# changelog

author: Sérgio M. Basto <sergio@serjux.com> - 2.7.11-1
changelog:
  - Release 2.7.11 (Julian Andres Klode)
  - Show a separate list of upgrades deferred due to phasing (Julian Andres Klode)
  - Add the ?security pattern (Julian Andres Klode)
  - Add a new ?phasing pattern (Julian Andres Klode)
  - Add public phased update API (Julian Andres Klode)
  - For phasing, check if current version is a security update, not just previous ones (Julian Andres Klode)
  - Support -a for setting host architecture in apt-get source -b (David Kalnischkies)
  - Remove erroneous -a flag from apt-get synopsis in manpage (David Kalnischkies)


author: Packit <hello@packit.dev> - 2.7.12-1
changelog:
  - Release 2.7.12 (Julian Andres Klode)
  - Move systemd units to /usr/lib (Julian Andres Klode)
  - test-snapshot: Add test case for automatic snapshot (Julian Andres Klode)
  - test-snapshot: Fix a test case (Julian Andres Klode)
  - Delete SHADOWED metaIndex if we don't actually use snapshots (Julian Andres Klode)
  - Automatically enable snapshots where supported (Julian Andres Klode)
  - Modernize standard library includes (Julian Andres Klode)
  - Bump Ubuntu apt-key deprecation notice to 24.04 (Julian Andres Klode)


author: Packit <hello@packit.dev> - 2.7.14-1
changelog:
  - Release 2.7.14 (Julian Andres Klode)
  - Add an artificial Conflicts: against libnettle8 (Steve Langasek)
  - Revert "debrecords: Do not reparse if given same location" (Julian Andres Klode)
  - debrecords: Do not reparse if given same location (Julian Andres Klode)
  - pkgTagFile::Jump: Use lookback buffer to rejump to current position (Julian Andres Klode)
  - s#http://bugs.debian.org/src/#https://bugs.debian.org/src# (Wesley Schwengle)
  - Update VCG tool URI to new location (Wesley Schwengle)
  - Update Graphviz URL to https://graphviz.org/ (Wesley Schwengle)
  - Include Dutch translation for apt/apt-get upgrade documenation update (Wesley Schwengle)
  - Update documentation for apt upgrade with pkg arg (Wesley Schwengle)
  - Update documentation for apt-get upgrade with pkg arg (Wesley Schwengle)
  - Dutch manpages translation update (Frans Spiesschaert)
  - Dutch program translation update (Frans Spiesschaert)
  - Parse unsupported != relation in dependencies (David Kalnischkies)
  - Remove non-existent Debug::BuildDeps from apt.conf(5) (David Kalnischkies)
  - Handle EINTR in the static FileFd::Write overload (David Kalnischkies)
  - Support building without gnutls (Steve Langasek)
  - Resolves rhbz#2270952


author: Michal Hlavinka <mhlavink@redhat.com> - 1:12.3.0-6
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.10.0-1
changelog:
  - Update to new upstream version (closes rhbz#2303131)
  - Set version (closes rhbz#2265825)
  - Fix CVE-2024-43798 (closes rhbz#2308435, closes rhbz#2308436)


author: Than Ngo <than@redhat.com> - 126.0.6478.182-1
changelog:
  - update to 126.0.6478.182
    * High CVE-2024-6772: Inappropriate implementation in V8
    * High CVE-2024-6773: Type Confusion in V8
    * High CVE-2024-6774: Use after free in Screen Capture
    * High CVE-2024-6775: Use after free in Media Stream
    * High CVE-2024-6776: Use after free in Audio
    * High CVE-2024-6777: Use after free in Navigation
    * High CVE-2024-6778: Race in DevTools
    * High CVE-2024-6779: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 127.0.6533.72-1
changelog:
  - update to 127.0.6533.72
  	* CVE-2024-6988: Use after free in Downloads
  	* CVE-2024-6989: Use after free in Loader
  	* CVE-2024-6991: Use after free in Dawn
  	* CVE-2024-6992: Out of bounds memory access in ANGLE
  	* CVE-2024-6993: Inappropriate implementation in Canvas
  	* CVE-2024-6994: Heap buffer overflow in Layout
  	* CVE-2024-6995: Inappropriate implementation in Fullscreen
  	* CVE-2024-6996: Race in Frames
  	* CVE-2024-6997: Use after free in Tabs
  	* CVE-2024-6998: Use after free in User Education
  	* CVE-2024-6999: Inappropriate implementation in FedCM
  	* CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  	* CVE-2024-7001: Inappropriate implementation in HTML
  	* CVE-2024-7003: Inappropriate implementation in FedCM
  	* CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing
  	* CVE-2024-7005: Insufficient validation of untrusted input in Safe


