# changelog

author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.60-1
changelog:
  - Update to 1.60
  - Drop workaround for broken openblas on aarch64 in RHEL 8 and 9
    Fixed in RHEL 8.8 and 9.2 respectively


author: Packit <hello@packit.dev> - 0.22.1-1
changelog:
  - New upstream release
  - Drop too-strict dependencies patch. Fixed by:
    https://github.com/coreos/coreos-installer/pull/1453


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Guenther Deschner <gdeschner@redhat.com> - 4.19.1-1
changelog:
  - resolves: #2243073 - Update to version 4.19.1
  - resolves: #2241881, #2243228: Security fix for CVE-2023-3961
  - resolves: #2241882, #2243231: Security fix for CVE-2023-4091
  - resolves: #2241883, #2243230: Security fix for CVE-2023-4154
  - resolves: #2241884, #2243229: Security fix for CVE-2023-42669
  - resolves: #2241885, #2243232: Security fix for CVE-2023-42670


author: Simone Caronni <scaronni@nvidia.com> - 1.1.14-2.20240805gitc439cd5
changelog:
  - Update to latest snapshot with commits required for NVIDIA driver 560+ with
    explicit sync support.


author: Neal Gompa <ngompa@fedoraproject.org> - 6.0-13
changelog:
  - Add patches to support enhanced RTMP and AV1 encoding through VA-API
  - Force AAC decoding through fdk-aac-free


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 1f0fab7ff86, aa19bc1d259, acc117b57f7,
    aff250145af, and 3644f41dc80.  These commits reduce the size of the
    generated gdb-index file, and also ensure that the gdb-index and
    dwarf-5 index are generated consistently even as the number of
    worker threads that GDB uses changes (RHBZ 2232086).


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Rebase to FSF GDB 14.1.
  - Update local patches:
      gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
      gdb-6.6-buildid-locate-rpm.patch
      gdb-6.6-buildid-locate.patch
      gdb-container-rh-pkg.patch
      gdb-core-open-vdso-warning.patch
      gdb-fedora-libncursesw.patch
      gdb-linux_perf-bundle.patch
  - Update backported patches which didn't make it into 14.1:
      gdb-rhbz-2232086-cpp-ify-mapped-symtab.patch
      gdb-rhbz-2232086-generate-gdb-index-consistently.patch
  - Drop upstreamed local patches:
      gdb-6.5-sharedlibrary-path.patch
  - Drop gdb-13.2 backports (which are now in gdb-14.1):
      gdb-binutils29988-read_indexed_address.patch
      gdb-bz2196395-debuginfod-legacy-openssl-crash.patch
      gdb-bz2237392-dwarf-obstack-allocation.patch
      gdb-bz2237515-debuginfod-double-free.patch
      gdb-rhbz2192105-ftbs-dangling-pointer
      gdb-rhbz2233961-CVE-2022-4806.patch
      gdb-rhbz2233965-memory-leak.patch
  - Adjust gdb.spec so that --with-mpfr is no longer passed to
    configure; doing so, combined with some configury changes triggered
    a latent build problem.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-2
changelog:
  - Backport upstream commit bc23ea51f8a83e9524dfb553baa8baacb29e68a9,
    potentially fixing RHBZ 2257562.


author: Alexandra Hájková <ahajkova@redhat.com> - 14.1-3
changelog:
  - Backport upstream commits 7ae9ecfd801 and 8170efad364 to avoid
    using _PyOS_ReadlineTState  (RHBZ 2250652).


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-2
changelog:
  - backport commit 91874afabcd to solve RHEL-2295897
    This fixes a double free when debugging mysql-workbench


