVE-2026-13846: Use after free in USB
    * CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13848: Use after free in Forms
    * CVE-2026-13849: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13853: Use after free in Journeys
    * CVE-2026-13854: Use after free in Ozone
    * CVE-2026-13855: Use after free in Ozone
    * CVE-2026-13856: Insufficient validation of untrusted input in Speech
    * CVE-2026-13857: Inappropriate implementation in Geometry
    * CVE-2026-13858: Out of bounds read in FFmpeg
    * CVE-2026-13859: Inappropriate implementation in ANGLE
    * CVE-2026-13860: Incorrect security UI in Autofill
    * CVE-2026-13861: Use after free in Core
    * CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys)
    * CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs
    * CVE-2026-13864: Insufficient policy enforcement in WebHID
    * CVE-2026-13865: Insufficient validation of untrusted input in Enterprise
    * CVE-2026-13866: Insufficient validation of untrusted input in Input
    * CVE-2026-13867: Inappropriate implementation in Geolocation
    * CVE-2026-13868: Inappropriate implementation in Network
    * CVE-2026-13869: Use after free in Device
    * CVE-2026-13870: Use after free in WebView
    * CVE-2026-13871: Insufficient data validation in GuestView
    * CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-13873: Out of bounds memory access in Layout
    * CVE-2026-13874: Inappropriate implementation in DataTransfer
    * CVE-2026-13875: Insufficient validation of untrusted input in GPU
    * CVE-2026-13876: Inappropriate implementation in Network
    * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-13878: Use after free in Bluetooth
    * CVE-2026-13879: Use after free in Bluetooth
    * CVE-2026-13880: Use after free in USB
    * CVE-2026-13881: Insufficient data validation in WebAppInstalls
    * CVE-2026-13882: Inappropriate implementation in USB
    * CVE-2026-13883: Type Confusion in ANGLE
    * CVE-2026-13884: Heap buffer overflow in Chromecast
    * CVE-2026-13885: Use after free in Skia
    * CVE-2026-13886: Policy bypass in Isolated Web Apps
    * CVE-2026-13887: Insufficient policy enforcement in NFC
    * CVE-2026-13888: Use after free in Extensions
    * CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication
    * CVE-2026-13890: Out of bounds read in Chromecast
    * CVE-2026-13891: Insufficient validation of untrusted input in Extensions
    * CVE-2026-13892: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13893: Insufficient validation of untrusted input in WebUI
    * CVE-2026-13894: Insufficient policy enforcement in Network
    * CVE-2026-13895: Inappropriate implementation in Autofill
    * CVE-2026-13896: Insufficient policy enforcement in Glic
    * CVE-2026-13897: Insufficient policy enforcement in Chromecast
    * CVE-2026-13898: Use after free in Cast Receiver
    * CVE-2026-13899: Use after free in HTML
    * CVE-2026-13900: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-13901: Insufficient validation of untrusted input in Serial
    * CVE-2026-13902: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13903: Insufficient policy enforcement in Bluetooth
    * CVE-2026-13904: Incorrect security UI in Safe Browsing
    * CVE-2026-13905: Incorrect security UI in Chrome for iOS
    * CVE-2026-13906: Out of bounds read in Codecs
    * CVE-2026-13907: Inappropriate implementation in iOSWeb
    * CVE-2026-13908: Insufficient validation of untrusted input in Omnibox
    * CVE-2026-13909: Insufficient policy enforcement in DevTools
    * CVE-2026-13910: Insufficient policy enforcement in WebXR
    * CVE-2026-13911: Insufficient data validation in Spellcheck
    * CVE-2026-13912: Incorrect security UI in Safe Browsing
    * CVE-2026-13913: Insufficient policy enforcement in Autofill
    * CVE-2026-13914: Inappropriate implementation in Passwords
    * CVE-2026-13915: Use after free in Chrome for iOS
    * CVE-2026-13916: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13918: Use after free in Chrome for iOS
    * CVE-2026-13919: Insufficient data validation in Extensions
    * CVE-2026-13920: Insufficient validation of untrusted input in Media
    * CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials
    * CVE-2026-13922: Side-channel information leakage in Paint
    * CVE-2026-13923: Uninitialized Use in GPU
    * CVE-2026-13924: Insufficient validation of untrusted input in WebView
    * CVE-2026-13925: Inappropriate implementation in Downloads
    * CVE-2026-13926: Insufficient validation of untrusted input in Network
    * CVE-2026-13927: Insufficient validation of untrusted input in UI
    * CVE-2026-13928: Insufficient validation of untrusted input in Enterprise
    * CVE-2026-13929: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13930: Insufficient policy enforcement in Actor
    * CVE-2026-13931: Inappropriate implementation in Media
    * CVE-2026-13932: Inappropriate implementation in Sharing
    * CVE-2026-13933: Insufficient policy enforcement in Passwords
    * CVE-2026-13934: Insufficient validation of untrusted input in Dawn
    * CVE-2026-13935: Side-channel information leakage in ComputePressure
    * CVE-2026-13936: Inappropriate implementation in Passwords
    * CVE-2026-13937: Insufficient policy enforcement in Passwords
    * CVE-2026-13938: Integer overflow in Fonts
    * CVE-2026-13939: Insufficient validation of untrusted input in WebShare
    * CVE-2026-13940: Uninitialized Use in Cast
    * CVE-2026-13941: Inappropriate implementation in SiteSettings
    * CVE-2026-13942: Insufficient validation of untrusted input in Video Capture
    * CVE-2026-13943: Uninitialized Use in CSS
    * CVE-2026-13944: Inappropriate implementation in DataTransfer
    * CVE-2026-13945: Insufficient policy enforcement in Extensions
    * CVE-2026-13946: Inappropriate implementation in ScriptInjections
    * CVE-2026-13947: Uninitialized Use in XR
    * CVE-2026-13948: Insufficient policy enforcement in Extensions
    * CVE-2026-13949: Insufficient policy enforcement in Payments
    * CVE-2026-13950: Uninitialized Use in GPU
    * CVE-2026-13951: Policy bypass in USB
    * CVE-2026-13952: Inappropriate implementation in PerformanceAPIs
    * CVE-2026-13953: Inappropriate implementation in SplitView
    * CVE-2026-13954: Insufficient policy enforcement in XML
    * CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs
    * CVE-2026-13956: Incorrect security UI in PageInfo
    * CVE-2026-13957: Incorrect security UI in Extensions
    * CVE-2026-13958: Uninitialized Use in Codecs
    * CVE-2026-13959: Insufficient validation of untrusted input in Blink
    * CVE-2026-13960: Inappropriate implementation in Passwords
    * CVE-2026-13961: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13962: Insufficient data validation in PDF
    * CVE-2026-13963: Inappropriate implementation in DevTools
    * CVE-2026-13964: Insufficient policy enforcement in WebView
    * CVE-2026-13965: Use after free in Oilpan
    * CVE-2026-13966: Inappropriate implementation in History
    * CVE-2026-13967: Type Confusion in V8
    * CVE-2026-13968: Insufficient validation of untrusted input in DevTools
    * CVE-2026-13969: Uninitialized Use in UI
    * CVE-2026-13970: Uninitialized Use in Media
    * CVE-2026-13971: Uninitialized Use in Skia
    * CVE-2026-13972: Inappropriate implementation in Paint
    * CVE-2026-13973: Inappropriate implementation in UI
    * CVE-2026-13974: Integer overflow in Safe Browsing
    * CVE-2026-13975: Out of bounds read in ANGLE
    * CVE-2026-13976: Heap buffer overflow in Storage
    * CVE-2026-13977: Inappropriate implementation in HTMLParser
    * CVE-2026-13978: Insufficient policy enforcement in PageInfo
    * CVE-2026-13979: Inappropriate implementation in Paint
    * CVE-2026-13980: Incorrect security UI in Chrome for iOS
    * CVE-2026-13981: Inappropriate implementation in Chrome for iOS
    * CVE-2026-13982: Incorrect security UI in Passwords
    * CVE-2026-13983: Incorrect security UI in Chrome for iOS
    * CVE-2026-13984: Incorrect security UI in TabStrip
    * CVE-2026-13985: Inappropriate implementation in MediaCapture
    * CVE-2026-13986: Inappropriate implementation in Media UI
    * CVE-2026-13987: Incorrect security UI in Mobile
    * CVE-2026-13988: Inappropriate implementation in Paint
    * CVE-2026-13989: Insufficient policy enforcement in PageInfo
    * CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer
    * CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-13992: Inappropriate implementation in UI
    * CVE-2026-13993: Incorrect security UI in WebAppInstalls
    * CVE-2026-13994: Inappropriate implementation in Credential Management
    * CVE-2026-13995: Insufficient validation of untrusted input in Autofill
    * CVE-2026-13996: Incorrect security UI in Permissions
    * CVE-2026-13997: Incorrect security UI in Extensions
    * CVE-2026-13998: Incorrect security UI in File Input
    * CVE-2026-13999: Inappropriate implementation in Extensions
    * CVE-2026-14000: Inappropriate implementation in XML
    * CVE-2026-14001: Inappropriate implementation in Network
    * CVE-2026-14002: Inappropriate implementation in Geolocation
    * CVE-2026-14003: Insufficient policy enforcement in Extensions
    * CVE-2026-14004: Inappropriate implementation in CSS
    * CVE-2026-14005: Use after free in Omnibox
    * CVE-2026-14006: Use after free in Navigation
    * CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy
    * CVE-2026-14008: Uninitialized Use in WebXR
    * CVE-2026-14009: Insufficient data validation in Passwords
    * CVE-2026-14010: Uninitialized Use in Codecs
    * CVE-2026-14011: Out of bounds read in SurfaceCapture
    * CVE-2026-14012: Side-channel information leakage in CSS
    * CVE-2026-14013: Inappropriate implementation in SVG
    * CVE-2026-14014: Inappropriate implementation in Paint
    * CVE-2026-14015: Inappropriate implementation in WebRTC
    * CVE-2026-14016: Insufficient policy enforcement in SVG
    * CVE-2026-14017: Inappropriate implementation in Navigation
    * CVE-2026-14018: Use after free in Updater
    * CVE-2026-14019: Inappropriate implementation in Passwords
    * CVE-2026-14020: Insufficient validation of untrusted input in WebXR
    * CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI
    * CVE-2026-14022: Insufficient validation of untrusted input in Network
    * CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI
    * CVE-2026-14024: Use after free in Ozone
    * CVE-2026-14025: Use after free in Views
    * CVE-2026-14026: Incorrect security UI in SplitView
    * CVE-2026-14027: Use after free in SignIn
    * CVE-2026-14028: Incorrect security UI in Chrome for iOS
    * CVE-2026-14030: Incorrect security UI in SplitView
    * CVE-2026-14031: Incorrect security UI in File Input
    * CVE-2026-14032: Use after free in Bluetooth
    * CVE-2026-14033: Insufficient policy enforcement in Media
    * CVE-2026-14034: Inappropriate implementation in WebXR
    * CVE-2026-14035: Insufficient policy enforcement in Bluetooth
    * CVE-2026-14036: Insufficient policy enforcement in Bluetooth
    * CVE-2026-14037: Insufficient policy enforcement in GPU
    * CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-14039: Insufficient policy enforcement in GetUserMedia
    * CVE-2026-14040: Use after free in BrowserTag
    * CVE-2026-14041: Insufficient policy enforcement in Serial
    * CVE-2026-14042: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-14043: Use after free in GetUserMedia
    * CVE-2026-14044: Use after free in ANGLE
    * CVE-2026-14045: Insufficient validation of untrusted input in Network
    * CVE-2026-14046: Inappropriate implementation in CustomTabs
    * CVE-2026-14047: Insufficient policy enforcement in Extensions
    * CVE-2026-14048: Use after free in Chromecast
    * CVE-2026-14049: Inappropriate implementation in GPU
    * CVE-2026-14050: Insufficient policy enforcement in Passwords
    * CVE-2026-14051: Uninitialized Use in GamepadAPI
    * CVE-2026-14052: Insufficient policy enforcement in FileSystem
    * CVE-2026-14053: Insufficient policy enforcement in Extensions
    * CVE-2026-14054: Insufficient policy enforcement in Network
    * CVE-2026-14055: Insufficient validation of untrusted input in Device Trust
    * CVE-2026-14056: Insufficient validation of untrusted input in Media
    * CVE-2026-14057: Insufficient policy enforcement in FedCM
    * CVE-2026-14058: Policy bypass in Parser
    * CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets
    * CVE-2026-14060: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-14061: Inappropriate implementation in Dawn
    * CVE-2026-14062: Inappropriate implementation in Views
    * CVE-2026-14063: Out of bounds memory access in Chromecast
    * CVE-2026-14064: Use after free in PageInfo
    * CVE-2026-14065: Insufficient validation of untrusted input in PageInfo
    * CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-14067: Use after free in Chrome for iOS
    * CVE-2026-14068: Inappropriate implementation in Omnibox
    * CVE-2026-14069: Integer overflow in WebNN
    * CVE-2026-14070: Uninitialized Use in WebNN
    * CVE-2026-14071: Side-channel information leakage in WebAudio
    * CVE-2026-14072: Incorrect security UI in SplitView
    * CVE-2026-14073: Insufficient policy enforcement in WebXR
    * CVE-2026-14074: Side-channel information leakage in WebAuthentication
    * CVE-2026-14075: Policy bypass in Chrome for iOS
    * CVE-2026-14076: Policy bypass in Network
    * CVE-2026-14077: Incorrect security UI in Select
    * CVE-2026-14078: Policy bypass in WebRTC
    * CVE-2026-14079: Policy bypass in Network
    * CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher
    * CVE-2026-14081: Insufficient policy enforcement in DevTools
    * CVE-2026-14082: Race in Storage
    * CVE-2026-14083: Insufficient validation of untrusted input in HTML
    * CVE-2026-14084: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-14085: Side-channel information leakage in CSS
    * CVE-2026-14086: Insufficient policy enforcement in HID
    * CVE-2026-14087: Insufficient validation of untrusted input in WebNN
    * CVE-2026-14088: Uninitialized Use in Canvas
    * CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker
    * CVE-2026-14090: Out of bounds read in CameraCapture
    * CVE-2026-14091: Use after free in DevTools
    * CVE-2026-14092: Insufficient policy enforcement in Privacy
    * CVE-2026-14093: Use after free in Cast
    * CVE-2026-14094: Use after free in Installer
    * CVE-2026-14095: Insufficient validation of untrusted input in Browser
    * CVE-2026-14096: Object lifecycle issue in Input
    * CVE-2026-14097: Inappropriate implementation in WebAppInstalls
    * CVE-2026-14098: Inappropriate implementation in CSS
    * CVE-2026-14099: Use after free in Chrome for iOS
    * CVE-2026-14100: Insufficient data validation in NetworkCache
    * CVE-2026-14101: Insufficient policy enforcement in Sandbox
    * CVE-2026-14102: Use after free in Passwords
    * CVE-2026-14103: Use after free in SSL
    * CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-14105: Insufficient policy enforcement in Speech
    * CVE-2026-14106: Insufficient validation of untrusted input in Text
    * CVE-2026-14107: Use after free in Scheduling
    * CVE-2026-14108: Use after free in PDFium
    * CVE-2026-14109: Insufficient policy enforcement in Mojo
    * CVE-2026-14110: Inappropriate implementation in DarkMode
    * CVE-2026-14111: Use after free in WebProtect
    * CVE-2026-14112: Inappropriate implementation in Enterprise
    * CVE-2026-14113: Use after free in Updater
    * CVE-2026-14114: Inappropriate implementation in WebAppInstalls
    * CVE-2026-14115: Insufficient validation of untrusted input in Cast
    * CVE-2026-14116: Insufficient validation of untrusted input in DevTools
    * CVE-2026-14117: Insufficient validation of untrusted input in DevTools
    * CVE-2026-14118: Insufficient data validation in DevTools
    * CVE-2026-14119: Type Confusion in Bluetooth
    * CVE-2026-14120: Inappropriate implementation in DevTools
    * CVE-2026-14121: Use after free in Chromoting
    * CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-14123: Incorrect security UI in Chrome for iOS
    * CVE-2026-14124: Inappropriate implementation in CredentialProvider
    * CVE-2026-14125: Uninitialized Use in ANGLE
    * CVE-2026-14126: Incorrect security UI in UI
    * CVE-2026-14127: Inappropriate implementation in Printing
    * CVE-2026-14128: Insufficient data validation in Chrome for iOS
    * CVE-2026-14129: Incorrect security UI in PreviewTab
    * CVE-2026-14130: Incorrect security UI in Omnibox
    * CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-14132: Inappropriate implementation in WebXR
    * CVE-2026-14133: Race in History Embeddings
    * CVE-2026-14134: Inappropriate implementation in Autofill
    * CVE-2026-14135: Insufficient validation of untrusted input in Network
    * CVE-2026-14136: Incorrect security UI in Chrome for iOS
    * CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-14138: Inappropriate implementation in WebAppInstalls
    * CVE-2026-14139: Inappropriate implementation in TabStrip
    * CVE-2026-14140: Insufficient validation of untrusted input in Input
    * CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture
    * CVE-2026-14142: Inappropriate implementation in Extensions
    * CVE-2026-14143: Incorrect security UI in Passwords
    * CVE-2026-14144: Incorrect security UI in Views
    * CVE-2026-14145: Inappropriate implementation in CSS
    * CVE-2026-14146: Inappropriate implementation in CSS
    * CVE-2026-14147: Inappropriate implementation in CSS
    * CVE-2026-14148: Type Confusion in CSS
    * CVE-2026-14149: Use after free in Audio
    * CVE-2026-14150: Insufficient validation of untrusted input in Speech
    * CVE-2026-14151: Inappropriate implementation in AI
    * CVE-2026-14152: Out of bounds write in ANGLE
    * CVE-2026-14153: Inappropriate implementation in Glic
    * CVE-2026-14154: Inappropriate implementation in DevTools
    * CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI
    * CVE-2026-14156: Policy bypass in StorageAccessAPI
  - Remove Darkmode patches, which are already included in v150
  - Refresh patches for v150
  - Fix FTBFS with system ffmpeg
  - Backport upstream patches to fix FTBFS


author: Than Ngo <than@redhat.com> - 150.0.7871.114-1
changelog:
  - Update to 150.0.7871.114
    * CVE-2026-15112: Use after free in Ozone
    * CVE-2026-15129: Use after free in Views
    * CVE-2026-15132: Uninitialized Use in V8
    * CVE-2026-15133: Use after free in InterestGroups
    * CVE-2026-15108: Integer overflow in Extensions API
    * CVE-2026-15109: Uninitialized Use in ANGLE
    * CVE-2026-15110: Use after free in Extensions
    * CVE-2026-15111: Use after free in Views
    * CVE-2026-15113: Use after free in Autofill
    * CVE-2026-15114: Out of bounds read and write in Codecs
    * CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-15116: Use after free in Actor
    * CVE-2026-15117: Use after free in Payments
    * CVE-2026-15118: Use after free in Input
    * CVE-2026-15119: Inappropriate implementation in GetUserMedia
    * CVE-2026-15120: Use after free in Core
    * CVE-2026-15121: Use after free in WebRTC
    * CVE-2026-15122: Insufficient validation of untrusted input in Codecs
    * CVE-2026-15123: Insufficient data validation in DOM
    * CVE-2026-15124: Insufficient policy enforcement in Passwords
    * CVE-2026-15125: Inappropriate implementation in Forms
    * CVE-2026-15126: Use after free in Forms
    * CVE-2026-15127: Inappropriate implementation in WebGL
    * CVE-2026-15128: Inappropriate implementation in Forms
    * CVE-2026-15130: Insufficient policy enforcement in Navigation
    * CVE-2026-15107: Use after free in IndexedDB
    * CVE-2026-15131: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 150.0.7871.124-1
changelog:
  - Update to 150.0.7871.124
    * CVE-2026-15764: Use after free in Ozone
    * CVE-2026-15765: Use after free in Ozone
    * CVE-2026-15766: Uninitialized Use in Skia
    * CVE-2026-15767: Heap buffer overflow in libyuv
    * CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas
    * CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming
    * CVE-2026-15770: Uninitialized Use in V8
    * CVE-2026-15771: Insufficient validation of untrusted input in Media
    * CVE-2026-15772: Use after free in GPU
    * CVE-2026-15773: Use after free in Core
    * CVE-2026-15774: Use after free in Skia
    * CVE-2026-15775: Insufficient policy enforcement in V8
    * CVE-2026-15776: Type Confusion in V8
    * CVE-2026-15777: Use after free in UI
    * CVE-2026-15778: Insufficient validation of untrusted input in Navigation
  - Backport patches to improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.128-1
changelog:
  - Update to 150.0.7871.128
    * CVE-2026-15899: Use after free in CameraCapture
    * CVE-2026-15900: Use after free in GPU
    * CVE-2026-15901: Use after free in Network
    * CVE-2026-15902: Use after free in Cast
    * CVE-2026-15903: Out of bounds read and write in V8
    * CVE-2026-15904: Use after free in Ozone
    * CVE-2026-15905: Use after free in Aura
  - Fix rhbz#2501811, Drop AI policy which breaks DoH settings
  - Improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.181-1
changelog:
  - Update to 150.0.7871.181
    * CVE-2026-16413: Out of bounds write in ANGLE
    * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
    * CVE-2026-16416: Integer overflow in Chromecast
    * CVE-2026-16417: Uninitialized Use in Skia
    * CVE-2026-16418: Stack buffer overflow in V8
    * CVE-2026-16419: Out of bounds read and write in ANGLE
    * CVE-2026-16420: Type Confusion in WebAudio
    * CVE-2026-16421: Inappropriate implementation in WebAudio
    * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
    * CVE-2026-16423: Use after free in UI
    * CVE-2026-16424: Use after free in GPU