author: Than Ngo <than@redhat.com> - 127.0.6533.88-2
changelog:
  - remove old patch that seems to be the cause of a crash
    when the user set user.max_user_namespaces to 0


author: Than Ngo <than@redhat.com> - 127.0.6533.88-3
changelog:
  - fix rhbz#2294773 - Allow enabling vulkan on ozone wayland for AMD vaapi
  - add ppc64le patch to fix runtime assertion trap on ppc64el systems
  - refresh ppc64le patch to work around broken 64k allocator code on arm64


author: Than Ngo <than@redhat.com> - 127.0.6533.99-1
changelog:
  - update to 127.0.6533.99
    * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
    * High CVE-2024-7533: Use after free in Sharing
    * High CVE-2024-7550: Type Confusion in V8
    * High CVE-2024-7534: Heap buffer overflow in Layout
    * High CVE-2024-7535: Inappropriate implementation in V8
    * High CVE-2024-7536: Use after free in WebAudio


author: Than Ngo <than@redhat.com> - 128.0.6613.119-1
changelog:
  - update to 128.0.6613.119
    * High CVE-2024-8362: Use after free in WebAudio
    * High CVE-2024-7970: Out of bounds write in V8


author: Than Ngo <than@redhat.com> - 128.0.6613.137-1
changelog:
  - update to 128.0.6613.137
    * High CVE-2024-8636: Heap buffer overflow in Skia
    * High CVE-2024-8637: Use after free in Media Router
    * High CVE-2024-8638: Type Confusion in V8
    * High CVE-2024-8639: Use after free in Autofill


author: Than Ngo <than@redhat.com> - 129.0.6668.58-1
changelog:
  - update to 129.0.6668.58
    * High CVE-2024-8904: Type Confusion in V8
    * Medium CVE-2024-8905: Inappropriate implementation in V8
    * Medium CVE-2024-8906: Incorrect security UI in Downloads
    * Medium CVE-2024-8907: Insufficient data validation in Omnibox
    * Low CVE-2024-8908: Inappropriate implementation in Autofill
    * Low CVE-2024-8909: Inappropriate implementation in UI


author: Jens Petersen <petersen@redhat.com> - 1.1-5
changelog:
  - exclude ix86
  - -help and hence help2man fail (since not in Arch). There are no 32bit
    images anyway.


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.3-1
changelog:
  - Rebase to version 2.6.3
  - Resolves: rhbz#2309690
  - Resolves: CVE-2024-45492
  - Resolves: CVE-2024-45491
  - Resolves: CVE-2024-45490


author: Miroslav Suchý <msuchy@redhat.com> 1.47-1
changelog:
  - add GPL-2.0-or-later WITH RRDtool-FLOSS-exception-2.0
  - add text of ultrapermissive dedication from sublimehq
  - add HPND-export2-US license
  - add Gutmann license
  - add HPND-merchantability-variant license
  - fix case in license id of BSD-2-Clause-first-lines
  - add HPND-export-US-acknowledgement license
  - add HPND-Intel license
  - add loguru public domain dedication
  - add BSD-3-Clause WITH AdditionRef-OpenEXR-Additional-IP-Rights-Grant
  - add HPND-sell-variant-MIT-disclaimer-rev license
  - add GD license
  - Add crc32 license found in libsurvive to UltraPermissive
  - allow lower case variant
  - add any-OSI license
  - document dotnet* packages as exception for LicenseRef-ISO-8879


