# changelog

author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Nick Clifton <nickc@redhat.com> - 9.23-1
changelog:
  - INITIAL CREATION OF DTS-10 ANNOBIN. (#1852725)
  - Annocheck: Do not skip tests of the short-enums notes.  (#1743635)
  - Add (optional) llvm plugin.
    9.21-3
  - Fix the computations of ANNOBIN_GCC_PLUGIN_DIR and ANNOBIN_CLANG_PLUGIN_DIR.
    9.21-1
  - Fix stack clash protection problem. (#1803173)
    9.21-1
  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
    9.20-1
  - Annocheck: Detect Fortran compiled programs.  (#1824393)
    9.19-1
  - Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
    9.18-1
  - Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
    9.16-1
  - Annobin: Fix access to the -flto and -fsanitize flags.
    9.14-1
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
    9.13-1
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
    9.12-1
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
    9.11-1
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.
    9.10-1
  - Fix clang plugin to use hidden symbols.
    9.09-1
  - Add ability to build clang plugin (disabled by default).
    9.08-1
  - Annocheck: Fix error printing out the version number.
    9.07-1
  - Annobin: Add checks of the exact location of the examined switches.
    9.06-1
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
    9.05-1
  - Add configure option to suppress building annocheck.
    9.04-1
  - Fix debuginfod test.
    9.03-2
  - Correct the build requirement for building with debuginfod support.
    9.03-1
  - Add debuginfod support.
    9.01-1
  - Add clang plugin (experimental).
    8.92-1
  - Have annocheck ignore notes with an end address of 0.
    8.91-1
  - Improve checking of gcc versions.
    8.90-1
  - Do not skip positive results.
    8.88-1
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
    8.87-1
  - Replace address checks with dladdr1.
    8.86-1
  - Use libabigail like checking to ensure variable address consistency.
    8.85-1
  - Skip generation of global notes for hot/cold sections.
    8.84-1
  - Generate FAIL results if -Wall or -Wformat-security are missing.
    8.83-1
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
    8.81-1
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 2.32-15
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler.  (#1779698)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Stan Cox <scox@redhat.com> - 9.3.2-3
changelog:
  - rhbz1503116 possible soname clashes between base rhel- and devtoolset- dyninst
  - rhbz1538757 segfault with a glibc built with binutils-2.27: handle R_*_IRELATIVE


author: Stan Cox <scox@redhat.com> - 9.3.2-6
changelog:
  - rhbz1498558 Needs dyninst-devtoolset installed
  - rhbz1470149 Use separate debuginfo for dyninst-testsuite
  - rhbz1647471 so name clashes


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Remove ppc, ppc64, ppc64le, aarch64 for rhel-7
  - rhbz1763156 devtoolset-9-dyninst-10.1.0-3.el7.aarch64 broken 
  - rhbz1763157 devtoolset-9-dyninst-10.1.0-3.el7.ppc64 (big endian) broken


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Marek Polacek <polacek@redhat.com> 10.2.1-1.2
changelog:
  - avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
  - apply gcc10-libgfortran-compat-2.patch


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Keith Seitz <keiths@redhat.com> - 9.2-3.el7
changelog:
  - Backport testcase for tui/25126.
  - Use built-in readline for RHEL7. System readline is too old.
  - Remove gdb-testsuite-readline63-sigint-revert.patch.
  - Add patch to link against tinfo on rhel6.
  - Add patch to workaround make 3.81 bug.
  - Update gdb.spec for rhel6.


author: Keith Seitz <keiths@redhat.com> - 9.2-4.{el6,el7}
changelog:
  - Add debuginfod.m4 patch to use pkg-config.
  - Add BuildRequire for libcurl-devel for debuginfod on RHEL7.
  - Disable debuginfod on RHEL6.
  - Fix broken gdb-6.6-buildid-locate-rpm-scl.patch and regenerate
    patches.
  - Update debuginfod patch with test suite fixes from upstream.


author: Keith Seitz <keiths@redhat.com> - 9.2-5.el7
changelog:
  - Backport "Fix unused function error" (Luis Machcado)
  - Disable 
  python_binary="on"
  buildroot_path="RHEL7,"
  bytecode_compilation_path=".${buildroot_path/#$RPM_BUILD_ROOT}"
  failure=0
  pushd $RPM_BUILD_ROOT
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile || failure=1
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile || failure=1
  popd
  test $failure -eq 0


author: Keith Seitz <keiths@redhat.com> - 9.2-10.el7
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903377)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905704)
  - Backport "Exclude debuginfo files from 'outside of ELF segments'
    warning" (Keith Seitz, RH BZ 1915440)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Will Cohen <wcohen@redhat.com> - 1.1.0-4
changelog:
  - Update events non-x86 architectures (aarch64, power, zseries)
  - Add support for newer Intel processors.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-1
changelog:
  - Rebase to v5.1; drop upstream patches on top of 4.24.
  - Add upstream commits 7ada13f3 ("evdev: avoid bit vector decoding
    on non-successful and 0 return codes"), 96194ed7 ("evdev: fix array size
    calculation in decode_bitset_"), and cdd8206a ("tests: test evdev bitset
    decoding more thoroughly") as separate patches.
  - Resolves: #1666405.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790057):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1795273):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1847679 as upstream release, plus:
    - rhbz1857749 with rhel8.3 baseos patch
    - rhbz1852021 with rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-4
changelog:
  match gcc-toolset-10
  - rhbz1878303 - align with base rhel systemtap-4.4-8.el8
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.16.1-3
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72:  (#1954564)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.77-1
changelog:
  - annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)
  - annocheck: Improve detection of shared libraries.  (#1958954)


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.


author: Nick Clifton <nickc@redhat.com> - 9.82-1
changelog:
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.29-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)


author: Nick Clifton <nickc@redhat.com> - 10.35-1
changelog:
  - Tests: Fix fortify and debuginfod tests to use newly built annobin plugin.  (#2031133)
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in golang symbols.
  - Annocheck: Initial deployment of libannocheck.


author: Marek Polacek <polacek@redhat.com> 11.1.1-2
changelog:
  - update from Fedora gcc 11.1.1-2
  - fix up mausezahn miscompilation (PR tree-optimization/100566)
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)


author: Marek Polacek <polacek@redhat.com> 11.1.1-6
changelog:
  - update from Fedora gcc 11.1.1-6 (#1957522)
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
     fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
     libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
     middle-end/100250, middle-end/100307, middle-end/100574,
     middle-end/100684, middle-end/100732, middle-end/100876,
     middle-end/101062, middle-end/101167, target/99842, target/99939,
     target/100310, target/100777, target/100856, target/100871,
     target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986841)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996860)
    - PRs target/100208, target/100316, target/102761
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - apply DTS-specific testsuite patches (#1986854)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996860)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047298)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047298)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el7
changelog:
  - Drop gdb-linux_perf-bundle.patch and v1.5-libipt-static.patch.
  - Include gdb-dts-use-decltype.patch.
  - Rebase to 10.2 (RH BZ 1958327)