author: Than Ngo <than@redhat.com> - 150.0.7871.186-1
changelog:
  - Update to 150.0.7871.186
    * CVE-2026-16807: Out of bounds write in Codecs
    * CVE-2026-16806: Use after free in WebMCP
    * CVE-2026-16805: Use after free in Blink
    * CVE-2026-16804: Use after free in Input


author: Than Ngo <than@redhat.com> - 151.0.7922.71-1
changelog:
  - Update to 151.0.7922.71
    * CVE-2026-17650: Use after free in Compositing
    * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17652: Use after free in Views
    * CVE-2026-17653: Use after free in Skia
    * CVE-2026-17654: Race in Updater
    * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17656: Use after free in Ozone
    * CVE-2026-17657: Use after free in Navigation
    * CVE-2026-17658: Use after free in V8
    * CVE-2026-17659: Inappropriate implementation in SiteIsolation
    * CVE-2026-17660: Insufficient validation of untrusted input in Network
    * CVE-2026-17661: Use after free in Loader
    * CVE-2026-17662: Insufficient policy enforcement in Prefetch
    * CVE-2026-17663: Insufficient validation of untrusted input in GPU
    * CVE-2026-17664: Insufficient validation of untrusted input in Loader
    * CVE-2026-17665: Use after free in V8
    * CVE-2026-17666: Cryptographic Flaw in Enterprise
    * CVE-2026-17667: Uninitialized Use in ANGLE
    * CVE-2026-17668: Uninitialized Use in ANGLE
    * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17670: Use after free in Views
    * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-17673: Integer overflow in QUIC
    * CVE-2026-17674: Inappropriate implementation in HTML
    * CVE-2026-17675: Out of bounds write in ANGLE
    * CVE-2026-17676: Inappropriate implementation in ANGLE
    * CVE-2026-17677: Inappropriate implementation in ANGLE
    * CVE-2026-17678: Out of bounds read in ANGLE
    * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
    * CVE-2026-17680: Heap buffer overflow in Color
    * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
    * CVE-2026-17682: Integer overflow in ANGLE
    * CVE-2026-17683: Inappropriate implementation in ANGLE
    * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17685: Use after free in Autofill
    * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17687: Type Confusion in ANGLE
    * CVE-2026-17688: Use after free in Input
    * CVE-2026-17689: Uninitialized Use in ANGLE
    * CVE-2026-17690: Insufficient validation of untrusted input in PDF
    * CVE-2026-17691: Out of bounds write in ANGLE
    * CVE-2026-17692: Use after free in DataTransfer
    * CVE-2026-17693: Inappropriate implementation in FileSystem
    * CVE-2026-17694: Use after free in DOM
    * CVE-2026-17695: Inappropriate implementation in ANGLE
    * CVE-2026-17696: Side-channel information leakage in Media
    * CVE-2026-17697: Type Confusion in ANGLE
    * CVE-2026-17698: Insufficient validation of untrusted input in UI
    * CVE-2026-17699: Use after free in Views
    * CVE-2026-17700: Insufficient validation of untrusted input in Actor
    * CVE-2026-17701: Out of bounds read in ANGLE
    * CVE-2026-17702: Inappropriate implementation in Skia
    * CVE-2026-17703: Policy bypass in Chrome for iOS
    * CVE-2026-17704: Use after free in ANGLE
    * CVE-2026-17705: Integer overflow in libxml
    * CVE-2026-17706: Insufficient validation of untrusted input in Media
    * CVE-2026-17707: Uninitialized Use in Media
    * CVE-2026-17708: Use after free in Audio
    * CVE-2026-17709: Race in Downloads
    * CVE-2026-17710: Inappropriate implementation in MHTML
    * CVE-2026-17711: Race in Downloads
    * CVE-2026-17712: Race in Skia
    * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
    * CVE-2026-17714: Uninitialized Use in ANGLE
    * CVE-2026-17715: Inappropriate implementation in Passwords
    * CVE-2026-17716: Use after free in Updater
    * CVE-2026-17717: Integer overflow in ANGLE
    * CVE-2026-17718: Use after free in ANGLE
    * CVE-2026-17719: Use after free in Input
    * CVE-2026-17720: Insufficient policy enforcement in Passwords
    * CVE-2026-17721: Out of bounds write in ANGLE
    * CVE-2026-17722: Object lifecycle issue in WebView
    * CVE-2026-17723: Use after free in Media
    * CVE-2026-17724: Race in Chrome for iOS
    * CVE-2026-17725: Type Confusion in V8
    * CVE-2026-17726: Integer overflow in WebGL
    * CVE-2026-17727: Out of bounds write in WebGL
    * CVE-2026-17728: Inappropriate implementation in Extensions
    * CVE-2026-17758: Heap buffer overflow in Dawn
    * CVE-2026-17732: Inappropriate implementation in SVG
    * CVE-2026-17729: Use after free in V8
    * CVE-2026-17730: Side-channel information leakage in Autofill
    * CVE-2026-17731: Inappropriate implementation in Autofill
    * CVE-2026-17733: Inappropriate implementation in QUIC
    * CVE-2026-17734: Inappropriate implementation in Autofill
    * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
    * CVE-2026-17736: Insufficient validation of untrusted input in WebView
    * CVE-2026-17737: Use after free in Bluetooth
    * CVE-2026-17738: Insufficient validation of untrusted input in Payments
    * CVE-2026-17739: Insufficient policy enforcement in Extensions
    * CVE-2026-17740: Uninitialized Use in ANGLE
    * CVE-2026-17741: Insufficient validation of untrusted input in WebView
    * CVE-2026-17742: Insufficient policy enforcement in Payments
    * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
    * CVE-2026-17744: Inappropriate implementation in File Input
    * CVE-2026-17745: Out of bounds read in Skia
    * CVE-2026-17746: Use after free in GPU
    * CVE-2026-17747: Insufficient validation of untrusted input in Payments
    * CVE-2026-17748: Inappropriate implementation in Extensions
    * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17750: Use after free in ANGLE
    * CVE-2026-17751: Inappropriate implementation in AdFilter
    * CVE-2026-17752: Use after free in Views
    * CVE-2026-17753: Inappropriate implementation in Autofill
    * CVE-2026-17754: Inappropriate implementation in Blink
    * CVE-2026-17755: Incorrect security UI in Extensions
    * CVE-2026-17756: Insufficient policy enforcement in Presentation
    * CVE-2026-17757: Uninitialized Use in Skia
    * CVE-2026-17759: Uninitialized Use in Codecs
    * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
    * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17763: Inappropriate implementation in GPU
    * CVE-2026-17764: Inappropriate implementation in FedCM
    * CVE-2026-17765: Inappropriate implementation in WebProtect
    * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
    * CVE-2026-17767: Insufficient validation of untrusted input in WebView
    * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
    * CVE-2026-17769: Insufficient validation of untrusted input in Cast
    * CVE-2026-17770: Out of bounds read in Media
    * CVE-2026-17771: Uninitialized Use in Skia
    * CVE-2026-17772: Out of bounds read in WebGL
    * CVE-2026-17773: Insufficient validation of untrusted input in Cast
    * CVE-2026-17774: Insufficient validation of untrusted input in Variations
    * CVE-2026-17775: Inappropriate implementation in PresentationAPI
    * CVE-2026-17776: Policy bypass in Receiver
    * CVE-2026-17777: Inappropriate implementation in Autofill
    * CVE-2026-17778: Use after free in Extensions
    * CVE-2026-17779: Inappropriate implementation in Site Isolation
    * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-17781: Inappropriate implementation in Extensions
    * CVE-2026-17782: Incorrect security UI in Chrome for iOS
    * CVE-2026-17783: Inappropriate implementation in Loader
    * CVE-2026-17784: Use after free in Audio
    * CVE-2026-17785: Uninitialized Use in ANGLE
    * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17787: Inappropriate implementation in DevTools
    * CVE-2026-17788: Inappropriate implementation in Blink
    * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17790: Uninitialized Use in ANGLE
    * CVE-2026-17791: Insufficient validation of untrusted input in Payments
    * CVE-2026-17792: Inappropriate implementation in Credential Management
    * CVE-2026-17793: Inappropriate implementation in Messages
    * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
    * CVE-2026-17796: Side-channel information leakage in WebXR
    * CVE-2026-17797: Inappropriate implementation in CSS
    * CVE-2026-17798: Inappropriate implementation in Cast
    * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
    * CVE-2026-17800: Side-channel information leakage in MediaRecording
    * CVE-2026-17801: Out of bounds memory access in ANGLE
    * CVE-2026-17802: Side-channel information leakage in GPU
    * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
    * CVE-2026-17804: Use after free in Media
    * CVE-2026-17805: Insufficient policy enforcement in Glic
    * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17807: Use after free in V8
    * CVE-2026-17808: Uninitialized Use in WebGL
    * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17810: Uninitialized Use in Dawn
    * CVE-2026-17811: Use after free in ANGLE
    * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
    * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17815: Insufficient policy enforcement in GuestView
    * CVE-2026-17816: Inappropriate implementation in Speech
    * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
    * CVE-2026-17818: Inappropriate implementation in Network
    * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
    * CVE-2026-17820: Insufficient policy enforcement in Autofill
    * CVE-2026-17821: Insufficient policy enforcement in Extensions
    * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17823: Insufficient policy enforcement in WebXR
    * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-17825: Insufficient policy enforcement in Passwords
    * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17827: Inappropriate implementation in CSS
    * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17829: Insufficient policy enforcement in Passwords
    * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17832: Use after free in ANGLE
    * CVE-2026-17833: Inappropriate implementation in Passwords
    * CVE-2026-17834: Inappropriate implementation in Passwords
    * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17836: Use after free in V8
    * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17838: Incorrect security UI in Chrome for iOS
    * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17840: Incorrect security UI in Passwords
    * CVE-2026-17841: Race in Chrome for iOS
    * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17843: Inappropriate implementation in CSS
    * CVE-2026-17844: Insufficient validation of untrusted input in Cast
    * CVE-2026-17845: Inappropriate implementation in CSS
    * CVE-2026-17846: Inappropriate implementation in Media
    * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
    * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17850: Inappropriate implementation in Permissions
    * CVE-2026-17851: Side-channel information leakage in Autofill
    * CVE-2026-17852: Inappropriate implementation in Media Router
    * CVE-2026-17853: Inappropriate implementation in DevTools
    * CVE-2026-17854: Insufficient policy enforcement in WebMCP
    * CVE-2026-17855: Race in DevTools
    * CVE-2026-17856: Inappropriate implementation in Network
    * CVE-2026-17857: Inappropriate implementation in Network
    * CVE-2026-17858: Uninitialized Use in WebNN
    * CVE-2026-17859: Side-channel information leakage in Favicons
    * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17861: Insufficient validation of untrusted input in Updater
    * CVE-2026-17862: Use after free in Tracing
    * CVE-2026-17863: Inappropriate implementation in Browser
    * CVE-2026-17864: Inappropriate implementation in Updater
    * CVE-2026-17865: Inappropriate implementation in Crypto
    * CVE-2026-17866: Type Confusion in Tab
    * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17868: Insufficient policy enforcement in USB
    * CVE-2026-17869: Out of bounds read in WebXR
    * CVE-2026-17870: Insufficient validation of untrusted input in Cast
    * CVE-2026-17871: Inappropriate implementation in Passwords
    * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
    * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17875: Use after free in PDFium
    * CVE-2026-17876: Inappropriate implementation in Payments
    * CVE-2026-17877: Inappropriate implementation in Chromoting
    * CVE-2026-17878: Inappropriate implementation in CSS
    * CVE-2026-17879: Inappropriate implementation in Autofill
    * CVE-2026-17880: Inappropriate implementation in Autofill
    * CVE-2026-17881: Use after free in WebXR
    * CVE-2026-17882: Policy bypass in Extensions
    * CVE-2026-17883: Inappropriate implementation in Headless
    * CVE-2026-17884: Object lifecycle issue in WebRTC
    * CVE-2026-17885: Inappropriate implementation in Paint
    * CVE-2026-17886: Use after free in Enterprise
    * CVE-2026-17887: Use after free in TabStrip
    * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
    * CVE-2026-17889: Uninitialized Use in WebXR
    * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17891: Use after free in ANGLE
    * CVE-2026-17892: Inappropriate implementation in WebXR
    * CVE-2026-17893: Insufficient validation of untrusted input in Updater
    * CVE-2026-17894: Use after free in Views
    * CVE-2026-17895: Inappropriate implementation in DataTransfer
    * CVE-2026-17896: Use after free in DevTools
    * CVE-2026-17897: Inappropriate implementation in ORB
    * CVE-2026-17898: Use after free in DevTools
    * CVE-2026-17899: Insufficient policy enforcement in DevTools
    * CVE-2026-17900: Inappropriate implementation in Enterprise
    * CVE-2026-17901: Inappropriate implementation in Sharing
    * CVE-2026-17902: Inappropriate implementation in Editing
    * CVE-2026-17903: Insufficient policy enforcement in Chromecast
    * CVE-2026-17904: Insufficient policy enforcement in NFC
    * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
    * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
    * CVE-2026-17907: Side-channel information leakage in Network
    * CVE-2026-17908: Insufficient validation of untrusted input in Printing
    * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
    * CVE-2026-17910: Insufficient policy enforcement in NFC
    * CVE-2026-17911: Insufficient policy enforcement in SVG
    * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17914: Side-channel information leakage in Skia
    * CVE-2026-17915: Inappropriate implementation in WebView
    * CVE-2026-17916: Insufficient policy enforcement in Settings
    * CVE-2026-17917: Policy bypass in Chrome for iOS
    * CVE-2026-17918: Use after free in Sync
    * CVE-2026-17919: Insufficient policy enforcement in Enterprise
    * CVE-2026-17920: Use after free in V8
    * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17922: Inappropriate implementation in Enterprise
    * CVE-2026-17923: Policy bypass in Enterprise
    * CVE-2026-17924: Use after free in DNS
    * CVE-2026-17925: Inappropriate implementation in Cast
    * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17927: Insufficient policy enforcement in DevTools
    * CVE-2026-17928: Inappropriate implementation in DataTransfer
    * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17931: Inappropriate implementation in DevTools
    * CVE-2026-17932: Use after free in DataTransfer
    * CVE-2026-17933: Inappropriate implementation in DOMStorage
    * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17935: Heap buffer overflow in Codecs
    * CVE-2026-17936: Inappropriate implementation in DevTools
    * CVE-2026-17937: Inappropriate implementation in DevTools
    * CVE-2026-17938: Inappropriate implementation in FullScreen
    * CVE-2026-17939: Inappropriate implementation in Passwords
    * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
    * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17942: Side-channel information leakage in SVG
    * CVE-2026-17943: Inappropriate implementation in Parser
    * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17945: Inappropriate implementation in Navigation
    * CVE-2026-17946: Uninitialized Use in Dawn
    * CVE-2026-17947: Use after free in WebSockets
    * CVE-2026-17948: Type Confusion in V8
    * CVE-2026-17949: Uninitialized Use in GPU
    * CVE-2026-17950: Policy bypass in Safebrowsing
    * CVE-2026-17951: Heap buffer overflow in WebRTC
    * CVE-2026-17952: Inappropriate implementation in V8
    * CVE-2026-17953: Insufficient policy enforcement in WebView
    * CVE-2026-17954: Policy bypass in MHTML
    * CVE-2026-17955: Insufficient validation of untrusted input in Payments
    * CVE-2026-17956: Inappropriate implementation in Scheduling
    * CVE-2026-17957: Inappropriate implementation in CORS
    * CVE-2026-17958: Inappropriate implementation in Views
    * CVE-2026-17959: Inappropriate implementation in Network
    * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17961: Inappropriate implementation in Session
    * CVE-2026-17962: Inappropriate implementation in Blink
    * CVE-2026-17963: Inappropriate implementation in SVG
    * CVE-2026-17964: Incorrect security UI in UI
    * CVE-2026-17965: Incorrect security UI in Chrome for iOS
    * CVE-2026-17966: Inappropriate implementation in Views
    * CVE-2026-17967: Use after free in Chrome for iOS
    * CVE-2026-17968: Uninitialized Use in WebXR
    * CVE-2026-17969: Inappropriate implementation in Passwords
    * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17971: Inappropriate implementation in Frame
    * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17973: Inappropriate implementation in Views
    * CVE-2026-17974: Insufficient policy enforcement in DevTools
    * CVE-2026-17975: Inappropriate implementation in IME
    * CVE-2026-17976: Policy bypass in Extensions
    * CVE-2026-17977: Policy bypass in CSS
    * CVE-2026-17978: Side-channel information leakage in WebCodecs
    * CVE-2026-17979: Race in V8
    * CVE-2026-17980: Inappropriate implementation in UI
    * CVE-2026-17981: Inappropriate implementation in Blink
    * CVE-2026-17982: Insufficient validation of untrusted input in Cast
    * CVE-2026-17983: Incorrect security UI in Global Media Controls
    * CVE-2026-17984: Inappropriate implementation in Browser
    * CVE-2026-17985: Insufficient policy enforcement in Speech
    * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
    * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
    * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17989: Type Confusion in V8
    * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
    * CVE-2026-17991: Insufficient validation of untrusted input in AI
    * CVE-2026-17992: Uninitialized Use in Skia
    * CVE-2026-17993: Race in Updater
    * CVE-2026-17994: Inappropriate implementation in Media
    * CVE-2026-17995: Out of bounds read in Dawn
    * CVE-2026-17996: Inappropriate implementation in Browser
    * CVE-2026-17997: Inappropriate implementation in Passwords
    * CVE-2026-17998: Incorrect security UI in Extensions
    * CVE-2026-17999: Incorrect security UI in PictureInPicture
    * CVE-2026-18000: Insufficient policy enforcement in USB
    * CVE-2026-18001: Inappropriate implementation in WebGL
    * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
    * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18004: Insufficient policy enforcement in Speech
    * CVE-2026-18005: Inappropriate implementation in WebXR
    * CVE-2026-18006: Inappropriate implementation in Google Lens
    * CVE-2026-18007: Inappropriate implementation in Input
    * CVE-2026-18008: Inappropriate implementation in Settings
    * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
    * CVE-2026-18010: Inappropriate implementation in Passwords
    * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18012: Use after free in PDFium
    * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
    * CVE-2026-18015: Inappropriate implementation in Tint
    * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-18017: Use after free in Dawn
    * CVE-2026-18018: Inappropriate implementation in Updater
    * CVE-2026-18019: Side-channel information leakage in Media


author: Petr Menšík <pemensik@redhat.com> - 0.7.0-10
changelog:
  - Set time limit to unit test run
  - Limit unit test to less cores to make them faster
  - Skip some tests on ppc64le and aarch64 platforms to avoid failures


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-1
changelog:
  - Update to 0.4.1 (close RHBZ#2193508)
  - Shared library naming and symbolic linking has been improved


author: Jens Petersen <petersen@redhat.com> - 0.29.0-1
changelog:
  - https://github.com/commonmark/cmark/releases/tag/0.29.0
  - disable tests for F32: https://github.com/commonmark/cmark/issues/331


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.2.6-6
changelog:
  - Implement conserver.service reloading (rhbz#1504194)
  - Autorestart conserver.service on failure or after package upgrade


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.2.7-1
changelog:
  - Update to 8.2.7 (rhbz#2105250)
  - Drop unused patches
  - Fix incorrect license
    * BSD with advertising and zlib -> BSD and zlib
  - Fix install-file-in-docs rpmlint warning
  - Install license into correct destination
  - Modernize and reformat the specfile
  - Run upstream test suite
  - Update URL to homepage and sources
  - Verify sources signatures


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.2.7-4
changelog:
  - Use %{_mandir}/man1/foo.1* for manual pages as recommended by the packaging
    guidelines.
  - Do not strip binaries during installation.
  - Convert license to SPDX format.


author: Scott K Logan <logans@cottsay.net> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Review SPDX license identifier
  - Include LICENSE and README.md in base package
  - Use consistent indentation in spec file
  - convert license to SPDX


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.2.0-2
changelog:
  - Make spec file compatible with epel9
  - Replace use of %gsub macro with lua
  - Adapted from a contribution to the moby-engine spec file by Maxwell G
    <maxwell@gtmx.me> (see commit 1ecc8a1 in that repo)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.2.5-1
changelog:
  - Update to release v2.2.5
  - Resolves: rhbz#2464270
  - Resolves CVE-2026-50195
  - Resolves CVE-2026-53488
  - Resolves CVE-2026-53492
  - Resolves CVE-2026-53489
  - Resolves CVE-2026-47262


author: Brad Bell <bradbell at seanet dot com> - 20240000.0-1
changelog:
  - New upstream source cppad-20240000.0.
  - require python-xrst >= 2024.0
  - xrst.toml: no need to change to pyenchant because pyspellchecker avaialble
  - upstream source changed CPPAD_DEBUG_AND_RELEASE to a cmake argument


author: Brad Bell <bradbell at seanet dot com> - 20240000.1-1
changelog:
  - thread_alloc.hpp: i386 i686: fix allignment for doubles
  - op_hash_table: i386 i686: avoid second specialization of is_pod for same type.
  - xrst.toml: add comment about why we are adding to this file.
  - xrst command: speed up parallel build by settting number_jobs.


author: Brad Bell <bradbell at seanet dot com> - 20240000.2-1
changelog:
  - Upstream moved i386 special cases into cmake script.
  - Checking that other upstream changes do not affect Fedora install.