author: Miroslav Suchý <msuchy@redhat.com> 1.50-1
changelog:
  - include scancode-license-policy.yaml in rpm
  - add BSD-3-Clause-No-Nuclear-Warranty license
  - add unicode-mappiing license as not-allowed
  - add LicenseRef-W3C-Document-2023
  - add W3C-20150513 license
  - add 'make scancode' that produces scancode license policy file
  - Add LicenseRef-framed as allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.52-1
changelog:
  - Add LicenseRef-Frontier-Artistic-1.0 as not-allowed
  - Add LicenseRef-JasPer-1.0 as not-allowed
  - Create missing TOML for Callaway Nmap but reclassify as not-allowed, with
    usage exception
  - Add LicenseRef-NPSL-0.92 as not-allowed, corresponding to Callaway-era NPSL
  - Add LicenseRef-NPSL-0.93 as not-allowed to cover NPSL 0.93 and 0.94
  - Correct TOML files for LicenseRef-NPSL-0.94 and LicenseRef-NPSL-0.95
  - Add LicenseRef-NPSL-0.95 as not-allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: Ondřej Nosek <onosek@redhat.com> - 1.45-1
changelog:
  - Allow package.cfg on rawhide/main branch (sgallagh)
  - Fix datetime.utcnow deprecation warning (dherrera)
  - Remove Python 2.7 support (onosek)
  - Fix tests on Python 3.12 by fixing pkg_resources dependency (dherrera)
  - Remove traces of PDC in docstrings (lsegura)
  - Remove function get_sl_type, no longer needed (lsegura)
  - Remove pdc calls, use bodhi instead (lsegura)
  - Update docker image for Jenkinks tests (onosek)
  - Methods for setting API tokens use getpass - 2089694 (onosek)
  - Update the sendemail.to Fedora email addresses (miro)
  - Remove epel-playground support (otto.liljalaakso)
  - disable-monitoring: run manually only (onosek)
  - `fedpkg update`: add option `--severity` (onosek)
  - Allow fetching release from branch basename (pemensik)
  - Lookaside cache operations retries (onosek)
  - check_branch: Fix backwards error message (otaylor)
  - Fix flake8 complaints (onosek)
  - fix: change changelog link (amedvede)
  - Update link to the `Share Test Code` documentation (psplicha)
  - Corrected the description of --namespace. (Bjorn)
  - Improve invalid branch name error message (otto.liljalaakso)
  - Fix unittests after '--path' argument is validated (onosek)
  - Remove unused arches from completion (mikel)
  - Update docker image for Jenkinks tests (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.45-2
changelog:
  - Add support for building for epel10
  - Don't print the branch name after dash when there is no dash
  - Remove mbs.fedoraproject.org scopes from git cred helper
  - Fix unittests after creating the project in hatch


author: Ondřej Nosek <onosek@redhat.com> - 1.45-5
changelog:
  - Add py313 environment as that's current
  - Drop support for bodhi-client <= 5
  - Drop all usage of six
  - Replace and update use of deprecated 'linux_distribution'
  - Modernize and clean unittest imports
  - Update check_bodhi_version to check for >= 6.0.0
  - Fix URL of Bodhi in staging
  - Fixes missing key in distro.os_release_info()
  - Do not auto-request ELN modules
  - Fix minor requirements for EPEL10+ in test
  - Use minor value from koji when no minor in branch name
  - Fix EPEL10 branch expression to cover 2 or more digits.
  - Get macros from epel-candidate build target.
  - Improvements on string parsing
  - Add tests cases for runtime_disttag removal when working with epel10
  - Handle rhel runtimes when minor version exists in disttag


author: Gordon Messmer <gordon.messmer@gmail.com> - 2024.06-6
changelog:
  - Update got-audit with expected duplicate symbols from libresolv and
    libvncserver and ignore unresolved symbols.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.34-2
changelog:
  - Convert license tag to SPDX
  - Rework specfile to follow the Fedora packaging guidelines
  - Tidy up Requires and BuildRequires