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Patsy Franklin <pfrankli@redhat.com> - 2.24-14
changelog:
  - Rebase to official binutils 2.24 release and recent patches.
    - Fix detection of little endian PPC64 binaries.  (#1095885)
    - Fix detection of uncompressed .debug_str sections.  (#1082370)
    - Fix compiling using gcc 4.9  (#1087374)
    - Use 2.24 in Source string.  Delete unused patches.
    - Fix decoding of abbrevs using a DW_FORM_ref_addr attribute.  (#1056797)
    - Import fixes on 2.24 branch that affect AArch64 IFUNC and PLT handling.
    - Fix building opcodes library with -Werror=format-security.  (#1037026)
    - Delete: binutils-2.23.52.0.1-64-bit-thin-archives.patch
    - Delete: binutils-rh980601.patch
    - Remove: binutils-2.23.52.0.1-revert-pr15149.patch from spec file.


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.4.1-14.3
changelog:
  - Always use artifact alias org.eclipse.tycho:org.eclipse.jdt.core.
  - We use version of Jasper that requires javax.el* (2.x).


author: Petr Machata <pmachata@redhat.com> - 0.155-2
changelog:
  - The bzip2-devel, zlib-devel and xz-devel dependencies should be
    unconditional.  These are all shipped in all currently supported
    OS's.


author: Petr Machata <pmachata@redhat.com> - 0.155-3
changelog:
  - Make sure the highest address for the CU is marked as end_sequence.
    (elfutils-0.155-dwarf_line.patch)


author: Mark Wielaard <mjw@redhat.com> - 0.155-7
changelog:
  - Don't blow up stack in dwarf_getsrclines with lots of lines.
    (elfutils-0.155-dwarf_getsrclines.patch)


author: Jakub Jelinek <jakub@redhat.com> 4.9.0-6
changelog:
  - update from 4.9 branch
  - backport -fsanitize=float-cast-overflow from the trunk
  - make sure libcilkrts can use system libgcc_s.so.1 (#1101242)
  - fix compat testing


author: Jakub Jelinek <jakub@redhat.com> 4.9.1-5
changelog:
  - update from 4.9 branch
  - fix libgfortran overflows on allocation (#1125219, CVE-2014-5044)
  - backport -fsanitize=alignment support from the trunk


author: Jakub Jelinek <jakub@redhat.com> 4.9.2-5
changelog:
  - update from 4.9 branch (#1149294, #1025729)
  - don't include libatomic and libitm packages on RHEL 7 (#1160176)
  - avoid file dependency in devtoolset-*-libstdc++-devel package (#1167957)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-29.fc21
changelog:
  - Backport vDSO regression.
  - Revert the makeinfo workaround from 7.8-27.fc21.
  - Further 1.75x improvement of the interactive symbols lookup (Doug Evans).


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-1
changelog:
  - Update to 2.0.17.
  - Add OSGI manifest info to the runtime jar.
  - Bundle generator docs with the generator in the main package.


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Alexander Kurtakov <akurtako@redhat.com> 2.0.17-6
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about
    subtracting one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-4
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)
  - Fix a couple nits in ltrace.1 (ltrace-0.7.91-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-9
changelog:
  - dts3.1 merge from rhel-7.1
  - remove bodies of with_java, with_virtguest, with_virthost conditionals


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-8.1
changelog:
  - Rebase to 3.9.0-8.
  - Don't cleanup fake 32-bit libgcc created in %build. make regtest
    might depend on it to build -m32 binaries.
  - Use nonexp-regtest in check so gdbserver_tests are not run.
    They might hang the build.


author: Jeff Law <law@redhat.com> 2.25-7
changelog:
  - Resync with Fedora (binutils-2.25)
    Reapply DTS specific patches
    Backport testsuite patch to fix gold testsuite failure


author: Nick Clifton <nickc@redhat.com> 2.25-9
changelog:
  - Import patch from FSF to preserve the sh_link and sh_info fields in stripped ELF sections.
    (#1246390)


author: Patsy Franklin <pfrankli@redhat.com> 2.25.1-10
changelog:
  - Fix a case where the string was being used after the memory
    containing the string had been freed.


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.0-3.9
changelog:
  - Fix further ant version tests rhbz#1243711
  - Tighten up deps on junit/hamcrest
  - Build javadocs with java 8


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-4
changelog:
  - Backport patch for ebz#488226 for incorrect content assist colors,
    fixes rhbz#1253651 and rhbz#1196736
  - Fix broken link to mockito in tests


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-5.2
changelog:
  - Fix failure to run tests and backport patch for ebz#489953 in order to fix
    some unit tests, fixes rhbz#1316061 and rhbz#1262804


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-5.4
changelog:
  - Update eclipse-build snapshot for test-support enhancements,
    fixes rhbz#1315730 and rhbz#1263101


author: Mat Booth <mat.booth@redhat.com> - 9.0.0-1.3
changelog:
  - Disable optimisation that generates no-strict-overflow warning instead of
    simply disabling the warning


author: Mat Booth <mat.booth@redhat.com> - 1:4.0.0-1
changelog:
  - Update to latest upstream release
  - No longer necessary to symlink optparse
  - Now archful package due to having a native component


author: Mat Booth <mat.booth@redhat.com> - 1:4.1.0-2.4
changelog:
  - Add all necessary symlinks for jython
  - Don't bother users with upstream project fund-raising screen
  - rhbz#1251408


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Update to elfutils 0.166 (#1322412)
    Drop upstreamed patches:
    - elfutils-0.165-elf-libelf.patch
    - elfutils-0.165-nobitsalign-strip.patch


author: Marek Polacek <polacek@redhat.com> 5.2.1-1.1
changelog:
  - for DTS lib{l,t}san-devel require lib{l,t}san >= 5.1.1 (#1247146)
  - rename libgccjit to devtoolset-4-libgccjit; install libgccjit.so.* into
    /opt/rh/devtoolset-4/root/lib64/


author: Jakub Jelinek <jakub@redhat.com> 5.2.1-1.2
changelog:
  - split documentation out of devtoolset-4-libgccjit-devel package into
    devtoolset-4-libgccjit-docs (#1245102)
  - add 32-bit linker script and 32-bit gcc driver wrapper so that
    32-bit devtoolset-4-libgccjit{,-devel} can be used for linking
    and at runtime on x86_64 (#1245102)


author: Jakub Jelinek <jakub@redhat.com> 5.3.1-6
changelog:
  - update from Fedora 5.3.1-5 (#1305952)
  - include non-stripped copies of *.a libraries in the debuginfo subpackage