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-1
changelog:
  - This fixes a long standing bug; see the heading 02-14 on
  - https://cppad.readthedocs.io/latest/whats_new_24.html


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-1
changelog:
  - Use in current rawhide to replace cppad.spec as first commit. 
  - Make changes needed for epel9 as second commit; See Epel9 in comments above.


author: Brad Bell <bradbell at seanet dot com> - 20240000.3-2
changelog:
  - This fixes a bug in fun2val.hpp. This change will not be necessary
  - once the upstream source advances to 20240000.4.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-1
changelog:
  - Initial commit conatining the clone of the rwarhide branch with a new
    source of postgresql 16.8 and the removal of Requires and BuildRequires
    of postgresql-server and postgresql-server-devel to get around the
    modularity of epel8 during build


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-2
changelog:
  - Changed the filepath inside the lto_optimization patch since the target
    file cannot be found without using autosetup inside the spec file.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-3
changelog:
  - Added the necessary build for postgresql to acommodate the modularity of
    epel8 This means: * a minimal build of postgresql16 inside the build
    phase * "installation" of said builds files into a temporary dir
    (/tmp/pgsql) to ease it's deletion later * passing the pg_config files
    location as an rgument to the %make_build and %make_install of
    credcheck * creation of all the necessary directories since ppostgresql
    is located in a weird spot so they won't be created by it * moving all
    the necessary files of credcheck: - credcheck.control - credcheck.so -
    credcheck--%{version}.0.sql - credcheck--*--*.sql (the "update" files)
    to their proper place as they will be installed inside the dir that
    postgresql is in, this cannot be overriden using destdir or any other
    means known to me and is caused by the call of pgxs.mk provided by
    postgresql-server-devel inside the makefile of credcheck (the location of
    pgxs.mk can be found using: /usr/bin/pg_config --pgxs) * removing the
    installed files of postgresql16 (as mentioned above they are all in
    /tmp/pgsql)


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-4
changelog:
  - Renamed the package to postgresql16-credcheck to make handling building
    for other versions of postgresql in the future easier.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-6
changelog:
  - This is a commit message for the previous commit I have unfortunately
    pushed a commit with an inclomplete commit message into the epel8 branch
    which does not allow force pushing, therefore a rebase is not possible so
    this empty commit only exists to amend that commit message: I have
    renamed the base package back to credcheck to keep the srpms called
    credcheck as well to work around the automatisation used in koji and mock
    builds, I have created a subpackage named
    postgresql%{postgres_major_version}-credcheck to be able to produce the
    correct output rpms and also renamed the selinux subpackage to
    postgresql%{postgresq_major_version}-credcheck-selinux to keep the
    naming consistent. This now allows me to build the package using koji
    without raising the "epel8 branch not requested for
    postgresql16-credcheck" error during the builds.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-7
changelog:
  - Updated the Requires and recommends between the main package and the
    selinux subpackage to reflect the rename


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-8
changelog:
  - [bugfix] Updated the Requires of postgresql-server to only postgresql16
    The Requires of postgresql-server > 15 did not work as expected and
    allowed this package to be installed with postgresql-server 15 as well.
    This caused the package not to work as it was built with postgresql16 and
    postgresql15 is incompatible with it.


author: Petr Menšík <pemensik@redhat.com> - 1.3.2-2
changelog:
  - New package dependency of dnscap (rhbz#2418607)
  - Modernize upstream RPM spec according to Fedora Packaging Guidelines
  - Provide also lowercase devel package name
  - Remove Group: and ldconfig obsolete features
  - Uploaded new sources
  - Include LICENSE file


author: Petr Pisar <ppisar@redhat.com> - 0-22.20211216git6c10c30
changelog:
  - Rebased to 6c10c305e8dde193546e6b33cf8a785d5dc123e2 (fixes building on AIX,
    Sun; fixes an undefined behavior whith unaliagned memory access)


author: Petr Pisar <ppisar@redhat.com> - 2.11.1-26
changelog:
  - Rename a dependency on libusb-devel (bug #2066607)
  - Move configure to build section because of linker package notes (bug #2045296)
  - Respect distribution CFLAGS
  - Set Perl libdir with a configure option


author: Germano Massullo <germano.massullo@gmail.com> - 4.2.1-1
changelog:
  - 4.2.1 release
  - removes appdata patch
  - renames darktable.appdata.xml to org.darktable.darktable.appdata.xml


author: Matthew Miller <mattdm@fedoraproject.org> - 0.4.8-1
changelog:
  - upstream bugfix and security release:
  - be symmetric about differences, A - B := -(B - A) for A < B
  - fix security issue when reading TZMAP_DIR from environment
  - fix printing of negative 0 (-0)
  - fix issue with tzdata transitions in files with leap second
    adjustments that are now cut off at expiration time
  - drop build patch now released upstream


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.7-4
changelog:
  - Rebuild for gsoap 2.8.135 (Fedora 42)
  - Drop EPEL 7 specific instructions (EOL)
  - Update License tag


author: Mihai Patrascoiu <mihai.patrascoiu@cern.ch> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Align specfile with upstream (including whitespace from tabs to spaces)


author: Adam Jackson <ajax@redhat.com> - 3.3.12-36
changelog:
  - Don't require xorg-x11-utils at all, doesn't seem to be necessary
  - Require xclipboard xfontsel not xorg-x11-apps


author: Robert Scheck <robert@fedoraproject.org> - 1:0.97.3-16
changelog:
  - Added upstream patch to avoid infinite loop on filenames with invalid
    encoding (CVE-2019-19451, #1778767)


author: Richard Fearn <richardfearn@gmail.com> - 9-31
changelog:
  - Add file systems: btrfs, ext4, f2fs, exfat
  - Add LUKS encryption container detection/identification
  - Add support for EWF images


author: Robert Scheck <robert@fedoraproject.org> 0.7.3-17
changelog:
  - Add patch with upstream changes, fixes and mbedTLS 3.x support
  - Add updated patch for multibyte character support in passwords


author: Frantisek Sumsal <frantisek@sumsal.cz> - 5.1-1
changelog:
  - 5.1 bump
  - Cleanup the prep/build phase to make it work correctly with package notes
  (kudos to Zbigniew Jędrzejewski-Szmek for the patch)


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.2-1
changelog:
  - Updated to version 2.5.2
  - Upstream change notes:
    * This patch release fixes compatibility with GNU/Hurd and fixes running
      tests in parallel.
    * Commits:
      ea9c431 GNU/Hurd
      67800d4 Paralell tests take 2
      57dd3e0 Plugins tests
      f5246e4 strptime


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.0.45-1
changelog:
  - Since version 2.0.45, some of the configuration files have been renamed.
  Please merge your config to /etc/dnscrypt-proxy/dnscrypt-proxy.toml.rpmnew then
  replace dnscrypt-proxy.toml with that file.
  Read /usr/share/doc/dnscrypt-proxy/ChangeLog to know more about this change.
  - generate-domains-blocklist is now provided in /usr/share/doc/dnscrypt-proxy/
  - Fix: rhbz#1943749
  - Update to 2.0.45
  - Close: rhbz#1912171


author: Sander Hoentjen <shoentjen@antagonist.nl> - 1.9.12-1
changelog:
  - Update to 1.9.12
  - Fixes CVE-2026-0396, CVE-2026-0397, CVE-2026-24028, CVE-2026-24029,
    CVE-2026-24030, CVE-2026-27853, CVE-2026-27854


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Simone Caronni <negativo17@gmail.com> - 1.22.15-3
changelog:
  - Clean up SPEC file.
  - Adjust Requires and BuildRequires.
  - Update configure options.
  - Fix all tests except one.


author: Hangbin Liu <haliu@redhat.com> - 1.5.3-5
changelog:
  - Update spec file
  - Update Makefile license
  - Update obsoleted m4 macros
  - Install new command dwdump


author: Hangbin Liu <haliu@redhat.com> - 1.5.4-1
changelog:
  - Update to version 1.5.4
  - Support packet drop reason reporting when included in netlink message
  - fix some minor compilation warnings/errors
  - clean up some comments about deadline support
  - convert configure.ac to use AM_PROG_LIBTOOL from outdated LT_INIT
  - Fix missing SOL_NETLINK define in glibc < 2.24
  - Fix licensing issues that didn't make sense
  - ignore ENOBUFS errors on data socket
  - adding arm64 travis ci testing
  - man page updates
  - move to libnl3 from libnl


author: Jens Petersen <petersen@redhat.com> - 1.4.5-3
changelog:
  - build with opengl (#2260290, Benson Muite)
  - check: run help command (#2260290, Benson Muite)
  - khrplatform.h is under Khronos License (#2260290, Benson Muite)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.2.5-7
changelog:
  - Remove build-time dependency on python3-mock (https://fedoraproject.org/wiki/Changes/DeprecatePythonMock)
  - Remove EPEL7-specific parts of the spec


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Jonathan Dieter <jdieter@gmail.com> - 0.11.3-1
changelog:
  - Update to 0.11.3 with bug fixes
  - Remove patch to use system xxhash since upstream does that by default now


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.1-26
changelog:
  - Build a shared library in addition to the static one; add a build conditional
    to disable the static library when dependent packages are ready
  - Re-organize the contents into subpackages (add -libs and -tools, and let the
    base package be a metapackage).
  - Better respect distribution build flags
  - Fix a possible buffer overflow and patch an unused variable


author: Vitaly Zaitsev <vitaly@easycoding.org> - 1.6.2-7
changelog:
  - Extracted configuration file to earlyoom.conf.
  - Adjusted priority of "Isolated Web Co" processes.


author: Jos de Kloe <josdekloe@gmail.com> - 2.29.0-1
changelog:
  - Upgrade to upstream version 2.29.0
    Note that the source code now uses g++ in stead of gcc for compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.18-28
changelog:
  - Fully patch obsolete FSF postal address in license text
  - Since upstream merged the PR for this, we now patch the license text file


author: Ding-Yi Chen <dchen@redhat.com> - 1.27.0-1
changelog:
  - Fixes Bug 2255716 - efl-1.27.0 is available
  - Add BuildRequires: libjxl-devel
  - Documents:
    + Remove NEWS, because upstream no-longer have it
    + Rename README to README.md


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.26.1-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

  >>>>>>> c3bab3b (update to 1.26.1)


author: Ding-Yi Chen <dingyichen@gmail.com> - 0.26.0-1
changelog:
  - Upstream update to 0.26.0
  - Upstream remove NEWS, thus remove from doc
  - Upstream rename README to README.md
  - Upstream has TODO.md now, thus add to doc


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-3
changelog:
  - add some upstream patches
  - use https://github.com/mate-desktop/eom/commit/cd3df0e
  - use https://github.com/mate-desktop/eom/pull/319


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Michel Lind <salimma@fedoraproject.org> - 6.2.1-14
changelog:
  - Unbundle cpp-httplib (rhbz#2169585)
  - Eliminate almost all sed usage
  - Use find_package to find cxxopts
  - Use pkg_check_modules to find easylogging++
  - Enable SELinux support
  - Enable unwind support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.20.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Fix build with https://github.com/dex4er/fakechroot/pull/85 and
    https://github.com/dex4er/fakechroot/pull/86


author: Sérgio Basto <sergio@serjux.com> - 2.20.1-12
changelog:
  - All changes to fakechroot we carry in Debian for glibc >= 2.34 #104
    check return value of dladdr #70
    glibc 2.33+ compatibility #85
    Wrap fstatat and fstatat64 (glibc 2.33) #86
    src/lckpwdf.c: create an empty /etc/.pwd.lock #95
    Wrap all functions accessing /etc/passwd, /etc/group and /etc/shadow for glibc >= 2.34 #98
    Stat fix compilation #73 is also included
    The strcpy writes the terminating null byte as well. #79 is also included
    as note #98 for glibc 2.32 added src/__nss_files_fopen.c and later for glibc 2.34 remove it
  - Fix typo in AC_PATH_PROG for ldconfig #80 is not included but it is a trivial fix
  - Fix issue #92 #93 not included
  - rel2abs: Only call getcwd_real for relative paths #100 not included
  - fix_test_on_32bits.patch (which strated to fail on F36+)


author: Sérgio Basto <sergio@serjux.com> - 1.35.1-1
changelog:
  - Update to 1.35.1
  - Update to version 1.35 (Wed Jun 05 2024 Packit <hello@packit.dev>)
  - Resolves: rhbz#2290632


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.9-1
changelog:
  - New version
    Resolves: rhbz#2080085
  - Avoided MITM attack on non-DNSSEC XMPP connections
    Resolves: CVE-2022-26491


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.0-6
changelog:
  - Fix cmake invocation (fix RHBZ#2045385)
  - Re-enable the tests
  - Move the unversioned .so file link to the devel package
  - Fix unowned %{_libdir}/cmake/flatbuffers directory
  - Move flatc to a new flatbuffers-compiler subpackage
  - Fix the Python library subpackage: rename it to python3-flatbuffers, make it
    noarch, build it with pyproject-rpm-macros, add an import-only “smoke test”,
    and add a weak dependency on numpy
  - Stop maintaining a flatbuffers.7 man page
  - Update flatc.1 man page
  - Add a -doc subpackage with samples (no reference manual for now)


author: Benjamin A. Beasley <code@musicinmybrain.net> 2.0.6-2
changelog:
  - Initial package for EPEL9
  - Drop Provides/Obsoletes for flatbuffers-python3, which never existed on
    EPEL9


author: Benjamin A. Beasley <code@musicinmybrain.net> 2.0.6-4
changelog:
  - Update License field to SPDX
  - Treat grpc-derived code as Apache-licensed, too; see
    https://github.com/google/flatbuffers/pull/7073


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:22.0.0-1
changelog:
  - Updated to v22.0.0, using the archive available on GitHub.
  - Changed the epoch to mark the new upstream version scheme.
  - Changed the epoch to 2 instead of 1 for consistency with the GNATcoll packages.
  - Removed patch florist-2017-gcc8; has been fixed upstream (commit: 0bfc497).
  - Fixed the symbolic links for the shared libraries.
  - Made the generated usage project file architecture-independent.
  - Removed license from devel subpackage; inherit from main package.
  - Improved spec file readability.


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 8.1.1-4
changelog:
  - Backport fix handling of formattable types implicitly convertible to pointers (fixes: rhbz#2059736)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2022.07.11.00-4
changelog:
  - Update for gcc changes: Enable test again working with recent gcc Add a
    workaround patch for gcc bug instead of disabling corresponding test


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 3.6.1-2
changelog:
  - cleanup spec
  - support building on EPEL8
  - use --with offensive to skip removing offensive cookies


author: Sheng Mao <shngmao@gmail.com> - 2.24-2
changelog:
  - Update fossil to upstream version 2.24
  - Turn off tests during build. New failed tests are not solved by upstream
    yet: amend-tag-1.1 amend-tag-2.1 settings-valid-local-default-skin
    settings-valid-global-default-skin stash-1-show
  - Apache change work-around for security fix
  - Skin enhancements
  - Enhancements to the /timeline page
  - The /uvlist page now shows the hash algorithm
  - Markdown formatter: improved handling of indented fenced code blocks that
    contain blank lines
  - Import the latest Pikchr containing support for "diamond" objects.
  - Add ability to render committed Pikchr files to SVG via
    /doc/…/foo.pikchr?popup URLs.
  - Update Fossil's internal robot detection logic so that it correctly
    identifies the new GoogleOther crawler as a robot.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-8
changelog:
  - Bootstrap the compiler for EPEL9
  - Disable building .pdf documentation (missing dependencies on EPEL9)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-10
changelog:
  - Add a patch to fix IDE-related non-executable files being installed to /usr/bin
  - Add a patch to fix broken stack trace handling on aarch64
  - Use FPMAKEOPT for parallel compilation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-4
changelog:
  - Modernize and clean up the spec file
  - Make it harder to miss any .so version change
  - Properly install the license file
  - Remove an obsolete sed-patch
  - Move documentation and examples to a -doc subpackage
  - Build PDF instead of HTML documentation


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.7.0-10
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Fix cmake build


author: Filipe Brandenburger <filbranden@gmail.com> - 1.4-4
changelog:
  - Include patch to implement PKCS#11 opaque keys support through
    OpenSSL pkcs11 engine (rhbz #2000411)


author: Terje Rosten <terjeros@gmail.com> - 3.7.2-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Robert Scheck <robert@fedoraproject.org> 11.3.1-5
changelog:
  - backport from 11.3.1-4.4: s390x: add support for register arguments preserving (#2168204)
  - backport from 11.3.1-4.3: compile the cross binaries as PIE/-z now (#2155452)
  - backport from 11.3.1-4.2: ship libitm.spec in cross-gcc (#2154462)
  - backport from 11.3.1-4.1: add cross compiler functionality for non-production uses (#2149650)
  - backport from 11.3.1-4: update from releases/gcc-11-branch (#2117632)
  - backport from 11.3.1-4: fix the detection of Sapphire Rapids in host_detect_local_cpu
  - backport from 11.3.1-4: fix -Wmismatched-dealloc documentation (#2116635)


author: Robert Scheck <robert@fedoraproject.org> 11.4.1-3
changelog:
  - backport from 11.4.1-2.3: fix member vs global template (RHEL-2607)
  - backport from 11.4.1-2.2: guard the bit test merging code in if-combine (RHEL-6068)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2.1: use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)
  - backport from 11.4.1-2.1: fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - backport from 11.4.1-2: update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release


author: Robert Scheck <robert@fedoraproject.org> 11.5.0-2
changelog:
  - backport from 11.5.0-2: fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - backport from 11.5.0-2: libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - backport from 11.5.0-2: fix wrong code with memcpy from _Complex (PR tree-optimization/116034)
  - backport from 11.5.0-1: update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
  - backport from 11.5.0-1: fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - backport from 11.5.0-1: fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)
  - backport from 11.4.1-3: update from releases/gcc-11-branch (RHEL-17638)
  - backport from 11.4.1-3: use -fno-stack-protector in some aarch64 tests


author: Robert Scheck <robert@fedoraproject.org> 11.5.0-5
changelog:
  - backport from 11.5.0-5: rebuild for CVE-2020-11023 (RHEL-78377)
  - backport from 11.5.0-4: revert the PR middle-end/57245 patch (RHEL-76359)
  - backport from 11.5.0-3: honor -frounding-math in real truncation (PR middle-end/57245, RHEL-73749)


author: Filip Janus <fjanus@redhat.com> - 3.4.3-5
changelog:
  - Initial GDAL 3.4 version with alternate naming to avoid conflicts with RHEL gdal
  - Renamed package from gdal to gdal3.4
  - Library and headers remain unchanged (libgdal.so, /usr/include/gdal/)
  - Renamed all binaries with gdal3.4- prefix (e.g., gdal3.4-gdalinfo)


author: Sandro <devel@penguinpee.nl> - 3.0.12-7
changelog:
  - Apply security patches
  - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288)
  - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292)
  - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296)