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Packit <hello@packit.dev> - 12.2-1
changelog:
  - Translated using Weblate (Catalan) (raf)
  - Translated using Weblate (Hungarian) (99 efi)
  - Translated using Weblate (Turkish) (Oğuz Ersen)
  - Translated using Weblate (Swedish) (Åke Engelbrektson)
  - Fixed DEM cache size configuration (Martin Tůma)
  - Translation update (Martin Tůma)
  - Localization update (Martin Tůma)
  - Removed unnecessary metadata from icons (Martin Tůma)
  - Add outlines to some more marine icons (Martin Tůma)
  - Make the DEM cache configurable (Martin Tůma)
  - Some more missing outlines (Martin Tůma)
  - Decreased the oversize church icon (Martin Tůma)
  - Redesigned marine icons (Martin Tůma)
  - Fixed build with older Qt versions (Martin Tůma)
  - Added support for 0.5" (7201x7201) DEM tiles (Martin Tůma)
  - Marine maps draw order fix (Martin Tůma)
  - Fixed broken handling of IMG "multi-maps" (maps with overviews) (Martin Tůma)
  - Fix multiple MSVC warnings (Martin Tůma)
  - Do not compile empty files (Martin Tůma)
  - Added "brew update" (Martin Tůma)
  - Fixed marine charts rendering (Martin Tůma)
  - Do not unnecessary convert the image tiles to pixmaps (Martin Tůma)
  - Make the MSVC2019 Debug builds compile (Martin Tůma)
  - Version++ (Martin Tůma)
  - Remove the qpainter/qimage draw workaround (Martin Tůma)
  - Allow arbitrary large images (Martin Tůma)
  - Fixed centroid computation (Martin Tůma)


author: Packit <hello@packit.dev> - 12.3-1
changelog:
  - Added currents rendering (Martin Tůma)
  - Render masts as pylons (Martin Tůma)
  - Label sizes adjustment (Martin Tůma)
  - Properly crop the image (Martin Tůma)
  - Various ENC rendering improvements (Martin Tůma)
  - Translated using Weblate (Catalan) (raf)
  - A better point items layout algorithm (Martin Tůma)
  - A better "entry prohibited" line (Martin Tůma)
  - Added fog signals rendering (Martin Tůma)
  - Render lights merged with the root objects, not as separate objects (Martin Tůma)
  - Translated using Weblate (Norwegian Bokmål) (ovl-1)
  - Removed duplicit map error debug output (Martin Tůma)
  - Properly chceck for GCS/PCS files (Martin Tůma)
  - Do not try to load the style when it does not exist (Martin Tůma)
  - Version++ (Martin Tůma)
  - Render international border lines (Martin Tůma)
  - Fixed header length check (Martin Tůma)
  - Added missing nmea serial port baudrate setting (Martin Tůma)
  - Translated using Weblate (Esperanto) (Nikolay Korotkiy)
  - Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
  - Translated using Weblate (Russian) (Nikolay Korotkiy)
  - Translated using Weblate (Finnish) (Nikolay Korotkiy)
  - Translated using Weblate (Chinese (Simplified)) (mtriau)


author: Packit <hello@packit.dev> - 13.5-1
changelog:
  - Yet another one-way arrows improvement (Martin Tůma)
  - Use less agressive one-way street arrows (Martin Tůma)
  - Properly mark one-way streets in data from NET links (Martin Tůma)
  - Display one-way streets info in IMG maps (Martin Tůma)
  - Build universal x86_64/arm64 binaries on OS X (Martin Tůma)
  - Yet another ENV path fix (Martin Tůma)
  - Fixed ENV file path (Martin Tůma)
  - Switched to MSVC 2022 and Qt 6.5 (Martin Tůma)
  - Do not affect the map object scaling when resizing the tiles (Martin Tůma)
  - Removed obsolete include (Martin Tůma)
  - Added graph pinch zooming (Martin Tůma)
  - Revert "Removed SDK/buildtools workaround" (Martin Tůma)
  - Removed SDK/buildtools workaround (Martin Tůma)
  - Code cleanup (Martin Tůma)
  - Version++ (Martin Tůma)
  - Make the Mapsforge tiles sufficient large for the layout (Martin Tůma)
  - Back to Qt 6.4 on Windows (Martin Tůma)
  - Switched Qt 6 CI builds to Qt 6.5 (Martin Tůma)