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-13.fc23
changelog:
  - Rebase to FSF GDB 7.9.90.20150822 (7.10 branch snapshot).
  - Remove --with testsuite BuildRequires: prelink (prelink is orphaned in F-23+).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-18.el7
changelog:
  - [rhel7] Provide libstdc++-v3-python with C++11 even on RHEL-7 (RH BZ 1239290).
  - Do not provide libstdc++-v3-python lib64 files on 32-bit archs.
  - [rhel6,rhel7] Delete pahole.py on Python2 systems.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.11-60.fc24
changelog:
  - New Fedora GDB testfile: rhbz1261564-aarch64-watchpoint.exp
  - Backport gdb-7.11 stable branch PR gdb/19676 fix (Pedro Alves).


author: Mat Booth <mat.booth@redhat.com> - 1.2.9-8
changelog:
  - Fix unstripped binaries and empty debuginfo package
  - Ensure presence of ant-junit at buildtime
  - Fixed mixed use of space and tabs


author: Mat Booth <mat.booth@redhat.com> - 2.0.17-17.2
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about subtracting
    one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-10
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-13
changelog:
  - 3.10.1 Refresh.
    - Add valgrind-3.10.1-di_notify_mmap.patch
    - Add valgrind-3.10.1-memmove-ld_so-ppc64.patch
    - Add valgrind-3.10.1-kernel-4.0.patch.
    - Add valgrind-3.10.1-cfi-redzone.patch.
    - Add valgrind-3.10.1-memfd_create.patch.
    - Add valgrind-3.10.1-syncfs.patch.
    - Add valgrind-3.10.1-arm-process_vm_readv_writev.patch.
    - Add valgrind-3.10.1-fno-ipa-icf.patch.
    - Add valgrind-3.10.1-demangle-q.patch
    - Add valgrind-3.10-1-ppc64-sigpending.patch
    - Filter out -fstack-protector-strong and disable _hardened_build.
    - Add valgrind-3.10.1-send-recv-mmsg.patch
    - Add mount and umount2 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-glibc-version-check.patch
    - Add accept4 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-ppc64-accept4.patch.
    - Add valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10-s390-spechelper.patch.
    - Add valgrind-3.10.1-mempcpy.patch.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-9
changelog:
  - Fix valgrind-3.11.0-pthread_barrier.patch to apply with older patch.
  - Fix multilib issue in config.h with HAVE_AS_AMD64_FXSAVE64.


author: Nick Clifton <nickc@redhat.com> 2.27-1
changelog:
  - Rebase on FSF binutils 2.27 release. (#1356661)
  - Retire: binutils-2.20.51.0.10-copy-osabi.patch
  - Retire: binutils-2.23.2-aarch64-em.patch
  - Retire: binutils-2.23.51.0.3-arm-ldralt.patch
  - Retire: binutils-2.23.52.0.1-revert-pr15149.patch
  - Retire: binutils-2.25.1-gold-testsuite-fixes.patch
  - Retire: binutils-2.25-kernel-ld-r.bugfix.patch
  - Retire: binutils-2.25-kernel-ld-r.patch
  - Retire: binutils-2.25-only-keep-debug.patch
  - Retire: binutils-2.25-x86_64-pie-relocs.patch
  - Retire: binutils-pr18879.patch
  - Retire: binutils-rh1224751.patch
  - Retire: binutils-rh1309347.patch
  - Retire: binutils-rh895241.patch


author: Nick Clifton <nickc@redhat.com> 2.27-3
changelog:
  - Version bump so that the Brew build can be rerun, this time including ppc64 (big-endian)
    (#1358353)


author: Nick Clifton <nickc@redhat.com> 2.27-6
changelog:
  - Move .shstrtab section to end of section list so that the monotonic ordering of section offsets is restored.
    (#1366145)


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Update to elfutils 0.167 (#1366182,#1356263)
    Drop upstreamed patch: elfutils-0.166-elfcmp-comp-gcc6.patch


author: Mark Wielaard <mjw@redhat.com> - 0.168-1
changelog:
  - New upstream release from new project home https://sourceware.org/elfutils/
    Resolves: Rebase elfutils to 0.168 bugfix release (#1412299)


author: Mark Wielaard <mark@klomp.org> - 0.168-3
changelog:
  - Adjust internal library so names (#1412305).
  - Never use old, deprecated, filter_provides_in, it really is too broken.


author: Jakub Jelinek <jakub@redhat.com> 6.1.1-5
changelog:
  - update from Fedora 6.1.1-5
  - make sure to use DTS strip and objdump during brp scripts (#1365531,
    - use DTS binutils even on RHEL7


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-2.2
changelog:
  - update from Fedora 6.3.1-2
  - some further libstdc++_nonshared.a fixes for ppc, ppc64, ppc64le, s390
    and s390x


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-3
changelog:
  - update from Fedora 6.3.1-3
    - fix vec_xl and vec_xst altivec.h intrinsics (#1418397, PR target/79268)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-0.18.20160928.fc25
changelog:
  - Fix attachment of JIT-debug-enabled inf. (7.11.1 regression, RH BZ 1375553).
  - Rebase to FSF GDB 7.11.90.20160928 (pre-7.12 branch snapshot).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-0.19.20160929.fc25
changelog:
  - Rebase to FSF GDB 7.11.90.20160929 (pre-7.12 branch snapshot).
   - Fixes GDB crashes on inf. function call scripts (RH BZ 1378147, Pedro Alves).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-23.fc25
changelog:
  - [testsuite] Various testsuite fixes.
  - [aarch64] Fix gdb.cp/nextoverthrow.exp regression (Yao Qi).


author: DJ Delorie <dj@redhat.com> - 0.7.91-15
changelog:
  Jeff Law <law@redhat.com>
  - Pull in fc24 patches
  - Remove local patch #204
  - Sync BuildRequires and %build with Fedora to fix aarch64 problem
  - Add missing #includes to some aarch64 code


author: DJ Delorie <dj@redhat.com> - 0.7.91-17
changelog:
  - Remove mentions of (and one attempt to patch) backup files in 
    ltrace-0.7.91-unwind-elfutils.patch (#1427140)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: DJ Delorie <dj@redhat.com> - 4.12-3
changelog:
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Duplicate vhangup/chown patch for -m32 also.