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.0-6
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix build with patch from Gentoo


author: Dominic Hopf <dmaphy@fedoraproject.org> - 2.1-2
changelog:
  - New upstream release: Geany 2.1 (RHBZ#2376572)
  - Remove gcc15 patch
  - Introduce Obsoletes for geany-themes


author: Dominic Hopf <dmaphy@fedoraproject.org> - 2.0-1
changelog:
  - New upstream release: Geany-Plugins 2.0
  - Completely remove the plugins devhelp, geanypy, multiterm
  - Re-enable webhelper plugin


author: Jens Petersen <petersen@redhat.com> - 8.10.4-113
changelog:
  - rebase to 8.10.4 from ghc:8.10 module stream
  - https://downloads.haskell.org/ghc/8.10.4/docs/html/users_guide/8.10.1-notes.html
  - use llvm10 for ARM


author: Jens Petersen <petersen@redhat.com> - 8.10.5-115
changelog:
  - update to 8.10.5 with patch for missing rts symbols
  - use llvm 11 for ARM
  - https://downloads.haskell.org/~ghc/8.10.5/docs/html/users_guide/8.10.5-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.0.1-1
changelog:
  - initial package derived from ghc:9.0 and ghc9.2
  - https://downloads.haskell.org/ghc/9.0.1/docs/html/users_guide/9.0.1-notes.html
  - uses llvm10 on ARM archs


author: Jens Petersen <petersen@redhat.com> - 9.0.2-2
changelog:
  - update to 9.0.2
  - https://downloads.haskell.org/~ghc/9.0.2/docs/html/users_guide/9.0.2-notes.html
  - use llvm11 for ARM


author: Jens Petersen <petersen@redhat.com> - 9.0.2-7
changelog:
  - ghc9.0 now recommends ghc9.0-compiler-default
  - recommends zlib-devel was moved to cabal-install/stack


author: Jens Petersen <petersen@redhat.com> - 9.2.3-10
changelog:
  - https://downloads.haskell.org/~ghc/9.2.3/docs/html/users_guide/9.2.3-notes.html
  - base-4.16.2.0 and bytestring-0.11.3.1


author: Jens Petersen <petersen@redhat.com>
changelog:
  - make sure to enable debuginfo always to avoid .build-id conflicts
  - add major version symlinks for programs in /usr/bin


author: Jens Petersen <petersen@redhat.com> - 9.2.5-14
changelog:
  - https://www.haskell.org/ghc/blog/20221107-ghc-9.2.5-released.html
  - https://downloads.haskell.org/~ghc/9.2.5/docs/html/users_guide/9.2.5-notes.html
  - base-4.16.4.0 and process-1.6.16.0
  - backport packaging changes from ghc9.4
  - epel9: enable hadrian
  - F35,F36: disable armv7hl due to failing (#2142238)


author: Jens Petersen <petersen@redhat.com> - 9.2.7-16
changelog:
  - https://downloads.haskell.org/~ghc/9.2.7/docs/html/users_guide/9.2.7-notes.html
  - bytestring-0.11.4.0


author: Jens Petersen <petersen@redhat.com> - 9.2.7-17
changelog:
  - include backport of 9.4 m32_allocator_init changes by Sylvain Henry (#2209162)
  - SPDX migration of license tags


author: Jens Petersen <petersen@redhat.com> - 9.4.4-15
changelog:
  - https://www.haskell.org/ghc/blog/20221224-ghc-9.4.4-released.html
  - https://downloads.haskell.org/~ghc/9.4.4/docs/users_guide/9.4.4-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.4.4-17
changelog:
  - suffix hadrian with ghc_major
  - only add ld.so.conf.d and remove RPATH if _ghcdynlibdir
  - do not duplicate libHSrts-*.so in filelist
  - add debian haddock-remove-googleapis-fonts.patch
  - update buildpath-abi-stability.patch
  - mv ld.so.conf.d out of rts block
  - use ghcliblib everywhere and add its subdirs
  - update abicheck with ghc_major
  - sync packaging changes: subpackage ghc-bignum, llvm13, -W, _ghcdynlibdir
  - build with ghc9.2


author: Jens Petersen <petersen@redhat.com> - 9.4.5-19
changelog:
  - https://www.haskell.org/ghc/blog/20230418-ghc-9.4.5-released.html
  - https://downloads.haskell.org/~ghc/9.4.5/docs/users_guide/9.4.5-notes.html
  - version bumps for base, bytestring, containers, parsec, text


author: Jens Petersen <petersen@redhat.com> - 9.4.5-21
changelog:
  - backport bcond perfbuild changes from ghc9.6
  - build the ghc.1 manpage with sphinx and version not to conflict
  - patch hadrian to build with Cabal-3.8
  - s390x: no longer apply unregisterized patches


author: Jens Petersen <petersen@redhat.com> - 9.4.6-22
changelog:
  - https://downloads.haskell.org/~ghc/9.4.6/docs/users_guide/9.4.6-notes.html
  - update license tags to SPDX
  - base subpkg now owns ghcliblib and ghclibplatform dirs (#2185357)


author: Jens Petersen <petersen@redhat.com> - 9.4.8-25
changelog:
  - s390x: patch from @stefansf (IBM) to fix llvm alignment in data sections
    which should fix certain runtime crashes (#2248097)


author: Jens Petersen <petersen@redhat.com> - 9.6.5-18
changelog:
  - https://downloads.haskell.org/ghc/9.6.5/docs/users_guide/9.6.5-notes.html
  - bumps to base, Cabal, directory, filepath, process


author: Jens Petersen <petersen@redhat.com> - 9.6.5-19
changelog:
  - explicit requires binutils-gold
  - ppc64le: NCG fix for ccall target hints (Peter Trommler, #2172771)


author: Jens Petersen <petersen@redhat.com> - 9.6.6-20
changelog:
  - https://downloads.haskell.org/ghc/9.6.6/docs/users_guide/9.6.6-notes.html
    with directory-1.3.8.5
  - switch to ld.bfd from ld.gold for Fedora


author: Jens Petersen <petersen@redhat.com> - 9.8.1-3
changelog:
  - fix llvm alignment in data sections (@stefansf (IBM))
    which should fix certain runtime crashes (#2248097)


author: Jens Petersen <petersen@redhat.com> - 9.8.2-8
changelog:
  - https://downloads.haskell.org/~ghc/9.8.2/docs/users_guide/9.8.2-notes.html
  - minor bumps to bytestring, filepath, text, unix


author: Jens Petersen <petersen@redhat.com> - 9.8.2-9
changelog:
  - explicit requires for binutils
  - boot with ghc9.6 for all releases
  - ppc64le: NCG fix for ccall target hints (Peter Trommler, #2172771)


author: Jens Petersen <petersen@redhat.com> - 9.8.3-11
changelog:
  - Update to 9.8.3
  - https://downloads.haskell.org/~ghc/9.8.3/docs/users_guide/9.8.3-notes.html
  - use ld.bfd


author: Jens Petersen <petersen@redhat.com> - 9.8.4-12
changelog:
  - Update to 9.8.4
  - https://downloads.haskell.org/~ghc/9.8.4/docs/users_guide/9.8.4-notes.html
  - filepath-1.4.301 and unix-2.8.6


author: Alain Vigne <avigne@fedoraproject.org> - 0.3.8-1
changelog:
  - 0.3.8 bump (rhbz#2148740)
  - Switch to json-glib, where available
  - Disable notify
  - Tests are disabled
  - SPDX license identifier


author: Dominik Mierzejewski <rpm@greysector.net> 1.4.2-1
changelog:
  - updated to 1.4.2
  - include ABI version in shared library filename to prevent accidental bumps
  - drop obsolete patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.6-1
changelog:
  - Minor fixes to makefiles (9.5)
  - Use -nameopt sep_multiline to derive certificate subject string (9.6)
  - Specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.4-1
changelog:
  - New GCT release v6.2.20251212
  - Drop patches included in the release
  - Drop old system V init scripts


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.4-1
changelog:
  - Minor fixes to makefiles (13.3)
  - Fix man page section (13.4)
  - Add BuildRequires perl-interpreter
  - Specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.2-1
changelog:
  - Add environment variable GLOBUS_EPPN_KEEP_DOMAIN to return full
    userid@domain from eppn (2.1)
  - Add environment variable GLOBUS_EPPN_FORCE_GRIDMAP to return mapped
    identity from gridmap lookup based on the ePPN (2.2)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.2-1
changelog:
  - Add missing dependency
  - Drop patch globus-gridmap-verify-myproxy-callout-deps.patch (fixed upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 4.2-1
changelog:
  - Minor fixes to makefiles
  - Add BuildRequires perl-interpreter
  - Add additional perl dependencies for tests
  - Specfile updates


author: Sahana Prasad <sahana@redhat.com> - 4.3-2
changelog:
  - Rebuilt with OpenSSL 3.0.0
  - Function names are (null) in OpenSSL 3.0 - adapt expected test output


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.9-1
changelog:
  - New GCT release v6.2.202660123
  - Drop patch globus-gsi-proxy-core-gcc16-lto.patch (included in the release)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.4-1
changelog:
  - Minor fixes to makefiles (12.3)
  - Add force option to grid-mapfile-add-entry if the users do not exist (12.4)
  - Add BuildRequires perl-interpreter
  - Add additional perl dependencies for tests
  - Specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 14.14-1
changelog:
  - Disallow TLS 1.0/1.1 by default again (14.12)
  - Minor fixes to makefiles (14.13)
  - Fix output payload check in gss_init_sec_context() after SSL handshake
    (14.14)
  - Add BuildRequires perl-interpreter
  - Add additional perl dependencies for tests
  - Specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 14.17-1
changelog:
  - Compatibility with TLS v1.3 (14.15)
  - Compatibility with the dcache server implementation (14.16)
  - Minimize session ticket size since we don't use them (14.16)
  - OpenSSL 3.0 fixes (14.17)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 14.17-4
changelog:
  - Better logic for TLS 1.3 special handling
  - Use sha256 hash when generating test certificates
  - Don't test TLS 1.0 and 1.1 when using openssl 3.0.1 or later


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 14.20-1
changelog:
  - New GCT release v6.2.20220524
  - Drop patches included in the release
  - Disable sending session tickets after the TLS 1.3 handshake


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.3-1
changelog:
  - Use -nameopt sep_multiline to derive certificate subject string
  - Add BuildRequires perl-interpreter
  - Add additional perl dependencies for tests
  - Specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.4-1
changelog:
  - Minor fixes to makefiles (6.3)
  - Fix spelling (6.4)
  - Add BuildRequires perl-interpreter
  - Add additional perl dependencies for tests
  - Specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.4-1
changelog:
  - Minor fixes to makefiles (3.3)
  - Use -nameopt sep_multiline to derive certificate subject string (3.4)
  - Add BuildRequires perl-interpreter
  - Add additional perl dependencies for tests
  - Specfile updates


author: Neal Gompa <ngompa13@gmail.com> - 1.10.0-1
changelog:
  - Rebase to 1.10.0 (rhbz#1810432)
  - Remove upstreamed patches
  - Backport fixes from upstream for pkgconfig files
  - Refresh pkgconfig dependency information patch


author: Eduardo Echeverria <echevemaster@gmail.com> - 1.11-1
changelog:
  - Update to 1.11. Fixes rhbz#2502800
  - Added automatic, crash-safe migration of persisted databases to storage
    format version 3
  - Added configured zlib and AddressSanitizer options to the version output
  - Added fullscreen expand and collapse controls to geolocation maps in the
    HTML report
  - Added Traditional Chinese translation
  - Expanded Debian package builds to Ubuntu 26.04 and additional
    architectures, and updated the packaging workflow actions
  - Fixed a heap buffer overflow when parsing malformed Opera user agents
  - Fixed an infinite loop while writing log parsing errors from multiple
    input files
  - Fixed city lookups ignoring the City database when a Country database was
    listed first
  - Fixed geolocation maps appearing grey after restoring persisted city data
  - Fixed .gz file extensions being interpreted as macros in the man page
  - Fixed iOS version parsing from user-agent strings
  - Fixed unique visitor undercounting caused by collisions between reversed
    data and visitor key pairs
  - Fixed WebSocket payload size checks for large and fragmented messages
  - Grouped Lynx, Links, ELinks, w3m and Chawan under a new "Text-based"
    browser category
  - Reduced storage memory usage by about 20% and parsing time by about 35%


author: Emir Akdag <infraw.linux@proton.me> - 3.8.2-1
changelog:
  - Unretire package and update to 3.8.2
  - Fix CVE-2025-58188
  - Switch to modern go-vendor-tools packaging


author: Robert-André Mauchin <zebob.m@gmail.com> 1.0.0-4
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
    CVE-2022-27191, CVE-2022-29526, CVE-2022-30629


author: Robert-André Mauchin <zebob.m@gmail.com> - 2021.1.2-1
changelog:
  - Bump to commit 852a31a10f5fc943bff9b7857d352b317e1bcc3e (fix FTBFS)
    Close: rhbz#2045645 Close: rhbz#1994431


author: Rodolfo Olivieri <rolivier@redhat.com> - 1.36.0-1
changelog:
  - Update to version 1.36.0
  - goose review local code review command
  - /goal command for agent self-evaluation before finishing
  - Hooks system for PreToolUse denial and extensibility
  - Slash commands (built-in, skill, recipe) in ACP server
  - Open-plugins generalization and skills
  - Summon subagent instructions
  - Unified thinking effort control across all providers
  - NEAR AI Cloud provider
  - Scaleway provider
  - Vercel AI Gateway provider
  - Atomic Chat declarative OpenAI-compatible provider
  - Routstr declarative provider
  - FuturMix provider
  - oMLX declarative provider
  - Harbor eval runner
  - MAX_CODE_BLOCK_LINES configurable via env vars
  - Honor GOOSE_FAST_MODEL env var in ModelConfig
  - GPT-5.5 in known models
  - Paginate ACP session list
  - Pass session cwd param to ACP providers
  - Opt-in to Vercel AI gateway leaderboard
  - GOOSE_OAUTH_CALLBACK_PORT for stable OAuth redirect_uri
  - Proactive OAuth token refresh to avoid re-auth on every session
  - Strip chain-of-thought markers from custom provider output
  - Nushell terminal and completion support
  - Optional --parameters flag for scheduled recipes
  - Quarterly option for scheduler
  - GitHub Copilot /responses API support
  - Projects as backend sources with system prompt injection
  - Linux musl CLI builds
  - GOOSE_DISABLE_TOOL_CALL_SUMMARY env var
  - Tolerate missing responses output
  - Serialize per-session agent creation to stop duplicate MCP init
  - Respect GOOSE_MAX_TURNS in gateway sessions
  - Send empty object instead of null for Anthropic tool_use input
  - Preserve thinking content for provider context
  - Mention configurable timeout env vars in Ollama stream stall error
  - Include full recipe parameter details in load/discovery output
  - Use context limit from /model/info for LiteLLM custom models
  - Plain > prompt instead of goose emoji in CLI
  - Emit trace_output as span attribute instead of event
  - Check file fallback when keyring has no entry
  - Use current_exe() instead of PATH lookup when spawning goose
  - Set TCP_USER_TIMEOUT on streamable HTTP clients
  - Activate custom provider after adding via configure
  - Flush OTLP traces reliably on exit with configurable timeout
  - Reduce excessive MISSING_TRANSLATION warnings for fallback locales
  - Improve Telegram gateway error reporting and connection reliability
  - Zero out cost for local providers (ollama, local)
  - Persist accumulated cost in session DB to survive reload
  - Prevent tool-use marker leakage in toolshim output
  - Re-apply canonical limits when delegate overrides model
  - Report cumulative total_tokens in stream-json/json output
  - Refresh GCP metadata server token on expiration
  - Apply request_params to outgoing OpenAI API payload
  - Gemini 3.x known_location Global routing entries
  - Coalesce streaming Thinking deltas and list available tools on not-found
  - Honor Retry-After on 429 responses
  - Preserve user-set session name for recipe-based chats
  - Enforce exp independently of MAX_TOKEN_AGE_SECONDS in OIDC proxy
  - Omit max_tokens for OpenAI-compatible requests when unset
  - Set correct MCP-app host capabilities
  - Normalize nullable schemas for Vertex Gemini compatibility
  - Isolate GitHub recipe temp paths
  - Set X-Initiator header on GitHub Copilot requests
  - Honor dynamic_models: false in declarative provider configs
  - Cache trailing message for stable prefix across Bedrock agent turns
  - Case-insensitive model name lookup for context_limit
  - Handle Bedrock ReasoningContent blocks gracefully
  - Ensure parallel tool image responses don't interleave on Databricks
  - Insert tool pair summaries at chronological position in conversation
  - Enable SQLite foreign key enforcement in session pool
  - Accept null tool_call arguments in OpenAI streaming chunks
  - Synchronously reap ACP child to avoid SIGCHLD race
  - Elicitation fixes
  - Return 400 instead of panicking on invalid CSP header value
  - Keep SSE reconnect loop alive on long disconnects
  - Convert quoted numeric config values to numbers if needed
  - Use appInfo instead of clientInfo in MCP Apps init handshake
  - Use mkdir -p for self-test workspace initialization
  - Exclude preprompt from session title generation
  - Prevent login-shell PATH probe from suspending goose on startup
  - Handle non-interactive terminal in goose configure
  - Use python3 in developer extension instructions
  - Build summon instructions per turn
  - Protocol cleanup
  - Dependency hygiene
  - Prompt injection mitigation: update pattern-based detection to reduce FPs
  - Surface resolved Databricks model metadata
  - Include request URL in provider error messages
  - Flag for login shell PATH
  - Structured per-provider config block, non-destructive provider switching
  - Preserve thinking content for providers that require it
  - Dynamically refresh skill instructions each turn
  - Show tool name in approval prompt
  - Location column in CLI skills table
  - Consolidate logging setup into shared helper
  - Support optional api_key configuration for declarative openai-engine providers
  - Recipe discovery and execution in ACP server
  - Group consecutive tool calls into one summarized chain card
  - Replace artifact heuristics and regexes with protocol messages
  - Improvements to LM Studio declarative provider
  - Parallelize provider resolution and eagerly init SQLite pool
  - ACP streamable HTTP spec compliance
  - Refresh onboarding when provider catalog loads
  - Redesign extensions configuration
  - Redesign skills library backend
  - Mergeable configs cleanup


author: Sam Doran <sdoran@redhat.com> - 1.38.0-1
changelog:
  - Update to version 1.38.0
  - Canonical thinking modes across providers
  - Surface Anthropic stream refusals as visible errors
  - ACP secret key support at goose serve endpoint
  - Unified OTLP logging schema for cross-tool detection
  - Opt-in ACP last message snippets for sessions
  - Custom ACP method to get session info
  - Steering messages with ACP
  - ACP list sessions with keyword and type filter
  - ACP thinking effort config option
  - Image read tool
  - ACP methods for config extensions
  - Custom notifications only when ACP client specifies capability
  - Session import functionality
  - Replay ACP images on session load
  - Raw provider supported models over ACP
  - ACP session system prompt setter
  - Perplexity as declarative OpenAI-compatible provider
  - Alibaba (Qwen via DashScope) declarative provider
  - Configurable tool output size limit via GOOSE_MAX_TOOL_RESPONSE_SIZE
  - /model slash command in CLI for session model switching
  - Databricks AI Gateway provider
  - Expose built-in skills through sources list ACP calls
  - Replace raw config and secret methods in ACP
  - Support Google model inventory refresh
  - Correctly map ollama_cloud to canonical provider and update max tokens
  - Incorrect max tokens values for Groq provider
  - Classify Bedrock ValidationException as ExecutionError
  - Page through all Databricks AI Gateway v2 endpoints when listing models
  - Preserve unparseable extension entries during config refresh
  - Forward ACP server context window size to clients
  - Skip OTLP signals when protocol=grpc to avoid background-thread panic
  - Make Azure api-version query param optional
  - Stricter GGUF requirements, auto detection of tool calling support, fixed thinking output parsing
  - Remove unused fetch-metadata IPC handler (SSRF)
  - Replace Venice custom provider with declarative config
  - Coalesce streaming chunks under one message id in ACP
  - Require extension_name on read_resource
  - Seed provider handoff history in ACP
  - Handle ACP requests concurrently
  - Mark stream decode errors retryable
  - Create goose-providers crate with canonical models and types
  - ACP session setup refactor
  - LRU cache for token counting
  - Replace review subprocess timeout with turn limits
  - Honor blocking Stop hook decisions
  - Forward custom headers through OAuth connect path
  - Prefer goose aliases for Databricks v2 inventory
  - Mount ACP in goosed server for iterative migration
  - Remove threads layer, use sessions directly for ACP
  - Install plugins to ~/.agents/plugins
  - Switch to official new rust-sdk for ACP
  - Install plugins support
  - Deduplicate _goose/providers/list RPC call at startup
  - Translate ACP host capabilities into MCP initialization
  - Prompt injection mitigation enabled by default for internal users
  - Re-adjust pattern-based detection confidence scores
  - Add directionality to egress logging
  - Scheduled recipe session params
  - Unscheduling a recipe should not delete them
  - Read prompted file parameters in recipes


author: Jonathan Wright <jonathan@almalinux.org> - 0.3-16
changelog:
  - Update spec to use more macros
  - Update source to proper GitHub format
  - Update license to SPDX format
  - Add doc dir to files
  - Remove excluded arches (build on all arches)
  - Remove unnecessary buildrequires glibc-kernheaders
  - Initial build for EPEL7, EPEL8, and EPEL9


author: Ken Dreyer <kdreyer@ibm.com> - 2.9.1-3
changelog:
  - enable general dynamic tls on s390x (Thanks Tom Callaway
    <spot@fedoraproject.org>) (rhbz#2290376)