author: Packit <hello@packit.dev> - 13.9-1
changelog:
  - Fixed storing of WMTS tiles with file system incompatible tile matrix names (Martin Tůma)
  - Decreased map zoom level treshold to 80% (Martin Tůma)
  - Fixed map resolution computation for maps > world/2 (Martin Tůma)
  - Use OpenSSL v3 for Windows Qt6 builds (Martin Tůma)
  - Fixed Qt6 build (Martin Tůma)
  - Yet another TrekBuddy compatability enhancement & fixes + related map API refactoring (Martin Tůma)
  - Check for bounds overflow in the computed/approximated case (Martin Tůma)
  - Support all variants of TrekBuddy maps/atlases (Martin Tůma)
  - Allow arbitrary .map file names in TrekBuddy TAR maps (Martin Tůma)
  - Contiguous zones (Martin Tůma)
  - Distinguish silos and tanks (Martin Tůma)
  - Version++ (Martin Tůma)
  - Refactoring (Martin Tůma)
  - Reference the exact S-57 document describing the catalogue (Martin Tůma)
  - Less aggressive anchor/no-anchor lines (Martin Tůma)


author: Packit <hello@packit.dev> - 13.12-1
changelog:
  - Code cleanup (Martin Tůma)
  - Fixed broken TMS maps rendering (Martin Tůma)
  - Asynchronous rendering of online vector maps (Martin Tůma)
  - Added support for online vector maps overzoom (Martin Tůma)
  - Limit the overzoom to max 3 levels (Martin Tůma)
  - Added support for MVT overzoom (Martin Tůma)
  - Code cleanup (Martin Tůma)
  - Provide the zoom level to QImageReader when fetching the tile size (Martin Tůma)
  - Cosmetics (Martin Tůma)
  - Added workaround for broken Qt SVG image plugin colliding with the MVT plugin (Martin Tůma)
  - Translated using Weblate (Ukrainian) (Vadym Nekhai)
  - Translated using Weblate (Esperanto) (Nikolay Korotkiy)
  - Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
  - Translated using Weblate (Russian) (Nikolay Korotkiy)
  - Translated using Weblate (Finnish) (Nikolay Korotkiy)
  - Fixed possible double delete (Martin Tůma)
  - Improved error reporting (Martin Tůma)
  - Fixed crash on empty MBTiles files (Martin Tůma)
  - Version++ (Martin Tůma)
  - Metadata update (Martin Tůma)
  - Translated using Weblate (Catalan) (raf)
  - Translated using Weblate (Hungarian) (99 efi)
  - Translated using Weblate (Swedish) (bittin1ddc447d824349b2)
  - Code cleanup (Martin Tůma)
  - Resolves rhbz#2231722


author: Packit <hello@packit.dev> - 13.13-1
changelog:
  - Increase the default pixmap cache size on Android to 384MB (Martin Tůma)
  - Fixed broken map scale (ruler) on HiDPI maps (Martin Tůma)
  - Limit the overzoom by the resulting tile size rather than number of levels (Martin Tůma)
  - Version++ (Martin Tůma)
  - Resolves rhbz#2255189


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.5-1
changelog:
  - Update to 1.17.5
  - Drop Python2 support (using pyupgrade --py3-plus *.py)
  - Make it possible to use keys with Unicode keysyms in keybindings
    (requires ibus &gt; 1.5.30) (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/497, same problem for ibus-table)
  - Use `frames_per_buffer=chunk_size` option in `self._paudio.open()`
    (Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2238746#c3)
  - Translation update from Weblate (cs 36.6%, ja 45.3%, zh_CN 92.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-1
changelog:
  - Update to 1.17.6
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    Resolves: https://github.com/kaio/ibus-table/issues/85 See also:
    https://github.com/mike-fabian/ibus-typing-booster/issues/497 (This makes
    the new keybinding feature and test cases work with all known versions of
    ibus)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.8-1
changelog:
  - Update to 1.17.8
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py for
    Unicode 16.0.0 release
  - Translation update from Weblate (new: el 17.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Update to 2.25.9
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec


author: Mike FABIAN <mfabian@redhat.com> - 2.25.10-1
changelog:
  - Update to 2.25.10
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Update to 2.25.12
  - Correct calculation of caret when a key which triggered a commit
    *increases* the length of the transliteration (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/519)
  - Do the retransliteration of the input_phrase currently only when the
    cursor is at the end of the typed string