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3s
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-26
changelog:
  - Rebase against fedora package:
    - Only build valgrind-openmpi when not creating a software collection.
    - No support for multilib on secondary arches when creating scl.
    - Mandatory Perl build-requires added
    - Add valgrind-3.11.0-shr.patch
    - Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch
    - Update valgrind-3.11.0-wrapmalloc.patch
    - Add valgrind-3.11.0-sighandler-stack.patch
    - Update valgrind-3.11.0-ppoll-mask.patch (#1344082)
    - Add valgrind-3.11.0-arm64-handle_at.patch
    - Add valgrind-3.11.0-ppc64-syscalls.patch
    - Add valgrind-3.11.0-deduppoolalloc.patch
    - Add valgrind-3.11.0-ppc-bcd-addsub.patch
    - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch
    - Update valgrind-3.11.0-cxx-freeres.patch (x86 final_tidyup fix)
    - Add valgrind-3.11.0-s390x-risbgn.patch
    - Add valgrind-3.11.0-cxx-freeres.patch (#1312647)
    - Add valgrind-3.11.0-ppc64-separate-socketcalls.patch
    - Add valgrind-3.11.0-isZeroU.patch
    - Replace valgrind-3.11.0-arm64-ldpsw.patch with upstream version


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.1-BETA1
changelog:
  - Update to valgrind 3.12.0 pre-release.
    - Drop upstreamed patches.
    - Disable exp-tests in %check. GDB crashes on gdb_server tests.


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.2-BETA1
changelog:
  - Add valgrind-3.12-beta1-ppc64be.patch. (#1378963)
  - Enable gdb_server tests again. (#1378143)
  - And disable it again on rhel6 (both i686 and x86_64)
    and rhel7 (ppc64 and ppc64le only) (#1380513)


author: Nick Clifton <nickc@redhat.com> 2.28-6
changelog:
  - Fix s390 assembler so that it remove fake local symbols from its output.
    (#1460254)
    (#1472486)


author: Nick Clifton <nickc@redhat.com> 2.28-9
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1515340)


author: Nick Clifton <polacek@redhat.com> 2.28-1
changelog:
  - Rebase to FSF binutils 2.28
  - Retire: binutils-2.23.52.0.1-addr2line-dynsymtab.patch
  - Retire: binutils-2.27-local-dynsym-count.patch
  - Retire: binutils-2.27-monotonic-section-offsets.patch
  - Retire: binutils-2.27-aarch64-relro-default.patch
  - Retire: binutils-2.27-power9.patch
  - Import FSF binutils patch to fix running readelf on debug info binaries.
  - Import FSF binutils patch to fix an abort with PowerPC dynamic relocs.
  - Backport patch to add support for putting name, comp_dir and
    producer strings into the .debug_str section. 
  - Add support for GNU BUILD NOTEs.


author: Nick Clifton <nickc@redhat.com> 2.28-8.1
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1519864)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.169-3
changelog:
  - Add elfutils-0.169-dup-shstrtab.patch (#1455687)
  - Add elfutils-0.169-strip-empty.patch (#1455620)


author: Mark Wielaard <mjw@redhat.com> - 0.170-4
changelog:
  - Add elfutils-0.170-dwarf_aggregate_size.patch (#1527966).
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Jeff Law <law@redhat.com> 7.3.1-5.4
changelog:
  - Add Jakub's patch to generalize default exponent handling to
    instead cover all DEC runtime extensions
    Update 0022 patch for changes from Jakub's work.
    (#1561204)


author: Marek Polacek <polacek@redhat.com> 7.3.1-5.7
changelog:
  - fix 0014-Allow-non-logical-expressions-in-IF-statements.patch: also allow
    non logical expressions in ELSE-IF statements


author: Jeff Law <polacek@redhat.com> 7.3.1-5.9
changelog:
  - Fix INCLUDE handling when pathname is on a separate line
  - Integrate updates to patches #0005 and #0014.  Add testcases for
  - various legacy fortran extensions (#1586289)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.0.1-32.fc26
changelog:
  - Backport upstream fix for Intel PKRU (Walfred Tedeschi).
  - Backport upstream fix AVX instr. single-stepping (RH BZ 1515209, Pedro Alves).
  - Fix snapgnulib bundle number.


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-4
changelog:
  - Rebase to fedora valgrind version (#1467952)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-arm-index-hardwire.patch
    - Add valgrind-3.13.0-ucontext_t.patch
    - Add valgrind-3.13.0-gdb-8-testfix.patch
    - Add valgrind-3.13.0-disable-vgdb-child.patch
    - Add valgrind-3.13.0-arm64-hwcap.patch
    - Add valgrind-3.13.0-epoll_pwait.patch
    - Add valgrind-3.13.0-ppc64-diag.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-10
changelog:
  - Add valgrind-3.13.0-ppc64-timebase.patch (#1523871)
  - Sync with rhel 7.5 valgrind (#1523872)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-xml-socket.patch
    - Add valgrind-3.13.0-ppc64-vex-fixes.patch
    - Add valgrind-3.13.0-amd64-eflags-tests.patch
    - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
    - Add valgrind-3.13.0-static-tls.patch


author: Nick Clifton <nickc@redhat.com> 2.30-18
changelog:
  - Fix a seg-fault parsing corrupt DWARF information.  (#1573360)
  - Fix another seg-fault parsing corrupt DWARF information.  (#1573367)
  - Fix a seg-fault copying a corrupt ELF file.  (#1551788)
  - Fix a seg-fault parsing a large ELF files on a 32-bit host.  (#1539891)
  - Fix a seg-fault running nm on a corrupt ELF file.  (#15343247)
  - Fix a seg-fault running nm on a file containing corrupt DWARF information.  (#1551781)
  - Fix another seg-fault running nm on a file containing corrupt DWARF information.  (#1551763)


author: Nick Clifton <nickc@redhat.com> 2.30-19
changelog:
  - Fix a seg-fault running objcopy on a corrupt PE format file.  (#1574702)
  - Fix a seg-fault running objcopy on a corrupt ELF format file.  (#1574705)


author: Nick Clifton <nickc@redhat.com> 2.30-20
changelog:
  - Have the x86 linker resolve relocations against the _end, _edata and __bss_start symbols locally.  (#1576735)
  - Do not generate GNU build notes for linkonce sections.  (#1576362)


author: Nick Clifton <nickc@redhat.com> 2.30-22
changelog:
  - Fix handling of local versioned symbols by the x86 linker.  (PR 23194)
  - Fix linker testsuite failures.