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:22.0.0-1
changelog:
  - Updated to v22.0.0, using the archive available on GitHub.
  - Changed the epoch to mark the new upstream version scheme.
  - Changed the epoch to 2 instead of 1 for consistency with the GNATcoll
    packages.
  - GPRconfig knowledge files are know packaged separately (gprconfig-kb).
  - Removed patch fedora_arches.xml; now part of gprconfig-kb.
  - Removed patch gprbuild-2016-gcc7.patch; now part of gprconfig-kb.
  - Removed patch gprbuild-2017-bootstrap.patch; has been fixed upstream (commit:
    81c0d3d).
  - Removed patch gprbuild-2017-fedora_compilers.patch; now part of gprconfig-kb.
  - Removed patch gprbuild-2017-libsubdir.patch; Makefile is no longer used to
    build package.
  - Removed patch gprbuild-2020-case_util_conflicts.patch; has been fixed upstream
    (commit: d803338).
  - Removed patch gprbuild-symlinked_dirs.patch; has been fixed upstream (commit:
    685aa45).
  - Removed patch gprbuild-2016-gcc5.patch; GCC 4 and earlier are no longer
    supported.
  - Changed build kind from 'debug' to 'production'.
  - Tools are now position-independent executables (PIE).
  - Added a new build dependency to build the documentation with Sphinx.
  - Moved documentation and examples into the _pkgdocdir.
  - Updated the license of the doc package.
  - Added a runtime exception for all other packages, following upstream.
  - Added the Unicode license as gprbuild is statically linked to xmlada.
  - License fields now contain SPDX license expressions.
  - Fixed the symbolic links for the shared libraries.
  - Fixed the so-version of libgnatprj.so.
  - Subpackage libgpr now provides libgnatprj.
  - Subpackage libgpr-devel now provides libgnatprj-devel.
  - Some release specific information in the source code is now updated during
    prep.
  - Moved the license files to the correct location.
  - Removed the explicit reset of _python_bytecompile_extra; flag seems to have no
    purpose here.
  - Added fedora-gnat-project-common as a dependency to libgpr-devel.
  - Marked the doc package as architecture-independent.
  - Removed runtime dependency from the doc package.
  - Added the doc package as a recommendation to the main package.
  - Moved the check section after the install section.
  - Refactored the bootstrap install sequence.
  - Removed GNAT version requirement; all versions supported by Fedora are more
    recent.
  - Made the generated usage project file architecture-independent.
  - Updated some summaries and descriptions.
  - Improved spec file readability.
  - Added a fix for incorrect line-endings for some example files during prep.
  - Updated the comment on bootstrap mode.
  - Updated the bootstrapping exception issue link.
  - Bootstrap mode can now be enabled via a configuration option.
  - Dropped the 'bootstrap_arch' macro; tweak RPM spec manually if needed.


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:23.0.0-1
changelog:
  - Updated to v23.0.0, using the archive available on GitHub.
  - Removed patch gprbuild-drop-exe-prefix.patch; has been fixed upstream (commit
    7395727).
  - New version specific build dependency on gprconfig-kb (content of commit
    8a9f79e is required).


author: Robert Scheck <robert@fedoraproject.org> - 1.3.0-4
changelog:
  - Removed systemd(-rpm-macros) switch for old Fedora releases
  - Removed lowering of meson version for old Fedora/RHEL releases
  - Added upstream patch to fix building with meson 0.62.0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.46.7-2
changelog:
  - More-correct .pc file path fix
  - When passing paths to the build system, they are now correctly relative
    to the prefix rather than absolute.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.8.104-4
changelog:
  - Backporting upstream fixes
  - Fixes CVE: CVE-2020-13574 CVE-2020-13575 CVE-2020-13577 CVE-2020-13578
  - Fixes CVE: CVE-2020-13576


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.8.117-1
changelog:
  - Update to 2.8.117
  - Drop patches previously backported
  - Add /usr/share/gsoap to soapcpp2's default import path


author: Dominik Mierzejewski <rpm@greysector.net> - 1.10.0-11
changelog:
  - fix build
  - use modern macros
  - fix compilation and enable tests
  - disable the two failing tests for now (#1986201)
  - switch to HTTPS URLs


author: Dominik Mierzejewski <dominik@greysector.net> - 1.10.0-14
changelog:
  - add mingw builds as subpackages (#1825263)
  - use upstream patch for fixing build against newer glib


author: Paul Howarth <paul@city-fan.org> - 3.3.112-1
changelog:
  - Update to 3.3.112
    - VCD reader fixes for unnamed Icarus begin blocks
    - String data type crash fix in fst.c
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 3.3.115-1
changelog:
  - Update to 3.3.115
    - Fix VZT reader with -fstrict-aliasing
    - Fix use_multi_state condition in vzt_write.c
    - Fix for UNDEF vs strings at start of a vzt file
    - Fix sleep() time scaling redefine for mingw
    - Use MapViewOfFileEx for mmap on Windows (fstapi)
    - Define FST_DO_MISALIGNED_OPS on AArch64 (fstapi)
    - Fixed attrbegin short length problem


author: Paul Howarth <paul@city-fan.org> - 3.3.116-1
changelog:
  - Update to 3.3.116
    - Fix manpage/odt for vcd2fst command switch documentation for zlibpack
    - Add GDK_WINDOWING_WAYLAND check for gdkwayland.h header usage
    - Change sprintf to snprintf in fstapi.c
    - Fix init crash on show_base_symbols enabled


author: Paul Howarth <paul@city-fan.org> - 3.3.118-1
changelog:
  - Update to 3.3.118
    - Update xml2stems to handle newer "loc" vs. "fl" xml tags
    - Change preg_regex_c_1 decl to use regex_t* as datatype
    - Move gtkwave.appdata.xml to io.github.gtkwave.GTKWave.metainfo.xml
    - Fixed popen security advisories:
      - TALOS-2023-1786 (CVE-2023-35963, CVE-2023-35960, CVE-2023-35964,
  		       CVE-2023-35959, CVE-2023-35961, CVE-2023-35962)
    - Fixed FST security advisories:
      - TALOS-2023-1777 (CVE-2023-32650)
      - TALOS-2023-1783 (CVE-2023-35704, CVE-2023-35703, CVE-2023-35702)
      - TALOS-2023-1785 (CVE-2023-35956, CVE-2023-35957, CVE-2023-35958,
  		       CVE-2023-35955)
      - TALOS-2023-1789 (CVE-2023-35969, CVE-2023-35970)
      - TALOS-2023-1790 (CVE-2023-35992)
      - TALOS-2023-1791 (CVE-2023-35994, CVE-2023-35996, CVE-2023-35997,
  		       CVE-2023-35995)
      - TALOS-2023-1792 (CVE-2023-35128)
      - TALOS-2023-1793 (CVE-2023-36747, CVE-2023-36746)
      - TALOS-2023-1797 (CVE-2023-36864)
      - TALOS-2023-1798 (CVE-2023-36915, CVE-2023-36916)
    - Fixed evcd2vcd security advisories:
      - TALOS-2023-1803 (CVE-2023-34087)
    - Fixed VCD security advisories:
      - TALOS-2023-1804 (CVE-2023-37416, CVE-2023-37419, CVE-2023-37420,
  		       CVE-2023-37418, CVE-2023-37417)
      - TALOS-2023-1805 (CVE-2023-37447, CVE-2023-37446, CVE-2023-37445,
  		       CVE-2023-37444, CVE-2023-37442, CVE-2023-37443)
      - TALOS-2023-1806 (CVE-2023-37576, CVE-2023-37577, CVE-2023-37573,
  		       CVE-2023-37578, CVE-2023-37575, CVE-2023-37574)
      - TALOS-2023-1807 (CVE-2023-37921, CVE-2023-37923, CVE-2023-37922)
    - Fixed VZT security advisories:
      - TALOS-2023-1810 (CVE-2023-37282)
      - TALOS-2023-1811 (CVE-2023-36861)
      - TALOS-2023-1812 (CVE-2023-38618, CVE-2023-38621, CVE-2023-38620,
  		       CVE-2023-38619, CVE-2023-38623, CVE-2023-38622)
      - TALOS-2023-1813 (CVE-2023-38649, CVE-2023-38648)
      - TALOS-2023-1814 (CVE-2023-38651, CVE-2023-38650)
      - TALOS-2023-1815 (CVE-2023-38653, CVE-2023-38652)
      - TALOS-2023-1816 (CVE-2023-35004)
      - TALOS-2023-1817 (CVE-2023-39235, CVE-2023-39234)
    - Fixed LXT2 security advisories:
      - TALOS-2023-1818 (CVE-2023-39273, CVE-2023-39271, CVE-2023-39274,
  		       CVE-2023-39275, CVE-2023-39272, CVE-2023-39270)
      - TALOS-2023-1819 (CVE-2023-34436)
      - TALOS-2023-1820 (CVE-2023-39316, CVE-2023-39317)
      - TALOS-2023-1821 (CVE-2023-35057)
      - TALOS-2023-1822 (CVE-2023-35989)
      - TALOS-2023-1823 (CVE-2023-38657)
      - TALOS-2023-1824 (CVE-2023-39413, CVE-2023-39414)
      - TALOS-2023-1826 (CVE-2023-39443, CVE-2023-39444)
      - TALOS-2023-1827 (CVE-2023-38583)


author: Robert Scheck <robert@fedoraproject.org> - 1.5.5-6
changelog:
  - Add upstream patch for microphone input to fix flag comparison
    in "guac_rwlock_acquire_write_lock" function (GUACAMOLE-1940)


author: Robert Scheck <robert@fedoraproject.org> - 1.6.0-1
changelog:
  - Update to 1.6.0 (#2363860, thanks to W. Michael Petullo)
  - Add upstream patch for src/libguac/wol.c to fix inet_pton being
    called with a destination buffer size too small (GUACAMOLE-2087)


author: Kalev Lember <klember@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - Switch to meson build system
  - Remove manual pkgconfig requires from -devel package
  - Fix various issues with directory ownership
  - Tighten soname globs


author: Neal Gompa <ngompa@fedoraproject.org> - 2.0.8-5
changelog:
  - Move desktop and metainfo validation to check section
  - Split the runtime libraries into libs subpackage
  - Install the correct license file


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Artem Polishchuk <ego.cordatus@gmail.com> - 1.05-13
changelog:
  - feat: Add hd-idle-systemd-nodaemon patch which allow to writes logs into
    journald instead of plain text file


author: Dominik Mierzejewski <rpm@greysector.net> - 0.3-0.46.beta15
changelog:
  - update Debian patch to latest
  - drop obsolete patch
  - fix Russian translation (#1634377)
  - add support for NVME drives (#1801116)
  - correct build depdendency for systemd macros
  - use modern macros


author: Antonio Trande <sagitter@fedoraproject.org> - 4.2.15-6
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
  - Use bundled junit
  - Fix hamcrest symlinks in Fedora 35+


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.1.1-1
changelog:
  - Update to 0.1.1
  - Adjust Source0 to point to /archive/v<version>/hirte-<version>.tar.gz
  - Adjust the location of dbus-1/system.d/org.containers.hirte.conf and
    bus-1/system.d/org.containers.hirte.Agent.conf so they are in _datadir
  - Add the hirte-ctl subpackage (which provides hirtectl for convenience)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 1.6.1-1
changelog:
  - New upstream release.
  - Built from git tag, as no upstream tarball exists since August. Pinged
    upstream about it.
  - Extra buildreqs and stuff


author: Akira TAGOH <tagoh@redhat.com> - 2.28.4950.102-1
changelog:
  - Update to 2.28.4950.102.
  - Update dictionaries.
  - Fix obsolete function warnings in mozc.el
    Resolves: rhbz#2155094


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.21.pre4
changelog:
  - Added patch from upstream to choose first "running" interface,
    rather than first "up" interface (#1403025)
  - Added patch from upstream to support scales beyond 1 Gbps


author: Tomas Smetana <tsmetana@redhat.com> - 1.6.1-1
changelog:
  - New upstream version
  - Fix rhbz#1834969 - CVE-2020-12761 integer overflow in ICO color maps handling


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Fix the issue not working due to fail to open X display.
    Resolves: rhbz#2023222


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-3
changelog:
  - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
    Latex2e-translated-notice"


author: Petr Pisar <ppisar@redhat.com> - 2.2.13-4
changelog:
  - Fix a heap overread in search_brace/lexi
  - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919)


author: Gabriel Somlo <somlo at cmu.edu> 2.1.4-2
changelog:
  - reimplement debug info patch in configure script
  - remove autoconf build dependency
  - fix autoconf-2.71 related FTBFS (#1999454)


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Peter Bieringer <pb@bieringer.de> - 4.2.0-80
changelog:
  - Final release 4.2.0
  - Relocate CGI scripts into dedicated directories
  - Call autoreconf in setup section


author: Peter Bieringer <pb@bieringer.de> - 4.2.2-1
changelog:
  - Final release 4.2.2
  - include databases/registries/lisp/site-db as no longer reachable for download
  - add additional Perl requirements


author: Peter Bieringer <pb@bieringer.de> - 4.3.0-1
changelog:
  - Final release 4.3.0
  - Update recommend IP2Location >= 8.6.0
  - Remove ipv6calc.sgml from doc
  - Use now only releases from GitHub
  - Add BuildRequires+Recommends for geolite in case MMDB is enabled


author: Guido Aulisi <guido.aulisi@gmail.com> - 1.9.17-1
changelog:
  - Update to 1.9.17
  - Drop dependency on main package for example-clients (#1939083)
  - Use license tag


author: David Cantrell <dcantrell@redhat.com> - 1.27.3-1
changelog:
  - Upgrade to jdupes-1.27.3
  - Upstream project moved to codeberg.org; update spec accordingly
  - Add patch from author to fix a hash database error that could lead
    to data loss


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.78.3-2
changelog:
  - Rebuilt for Go 1.25.3
  - resolves rhbz#2407547 CVE-2025-58189, rhbz#2408551 CVE-2025-61725,
    rhbz#2409002 CVE-2025-61723, rhbz#2409945 CVE-2025-58185, rhbz#2410882
    CVE-2025-58188, rhbz#2412486 CVE-2025-58183


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.98.0-1
changelog:
  - update to 2.98.0
  - resolves: rhbz#2403136 (CVE-2025-11579), rhbz#2420569 (CVE-2025-47913),
    rhbz#2421867 (CVE-2025-66564), rhbz#2432197 (CVE-2026-23831),
    rhbz#2433101 (CVE-2026-23991), rhbz#2433104 (CVE-2026-23992),
    rhbz#2433535 (CVE-2026-24117), rhbz#2433572 (CVE-2026-24137),
    rhbz#2434246 (CVE-2026-24686), rhbz#2452365 (CVE-2026-32285),
    rhbz#2454524 (CVE-2026-34165), rhbz#2454525 (CVE-2026-33762),
    rhbz#2455638 (CVE-2026-34986)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.82-2
changelog:
  - Properly disable zlib extension on s390x
  - move README files meant for programming with jimtcl to main package


author: Björn Esser <besser82@fedoraproject.org> - 1.9.4-1
changelog:
  - Update to version 1.9.4 (rhbz#1882874)
  - Package all files generated by doxygen
  - Run tests single threaded


author: Pat Riehecky <riehecky@fnal.gov> - 0.19.1
changelog:
  - Update to 0.19.1
  - v0.19.0 is not binary compatible with previous versions of libjsonnet.
  - this version introduces versioned soname objects from upstream


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)
  - Add Keama migration utility (rhbz#2250608)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 5.108.0-4
changelog:
  - Rebuilt for libimobiledevice and libplist soname bump
  - Remove solid-power from files listing, since WIP APIs are no longer enabled (rhbz#2225952)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.109.0-2
changelog:
  - Restore the power management backend, needed for plasma-pk-updates (#2233613)
  - But do not build the solid-power executable that conflicts with KF6 Solid


author: Vitaly Zaitsev <vitaly@easycoding.org> - 2.8.0-2
changelog:
  - Fixed metadata manifest. Enabled validator.
  - Fixed directories ownership.
  - Disabled HTML patching.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.2.6-1
changelog:
  - Update to v2.2.6
  - Add a patch to fix build errors when using the GTK3 widgetset
  - Convert License tag to SPDX
  - Drop Patch1 (fix components explicitly requesting STABS debuginfo - fixed upstream)


author: Adam Williamson <awilliam@redhat.com> - 0.3.4-1
changelog:
  - Update to 0.3.4, drop merged and no-longer-needed patches
  - Fix Python build/install so Python subpackage works
  - Fix build on EPEL 8 and 9
  - Include latest database from upstream


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.20-21
changelog:
  - Fix FTBFS (rhbz#1604550, rhbz#1675256)
  - Add build requires on gcc
  - Change build requires from libungif-devel to giflib-devel
    (the libungif compat library is no longer available since Fedora 28)
  - Port to giflib version 5 and allow unbundling of giflib
  - Link the shared library with its dependencies and adjust afterimage-libs
    and afterimage-config --libs to not list the dependencies
  - Add build requires on librsvg2-devel and build the package with SVG support
  - Create an -apps subpackage containing the sample programs (used to be part
    of the -devel subpackage)
  - Do not enable the GLX extension - it causes problems on newer Fedora
    releases (rhbz#1708922, rhbz#1615383 [aterm], rhbz#1704691 [root])
  - Update the license file with new FSF address


author: Sérgio M. Basto <sergio@serjux.com> - 0.5.93-4
changelog:
  - Force replacement of packages of
    copr:copr.fedorainfracloud.org:sergiomb:libayatana-appindicator repo


author: Xavier Bachelot <xavier@bachelot.org> - 1.3.2-1
changelog:
  - Update to 1.3.2 (RHBZ#2112605, RHBZ#2113476, RHBZ#2089046)
  - Don't build bdj on i386 (RHBZ#2104068)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.13-5
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Fix cmake changes


author: Simone Caronni <negativo17@gmail.com> - 2.2.6-7
changelog:
  - SPEC file cleanup.
  - Use proper macros everywhere.
  - Fix permissions for binaries.
  - Fix rpmlint issues.
  - Trim changelog.


author: Tulio Magno Quites Machado Filho <tuliom@linux.ibm.com> - 1.0.15-8
changelog:
  - Fix bug #1923668 after Fedora started to use GCC 11.
  - Add a patch to ignore test failures when LTO is enabled even if LTO is not
    enabled yet. This may help to solve test failures on s390x.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14-1
changelog:
  - Rebase to 1.14.
  - Use newer upstream fork at https://github.com/ofalk/libdnet
  - Drop multilib fix now uptream (RHBZ#342001 RHBZ#1915838).
  - Drop unapplied shrext patch, no longer needed.


author: Simone Caronni <negativo17@gmail.com> - 1.2.6-12
changelog:
  - Drop ldconfig scriptlets.
  - Be more explicit for files.
  - Use cmake macros everywhere.
  - Small cleanups.
  - Trim changelog.
  - Adjust tests properly.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1-28
changelog:
  - Update URLs
  - Adjust whitespace to match personal preference
  - Add a build conditional for autoreconf
  - Use pkgconfig(…) dependencies where appropriate
  - Upgrade source hash from MD5 to SHA-512
  - Reduce spec file macro indirection and modernize macros
  - Use stricter globs to ensure so-version changes are detected
  - Make dependency on base package from -devel arched