author: Mike FABIAN <mfabian@redhat.com> - 2.25.13-1
changelog:
  - Update to 2.25.3
  - Name of Sinhala input method changed in m17n-db-1.8.6: si-wijesekera ➡️
    si-wijesekara
  - Translation update from Weblate (new: ru 12.3%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.14-1
changelog:
  - Update to 2.25.14
  - 'S- ' (Shift-space) should not trigger a commit if it has a
    transliteration (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/524)
  - Update emoji annotations from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 2.25.15-1
changelog:
  - Update to 2.25.15
  - Also catch ValueError exception when trying to import nltk (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/527)
  - Translation update from Weblate (ru 25.1%)
  - Update emoji annotations from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 2.25.16-1
changelog:
  - Update to 2.25.16
  - When committing, normalize to NFC **and** recompose the composition
    exclusions (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/531)
  - Update the emoji data files to the to version from the final Unicode
    16.0.0 release 2024-09-10
  - Update UnicodeData.txt to the Unicode 16.0.0 release 2024-09-10
  - Update emoji annotations from CLDR
  - Translation update from Weblate (New: el 4.9%)


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Simone Caronni <negativo17@gmail.com> - 0.15.0-6
changelog:
  - Leave autodetection of hardware extensions as per developer's comment at
    https://bugzilla.redhat.com/show_bug.cgi?id=2307795#c16


author: Sahana Prasad <sahana@redhat.com> - 1:3.1.1-1
changelog:
  - Rebase to upstream version 3.1.1
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


author: Remi Collet <remi@remirepo.net> - 3.8.1-1
changelog:
  - update to 3.8.1
  - add patch for test suite from
    https://github.com/PHPCSStandards/PHP_CodeSniffer/pull/256


author: Remi Collet <remi@remirepo.net> - 4.0.0-1
changelog:
  - update to 4.0.0
  - raise dependency on PHP 8.1
  - rename to php-sebastian-type4
  - move to /usr/share/php/SebastianBergmann/Type4


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-type5
  - move to /usr/share/php/SebastianBergmann/Type5


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Gwyn Ciesla <gwync@protonmail.com> - 3.3.0-1
changelog:
  - 3.3.0
    - Add support and tests for 'Match final ..' (frequently used in ProxyJump
      configurations to exclude the jump host) to our SSH config parser (GH#1907,
      GH#1992)
    - Add an explicit 'max_concurrent_prefetch_requests' argument to
      'paramiko.client.SSHClient.get' and 'paramiko.client.SSHClient.getfo',
      allowing users to limit the number of concurrent requests used during
      prefetch (GH#1587, GH#2058)


author: Paul Howarth <paul@city-fan.org> - 3.3.1-1
changelog:
  - Update to 3.3.1 (rhbz#2227478)
    - Cleaned up some very old root level files, mostly just to exercise some of
      our doc build and release machinery


author: Gwyn Ciesla <gwync@protonmail.com> - 3.4.0-1
changelog:
  - 3.4.0
    - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
      packet-handler class used internally (mostly for testing, but advanced
      users may find this useful when doing deep hacks)
    - Address CVE 2023-48795 (https://terrapin-attack.com/) a.k.a. the "Terrapin
      Attack", a vulnerability found in the SSH protocol re: treatment of packet
      sequence numbers) as follows:
      - The vulnerability only impacts encrypt-then-MAC digest algorithms in
        tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko
        currently only implements 'hmac-sha2-(256|512)-etm' in tandem with
        'AES-CBC'; if you are unable to upgrade to Paramiko versions containing
        the below fixes right away, you may instead use the 'disabled_algorithms'
        connection option to disable the ETM MACs and/or the CBC ciphers (this
        option is present in Paramiko ≥ 2.6)
      - As the fix for the vulnerability requires both ends of the connection to
        cooperate, the below changes will only take effect when the remote end is
        OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
        patch version) and configured to use the new "strict kex" mode (Paramiko
        will always attempt to use "strict kex" mode if offered by the server,
        unless you override this by specifying 'strict_kex=False' in
        'Transport.__init__')
      - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
        when protocol messages are received in unexpected order; this includes
        situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
        exchange, which are no longer allowed during strict mode
      - Key (re)negotiation -- i.e. 'MSG_NEWKEYS', whenever it is encountered --
        now resets packet sequence numbers (this should be invisible to users
        during normal operation, only causing exceptions if the exploit is
        encountered, which will usually result in, again, 'MessageOrderError')
      - Sequence number rollover will now raise 'SSHException' if it occurs
        during initial key exchange (regardless of strict mode status)
    - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the
      original implementation made assumptions based on an OpenSSH implementation
      detail