author: Nick Clifton <nickc@redhat.com> 2.30-24
changelog:
  - When installing both ld.bfd and ld.gold, do not reset the current alternative if upgrading.  (#1592069)


author: Nick Clifton <nickc@redhat.com> 2.30-26
changelog:
  - Restore the long-long patch as it is needed for compatibilit between the 32-bit and 64-bit devel rpms.  (#1605913)


author: Nick Clifton <nickc@redhat.com> - 2.30-47
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Update x86_64 linker testsuite after previous delta.  (#1624779)
  - Disable the x86_64 linker's elimination of PLT entries.  (#1624779)
  - Disable readelf's reporting of gaps in build notes.  (#1623556)
  - Fix some more PowerPC64 linker testsuite failures.  (#1584565)
  - Remove PLT eliision patch.  (#1618748)
  - Restore the binutils-2.25-set-long-long.patch.
  - Fix GOLDs creation of PT_NOTE segments.  (#1614908)  (#1614920)
  - Improve objcopy's --merge-notes option.  (#1608390)
  - Remove x86 ISA property notes with empty bits.  (#1609801)
  - Rebuild with fixed binutils
  - Move the .gnu.build.attributes section to after the .comment section.
  - Merge .gnu.build.attribute sections together.  (#1608390)
  - Fix the gold linker so that it can handle relocs in discardeable note sections.  (#1607054)
  - Fix the generation of relocations for assembler created notes.  (#1598551)


author: Nick Clifton <nickc@redhat.com> - 2.30-54
changelog:
  - Fix AArch64 linker testsuite problems.  (#1702247)
  - Fix S390x linker testsuite problems.  (#1702248)
  - Fix PPC64le linker testsuite problems.  (#1702249)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-8
changelog:
  - Add elfutils-0.170-sys-ptrace.patch
  - Make sure spec can be build even when ldconfig_scriplets aren't defined.
  - Add elfutils-0.170-m68k-packed-not-aligned.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Marek Polacek <polacek@redhat.com> 8.2.1-7
changelog:
  - update from Fedora gcc-8.2.1-7 (#1664796)
  - drop gcc8-fortran-include.patch
  - add -fdec-include and -fpad-source (#1647048)
  - include forgotten ppc* intrinsic headers


author: Marek Polacek <polacek@redhat.com> 8.3.1-2
changelog:
  - update from Fedora 8.3.1-2 gcc (#1664796)
  - put liblsan_preinit.o to FULLPATH instead of FULLLPATH


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3
  - two small autoFDO fixes (#1684650)
  - fix std::hash for 2GB+ strings (PR libstdc++/89629)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.1
changelog:
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730724)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730726)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.2
changelog:
  - move UNSPEC_DARN* from altivec.md to rs6000.md (#1760208)
  - use unspec_volatile for darn (PR target/91481, #1760208, CVE-2019-15847)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.1.90.20180727-39.fc29
changelog:
  - [dts] Fix build by removing a patch for already removed pahole.py .
  - [dts rhel6] Fix build by updating gdb-gnat-dwarf-crash-3of3.patch .


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-16
changelog:
  - Add valgrind-3.14.0-gettid.patch
  - Add valgrind-3.14.0-ppc64-quotactl.patch
  - Add valgrind-3.14.0-ppc-subfe.patch
  - Add valgrind-3.14.0-s390x-vec-facility-bit.patch.
  - Update valgrind-3.14.0-rsp-clobber.patch
  - Add valgrind-3.14.0-subrange_type-count.patch


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-14
changelog:
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> - 2.32-14.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1788503)


author: Nick Clifton <nickc@redhat.com> - 2.32-5
changelog:
  - REBASE TO MATCH gcc-toolset-9 binutils
  - Fix configuring binutils with plugins and address sanitization enabled.  (#1709720)
  - Add: binutils-CVE-2019-9071.patch
  - Add: binutils-CVE-2019-9073.patch
  - Add: binutils-CVE-2019-9074.patch
  - Add: binutils-CVE-2019-9075.patch
  - Add: binutils-CVE-2019-9077.patch
  - Add: binutils-aarch64-gold-PLT-for-MOVW_ABS.patch
  - Add: binutils-alignment-of-decompressed-sections.patch
  - Add: binutils-check-dlsym-for-plugins.patch
  - Add: binutils-disassembling-efi-files.patch
  - Add: binutils-export-demangle.h.patch
  - Add: binutils-gold-8-byte-note-segments.patch
  - Add: binutils-ld-testsuite-fixes.patch
  - Add: binutils-s390x-arch13-descriptions.patch
  - Add: binutils-special-sections-in-groups.patch
  - Retire: binutils-2.22.52.0.1-export-demangle.h.patch
  - Retire: binutils-2.26-lto.patch
  - Retire: binutils-2.30-allow_R_AARCH64-symbols.patch
  - Retire: binutils-CVE-2018-10372.patch
  - Retire: binutils-CVE-2018-10373.patch
  - Retire: binutils-CVE-2018-10534.patch
  - Retire: binutils-CVE-2018-10535.patch
  - Retire: binutils-CVE-2018-17358.patch
  - Retire: binutils-CVE-2018-6323.patch
  - Retire: binutils-CVE-2018-6759.patch
  - Retire: binutils-CVE-2018-7208.patch
  - Retire: binutils-CVE-2018-7568.patch
  - Retire: binutils-CVE-2018-7569.patch
  - Retire: binutils-CVE-2018-7570.patch
  - Retire: binutils-CVE-2018-7642.patch
  - Retire: binutils-CVE-2018-7643.patch
  - Retire: binutils-CVE-2018-8945.patch
  - Retire: binutils-PowerPC-IEEE-long-double-warnings.patch
  - Retire: binutils-debug-section-marking.patch
  - Retire: binutils-disable-readelf-gap-reports.patch
  - Retire: binutils-fix-testsuite-failures-2.patch
  - Retire: binutils-gas-build-notes.patch
  - Retire: binutils-gold-llvm-plugin.patch
  - Retire: binutils-gold-note-segment.patch
  - Retire: binutils-ifunc-relocs-in-notes.patch
  - Retire: binutils-linkonce-notes.patch
  - Retire: binutils-merge-attribute-sections.patch
  - Retire: binutils-missing-notes.patch
  - Retire: binutils-nested-func-name-lookup.patch
  - Retire: binutils-note-merge-improvements.patch
  - Retire: binutils-page-to-segment-assignment.patch
  - Retire: binutils-remove-empty-ISA-properties.patch
  - Retire: binutils-revert-PowerPC-speculation-barriers.patch
  - Retire: binutils-s390x-arch13.patch
  - Retire: binutils-skip-dwo-search-if-not-needed.patch
  - Retire: binutils-speed-up-objdump.patch
  - Retire: binutils-strip-unknown-relocs.patch
  - Retire: binutils-x86-local-relocs.patch
  - Retire: binutils-x86-local-version.patch
  - Retire: binutils-x86_64-disable-PLT-elision.patch