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.36-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - add gtk-doc to build requirements (#1942967)


author: Bastien Nocera <bnocera@redhat.com> - 1.2.1-0.1
changelog:
  + libimobiledevice-1.2.1-0.1
  - Add support for newer devices
  - This is a snapshot of the in-development 1.2.1 version


author: Oden Eriksson <oe@nux.se> 3.10.0-3
changelog:
  - use the correct rpm macros for CFLAGS and LDFLAGS
  - P1: use correct version
  - P2-P6: add upstream fixes


author: David Cantrell <dcantrell@redhat.com> - 2.0.1-2
changelog:
  - Add a comment explaining Patch0 is for building and packaging on
    Fedora
  - Use %forgeautosetup macro in %prep
  - Do not package the static library
  - Move the header file to the devel subpackage
  - Do not use CFLAGS_EXTRA as that just duplicates the CFLAGS again


author: David Cantrell <dcantrell@redhat.com> - 3.1-1
changelog:
  - Upgrade to libjodycode-3.1
  - Drop the forge macros because the project moved to an unsupported site


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.0-4
changelog:
  - Subpackage python2-macaroons has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.3-16
changelog:
  - Switch to GitHub release archive; as a result, we must now run autoreconf
  - Patch additional allocation-related issues
  - Switch BR’s to pkgconfig(…)
  - Drop obsolete macros and workarounds
  - General tidying
  - Don’t glob over the .so version


author: Peter Fordham <peter.fordham@gmail.com> - 3.3.11.1-14
changelog:
  - Fix autoconf check for C99 and update build to run autoreconf.
    https://sourceforge.net/p/mikmod/bugs/29/


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-22
changelog:
  - adopt for Fedora
  - hard-code ABI SONAME to avoid inadvertent breaks
  - use SPDX identifier
  - fix spurious executable permission
  - drop redundant configure flag


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-24
changelog:
  - add explicit build dependencies
  - use a modern pkgconf runtime dependency
  - annotate upstream patch origin


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.5-46
changelog:
  - Build against the 'mariadb-connector-c-devel' package (PR#1)
  - Replace setup and patchN with autosetup macro
  - Use make macros


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.12-1
changelog:
  - New version
    Resolves: rhbz#2316447
  - Dropped privileges when operating on user files
    Resolves: CVE-2024-47191


author: Matt Domsch <mdomsch@fedoraproject.org> 2.11.0-0.32
changelog:
  - fix systemd service type=simple patch to apply cleanly
  - Use systemd RuntimeDirectory for socket file


author: Simone Caronni <negativo17@gmail.com> - 0.15.0-6
changelog:
  - Leave autodetection of hardware extensions as per developer's comment at
    https://bugzilla.redhat.com/show_bug.cgi?id=2307795#c16


author: Bastien Nocera <bnocera@redhat.com> - 2.2.0-1
changelog:
  + libplist-2.2.0-1
  - Update to 2.2.0, breaking the ABI
  - Stop linking python module against libpython


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.6.0-28
changelog:
  - Correction: .so version is “1.4”, not “1”
  - This is a spec file fix, and does not change the installed library


author: Vitaly Zaitsev <vitaly@easycoding.org> - 1.7.0-2
changelog:
  - Enabled pkgconfig and CMake configs support.
  - Enabled unit tests.
  - Added a legacy symlink for compatibility.


author: Dominik Mierzejewski <dominik@greysector.net> - 1.2.4-59.20240202git2213b76
changelog:
  - update to 1.2.4 from branch master
  - build without faad, ffmpeg4 and x264
  - drop RHEL4-era versions in BRs
  - sort BRs alphabetically and de-duplicate
  - SPDX license identifier
  - use Fedora versioning guidelines and macro names
  - use more explicit file list


author: Dominik Mierzejewski <dominik@greysector.net> - 1.2.4-61.20240202git2213b76
changelog:
  - drop missing lib{avc,raw}1394 build dependencies on s390x
  - add LGPLv2.1 to License field
  - own _libdir/libquicktime
  - use global instead of define


author: Remi Collet <remi@remirepo.net> - 0.18.1-1
changelog:
  - update to 0.18.1 for CVE-2025-13402
  - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 4.1-0.14.20190408git287e4be
changelog:
  - Move makefile modification from prep to build section
    Workaround for breakage caused by broken redhat-rpm-config update


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Karel Volný <kvolny@redhat.com> - 2.8.0-1
changelog:
  - Update to 2.8.0 (rhbz#2291131)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304188)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.1-1
changelog:
  - Update to 2.10.1 (rhbz#2316762)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323581)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329741)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 (rhbz#2359289)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Remi Collet <remi@remirepo.net> - 1.0.18-9
changelog:
  - Security: `crypto_core_ed25519_is_valid_point()` now properly
    rejects small-order points that are not in the main subgroup
    CVE-2025-69277


author: Peter Fordham <peter.fordham@gmail.com> - 1.2.11-5.20210922git4915c308
changelog:
  - Add missing include of string.h for memset in spf_utils.c
    https://github.com/shevek/libspf2/issues/41


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.1-3
changelog:
  - Correction: .so version is “2.0”, not “2”
  - This is a spec file fix, and does not change the installed library


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Paul Howarth <paul@city-fan.org> - 1.11.1-6
changelog:
  - Fix CVE-2026-7598: integer overflow via large username or password arguments
    (https://github.com/libssh2/libssh2/pull/1858)


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.13.0-1
changelog:
  - Update to 0.13.0
  - Remove tests suite from devel subpackage
  - Enable code coverage report
  - Cleanup %check section


author: Frantisek Sumsal <frantisek@sumsal.cz> - 1.2.0-7
changelog:
  - Initial EPEL 9 build for BZ#2029481
  - Temporarily skip building docs due to work around BZ#2031879


author: Packit <hello@packit.dev> - 1.1.1-1
changelog:
  - [packit] 1.1.1 upstream release
  - Resolves rhbz#2245431 Upstream tag: v1.1.1 Upstream commit: b211040d


author: Tom Callaway <spot@fedoraproject.org> - 1.7.0-0.1.rc2
changelog:
  - update to 1.7.0-rc2
  - disable tests on s390x (reported upstream: https://github.com/libunwind/libunwind/issues/464)


author: Adam Williamson <awilliam@redhat.com> - 0.9.13-8
changelog:
  - Rebase all patches so Patch12 applies
  - Backport PR #444 to fix crash on all runs after the first (#1882718)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2023.06.20-1
changelog:
  - Update to 2023.06.20
  - Update license tag and convert it to SPDX
  - Tweak package summary and description
  - Rework specfile to follow the Fedora packaging guidelines


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-1
changelog:
  - Update to 9.2.1 (close RHBZ#2273352, fix CVE-2024-27982)
  - Switch from xz to zstd compression for the “dev” bundle archive


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-3
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: David Abdurachmanov <davidlt@rivosinc.com> - 16.0.6-9
changelog:
  - Add support for riscv64
  - Fix build error: '/usr/bin/ld: bad -plugin-opt option' on riscv64.
  - Lower memory consumption on riscv64
  - Disable LTO (ld.gold not supported on riscv64)


author: Richard Shaw <hobbes1069@gmail.com> - 0.2-2
changelog:
  - Update per reviewer comments.
  - Renamed package to lpcnetfreedv (same as library), repo will be renamed in
    the near future.
  - Made library private as it is essentially a plugin for freedv.


author: Charles R. Anderson <cra@alum.wpi.edu> - 2.2.3-1
changelog:
  - Update to 2.2.3
  - Add patches to fix build with lua-5.4
  - Add Restart=on-failure to service file
  - Add sysctl.d file to increase inotify watches


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
  - Simplify spec to use new Lua macros (thanks robert@fp.o)
  - Use standard make macros (thanks tbaeder@fp.o)


author: Robert Scheck <robert@fedoraproject.org> - 1.8.0-3
changelog:
  - Use Fedora-specific linker flags
  - Remove unused PREFIX argument at %make_build and %make_install
  - compat: Extend %check and rename package to match guidelines


author: Christian Krause <chkr@fedoraproject.org> - 1.3.1-1
changelog:
  - Unretire lua-ldap (#2217273)
  - Cleanup spec file
  - Update to latest upstream
  - Remove obsolete patches


author: Jakub Ružička <jakub.ruzicka@nic.cz> - 20200709-1
changelog:
  - Update to latest version 20200709
  - Include upstream patch for OpenSSL 3.0.0
  - Drop lua 5.4 compat patch included upstream
  - Drop HAVE_EVP_KDF_CTX patch which is no longer needed
  - Remove redundant doc files entry


author: Andreas Schneider <asn@redhat.com> - 1.41.0.0-1
changelog:
  - Update to version 1.41.0
    * https://github.com/luvit/luv/releases/tag/1.41.0-0
    * https://github.com/luvit/luv/releases/tag/1.40.0-0


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.41.0.0-3
changelog:
  - use macros from lua-{s,}rpm-macros; spec now portable across Lua versions
  - reenable s390x build on epel8 (#1829151)


author: Andreas Schneider <asn@redhat.com> - 1.42.0.0-1
changelog:
  - Update to version 1.42.0.1
    * https://github.com/luvit/luv/releases/tag/1.42.0-1
    * https://github.com/luvit/luv/releases/tag/1.42.0-0
  - Do not build luajit on s390x and ppc64


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.42.0.1-3
changelog:
  - Adjust for cmake 3.23.0, where -S (passed by %cmake) overrides the positional argument
  - Disable UDP multicast tests unconditionally, seems flaky
  - Disable luajit threadpool tests on EPEL 8 aarch64


author: Robert Scheck <robert@fedoraproject.org> 3.0-0.27.rc1
changelog:
  - Spec file modernization with basic %check for Lua module
  - Renamed subpackage lua-socket-compat to lua5.1-socket (for Fedora)


author: TI_Eugene <ti.eugene@gmail.com) - 1.6.1-1
changelog:
  - Version Bump
  - Sources URL changed
  - new binaries: lumina-checkpass, lumina-pingcursor
  - Required pam-devel added
  - Suggested la-capitaine-icon-theme added
  - lumina-icons package added


author: Simone Caronni <negativo17@gmail.com> - 1.18.8-1
changelog:
  - Update to 1.18.8, switch to Meson.
  - Update docs installation.
  - Drop gcc/python-devel build requirements.
  - Avoid exclude directives in the files section so build ids are not duplicated.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.18.8-3
changelog:
  - Remove all symlinks in previous -devel subpackage in %pre_trans
    to ensure update transaction (#2123422)


author: Thomas Moschny <thomas.moschny@gmx.de> - 4.0.5-1
changelog:
  - Update to 4.0.5.
  - Enable LXC bridge per default.
  - Add wget dependency for the templates subpackage.


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.0-3
changelog:
  - fix %files ownership
  - drop explicit BR: make (already pulled in by cmake)
  - drop needless ldconfig scriptlet


author: Björn Esser <besser82@fedoraproject.org> - 1.14.5-10
changelog:
  - libmandoc.so must be linked with COMPAT_OBJS
  - Add patch to fix configure script
  - Replace plain make with %make_build


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.2-1
changelog:
  - update to 1.26.2
  - Add setting to raise windows on alt+tab popup
  - add https://github.com/mate-desktop/marco/commit/d83cb24


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-4
changelog:
  - add dummy subpackage mate-desktop-systemd
  - use earlyoom instead of systemd-oomd-defaults
  - fixes rhbz (#2068699)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-5
changelog:
  - obsolete mate-desktop-systemd
  - use earlyoom instead of systemd-oomd-defaults
  - make earlyoom uninstallable
  - fixes rhbz (#2068699)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.1-3
changelog:
  - use https://github.com/mate-desktop/mate-panel/commit/0be9b20
  - use https://github.com/mate-desktop/mate-panel/commit/82cb82b
  - use https://github.com/mate-desktop/mate-panel/commit/82cb82b
  - use https://github.com/mate-desktop/mate-panel/commit/0be9b20


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - use https://github.com/mate-desktop/mate-screensaver/commit/ec813df
  - use https://github.com/mate-desktop/mate-screensaver/pull/262
  - fix rhbz (#1997852)


author: Tim Semeijn <tim@semeijn.net> - 4.7.0-1
changelog:
  - Update to 4.7.0 (fixes rhbz#1878554)
  - Use autorelease and autochangelog
  - Remove redundant white lines and fix indentation
  - Mark COPYING file as license


author: Paul Howarth <paul@city-fan.org> - 4.6.2-9
changelog:
  - Make run/milter-greylist directory owned by root to avoid need for
    dac_override (#1678038)
  - BR: systemd rather than systemd-units for %{_unitdir} macro
  - Use %{_initddir} rather than the deprecated %{_initrddir}
  - Improve readability by not using full paths for scriptlet commands
  - Drop EL-5 support
    - Nothing needs libbind now
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 4.6.3-1
changelog:
  - Update to 4.6.3
    - Add support for GeoIP2
    - Build fixes for conflicting ns_type in SPF and NSupdate code
    - Quiet build warnings
    - Missing bits to make rawfrom usable
    - Fix crash when GeoIP for IPv6 is not configured
    - Report queueId for maxpeek overflow warnings
    - Sendmail access.db usage documentation
  - Add libmaxminddb support for builds on F-32/EL-8 onwards
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.6.4-1
changelog:
  - Update to 4.6.4
    - Fix crash when GeoIP2 is not configured
    - MacOSX build fix for --enable-dnsrbl


author: Paul Howarth <paul@city-fan.org> - 2.1-1
changelog:
  - Update to 2.1
    - Default maximum log level to 6 (LOG_INFO), i.e. exclude LOG_DEBUG
  - Upstream switched from benezedrine.cx to bezendrine.ch


author: Paul Howarth <paul@city-fan.org> - 2.4-1
changelog:
  - Update to 2.4
    - Bug fix: for actions followed by multiple expressions (not just one
      arbitrarily complex expression), when multiple expressions become defined
      during the same sequence point, but with different values (e.g. one true,
      another false), depending on the expression order, the action might not be
      taken, when it should be
    - Add -f option to set syslog facility


author: Paul Howarth <paul@city-fan.org> - 2.6-1
changelog:
  - Update to 2.6
    - Treat socket file name without prefix like local file
    - Make pid file writeable only by root


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.2-2
changelog:
  - sort BRs alphabetically
  - limit build dependencies to only those strictly required
  - update license field with SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.2-4
changelog:
  - call tmpfiles_create macro to create /run/minidlna after installation
  - add logrotate config drop-in based on Debian


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.2-5
changelog:
  - use sysusers.d to pre-create system user account
  - make the sed expression easier to read
  - adjust description


author: François Kooman <fkooman@tuxed.net> - 0.11-1
changelog:
  - update to 0.11
  - update source URLs to point to release tarballs
  - re-enable minisign signature check


author: Simone Caronni <negativo17@gmail.com> - 2.2.3-1
changelog:
  - Update to 2.2.3.
  - Update SPEC file (license, tabs/spaces, trim changelog, etc.)
  - Switch to CMake build.
  - Drop static libraries.
  - Drop test client and obsolete documentation.
  - Do not use static library when building Python module.


author: Petr Pisar <ppisar@redhat.com> - 2.2.0-2
changelog:
  - Fix an unitialized memory in tinfl_decompress_mem_to_callback() (GH#197)
  - Fix an unaligned memory access
  - Fix setting MZ_ZIP_GENERAL_PURPOSE_BIT_FLAG_UTF8
  - Fix an undefined behaviour in tinfl_decompress() (GH#216)
  - Fix mz_zip_reader_extract_to_heap() to read correct sizes (GH#220)


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.2-2
changelog:
  - drop ldconfig scriptlets (https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets)
  - drop explicit BR: make (already pulled in via cmake)
  - %build: one cmake option per line
  - %check: drop 'make test', does nothing
  - -devel: drop explicit cmake dep (autodeps should add cmake-filesystem already)


author: Ryan Curtin <ryan@ratml.org> - 4.7.0-1
changelog:
  - Update to latest stable version.
  - No longer exclude s390x
  - Rebuilt with latest patched stb_image: memory-safety fixes


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.22.0-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Workaround https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113205
  - Rebuild for opencv 4.9.0


author: Jens Kuehnel <bugzilla-redhat@jens.kuehnel.org> - 2.5.1-1
changelog:
  - upgrade to release 2.5.1 based on fork from Reuben Thomas
  - Debian has moved as well and was used a upstream by the previous version of this package
  - upstream removed multi append (mad) from project


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-4
changelog:
  - Patch whitespace in spec file
  - Fix syntax for applying patches during rpm build
  - Bump BuildRequires to use pcre2-devel


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-8
changelog:
  - Rebase to upstream be1e01ea173defc9837bd1b90dc72ed63c8131e7
  - Remove patches that were merged upstream
  - BZ2249532 - Fix tilde operator


author: Björn Esser <besser82@fedoraproject.org> - 1.0.5-25
changelog:
  - Add a patch for improvements with Apache httpd >= 2.4
  - Update Patch1 to also apply CFLAGS properly


author: Björn Esser <besser82@fedoraproject.org> - 1.0.5-26
changelog:
  - Consolidate the patches for Autotools with more fixes
  - Add a patch to add the AuthTokenLimitByIp configuration option
  - Modernize spec file


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.67-1
changelog:
  - Update to 0.67
  - Convert to rpmautospec
  - Update home and source URLs
  - Update perl's requires to use virtual naming
  - Use make_build and make_install macros
  - Add check section
  - Fix rpmlint error on description
  - Add conflict to moreutils-parallel against parallel package


author: Alain Vigne <avigne@fedoraproject.org> 1.3.2-1
changelog:
  - upstream release 1.3.2
  - Fix CVE-2022-44789 (rhbz#2148261)
  - Fix CVE-2022-30975 (rhbz#2088596)
  - Fix CVE-2022-30974 (rhbz#2088591)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 7.0.0-1
changelog:
  - Update to 7.0.0 - Closes rhbz#2123699 rhbz#2113532
  - Change license from GPL2 to Apache2
  - Adapt Source for GitHub releases
  - Switch to cmake version
  - Move conversion scripts to doc


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.16-4
changelog:
  - Change private key cipher to aes-256-cbc
  - Remove obsolete system V conditionals in the specfile
  - Move user/group creation logic to sysusers.d fragments


author: Scott K Logan <logans@cottsay.net> - 1.1.5-6
changelog:
  - Fix FTBFS (rhbz#1864185)
  - Use EPEL 7 compatible CMake macros
  - Add an rpmlintrc to suppress spelling suggestions


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Ondrej Sloup <osloup@redhat.com> - 5.0-1
changelog:
  - Use autosetup
  - Change source links
  - Redo patch files and remove obsolete ones
  - Add runtests.sh
  - Rebase to the latest upstream version (rhbz#1924029)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.7-3
changelog:
  - Switch to HTTPS URLs
  - Enable tarball signature verification
  - Drop unused patch
  - Sort file list alphabetically
  - Use SPDX identifiers in License: field


author: Robert Scheck <robert@fedoraproject.org> 0.2.5-6
changelog:
  - Update license identifier to SPDX expression - Minor spec file
    modernisation regarding macros - Removed group tag and extended
    %description


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:3.1.16-1
changelog:
  - autoconf, automake, and libtool are no longer required
  - force gnu99 cflag on el7 builds
  - 3.1.16 release


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:3.1.17-2
changelog:
  - buildrequire mariadb-connector-c-devel for all but el7
  - minor changes to other specfile conditionals


author: Michel Lind <salimma@fedoraproject.org> - 0.3-1
changelog:
  - Update to 0.3
  - Prevent invalid fragment values from leading to a buffer overrun
  - Use SPDX license identifier


author: Ron Olson <tachoknight@gmail.com> 3.6.6-5
changelog:
  - Fixed some issues under Fedora 35 not building properly and
    not being able to run correctly when installed


author: Radu Rendec <radu@rendec.net> - 0.1-4
changelog:
  - Update license tag to use SPDX identifiers
  - Use the newer autosetup macro
  - Do not call the 
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mcpu=power9 -mtune=power9 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mcpu=power9 -mtune=power9 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mcpu=power9 -mtune=power9 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mcpu=power9 -mtune=power9 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX macro explicitly


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Kalev Lember <klember@redhat.com> - 0.1.0~openh264_2.3.1-1
changelog:
  - Switch to using upstream openh264-2.3.1 tag
  - Make sure the matching openh264 version is listed as part of the rpm
    version tag
  - Stop using forge macros to get better control over the version and
    release tags


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-1
changelog:
  - ARC version 7 packaged for EPEL with a different package name
  - Based on the Fedora rawhide package
  - These packages declare conflicts with the ARC version 6 packages


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Xavier Bachelot <xavier@bachelot.org> - 2.10.0-4
changelog:
  - Add upstream fixes for hex delimiters instead of downstream patch to drop the feature
  - Drop EL6/sysVinit support
  - Fix unitfile deps
  - Use %make_build macro
  - Add patch to fix a build warning