author: Paul Howarth <paul@city-fan.org> - 3.4.0-6
changelog:
  - Fix detection of SHA1 signing support
    https://github.com/paramiko/paramiko/pull/2420
    https://github.com/pyca/cryptography/issues/11332
    https://github.com/PyO3/pyo3/issues/3059
  - Remove cache Sphinx build folder ".doctrees"


author: Paul Howarth <paul@city-fan.org> - 3.4.1-1
changelog:
  - Update to 3.4.1
    - Massage our import of the TripleDES cipher to support Cryptography ≥ 43;
      this should prevent 'CryptographyDeprecationWarning' from appearing upon
      import (GH#2419, GH#2421)
    - Modify a test-harness skiptest check to work with newer versions of
      Cryptography (GH#2420)
    - Fix a 64-bit-ism in the test suite so the tests don't encounter a false
      negative on 32-bit systems (GH#2353)


author: Paul Howarth <paul@city-fan.org> - 3.5.0-1
changelog:
  - Update to 3.5.0 (rhbz#2312503)
    - Add support for AES-GCM encryption ciphers (128 and 256 bit variants)
      (GH#982, GH#2157, GH#2444, rhbz#2311855); this functionality has been
      tested in client mode against OpenSSH 9.0, 9.2 and 9.6, as well as against
      a number of proprietary appliance SSH servers
    - Check for 'None' transport members inside '~paramiko.channel.Channel' when
      closing the channel; this likely doesn't come up much in the real world,
      but was causing warnings in the test suite


author: Packit <hello@packit.dev> - 1.1.1-1
changelog:
  - [packit] 1.1.1 upstream release
  - Resolves rhbz#2246486 Upstream tag: v1.1.1 Upstream commit: c9aa7404


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Miro Hrončok <mhroncok@redhat.com> - 1.66-14
changelog:
  - Actually add the patches:
  - Patch: *pkg import: Don't delete changelog generated by `rpmautospec convert`
  - Patch: *pkg import: Undo rpmautospec processing
  - Patch: Unittests for "Undo rpmautospec processing"


author: Ondřej Nosek <onosek@redhat.com> - 1.66-15
changelog:
  - Patch: Add option to mockbuild use default resultdir of mock (v3)
  - Patch: mockbuild`: new argument --extra-pkgs
  - Patch: `copr-build` passes extra_args to copr-cli command


