# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.21.0-3
changelog:
  - Do not require pycotap to run PySol, pycotap is only needed for the single
    unittest ( https://github.com/shlomif/PySolFC/pull/353 )


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.60-1
changelog:
  - Update to 1.60
  - Drop workaround for broken openblas on aarch64 in RHEL 8 and 9
    Fixed in RHEL 8.8 and 9.2 respectively


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.1.1-1
changelog:
  - Update to 0.1.1
  - Adjust Source0 to point to /archive/v<version>/hirte-<version>.tar.gz
  - Adjust the location of dbus-1/system.d/org.containers.hirte.conf and
    bus-1/system.d/org.containers.hirte.Agent.conf so they are in _datadir
  - Add the hirte-ctl subpackage (which provides hirtectl for convenience)


author: Than Ngo <than@redhat.com> - 119.0.6045.123-1
changelog:
  - update to 119.0.6045.123, include following security fixes:
    high CVE-2023-5996: Use after free in WebAudio


author: Than Ngo <than@redhat.com> - 119.0.6045.159-1
changelog:
  - update to 119.0.6045.159, upstream security release
     High CVE-2023-5997, use after free in Garbage Collection
     High CVE-2023-6112, use after free in Navigation
  - add Requires/Conflicts for ABI break in fmpeg-free 6.0.1
  - drop first_dts patch, reintroduce first_dts patch in ffmpeg-free-6.0.1
  - fixed python3 syntaxWarning: invalid escape sequenc
  - skip clang's patches for epel8 that now gets clang-16 update


author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Eric Curtin <ecurtin@redhat.com> - 0.93-1
changelog:
  - More optimization, can now install initoverlayfs files for kernels that
    aren't currently running.


author: Stephen Smoogen <ssmoogen@redhat.com> - 0.98-1
changelog:
  - Release 0.98
  - Improve documentation (PR31 and ecurtin)
  - Only wait for bootfs storage device if it is configured (PR32)


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.0.0.35-2.rolling
changelog:
  - adapted to new path in sources
  - repacked alt-java from misc subpkg
  - adapted alt-java to grep correctly prctl
  - removed no longer prepared nss.cfg


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.1.0.9-4.rolling
changelog:
  - Redeclared ForFiles release sections as %nil no longer works with %1
  - RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
  - so we have to pass in "" but evaluate it, otherwise files record will include it


author: Petra Alice Mikova <pmikova@redhat.com> 1:21.0.0.0.34-0.1.ea.rolling
changelog:
  - initial update to jdk21
  - commented out fips patches
  - updated to jdk21 ea
  - updated patch 1001 - rh1648249-add_commented_out_nss_cfg_provider_to_java_security
  - replace smoketests in staticlibs test, as the previous files used were removed by a patch in JDK
  - require tzdata 2023c
  - Update FIPS support to bring in latest changes
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * Remove GCC minor versioning (JDK-8284772) to unbreak testing
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-3.rolling
changelog:
  - Update documentation (README.md, add missing JEP to release notes)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 patch any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Update generate_tarball.sh to sync with upstream vanilla script
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Port misc tarball from RHEL to house alt-java outside the JDK tree
  - Port improved tarball creation and checking from RHEL so tarballs are verified


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.1.0.12-2.rolling
changelog:
  - updated to OpenJDK 21.0.1 (2023-10-17)
  - adjsuted generate_source_tarball
  - removed icedtea_sync
  - dropped standalone licenses
  - added usntripped subpkg
  - added docs subpkg
  - adjsuted versions of bundled libraries
  - build refactored to several solid methods following gnu_andrew
  - removed no longer needed jdk8296108-tzdata2022f.patch, jdk8296715-cldr2022f.patch, rh1648644-java_access_bridge_privileged_security.patch
  - added jdk8311630-s390_ffmapi.patch to support virtual threads on s390x
  - aligned fips-21u-75ffdc48eda.patch (gnu_andrew)
  - fixed '--without release' build-ability by moving docs and misc to if-release only


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.5-46
changelog:
  - Build against the 'mariadb-connector-c-devel' package (PR#1)
  - Replace setup and patchN with autosetup macro
  - Use make macros


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: Paul Howarth <paul@city-fan.org> - 1.10.0-4
changelog:
  - In 8.8 OpenSSH disabled sha1 rsa-sha keys out of the box,
    so we need to re-enable them as a workaround for the test
    suite until upstream updates the tests
    See: https://github.com/libssh2/libssh2/issues/630
  - Drop other test workarounds, none of them being needed any longer


author: Paul Howarth <paul@city-fan.org> - 1.11.0-1
changelog:
  - Update to 1.11.0 (rhbz#2211200)
    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake "unity" builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: Now parses attribute extensions if they exist
    - SFTP: No longer will busy loop if SFTP fails to initialize
    - SFTP: Now clear various errors as expected
    - SFTP: No longer skips files if the line buffer is too small
    - SCP: Add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed "old gex" build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files
  - Avoid use of deprecated patch syntax
  - Build static library but don't package it since it's required for the
    test suite (https://github.com/libssh2/libssh2/issues/1056)
  - Remove redundant references to %{_libdir} from pkgconfig file
  - Add patch to work around strict permissions issues for sshd tests


author: Christoph Erhardt <fedora@sicherha.de> - 1.9.0-1
changelog:
  - Bump version to 1.9.0
  - Don't enforce out-of-source build since the `inttypes.h` collision is resolved


author: Christoph Erhardt <fedora@sicherha.de> - 2.0.0-1
changelog:
  - Bump version to 2.0.0
  - Change license from AGPL-3.0-or-later to MIT
  - Update version number of bundled tbb package to 2021.9
  - Remove `ExcludeArch` as mold now supports MIPS64


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.28.04-3
changelog:
  - Fix build on Fedora 39+ where glibc has strlcpy and strlcat
  - Enable build of root-gui-qt6webdisplay sub-package if Qt6 is available


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.28.06-1
changelog:
  - Update to 6.28.06
  - Drop patches root-testRooAbsL-test-compares-two-doubles-and-fails.patch and
    root-strlcpy.patch (fixed upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.00-1
changelog:
  - Update to 6.30.00
  - Removed subpackages: root-io-gfal and root-roofit-common
  - Dropped patches: 6
  - New patches: 6


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.1-1
changelog:
  - Update to version 5.6.1
  - Add --use-pep517 --no-build-isolation to pip options for Fedora and EPEL 9+


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-1
changelog:
  - Update to version 5.6.3
  - Drop patches accepted upstream or previously backported
  - Enable tests and add check section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.3-3
changelog:
  - Avoid /tmp when running some tests
  - Fail gracefully in case of unsupported extended file attributes
  - Avoid null bytes in error message strings
  - Fix include path in XRootDConfig.cmake
  - Avoid dereferencing unaligned pointers
  - Support big endian in XrdZip


author: Robert Scheck <robert@fedoraproject.org> - 1.5.15-0.4.el9.1
changelog:
  - Transformed system-config-printer-1.5.15-4.el9 from RHEL 9.3 GA into
    system-config-printer-epel to achieve the missing system-config-printer
    and system-config-printer-applet packages