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.14.1-9
changelog:
  - Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf,
    so that it ends up before 'resolve' (#1867830)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.9.10-13
changelog:
  - Add missing Requires on shadow-utils for user creation in pre
    Fixes: RHBZ#2208017
  - Convert license tag to SPDX


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.0-11
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.2-1
changelog:
  - New upstream release
  - Print outputs of failed tests https://github.com/nwchemgit/nwchem/issues/895


author: Marcin Dulak <marcindulak@fedoraproject.org> - 7.2.2-5
changelog:
  - Patch for implicit declaration of function ‘Py_SetProgramName' https://github.com/nwchemgit/nwchem/issues/950


author: Neal Gompa <ngompa@fedoraproject.org> - 30.0.0~beta3-2
changelog:
  - Add patch to downgrade CMake dependency to >= 3.20
  - Rebuild against libdatachannel for fixed soname dependency


author: David Woodhouse <dwmw2@infradead.org> - 8.10-6
changelog:
  - Explicitly disable too-brittle system crypto policies (#1960763)
  - Ignore with errors fetching Juniper landing page when login was successful anyway.


author: Adrien Vergé <adrienverge@gmail.com> - 1.21.0-1
changelog:
  - Update to latest upstream version
  - Add configure option --enable-legacy-pppd for EPEL 9 and pppd < 2.5


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.9.1-1
changelog:
  - Update to 1.9.1 - Closes rhbz#2362077 rhbz#2354430 rhbz#2352319
    rhbz#2350839 rhbz#2348836 rhbz#2339349


author: Frank Lichtenheld <frank@lichtenheld.com> - 2.5.11-2
changelog:
  - Import collected upstream changes from git into a patch.
    This fixes several security issues and other bugs.
  - Includes patches up to commit 37160ee8408150990787eef4a76e0299230ed8d8


author: Phil Wyett <philip.wyett@kathenas.org> - 3:5.2.45-1
changelog:
  - New upstream version 5.2.45.
  - Increment EPOCH to 3.
  - soname bump to 15.
  - Change to cmake build system.
  - Modernize, rework and reformat the spec file.


author: Dave Love <loveshack@fedoraproject.org> - 2.3-1
changelog:
  - New version
  - Update source URL
  - Remove jinja patch
  - Drop broken python2 package (not supported recently for want of builtins
    module)
  - Install python in sitearch directory, not sitelib


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-28
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix the build by moving desktop files from kde4/services/ServiceMenus/ to kservices5


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.3.2-1
changelog:
  - Update to 1.3.2 - resolves rhbz#2338418
    1.3.2 fixes a potentially breaking issue with tightened authfile checking with 1.3.1


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 2.3-2
changelog:
  - fix inexistent .ssh subdir checking (Alexi Dimitriadis <adimitriadis@noggin.com.au>, #1707257)
  - no more need to build with compat-openssl-1.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.3-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Use gcc -fcommon flag to build


author: Mattia Verga <mattia.verga@protonmail.com> - 1:0.3.3-14
changelog:
  - Update to latest available snapshot
  - Fix libcurl headers detection
  - Enable _legacy_common_support to try to fix build failure


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Tom Stellard <tstellar@redhat.com> - 0.22-10
changelog:
  - Spec file cleanups: Use_make_build and make_install macros, use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 0.27-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 3.8-14
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop comments referring to older versions of the package
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 2.14-16
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.7-24
changelog:
  - Spec clean-up
    - Specify all dependencies
    - Drop support for legacy distributions prior to Fedora 14
    - Drop legacy Group: tag
    - Drop %defattr, redundant since rpm 4.4
    - Drop buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find commands using -delete
    - Simplify %files list
  - Drop redundant "automake" patch
  - Fix building on Perls without "." in @INC


author: Paul Howarth <paul@city-fan.org> - 1.10-11
changelog:
  - BR: gcc
  - Remove some legacy cruft
    - Drop BuildRoot: and Group: tags
    - Drop explicit %clean section
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 3.03-22
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, %clean and buildroot cleaning
  - Drop Group: and BuildRoot: tags
  - Use %license
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.10-27
changelog:
  - Spec tidy-up
    - Specify all dependencies
    - Use author-independent source URL
    - Fix permissions verbosely
    - Make %files list more explicit
    - Use %license
    - Simplify find command using -empty and -delete
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant removal of empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 1.9-17
changelog:
  - Specify all explicitly-used build requirements
  - Remove some legacy cruft
    - Drop BuildRoot: and Group: tags
    - Drop explicit %clean section
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.28-1
changelog:
  - Update to 1.28
    - Remove C-only restriction on ->Inline method (GH#5)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.16-7
changelog:
  - Modernize spec
    - BR: file-devel rather than %{_includedir}/magic.h (#1731720)
    - Use %{make_build} and %{make_install}
    - Drop now-redundant workaround for CPAN RT#107081


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Paul Howarth <paul@city-fan.org> - 2.83-1
changelog:
  - Update to 2.83
    - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
      but gdlib-config (the check was too strict)


author: Paul Howarth <paul@city-fan.org> - 2.84-1
changelog:
  - Update to 2.84
    - Added Makefile.PL --with and --without options to bypass autodetection
      errors or upstream libgd or subsequent library errors (GH#55)
    - Better support MSWin32 without gdlib.pc (requires manual --options and
      --lib_gd_path)
    - Work around broken ExtUtils::PkgConfig->find (GH#61)
    - Fixed snprintf for newer MSVC (>= VS 2015)
    - Added GD::Image::supported() image types method
    - Added newFromTiffData() method
    - Fixed t/GD.t for unsupported image types
    - Add GIFANIM to the default since 2.0.33 (GH#56)
    - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
    - Add demos/png2jpeg.pl
  - Don't disable XPM support if GD config doesn't explicitly require -lX11
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.85-1
changelog:
  - Update to 2.85
    - Tolerate runtime TIFF decode failures in autodetect (GH#62)
    - Replace cpm with cpanm in github actions
    - Fixed a minor precedence bug in t/z_manifest.t


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.17-22
changelog:
  - Replace %{__perl} with /usr/bin/perl everywhere
  - Use %{make_build} and %{make_install} where appropriate


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - t/orig/03_class.t failed if FamilyTreeInfo-2.3.24 was installed (GH#1)
  - Classify buildreqs by usage
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.15-7
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)


author: Petr Pisar <ppisar@redhat.com> - 0.58-2
changelog:
  - Correct a perl-Image-PNG-Libpng-tests license to
    (GPL-1.0-or-later OR Artistic-1.0-Perl) AND LicenseRef-Fedora-UltraPermissive


author: Paul Howarth <paul@city-fan.org> - 0.011-6
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)
  - Drop explicit gcc build-require as EU::CB is effectively our compiler here
  - Add build-require coreutils for %{_fixperms}
  - Simplify find command using -empty


author: Paul Howarth <paul@city-fan.org> - 2.21-1
changelog:
  - Update to 2.21
    - Additional documentation on the pitfalls of division by zero (GH#5)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 2.22-1
changelog:
  - Update to 2.22
    - Signature files are generated unreliably and are an ongoing source of bug
      reports; as a result, we decided to axe them altogether


author: Paul Howarth <paul@city-fan.org> - 2.23-1
changelog:
  - Update to 2.23
    - Add support for bmulf() to multiply by a floating point number
    - Add support for bnok() (Binomial)


author: Paul Howarth <paul@city-fan.org> - 2.24-1
changelog:
  - Update to 2.24
    - Tests and better documentation for bnok() (Binomial)
    - Eliminate warning about not_here() in GMP.xs


author: Paul Howarth <paul@city-fan.org> - 0.17-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Simplify find command using -empty and -delete
    - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1.72-2
changelog:
  - Fix a coredump when enumerating font-config fonts (CPAN RT#151594)
  - Use an upstream fix for a Bool type (bug #2261449)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.2.25.4-1
changelog:
  - Update to 1.2.25.4
  - Replace %{__perl} with /usr/bin/perl
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Pass NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 4.018-2
changelog:
  - Make sure that COPY tags cannot be used to read past end of buffer
    (ported from upstream commit 303a2c69)


author: Petr Pisar <ppisar@redhat.com> - 3.28-21
changelog:
  - Correct a license to ((LGPL-2.0-or-later OR Artistic-1.0-Perl) AND
    (Artistic-2.0 OR LGPL-2.0-only))


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.08-22
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Point issue tracker at GitHub
  - Upstream no longer uses Module::Install
  - Unconditionally include tests as documentation


author: Paul Howarth <paul@city-fan.org> - 1.57-1
changelog:
  - Update to 1.57 (rhbz#2325504)
    - Add on_error callback to csv()
    - Retain runtime error from csv()


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58 (rhbz#2334923)
    - Add strict_eol (warnings default in csv())
    - Add XS line number in errors
    - Add streaming support (not set in stone)


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.26-1
changelog:
  - Update to 1.26
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 1.03-27
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant "-a" operator in find command
    - Fix permissions verbosely


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.53-39
changelog:
  - Migrate to SPDX license
  - Use %{make_build} and %{make_install} where appropriate
  - Replace %{__perl} with /usr/bin/perl
  - Pass NO_PERLLOCAL=1 to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Paul Howarth <paul@city-fan.org> - 1.46-1
changelog:
  - Update to 1.46
    Bug Fixes:
    - Preserve string nature of numeric-looking values in Dump; pure strings (POK
      only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
      (GH#199, GH#200)
    - Accept trailing commas in flow sequences and mappings ([a, b,] and
      {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
    Maintenance:
    - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
      prior to 5.24 in perldocker containers (GH#197, GH#198)
    - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
      exclude .claude/ from distribution


author: Paul Howarth <paul@city-fan.org> - 1.47-1
changelog:
  - Update to 1.47
    Security:
    - Fix four libsyck memory-safety CVEs reachable from the default
      YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
      - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
        caused by signed-char indexing of the decode table on !!binary input
      - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
        between the node and the anchors table
      - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
        newline scan during block-scalar parsing (incomplete-fix follow-on
        to CVE-2025-11683)
      - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
        anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
    - Harden syck_base64dec() to bounds-check each read so it cannot run past a
      non-NUL-terminated input buffer (defense-in-depth for callers passing raw
      buffers; GH#213)
    Bug Fixes:
    - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
      nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
      matching Dump (GH#204)
    - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
      Dump so they roundtrip with ImplicitTyping instead of reloading as plain
      strings (GH#201)
    Maintenance:
    - CI: add an AddressSanitizer job that builds the XS with
      -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
      libsyck memory-safety defects; de-pin the libasan version so it tracks the
      runner's GCC (GH#213)


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Fix failures on perl ≥ 5.28.0 with -DDEBUGGING (CPAN RT#127118); the
      module has been amended to accommodate with a change of behaviour of a core
      macro
    - Updated contact information


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.0-41
changelog:
  - Minor style changes
  - Mostly imitate
    https://fedoraproject.org/wiki/Perl/Tips#Best_practices_for_the_latest_Fedora
  - Modernize rpm macros
  - Do not rm -rf the buildroot
  - Preserve timestamps when installing files
  - Install examples (eg/) and test.pl as documentation


author: Ondřej Sloup <osloup@redhat.com> - 2.0-0-1
changelog:
  - Rebase to the newest version
  - Fix compatibility with PostgreSQL 15
  - Remove patches as they are merged in upstream
  - Use autosetup
  - Manually build the package for documentation


author: Ondrej Sloup <osloup@redhat.com> - 2.0-3
changelog:
  - Make man docs only without subpackage as intended
  - Update upstream URL
  - Stop building llvmjit (rhbz#2214559, rhbz#2237282)
  - Prepare the package for EPEL9 (rhbz#2189271)


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-5
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 1.10.2-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php80
  - add patches for PHP 8 from upstream and
    https://github.com/php-amqp/php-amqp/pull/383


author: Remi Collet <remi@remirepo.net> - 1.4.0-1
changelog:
  - update to 1.4.0
  - raise dependency on PHP 7.3
  - drop all patches merged upstream
  - switch to phpunit8, disable tests on EL


author: Remi Collet <remi@remirepo.net> - 3.5.0-1
changelog:
  - update to 3.5.0
  - drop all patches merged upstream
  - run test suite in parallel
  - add new options in configuration file


author: Remi Collet <remi@remirepo.net> - 3.5.1-2
changelog:
  - fix #457 failed test with ImageMagick 6.9.12-23
    using patch from https://github.com/Imagick/imagick/pull/458


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - raise dependency on libbson and libmongc 1.28.0
  - raise dependency on libmongocrypt 1.11.0


author: Remi Collet <remi@remirepo.net> - 1.0.6-5
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php80
  - add upstream patch for test suite with PHP 8


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 5.3.4-1
changelog:
  - update to 5.3.4
  - add patch for 32-bit build from
    https://github.com/phpredis/phpredis/pull/1957


author: Remi Collet <remi@remirepo.net> - 6.0.0~RC1-1
changelog:
  - update to 6.0.0RC1
  - rename to php-pecl-redis6 for new API
  - disable test suite for SCL
  - open https://github.com/phpredis/phpredis/pull/2367 PHP 7.2 required


author: Remi Collet <remi@remirepo.net> - 1.1.0-10
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php80
  - add patch for PHP 8 from
    https://github.com/php/pecl-text-ssdeep/pull/2


author: Remi Collet <remi@remirepo.net> - 0.1.0~RC1-1
changelog:
  - initial package
  - open https://github.com/TysonAndre/var_representation/pull/1
    missing file (stub.php)
  - open https://github.com/TysonAndre/var_representation/pull/3
    add version in phpinfo
  - open https://github.com/TysonAndre/var_representation/pull/4
    missing tests in pecl archive


author: Remi Collet <remi@remirepo.net> - 2.2.0-1
changelog:
  - update to 2.2.0
  - enable json, igbinary and msgpack serializers
  - rename configuration file to 50-yac.ini to ensure proper load order


author: Remi Collet <remi@remirepo.net> - 1.1.0-1
changelog:
  - update to 1.1.0
  - add workaround for regression in libsmbclient 4.16.9/4.17.5
    from https://github.com/eduardok/libsmbclient-php/pull/100
  - use SPDX license ID


author: Stephen Smoogen <smooge@fedoraproject.org> - 2-2
changelog:
  - Make changes to match spec review https://bugzilla.redhat.com/show_bug.cgi?id=2258110
  - Make debugsource not run on el9
  - Fix phytool code for asprintf warning
  - Fix makefile for missing bindir and md5sum


author: Stephen Smoogen <smooge@fedoraproject.org> - 2-3
changelog:
  - Update comments to point to upstream PR
  - Update man page.
  - Fixed man page entry to match spec review


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Kalev Lember <klember@redhat.com> - 1.27.0-1
changelog:
  - Update to 1.27.0
  - Use make_build and make_install macros
  - Tighten soname globs
  - Use license macro for COPYING*
  - Tighten requires with _isa macro


author: Kalev Lember <klember@redhat.com> - 1.27.0-2
changelog:
  - Update pkcs11-helper-rfc7512.patch from
    https://github.com/OpenSC/pkcs11-helper/pull/4 (#1849259)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0^20230418git2cbe462-1
changelog:
  - Update to git snapshot 2cbe462
  - Switch to C++14 as now required by the system gtest package
  - Run the tests (disabled by default due to requirements)


author: Jerry James <loganjerry@gmail.com> - 8.4.0-1
changelog:
  - Version 8.4.0
  - Drop upstreamed -qt-deprecated and -openssl3 patches
  - Add -pclose patch to avoid zombie processes


author: Onuralp SEZER <thunderbirdtr@fedoraproject.org> - 1.2.0-2
changelog:
  - check section added.
  - min kf5 ver changed to 5.82
  - cpp BRs added.
  - missing qt and kf5 BRs added.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 1:0.3.2-10
changelog:
  - Bump Epoch to work around invalid Obsoletes in plasma-discover-notifier
    (There is no version 0.5 planned any time soon, so < 0.5 doesn't make sense.)


author: Dridi Boukelmoune <dridi@fedoraproject.org> - 2.3.1-1
changelog:
  - Update to latest upstream release
  - Install zsh completions provided by upstream
  - Own the intermediate completions directories


author: Justin W. Flory <jflory7@fedoraproject.org> - 2.4.1-1
changelog:
  - Update to latest upstream release
  - Remove static package as static library is no longer compiled, see Pull Request
    https://github.com/altdesktop/playerctl/pull/228


author: Carl George <carl@george.computer> - 1.11.2-0.1.20220328git5a0b182
changelog:
  - Update to a snapshot of the upstream 1.11.2 branch for openssl 3 compatibility
  - Resolves: rhbz#2021939


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.13.1-8
changelog:
  - Add new %check section running tests suite with pytest
  - Add BuildRequires for tests suite
  - Fix pkgdocdir unowned directory


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.2-1
changelog:
  - Update to 1.2
  - Remove libtextstyle optional dep as it may go away https://src.fedoraproject.org/rpms/gettext/pull-request/9
  - Add emacs subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.4.2-13
changelog:
  - Remove comment with dead “API monitoring” link
  - Convert HTTP URLs to HTTPS
  - Remove workaround for in-source builds
  - Remove obsolete %ldconfig_scriptlets macro
  - Use the %license macro
  - Stop packaging the HTML documentation due to bundled/minified JS, etc.
  - Move the “Third Party” docs to -devel, and package all of them
  - Do not glob over the .so version in %files


author: Hans de Goede <hdegoede@redhat.com> - 19-34
changelog:
  - Deal with pipewire jack identifiers containing chars which have special meanings in regexes
    Resolves rhbz#1939749


author: Dave Love <loveshack@fedoraproject.org> - 2.4.4-1
changelog:
  - Update to 2.4.4
  - Remove el7 conditional
  - Exclude s390x
  - Run all the checks
  - Drop patch 0
  - Adjust dependencies and installed files


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Improve file ownership in doc subpackage
  - Minor fix in the doc subpackage (no need to remove rst files)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-2
changelog:
  - Fix potential SQL injection via mod_sql (CVE-2026-42167)
    - https://github.com/proftpd/proftpd/issues/2052


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-3
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-4
changelog:
  - Address another avenue for SQL injection, via custom SQLUserInfo queries
    (https://github.com/proftpd/proftpd/issues/2052#issuecomment-4489110598)
  - Fix SFTP request payload length underflow calculation in mod_sftp
    (CVE-2026-53994, https://github.com/proftpd/proftpd/issues/2115)
  - Exercise caution when reading the client-provided file size for SCP uploads,
    as it could possibly overflow our size type (CVE-2026-63091)
  - Authenticated SFTP sessions could overflow the SFTP packet buffer
    (CVE-2026-63090, https://github.com/proftpd/proftpd/issues/2190)
  - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
    /proc/self/root path prefix); this module disallows file accesses via procfs
    filesystems


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.4-1
changelog:
  - Update to 0.5.4
  - Add GPG signature verification
  - Drop Python 2 subpackage - https://fedoraproject.org/wiki/Changes/F31_Mass_Python_2_Package_Removal


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.4-4
changelog:
  - Add BuildRequire python3-setuptools in addition to python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Carl George <carl@george.computer> - 0.15-2
changelog:
  - Include missing upstream license
  - Disable package data in setup.py to avoid installing source files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.22.0-1
changelog:
  - Update to 0.22.0 (close RHBZ#1873395)
  - The “sassc” module is removed upstream; we already did not install
    /usr/bin/sassc due to conflicts with libsass.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.1-3
changelog:
  - Drop BR on virtual Provides for header-only pybind11
  - Fixes FTBFS due to a conflict between Python 3.9 and 3.11 pybind11
    packages in EL9; the Python 3.11 one now appears to provide
    pybind11-static.


author: David Shea <reallylongword@gmail.com> - 1.0.1^20210803hg9de14a6f77e2
changelog:
  - Restore the python-nss package
  - Start from the upstream hg tip
  - Modernize the build process to use a PEP517/518 style build
  - Modernize the spec file


author: David Shea <reallylongword@gmail.com> - 1.0.1^20210803hg9de14a6f77e2-3
changelog:
  - Fix the license to indicate the correct tri-license
  - Allow sphinx 5 for the docs
  - Use the deps from the docs extra for the sphinx requirement


author: David Shea <reallylongword@gmail.com> - 1.0.1^20210803hg9de14a6f77e2-5
changelog:
  - Fix ChangeLog in the MANIFEST file
  - Remove the .c and .h files from the python module
  - Remove the sphinx docs


author: Carl George <carl@george.computer> - 3.15.2-1
changelog:
  - Latest upstream, resolves rhbz#2121865
  - Convert to pyproject macros
  - Move docs to separate subpackage
  - Re-enable tests on ppc64le
  - Enable mysql tests
  - Enable postgresql tests
  - Enable sqlite extension tests