author: Marek Polacek <polacek@redhat.com> 9.1.1-1.1
changelog:
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - apply Fortran patches (#1728355)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix off-by-one errors in indexed xlat handling.
  - Remove bogus indexed xlat warning.
  - Resolves #1666405.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25
changelog:
  - Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-1
changelog:
  - update to 2.4.10
  - remove mod_proxy_html obsolete (#1174790)
  - remove dbmmanage from httpd-tools (#1151375)
  - add slash before root_libexecdir macro (#1149076)
  - ab: fix integer overflow when printing stats with lot of requests (#1091650)
  - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1079925)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-2
changelog:
  - allow enabling additional SCLs using service-environment file
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-6.1
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)
  - core: fix pointer dereference crash with ErrorDocument 400 pointing
    to a local URL-path (CVE-2015-0253)
  - mod_lua: fix possible mod_lua crash due to websocket bug (CVE-2015-0228)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-1
changelog:
  - update to version 2.4.18
  - add support for http/2
  - mod_auth_digest: use anonymous shared memory (#1225116)
  - core: improve error message for inaccessible DocumentRoot (#1207093)
  - ab: try all addresses instead of failing on first one when not available (#1209552)
  - apachectl: ignore HTTPD variable from sysconfig (#1221681)
  - apachectl: fix "graceful" documentation (#1221702)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1221650)
  - do not display "bomb" icon for files ending with "core" (#1196553)
  - mod_proxy_wstunnel: load this module by default (#1253396)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-2
changelog:
  - use HTTPD_LANG in sysconfig file on RHEL6 (#1222055)
  - ignore HTTPD sysconfig variable on RHEL6 (#1204075)
  - call restorecon on /etc/rc.d/init.d/htcacheclean after install (#1222494)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Joe Orton <jorton@redhat.com> - 2.4.25-9
changelog:
  - link only httpd, not support/* against -lselinux -lsystemd (#1433474)
  - don't enable SO_REUSEPORT in default configuration (#1432249)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.26-5
changelog:
  - Resolves: #1472846 - CVE-2017-9788 CVE-2017-9789 httpd24-httpd: various flaws
  - updated mod_systemd patch


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-3
changelog:
  - Resolves: #1486843 - apache user is not created during httpd
    installation when apache group already exist
  - Resolves: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8
changelog:
  - Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9
changelog:
  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10
changelog:
  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11
changelog:
  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14
changelog:
  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-16
changelog:
  - remove bundled mod_md module
  - Resolves: #1788976 - RFE: updated collection for httpd 2.4
  - Resolves: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite 
    potential open redirect


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-18.1
changelog:
  - Resolves: #1869068 - CVE-2020-9490 httpd24-httpd: httpd: Push diary
    crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-19
changelog:
  - Resolves: #1823836 - Backport of SessionExpiryUpdateInterval directive
  - Resolves: #1600579 - mod_proxy_hcheck Doesn't perform checks in VirtualHost
  - Resolves: #1809494 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set
    worker secret passed to tomcat
  - Resolves: #1828812 - httpd response contains garbage in Content-Type header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-20
changelog:
  - Resolves: #1869069 - CVE-2020-9490 httpd24-httpd: httpd: Push diary crash
    on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-21
changelog:
  - Resolves: #1637891 - RHSCL httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-22
changelog:
  - Resolves: #1869076 - CVE-2020-11984 httpd24-httpd: httpd: mod_proxy_uswgi
    buffer overflow
  - Resolves: #1607737 - TCP healthchecks failing falsely / not actually checking
  - Resolves: #1869078 - CVE-2020-11993 httpd24-httpd: httpd: mod_http2 concurrent
    pool usage


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-22.1
changelog:
  - Resolves: #2007237 - CVE-2021-40438 httpd24-httpd: httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23
changelog:
  - Resolves: #2007238 - CVE-2021-40438 httpd24-httpd: httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.1
changelog:
  - Resolves: #2035056 - CVE-2021-44790 httpd24-httpd: httpd: mod_lua: possible
    buffer overflow when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.2
changelog:
  - Resolves: #2065438 - CVE-2022-22720 httpd24-httpd: httpd: HTTP request
    smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.3
changelog:
  - Resolves: #1996513 - CVE-2021-33193 httpd24-httpd: httpd: Request splitting
    via HTTP/2 method injection and mod_proxy
  - Resolves: #2007192 - CVE-2021-34798 httpd24-httpd: httpd: NULL pointer
    dereference via malformed requests
  - Resolves: #2007196 - CVE-2021-39275 httpd24-httpd: httpd: out-of-bounds
    write in ap_escape_quotes() via malicious input
  - Resolves: #2007200 - CVE-2021-36160 httpd24-httpd: httpd: mod_proxy_uwsgi: 
    out-of-bounds read via a crafted request uri-path
  - Resolves: #2035029 - CVE-2021-44224 httpd24-httpd: httpd: possible NULL 
    dereference or SSRF in forward proxy configurations
  - Resolves: #2065236 - CVE-2022-22719 httpd24-httpd: httpd: mod_lua: Use of
    uninitialized value of in r:parsebody
  - Resolves: #2066263 - CVE-2022-23943 httpd24-httpd: httpd: mod_sed: Read/write
    beyond bounds
  - Resolves: #2066794 - CVE-2022-22721 httpd24-httpd: httpd: core: Possible
    buffer overflow with very large or unlimited LimitXMLRequestBody
  - Resolves: #2096999 - CVE-2022-26377 httpd24-httpd: httpd: mod_proxy_ajp:
    Possible request smuggling
  - Resolves: #2097017 - CVE-2022-28614 httpd24-httpd: httpd: out-of-bounds read
    via ap_rwrite()
  - Resolves: #2097033 - CVE-2022-28615 httpd24-httpd: httpd: out-of-bounds read
    in ap_strcmp_match()
  - Resolves: #2097453 - CVE-2022-29404 httpd24-httpd: httpd: mod_lua: DoS in
    r:parsebody
  - Resolves: #2097460 - CVE-2022-30522 httpd24-httpd: httpd: mod_sed: DoS
    vulnerability
  - Resolves: #2097482 - CVE-2022-30556 httpd24-httpd: httpd: mod_lua: Information
    disclosure with websockets
  - Resolves: #2098249 - CVE-2022-31813 httpd24-httpd: httpd: mod_proxy:
    X-Forwarded-For dropped by hop-by-hop mechanism