author: Alexandra Hájková <ahajkova@redhat.com> - 15.1-1
changelog:
  - Rebase to FSF GDB 15.1.
  - Update local patches:
      gdb-6.3-gstack-20050411.patch
      gdb-6.6-buildid-locate-solib-missing-ids.patch
      gdb-6.6-buildid-locate.patch
      gdb-archer-next-over-throw-cxx-exec.patch
      gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
      gdb-rhbz1156192-recursive-dlopen-test.patch
  - Dropped:
      gdb-6.3-attach-see-vdso-test.patch
      gdb-6.5-BEA-testsuite.patch
      gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
      gdb-6.5-ia64-libunwind-leak-test.patch
      gdb-6.5-missed-trap-on-step-test.patch
      gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
      gdb-6.6-buildid-locate-rpm.patch
      gdb-6.7-ppc-clobbered-registers-O2-test.patch
      gdb-6.7-testsuite-stable-results.patch
      gdb-bz634108-solib_address.patch
      gdb-container-rh-pkg.patch
      gdb-core-open-vdso-warning.patch
      gdb-fedora-libncursesw.patch
      gdb-glibc-strstr-workaround.patch
      gdb-linux_perf-bundle.patch
      gdb-rhbz-2232086-cpp-ify-mapped-symtab.patch
      gdb-rhbz-2232086-generate-dwarf-5-index-consistently.patch
      gdb-rhbz-2232086-generate-gdb-index-consistently.patch
      gdb-rhbz-2232086-reduce-size-of-gdb-index.patch
      gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
      gdb-rhbz1553104-s390x-arch12-test.patch
      gdb-rhbz2232086-refactor-selftest-support.patch
      gdb-rhbz2250652-avoid-PyOS_ReadlineTState.patch
      gdb-rhbz2250652-gdbpy_gil.patch
      gdb-rhbz947564-findvar-assertion-frame-failed-testcase.patch
      gdb-rhel2295897-pre-read-DWZ-file-in-DWARF-reader.patch


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Peter Bieringer <pb@bieringer.de> - 4.2.0-80
changelog:
  - Final release 4.2.0
  - Relocate CGI scripts into dedicated directories
  - Call autoreconf in setup section


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Nicola Sella <nsella@redhat.com> - 0.70.2-1
changelog:
  - Update to 0.70.2
  - Support "proxy=none" in main config (RhBug:2155713)
  - Fix #1558: Don't assume inclusion of cstdint
  - Disconnect monitors in dnf_repo_loader_finalize() (RhBug:2070153)


author: Jan Kolarik <jkolarik@redhat.com> - 0.71.0-1
changelog:
  - Update to 0.71.0
  - PGP: Use new librepo PGP API, remove gpgme dependency
  - API: Basic support for OpenPGP public keys
  - Avoid using GNU extensions in the dependency splitter regex
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838)
  - Make code C++20 compatible


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Jan Kolarik <jkolarik@redhat.com> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1
  - Fix https://issues.redhat.com/browse/RHEL-27657
  - subject-py: Fix memory leak
  - MergedTransaction: Calculate RPM difference between two same versions as no-op
  - Onboard packit tests
  - Add virtual destructor to TransactionItem


author: Evan Goode <egoode@redhat.com> - 0.73.2-1
changelog:
  - Update to 0.73.2
  - context: use rpmtsAddReinstallElement() when doing a reinstall
  - MergedTransaction: Fix invalid memory access when dropping items
  - ConfigParser: fix use-out-of-scope leaks
  - Since we use rpmtsAddReinstallElement rpm also uninstalls the package
  - Fix countme bucket calculation


author: Evan Goode <egoode@redhat.com> - 0.73.3-1
changelog:
  - Update to 0.73.3
  - Support colon in username, use LRO_USERNAME and LRO_PASSWORD
  - Set pool flag to fix pool_addfileprovides_queue() without filelists.xml
  - Fix a memory leak in glob_for_cachedir()


author: Ondrej Mosnáček <omosnacek@gmail.com> - 1.5.0-4
changelog:
  - Do not ship duplicate kcapi-hasher in libkcapi-tools
  - Ship kcapi-hasher manpage in libkcapi-hasher


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Mads Kiilerich <mads@kiilerich.com> - 6.5.3-3
changelog:
  - Exclude threading and warnings from demandimport
  - That became a problem with recent "stable" cpython changes (#2305924)


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.2-5
changelog:
  - Fix incompatible pointer type passed to GEOSPolygonize_r
  - This makes the package compatible with
    https://fedoraproject.org/wiki/Changes/PortingToModernC.


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.15-20
changelog:
  - Remove extra distro-applied CFLAGS passed to user built C extensions
  - https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Xavier Bachelot <xavier@bachelot.org> 6.2.70-2
changelog:
  - Fix sympasoap socket ownership for httpd (RHBZ#2152381)
  - Fix both wwwsympa and sympasoap socket ownership for nginx


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-4
changelog:
  - Tidy up BuildRequires/Requires
  - BR: tzdata, which is not pulled from dependencies on F39+ (RHBZ#2261742)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-2
changelog:
  - arm32: The cache may not be properly cleaned/invalidated [XSA-437,
  	CVE-2023-34321]
  - top-level shadow reference dropped too early for 64-bit PV guests
  	[XSA-438, CVE-2023-34322]
  - x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]


author: Jakub Jelen <jjelen@redhat.com> - 1.2.5-1
changelog:
  - New upstream release (#2167005)
  - Remove dependency on old version of python-yubikey-manager (#2148957)


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