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.10.1-1
changelog:
  - Update to 3.10.1 (#1782385).
  - https://github.com/mongodb/mongo-python-driver/blob/3.10.1/doc/changelog.rst


author: Robert Scheck <robert@fedoraproject.org> - 1.2.3-1
changelog:
  - Upstream 1.2.3 (bugfixes, RHBZ#2088869)
  - Fix %check by using %pytest (and provide ps(1) to run tests)


author: Matthieu Saulnier <fantom@fedoraproject.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
  - Remove fix-deprecation-warning-8b76485.patch for rawhide and f36
  - Fix Requires tag of the doc subpackage
  - Add sed scriplet in %prep section to switch sphinx theme from "furo" to "sphinx_rtd_theme"


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.6.0~beta-2
changelog:
  - Package Review RHBZ#1906287:
    - Add more explicit description
    - Remove %{srcname} variable truely used once
    - Fix the Version tag to match upstream version
    - Use %{python3_version} in %files section


author: Martin Kutlak <mkfedora@outlook.com> - 1.3.12-1
changelog:
  - Add buildrequire for xmlsec1-openssl-devel
  - Update to upstream version 1.3.12
  - Fix build (#2039340)


author: Jerry James <loganjerry@gmail.com> - 5.4.0-4
changelog:
  - BR gcc to build the optimized interface
  - Add doc subpackage to hold Sphinx-built documentation
  - Modernize the spec file


author: Dominik Mierzejewski <dominik@greysector.net> 0.16.0-1
changelog:
  - update to 0.16.0 (#2014873)
  - drop obsolete patch
  - improve patch for inconsistent `closed` attribute issue


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-11
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main pyyhon package
  - New subpackages: root-package graf3d-glad, root-package net-curl,
    root-package tmva-sofie-parser-python, root-package tree-ml,
    root-package histv7util
  - Dropped patches: 2
  - New patches: 7


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.15.0-4
changelog:
  - respin to attempt to fix ceph in CentOS Storage SIG where a "rogue"
    thrift 0.15.0-3 seems to be breaking things


author: Orion Poplawski <orion@nwra.com> - 9.1.0-20
changelog:
  - Rebuild for gdal (rhbz#2416611)
  - Backport ppc64le inline patch
  - Use bundled eigen3 on ppc64le - https://issues.redhat.com/browse/RHEL-131497


author: Kalev Lember <klember@redhat.com> - 0.23.90-5
changelog:
  - Misc packaging cleanup
  - Sort BuildRequires and Requires and split them out one per line
  - Move GObject Introspection bindings to -gtk and -gtk-devel subpackages
  - Split libzbar out to zbar-libs subpackage
  - Tighten subpackage deps with %{_isa}
  - Drop manual requires on pkgconfig and rely on rpm dep extractor
  - Rename zbar-python3 to python3-zbar as per latest Python guidelines
  - Use make_build and make_install macros


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: TI_Eugene <ti.eugene@gmail.com> - 0.5.0-0.1.beta1
changelog:
  - Version bump
  - Enabled fitz plugin for Fedora (EPUB, FB2, CBR/CBZ etc support)
  - Enabled Djvu for EPEL
  - Removed Qt4 build (because of EL7 because of C11 requirement)
  - Qt5 build is mandatory
  - Added Qt6 build (Fedora)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.10.0-4
changelog:
  - Fix for CMake macro changes
  - Add ability to disable Qt4 build (makes it easier to maintain EPEL8 branch)


author: TI_Eugene <ti.eugene@gmail.com> - 0.6.2-4
changelog:
  - Added 'BR: make'
  - Added 'R: shared-mime-info'
  - 'make check' note
  - Licenses cleanups ('License:' tag, appdata.xml, files/license section)


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-7
changelog:
  - add patch to filter PSU output on Dell OS10 10.5.3.2
    https://shrubbery.net/pipermail/rancid-discuss/2022-April/011186.html


author: Paul Howarth <paul@city-fan.org> - 0.998b-11
changelog:
  - Avoid use of systemd ".include" directive (rhbz#2216790)
  - Avoid use of deprecated patch syntax
  - Fix version number reported by rbldnsd


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Alessio <alessio@fedoraproject.org> - 3.3-1
changelog:
  - Release 3.3 Redir was originally created by Sam Creasey and is now 
  developed and maintained at GitHub by Joachim Nilsson. Use GitHub to 
  file bug reports, clone, or send pull requests for bug fixes and 
  extensions.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.6-40
changelog:
  - Bump Release to 40 to ensure a working update path. rgb was a separate
    package in xorg-x11-server-utils (not just a Provides) and took the
    Release from that.


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Jonny Heggheim <hegjon@gmail.com> - 6.22.1-2
changelog:
  - Disabled armv7hl https://bugzilla.redhat.com/show_bug.cgi?id=1997416
  - Disabled s390x https://bugzilla.redhat.com/show_bug.cgi?id=1997426


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.13.1-2
changelog:
  - Set NOKOGIRI_TEST_GC_LEVEL to major on ppc64le as
    ruby31 does not seem to support GC.compat on the platform


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.10-3
changelog:
  - Update dialoguer to 0.12
  - No longer allow similar 2.6.0, since we have 2.7.0
  - Update `License` expression


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.6.0-2
changelog:
  - Convert operators to upper-case for SPDX license expressions ... - Fix
    cmake parameter `-WANT_NOHEADERINSTALL=1` to `-DWANT_NOHEADERINSTALL=1`


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.6.1-1
changelog:
  - Update to 1.6.1 ...(#2256351) - Use pkgconfig for podofo-0.9 build
    requirment - Drop unused noheadinstall cmake parameter


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Backport upstream PR for securemode and verifySIGPassword
  - Use standard macros for building and installing


author: Vit Mojzis <vmojzis@redhat.com> - 1.3.0-1
changelog:
  - v 1.3.0
  - Silence warning in bison generated code
  - Drop dead stores
  - Declare file local variable static
  - Drop duplicate semicolons
  - Add missing fall through comment
  - Drop duplicate include
  - Update URLs after repository move
  - Add check example for W-012
  - Add new check to warn about incorrect usage of audit_access permission
  - Warn on duplicate policy configuration files
  - Reduce recursion in free_policy_node
  - Support disable commands for tunable conditions
  - Support ifn?def in .if files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-9
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Karel Volný <kvolny@redhat.com> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Updated URLs to point to GitHub
  - See the upstream changes at https://github.com/libsidplayfp/sidplayfp/releases


author: Rex Dieter <rdieter@fedoraproject.org> - 0.22-14
changelog:
  - patch out -Werror move -no-rtti for tests/ only (#1891251)
  - use %autosetup, %make_build, %make_install
  - add %check


author: Dodji Seketeli <dodji@seketeli.net> - 40.7-1
changelog:
  - Update to the latest upstream version that builds in EPEL9
  - Add build requires for cmake and libhandy-devel


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2452368
  - Fix rhbz#2453084
  - Fix rhbz#2455643
  - Fix rhbz#2458928
  - Fix CVE-2026-47215


author: Stewart Smith <stewart@flamingspork.com> - 2.26-37
changelog:
  - Build with the right LDFLAGS (fixes rpmlint warning about PIE binaries, hardens build)
  - Remove executable bit on man page.


author: Philip Kovacs <pkfed@fedoraproject.org> - 22.05.3-2
changelog:
  - Add slurm to epel9 (#2072632); update spec for epel 7/8/9
  - Use * Fri May 12 2023 Fedora Project - 22.05.9-1.el9
  - local build macro; add changelog file


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Neal Gompa <ngompa13@gmail.com> - 1.54-1
changelog:
  - Update to 1.54
  - Add API to get snap website
  - Add purge option to remove
  - Switch build system to Meson
  - Fix Qt build with optimisation disabled
  - Fix tests breaking on json-glib < 1.2.4
  - Use C99 style variable definitions


author: Neal Gompa <ngompa13@gmail.com> - 1.55-1
changelog:
  - Update to 1.55
  - Add new APIs for download and logout actions
  - Add support for snap store logout
  - Fix QSnapdAuthData () constructor not copying discharge strings correctly
  - Remove obsolete screenshot parsing code
  - Make all snapd 404 errors return SNAPD_ERROR_NOT_FOUND


author: Neal Gompa <ngompa13@gmail.com> - 1.57-1
changelog:
  - Update to 1.57
  - Add snapd_interface_make_label
  - Add support for new snap types: "core", "base" and "snapd"
  - Change way GTK documentation is generated to avoid a Meson bug
  - Fix leak in markdown parser
  - Fix leak in logout code
  - Make build reproducible by fixing comment in generated file


author: Neal Gompa <ngompa13@gmail.com> - 1.58-1
changelog:
  - Update to 1.58
  - Fix GIR annotations on snapd_client_get_snap_conf
  - Put more information into error messages for unknown errors


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 2.5.1-1
changelog:
  - Update to 2.5.1
  - Convert to SPDX license identifier
  - Add compat subpackage for snoopy-disable and snoopy-enable


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Paul Howarth <paul@city-fan.org> - 0.4.0-11
changelog:
  - Replace /bin/* dependencies with coreutils etc. (#1512898)
  - Drop explicit paths for commands to aid spec readability
  - Drop EL-5 support
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Noarch sub-packages are always available now


author: Paul Howarth <paul@city-fan.org> - 0.4.0-12
changelog:
  - Account for systemd-units being merged into systemd at Fedora 17
  - Drop support for SysV-to-systemd migration from Fedora 18, RHEL 7
  - Use forward-looking conditionals
  - One build requirement per line


author: Volker Fröhlich <volker27@gmx.at> - 1.9.2-1
changelog:
  - New upstream release
  - Use github as source
  - Use license macro and remove the now-gone README
  - Remove merged patch


author: Emir Akdag <infraw.linux@proton.me> - 1.5.3-1
changelog:
  - Update spoofdpi to 1.5.3
  - Update to 1.5.3 to fix CVE-2026-27145
  - Add missing license for go-localereader
  - Fix build directory case sensitivity issue
  - Resolves: rhbz#2494220, rhbz#2494389


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.1-1
changelog:
  - rebuilt for version 2.3.1 fixes rhbz#1856025 rhbz#2454296 rhbz#2128374
  - modernized packaging, enabled generator, templates, and libev support


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.6-1
changelog:
  - Update to 6.0.6 to fix a bunch of security issues:
  - Resolves: rhbz#CVE-2026-25075
  - Resolves: rhbz#CVE-2026-35328
  - Resolves: rhbz#CVE-2026-35329
  - Resolves: rhbz#CVE-2026-35330
  - Resolves: rhbz#CVE-2026-35331
  - Resolves: rhbz#CVE-2026-35332
  - Resolves: rhbz#CVE-2026-35333
  - Resolves: rhbz#CVE-2026-35334
  - Resolves: rhbz#CVE-2026-25075
  - Resolves: rhbz#CVE-2025-9615
  - Resolves: rhbz#CVE-2025-62291


author: Petr Menšík <pemensik@redhat.com> - 0.4.2-2
changelog:
  - Private users do not work with dynamic users
  - Provide path to unbound-anchor key, but keep it commented out


author: Nils Philippsen <nils@tiptoe.de> - 0.10.18-1
changelog:
  - Update to 0.10.18
  - Fix license and URLs
  - Build with meson instead of waf
  - Fix typos and trailing white space
  - Use package name macro consistently


author: Antonio Trande <sagitter@fedoraproject.org> - 5.8.0-12
changelog:
  - Rebuild (rhbz#2171312)
  - Enable KLU-64 in EPEL9 (rhbz#20673760)
  - Disable PETSc support in 64-bit architectures


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Robert Scheck <robert@fedoraproject.org> - 1.7.21-6
changelog:
  - Disabled strip via objcopy to achieve proper -debuginfo package
  - Added patch to fix compiler warnings about implicit fall-through
  - Added patch to fix "ee key too small" error messages during tests
  - Added patch for OpenSSL 3.0 support (#2088363)


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Ding-Yi Chen <dchen@redhat.com> - 1.10.0-1
changelog:
  - Upstream update to 1.10.0
  - Fixes RHBZ #1917603 - terminology-1.10.0 is available
  - Remove BuildRequired elementary-devel because it is merged into efl-devel


author: Than Ngo <than@redhat.com> - 20200406-35
changelog:
  - fixed rhbz#2284575, add texlive-mdframed
  - fixed rhbz#2275109, add texlive-picinpar
  - add texlive-selinput, texlive-lipsum, texlive-picture, texlive-kantlipsum, texlive-ntheorem


author: Robert Scheck <robert@fedoraproject.org> - 3.8-1
changelog:
  - Upgrade to 3.8 (#1902857)
  - Spec file modernization including support for RHEL/CentOS 7
  - Remove perl(Socket6) dependency (thanks to Michal Josef Špaček)


author: Carl George <carl@george.computer> - 2.2.0-3.2020704git5a1c8d8
changelog:
  - Update to latest upstream commit
  - Add patch to use correct shell completion locations
  - Run test suite
  - Add provides for ag and bundled uthash


author: Carl George <carl@george.computer> - 2.2.0^2020704.5a1c8d8-1
changelog:
  - Switch to caret versioning
  - Build against system uthash
  - Add patch for zsh completion of new flags


author: Aurelien Bompard <abompard@fedoraproject.org> - 2.10.3-1
changelog:
  - Support in-place upgrades of PostgreSQL major versions
  - Revert to version 2.10.3 to support upgrades from PostgreSQL 12


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.2-28
changelog:
  - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718)
  - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462
    (rhbz#2254376, rhbz#2254381)
  - fix incorrect text element encoding (upstream isssue #51)
  - compile and run tests


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.11-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-9-11/21786 bz#2483769


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Jered Floyd <jered@redhat.com> 9.2.9-1
changelog:
  - Update to upstream 9.2.9
  - Resolves CVE-2024-38311, CVE-2024-56195, CVE-2024-56196, CVE-2024-56202


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.14-4
changelog:
  - Fix for CVE-2020-24330 (RHBZ#1874824)
  - Fix for CVE-2020-24331 (RHBZ#1870057)
  - Fix for CVE-2020-24332 (RHBZ#1870053)


author: Andreas Schneider <asn@redhat.com> - 2.1.1-1
changelog:
  - Update to version 2.1.1
    * https://github.com/neovim/unibilium/releases/tag/v2.1.1
    * https://github.com/neovim/unibilium/releases/tag/v2.1.0


author: Björn Esser <besser82@fedoraproject.org> - 2.3.0-5
changelog:
  - Add tools package
  - Add explicit perl BRs
  - Add example program to doc package
  - Drop google site-verification file from doc package
  - Require main package in doc package to avoid file conflicts


author: Filipe Rosset <rosset.filipe@gmail.com> - 4.226-1
changelog:
  - Update to 4.226, enabled tests, spec cleanup and modernization
  - Fixes rhbz#1933296 rhbz#2047099 and rhbz#2026957


author: Nolan Poe <npgo22@gmail.com> - 5.022-1
changelog:
  - Update to 5.022 - Fix SPDX License identifier - Add CMake for tests - Fix
    runtime dependency check - Fix runtime version checck - Fix
    multithreading bug that causes spurious failures - Default to using
    tcmalloc


author: Nolan Poe <npgo22@gmail.com> - 5.022-2
changelog:
  - Improve conformance to modern Fedora packaging guidelines - Break out
    packages - Remove CC0 content


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.4-12
changelog:
  - Explicitly set most Makefile variables
  - Moves the documentation into the standard location
  - Enables rebuilding localized man pages etc.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.5-2
changelog:
  - Remove explicit %set_build_flags, not needed since F36 > >
    https://www.fedoraproject.org/wiki/Changes/SetBuildFlagsBuildCheck


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-17
changelog:
  - Change URLs from HTTP to HTTPS
  - Add source file signature verification
  - Use %make_build and %make_install macros
  - Reformatting and minor changes for personal style preference
  - Fix man page glob
  - Use less broad globs
  - Add ABOUT-NLS, BACKLOG, and THANKS as %doc files
  - Rebuild configure script at build time
  - Add a %check section and run the tests
  - Add ncurses-devel BR for termcap/curses support
  - Add missing BR on gcc
  - Rebuild man pages in RPM build
  - Properly install license file (COPYING)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-18
changelog:
  - Improve summary and description text
  - Build HTML and PDF versions of the documentation
  - Add Latex2e to License field


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-4
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-40
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Sérgio Basto <sergio@serjux.com> - 0.9.16^20230801gita61f364-1
changelog:
  - Update to a61f364e385d98677c04070a994397b287385219 git snapshot from
    2023-08-01 (a support for acquiring a DRM framebuffer with a drm schema
    in -rawfb option)


author: Mattia Verga <mattia.verga@proton.me> - 4.1.0^320240205.gita2da14b-1
changelog:
  - Update to latest svn version
  - Fix icons and desktop file
  - Add appstream metainfo
  - Fix versioning


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


author: Xavier Bachelot <xavier@bachelot.org> - 1.2.13-3
changelog:
  - Enable external libdvdnav for EL9
  - Restore specfile compatibility with RPM Fusion for EL7/8
  - Restore building from snapshot


author: Xavier Bachelot <xavier@bachelot.org> - 0.99.14-2
changelog:
  - Use SPDX License: tag
  - Drop useless conditionals
  - Drop useless comments
  - Add EL7 cond for %post/%postun
  - Escape unescaped % in %changelog
  - Drop very old Obsoletes:/Provides: for xine/xine-skins


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:22.0.0-1
changelog:
  - Updated to v22.0.0, using the archive available on GitHub.
  - Changed the epoch to mark the new upstream version scheme.
  - Changed the epoch to 2 instead of 1 for consistency with the GNATcoll
    packages.
  - Updated the license, a runtime exception has now been added.
  - Added new build dependencies to build the documentation with Sphinx and LaTeX.
  - Examples are now located in _pkgdocdir/examples.
  - License field now contains an SPDX license expression.
  - Added the Unicode license to cover all code that has been generated using
    Unicode data.
  - Removed some post-install steps that are no longer required.
  - Static libraries are now build position independent (PIC).
  - Fix permission errors in the prep step; these are source packaging errors.
  - Updated some summaries and descriptions.
  - Improved spec file readability.
  - Marked the source package as architecture independent.
  - Removed empty directory '_libdir/static'; it seems to have no purpose.
  - Moved all libraries from '_libdir/xmlada' to '_libdir'.
  - Fix up the symbolic links for the shared libraries.
  - Moved documentation and examples into a separate package.
  - Made the generated project files architecture-independent.
  - Added a build dependency on sed, removed the explicit version dependency on
    GPRbuild.
  - Bootstrap mode can now be enabled via a configuration option.


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:23.0.0-1
changelog:
  - Updated to v23.0.0, using the archive available on GitHub.
  - Removed backport patch for improved Unicode support.
  - Removed fix for file permissions; has been fixed upstream (commit: 9e1bd23).
  - Removed patch gprbuild-gprinstall-relocate-artifacts.patch; move files after
    GPRinstall has run.
  - Moved the documentation back to where is was until version 2:22.0.0.


author: Tom Callaway <spot@fedoraproject.org> - 1:4.04-5
changelog:
  - pull in all the headers
  - apply null fix for default var in GlobalParams()
  - make a libxpdfcore for texlive-base to use


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.03-1
changelog:
  - Update to 6.03
  - All patches sent to the upstream was merged, yeah!
  - print_xinput_event: check if XIRawEvent.raw_values is available


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.03-3
changelog:
  - print_xinput_event: don't print raw_values (instead of
    checking if XIRawEvent.raw_values is available)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.05-3
changelog:
  - Kill no longer needed workaround stuff
  - hacks/fonts: fix installation on out-of-source build
  - driver/Makefile.in: fix GLIB_COMPILE_RESOURCES source
  - hacks/Makefile.in: fix driver/prefs.o output location


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.0.2-1
changelog:
  - Unretire package
  - Switch source to GitHub and update to 1.0.2
  - Use cmake instead of scons
  - Install systemd user service
  - Misc specfile updates


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Orion Poplawski <orion@nwra.com> - 1:6.0.36-1
changelog:
  - Update to 6.0.36 (CVE-2024-42330 rhbz#2329219, CVE-2024-42332 rhbz#2329222,
    CVE-2024-42333 rhbz#2329225)


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


author: Ben Woodard <woodard@redhat.com> - 4.3.4-2
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to v1.1.0
  - Upstream bug fixes: out-of-bounds array access, missing unistd.h header,
    localtime prototype, curses header preprocessor guard
  - Upstream build improvements: LDFLAGS support in Makefile
  - Migrate to %autorelease
  - Remove unnecessary %global _hardened_build 1 (default since F23)