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.5
changelog:
  - Related: #2035029 - CVE-2021-44224 httpd24-httpd: httpd: possible NULL
    dereference or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8.1
changelog:
  - Resolves: #1745694 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of data
    request leads to denial of service
  - Resolves: #1745679 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers 
    leads to denial of service
  - Resolves: #1745682 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: John Dennis <jdennis@redhat.com> - 0.10.0-1
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-2
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-3
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches,
    fix patch to pickup change in configure script that causes
    HAVE_ECP to be defined
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.
  - Add lasso 2.5.0 version dependency
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-2
changelog:
  - Resolves: bug #1296286
    mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
  - Resolves: bug #1324536
    Installing mod_auth_mellon causes working Kerberos authentication
    to start failing
  - Add ECP.rst documentation file that was erroneously omitted


author: John Dennis <jdennis@redhat.com> - 0.11.0-4
changelog:
  - Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
    Rebuilding due to missing comment in Changelog


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: Luboš Uhliarik <luhliari@redhat.com> - 0.13.1-2
changelog:
  - Resolves: #1514391 - [RFE] Include mod_auth_mellon for RHSCL httpd24
  - Merged with RHEL-7.5 branch, SCLized spec


author: Lubos Uhliarik <luhliari@redhat.com> - 0.13.1-2.1
changelog:
  - Resolves: #1692458 - CVE-2019-3878 httpd24-mod_auth_mellon: mod_auth_mellon:
    authentication bypass in ECP flow


author: Lubos Uhliarik <luhliari@redhat.com> - 0.14.0-2
changelog:
  - Resolves: #1568475 - mod_auth_mellon: tmpfiles.d drop-in wrong location
  - Resolves: #1568837 - ownership test fail


author: Lubos Uhliarik <luhliari@redhat.com> - 0.14.0-3
changelog:
  - Resolves: #1692459 - CVE-2019-3878 httpd24-mod_auth_mellon: mod_auth_mellon:
    authentication bypass in ECP flow


author: Joe Orton <jorton@redhat.com> - 2.9.2-7
changelog:
  - Requires(pre): httpd-filesystem to ensure apache user exists
  - enable mlogc everywhere, use buildcond to disable


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-7.1
changelog:
  - Resolves: #1744824 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large
    amount of data request leads to denial of service
  - Resolves: #1745691 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood
    using PRIORITY frames resulting in excessive resource consumption


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8
changelog:
  - Resolves: #1745692 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: # 1744825 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large 
    amount of data request leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8.1
changelog:
  - Resolves: #1845302 - CVE-2020-11080 httpd24-nghttp2: nghttp2: overly large
    SETTINGS frames can lead to DoS


author: Björn Esser <fedora@besser82.io> - 3.6.2-5
changelog:
  - Rebuilt for libjsoncpp.so.11
  - Bootstrap without gui, due inter-circular dependency in qt5-rpm-macros


author: Honza Horak <hhorak@redhat.com> 5.5.34-6
changelog:
  - Don't test EDH-RSA-DES-CBC-SHA cipher, it seems to be removed from openssl
    which now makes mariadb/mysql FTBFS because openssl_1 test fails
    Related: #1037748


author: Honza Horak <hhorak@redhat.com> 5.5.35-6
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1056457
  - Use log file corresponding with RHEL-7 base
    Resolves: #1007861
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054649
  - Fix advice after initialization of data stack
    Resolves: #1056135
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042873


author: Honza Horak <hhorak@redhat.com> - 5.5.35-7
changelog:
  - Use correct path to tmp dir
    Related: #1056457
  - Rebase to 5.5.36
    https://kb.askmonty.org/en/mariadb-5536-changelog/
  - Wait for daemon ends
    Resolves: #1072958


author: Honza Horak <hhorak@redhat.com> - 5.5.37-9
changelog:
  - Update to MariaDB 5.5.37, for various fixes described at
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089366


author: Honza Horak <hhorak@redhat.com> - 5.5.40-10
changelog:
  - Rebase to 5.5.40
    https://kb.askmonty.org/en/mariadb-5540-changelog/
    Also fixes: CVE-2014-4274 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6505 CVE-2014-4287 CVE-2014-6551 CVE-2014-6555 CVE-2014-6484
    CVE-2014-6464 CVE-2014-6559 CVE-2014-6530 CVE-2014-6564 CVE-2014-6469
    CVE-2014-6463
    Resolves: #1160550


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-11
changelog:
  - Rebase to 5.5.41
    Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186116


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fix: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
    CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582
    CVE-2015-2620 CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 
    Resolves: #1247027


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.49-1
changelog:
  - Rebase to 5.5.49
    https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/
    Resolves: #1342454


author: Jan Pacner <jpacner@redhat.com> - 2.0-16
changelog:
  - Related: #1035187 (disable checks about breaking strict-aliasing rules)
  - revert the previous restoration and allow fortifying symbols


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-3
changelog:
  - Related: #1055555 (add -scldevel subpackage for shipped build-requires garbage)
  - fix installed dirs permissions


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-5
changelog:
  - Resolves: #1075736 (initscript doesnt respect LSB)
  - Resolves: #1057097 (Use the same name for daemon and log file)
  - Resolves: #1075688 (metapackage shouldnt depend on another metapackage)
  - Resolves: #1075025 (Leftovers files after mongodb packages removal)


author: Honza Horak <hhorak@redhat.com> 5.5.35-4
changelog:
  - Don't test EDH-RSA-DES-CBC-SHA cipher, it seems to be removed from openssl
    which now makes mariadb/mysql FTBFS because openssl_1 test fails
    Related: #1045401


author: Honza Horak <hhorak@redhat.com> 5.5.36-4
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1056440
  - Do not blindly remove socket during start
    Resolves: #1045401
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054261
  - Fix advice after initialization of data stack
    Resolves: #1054458
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042875


author: Honza Horak <hhorak@redhat.com> - 5.5.37-5
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089209


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to MySQL 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555
    Resolves: #1160515


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-1
changelog:
  - Rebase to MySQL 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186114


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fixes: CVE-2015-2582 CVE-2015-2620 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 CVE-2015-2648 CVE-2015-2643
    Resolves: #1247023


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: - Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1
    * Added --libs to pkg-config.
    * Added nss_wrapper-config.cmake
    * Fixed a bug packaging the obj directory.


author: - Andreas Schneider <asn@redhat.com> - 1.0.1-2
changelog:
  - resolves: #1060906 - Fedora package.
  - Remove Group
  - Remove glibc-devel build requirement
  - Do not create a subpackage.