author: Ondřej Nosek <onosek@redhat.com> - 1.67-1
changelog:
  - Include URL in upload/download (walters)
  - Use python-requests-gssapi instead of -kerberos (lsedlar)
  - man page generator: use $SOURCE_DATE_EPOCH if specified (zbyszek)
  - do not block tag --clog due autospec usage (msuchy)
  - Processing of another return message from lookaside cache (onosek)
  - Allow setting --force for sources command by env var (lsedlar)
  - Update docker image for Jenkinks tests (onosek)
  - '_set_token' method moved to a shared place (onosek)
  - Fix copr-build command with results_dir=subdir option (otto.liljalaakso)
  - mockbuild: use results/mock_* when results_dir=subdir (tmz)
  - Add option to mockbuild use default resultdir of mock (v3) (sergio)
  - Restrict completion to .src.rpm files for import - #706 (orion)
  - `remote add` command: create a non-anonymous remote - #599 (onosek)
  - `mockbuild`: new argument --extra-pkgs - 498 (onosek)
  - *pkg import: check specfile matches the repo name - 529 (onosek)
  - Fixes syntax issues reported by flake8 (onosek)
  - Unittests for "Undo rpmautospec processing" (onosek)
  - *pkg import: Undo rpmautospec processing - 527 (miro)
  - *pkg import: Don't delete changelog generated by `rpmautospec convert` (miro)
  - Make lookaside cache retries configurable (onosek)
  - Lookaside cache operations retries (onosek)
  - Prepare the lookaside cache code for retries (onosek)
  - Fix flake8 complaints (onosek)
  - Support for checking exploded sources before push (onosek)
  - Split git credential data on first = only - 694 (lsedlar)
  - `commit` command fails on 'containers' namespace (onosek)
  - `copr-build` passes extra_args to copr-cli command - 510 (onosek)
  - Do not require 'sources' file for all namespaces - #684 (onosek)
  - Use release's rpmdefines in unused sources check - #671 (otto.liljalaakso)
  - Pre-push hook won't check private branches - #683 (onosek)
  - Config file option to skip the hook script creation - 515 (onosek)
  - Allow empty commits when `uses_rpmautospec` - #677 (j1.kyjovsky)
  - Check remote file with correct hash (lsedlar)
  - Ignore missing spec file in pre-push hook (lsedlar)
  - import_srpm: allow pre-generated srpms - #655 (onosek)
  - Fix unittests for `clone` and pre-push hook script (onosek)
  - pre-push hook script contains a user's config - #667 (onosek)
  - A HEAD query into a lookaside cache - 513 (onosek)
  - `pre-push-check` have to use spectool with --define - #672 (onosek)
  - Add more information about pre-push hook (lsedlar)
  - Update to spec file presence checking - #663 (onosek)
  - More robust spec file presence checking - #663 (onosek)
  - Do not generate pre-push hook script in some cases - #665 (onosek)
  - Avoid calling repo_name from load_nameverrel - #657 (otto.liljalaakso)
  - Move warnings from missing Git repo to debug level - #659 (otto.liljalaakso)
  - Update docker image for Jenkinks tests (onosek)
  - container-build: update --signing-intent help for OSBS 2 (kdreyer)
  - Process source URLs with fragment in pre-push hook (lsedlar)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 3.1.3-175
changelog:
  - Use SHA256 instead of SHA1 where needed in Openssl tests
  - Let OpenSSL choose the digest if digest for Openssl::OCSP::BasicResponse#sign is nil


author: Kalev Lember <klember@redhat.com> - 0.18.1-1
changelog:
  - Update to version 0.18.1; Fixes RHBZ#2224910
  - Re-enable tests as they are fixed in the new release


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2259758)
  - Patch out the zopfli binary, which conflicts with the one provided by the
    zopfli package


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.8-1
changelog:
  - Version 254.8
  - A bunch of fixes for various components: systemd, systemctl, systemd-
    firstboot, systemd-repart, bootctl, systemd-networkd, systemd-network-
    generator, systemd-analyze, systemd-dissect, ukify, man pages.
  - Also has a patch for CVE-2023-7008 (rhbz#2222260)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.9-1
changelog:
  - Version 254.9
  - Fixes kernel-install on /boot on btrfs (rhbz#2251262)
  - Various small fixes for systemd itself, systemd-resolved, bootctl,
    systemd-networkd, udev, systemd-repart, systemd-homed, libsystemd,
    virtualization detection, systemd-analyze, systemd-dissect, systemd-
    journal-remote, documentation.
  - Hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.12-1
changelog:
  - Version 254.12
  - Too many small bugfixes too list.
  - Updates to hwdb from 2024-04-08 in upstream.
  - Resolves rhbz#2269506.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.16-1
changelog:
  - Version 254.16
  - Fixes for systemd, systemd-resolved, man pages and other documentation,
    unit installation
  - Hardware db update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.18-1
changelog:
  - Version 254.18
  - Various small fixes in man components, incl. systemd-resolved, systemd-
    boot, virtualization detection, kernel-install.
  - Includes a hardward database update.


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-1
changelog:
  - update to xen-4.17.5
    remove or adjust patches now included or superceded upstream
    now need to enable systemd explicitly


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.8-1
changelog:
  - Update to version 5.6.8
  - Disable tests that require file attributes if the file system doesn't
    support them


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.9-2
changelog:
  - Reduce socket path lengths used by tests for rpm 4.20 compatibility
  - Avoid test failures due to using the same port numbers in different tests


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-1
changelog:
  - Update to version 5.7.0
  - Drop patches accepted upstream
  - Drop EPEL 7 support from spec file (EOL)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-2
changelog:
  - Fix compilation error due to hidden overloaded virtual
  - Make documentation package not noarch due to non-reproducible filenames


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.1-2
changelog:
  - Workaround doxygen non-reproducibility - make doc package noarch again
  - Increase client timeouts for XRootD server tests


