# changelog

author: Simone Caronni <negativo17@gmail.com> - 2.43-2
changelog:
  - Allow mirroring Debian repositories that do not follow the Debian/Ubuntu
    structure (JFrog, Hashicorp, NVIDIA, Spotify, etc.).


author: Dominik Mierzejewski <dominik@greysector.net> - 7.1.1-1
changelog:
  - Update to 7.1.1 (resolves rhbz#2349351)
  - Enable LC3 codec via liblc3
  - Backport fix for CVE-2025-22921 (resolves rhbz#2346558)


author: Simone Caronni <negativo17@gmail.com> - 7.1.2-1
changelog:
  - Update to 7.1.2.
  - Enable VANC processing for SDI.
  - Explicitly list all implicitly enabled/disabled options.


author: Sayan Paul <saypaul@redhat.com> - 1.9.2-15
changelog:
  - Add Python unit test suite to %check
  - Bring in pytest/numpy build dependencies for the tests
  - Patch: raise cmake_minimum_required to 3.5 for CMake 4+ compatibility
  - Patch UseLATEX.cmake: make html target depend on pdf target (CMake 4)


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Paul Howarth <paul@city-fan.org> - 1.11.1-6
changelog:
  - Fix CVE-2026-7598: integer overflow via large username or password arguments
    (https://github.com/libssh2/libssh2/pull/1858)


author: josef radinger <cheese@nosuchhost.net> - 2.6.0-1
changelog:
  - bump version
  - add basic_passwords.txt and vulnerabilities.csv
  - cleanup spec-file
  - remove patch1


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-1
changelog:
  - ARC version 7 packaged for EPEL with a different package name
  - Based on the Fedora rawhide package
  - These packages declare conflicts with the ARC version 6 packages


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.6.8-2
changelog:
  - Adapt package for EPEL 10
  - Add EPEL 10 packages for the slapi library that is no longer part of
    the openldap package in RHEL 10.


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 1.4.3-1
changelog:
  - Update to 1.43
    - Replace use of the cryptographically weak rand() function with the much
      stronger Crypt::URandom::urandom() (GH#3, CVE-2026-6659, rhbz#2479575)
    - Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL
    - Add files AI_POLICY.md and SECURITY.md


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480335)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 5.005-1
changelog:
  - Update to 5.005 (rhbz#2480052)
    - Update bundled Zstd to 1.5.7, and other changes
    - Update spec to document changes from version 5
    - Security fixes - make sure that COPY tags cannot be used to read past end
      of buffer


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480334)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480336)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.3.0-1
changelog:
  - update to 2.3.0
  - raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
  - drop pear/pecl dependency
  - sources from github


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.1.0-1
changelog:
  - Update to v25.1.0
  - Attempting using any methods that mutate an OpenSSL.SSL.Context after it
    has been used to create an OpenSSL.SSL.Connection will emit a warning. In
    a future release, this will raise an exception.


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.3.0-1
changelog:
  - Update to 25.3.0
  - pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by
    default, matching CPython’s behavior.
  - Added OpenSSL.SSL.Context.clear_mode.
  - Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS
    1.3 ciphers.
  - Added OpenSSL.SSL.Connection.set_info_callback


author: Jeremy Cline <jeremycline@microsoft.com> - 26.0.0-1
changelog:
  - Update to v26.0.0
  - Added support for using aws-lc instead of OpenSSL.
  - Properly raise an error if a DTLS cookie callback returned a cookie
    longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
    buffer-overflow. Credit to dark_haxor for reporting the issue.
    CVE-2026-27459
  - Added OpenSSL.SSL.Connection.get_group_name to determine which group name
    was negotiated.
  - Context.set_tlsext_servername_callback now handles exceptions raised in
    the callback by calling sys.excepthook and returning a fatal TLS alert.
    Previously, exceptions were silently swallowed and the handshake would
    proceed as if the callback had succeeded. Credit to Leury Castillo for
    reporting this issue. CVE-2026-27448


author: Miro Hrončok <mhroncok@redhat.com> - 1:31.0.0-2
changelog:
  - Remove unused tests Requires
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonMock


author: Fedora Release Monitoring <release-monitoring@fedoraproject.org> - 1:34.1.0-2
changelog:
  - Drop urllib3 upper limit so the package can be installed, https://github.com/kubernetes-client/python/issues/2458


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.19.5-4
changelog:
  - Work around Python 3.14 issues; fixes RHBZ#2372014
  - Do not error on warnings, particularly DeprecationWarning
  - Report and skip TestImportModelCreate::test_dynamic_model regression


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