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.7-10
changelog:
  - do not install .orig file generated by make xs_generate
  - filter unversioned mod_perl.so from provides


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.8-3.20130221svn1448242
changelog:
  - own include directories in -devel subpackage (#1079938)
  - depend on httpd-2.4 in -devel subpackage


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04:
    - Some small test changes for the latest Module::Implementation and
      Class::Load
  - Bump Class::Load version requirement to 0.15
  - BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
    perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
    suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06:
    - Require Class::Load 0.20 in the code, not just the distro metadata
      (CPAN RT#80002)
    - Weird classes with either an ISA or VERSION constant would cause the XS to
      blow up badly (CPAN RT#79998)
    - Fixed some broken logic that lead to a segfault from the
      014-weird-constants.t test on some Perls (CPAN RT#80059)
  - Bump perl(Class::Load) version requirement to 0.20
  - Drop explicit requirement for perl(Class::Load), no longer needed


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.630-4
changelog:
  - Updated conditions to not require optional BRs (MLDBM, SQL::Statement) for SCL
  - Resolves: rhbz#1064855


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Handle magic more correctly in add_symbol and get_or_add_symbol
  - Add upstream patch to avoid build dependency on Package::Stash
  - BR: perl(Variable::Magic) for the test suite
  - Update patch for building with old Test::More versions


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.05-6
changelog:
  - Add patch for CPAN RT#50524 (copy contents of %DB::sub entry if it exists)
  - Reinstate compatibility with old distributions like EL-5
    - Add BuildRoot definition
    - Clean buildroot in %install
    - Restore %clean section
    - Restore %defattr
    - Don't use + to terminate find -exec commands
  - Spec clean-up
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't use macros for commands
    - Use tabs
    - Add buildreqs for Perl core modules that might be dual-lived
    - Explicit requires for "use base XXX;" only required prior to rpm 4.9


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-13
changelog:
  - Updated dependencies, filters and conditions for dual-life sub-packages
  - Used %perl_compat for dual-life dependencies


author: Remi Collet <rcollet@redhat.com> - 5.4.16-18
changelog:
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.4.16-20
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.40-2
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352


author: Remi Collet <remi@fedoraproject.org> - 3.1.13-1
changelog:
  - Version 3.1.13 (beta) - API 3.1.0 (stable)
  - add patches from upstream (fixes some tests)
  - change serveur port for tests (allow 32/64 bits build)


author: Remi Collet <remi@fedoraproject.org> - 3.1.15-0.1.svn329724
changelog:
  - update to 3.1.15dev with new directive 'enable_opcode_cache' (disabled)
    which allow to cache only user data and use another opcode cache
  - switch most configuration to upstream default


author: Remi Collet <rcollet@redhat.com> - 3.1.15-0.4.20140912
changelog:
  - upstream has switched from SVN to GIT
  - disable shm_strings_buffer in provided configuration
  - fix segfault when Zend Opcache is ebabled #1052178


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Remi Collet <rcollet@redhat.com> - 7.0.1-2
changelog:
  - allow wildcard in opcache.blacklist_filename and provide
    default /etc/php.d/opcache-default.blacklist


author: Remi Collet <rcollet@redhat.com> - 5.5.6-9
changelog:
  - gd: fix NULL deref in imagecrop CVE-2013-7327
  - gd: drop vpx support, fix huge memory consumption #1075201


author: Remi Collet <rcollet@redhat.com> - 5.5.6-10
changelog:
  - fileinfo: fix out-of-bounds memory access CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345


author: Remi Collet <rcollet@redhat.com> - 5.5.6-11
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.5.20-1
changelog:
  - rebase to PHP 5.5.20 #1057089
  - fix package name in description
  - php-fpm own session and wsdlcache dir
  - php-common doesn't provide php-gmp


author: Remi Collet <rcollet@redhat.com> - 5.5.21-2
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868


author: Remi Collet <rcollet@redhat.com> - 5.5.21-3
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 1.3.0-1
changelog:
  - release 1.3.0 (beta)
  - use system json-c when available (fedora >= 20)
  - use jsonc name for module and configuration


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-1
changelog:
  - rebase to 9.2.6
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html
    Resolves: #1038693
  - More details about replication issues are at
    https://wiki.postgresql.org/wiki/Nov2013ReplicationIssue


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-8
changelog:
  - Legacy scripts are using scl enable
    Resolves: #1060767
  - Release bump to -8 in order to get builds from brew


author: Jozef Mlich <jmlich@redhat.com> 9.2.7-2
changelog:
  - update to 9.2.7 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html
    Resolves: #1065861
    including fixes for CVE-2014-0066 CVE-2014-0064 CVE-2014-0065
    CVE-2014-0062 CVE-2014-0063 CVE-2014-0060 CVE-2014-0061


author: Jozef Mlich <jmlich@redhat.com> 9.2.8-1
changelog:
  - update to 9.2.8 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    Resolves: #1079994


author: Jozef Mlich <jmlich@redhat.com> - 9.2.10-1
changelog:
  - Rebase to 9.2.10 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1198663


author: Jozef Mlich <jmlich@redhat.com> - 9.2.13-1
changelog:
  - Rebase to 9.2.13 minor vesion per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html
    CVE-2015-3165 CVE-2015-3166 CVE-2015-3167
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Tomas Orsava <torsava@redhat.com> - 3.6-3
changelog:
  - Moved the license text to %doc due to %license macro not working properly
    in RHSCLs with respect to package uninstallation. (rhbz#1334670)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-10
changelog:
  - Modified patch so tests can acknowledge the existense or lack
  of SSLv2 support
  Resolves: rhbz#1319703


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-12
changelog:
  - Modified 00224-pep476-add-toggle-for-cert-verify.patch to use certificate verification
  config file from python27 SCL directory.
  Resolves: rhbz#1111464


author: Tomas Orsava <torsava@redhat.com> - 2.7.8-15
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346358


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-1
changelog:
  - Rebased to Python 2.7.13
  - Removed backport of PEP 466 (Patches 213-228)
  - Rebased/rewritten patches 1, 6, 10, 55, 102, 112, 134, 136, 137, 146, 153,
    156, 167, 170, 180, 181, 189, 191
  - Dropped patches 166, 184, 196, 197, 229, 230, 232, 237, 238, 242
  - Added the rewheel module: patch 198
  Resolves: rhbz#1402809


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-2
changelog:
  - Rebuilding because some .pyc/.pyo files were not properly generated in the
    official build for some reason


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1709403 and rhbz#1709407


author: Victor Stinner <vstinner@redhat.com> - 2.7.16-4
changelog:
  - Fix regression in the crypt module introduced in update to Python 2.7.16
    (fix the name of the _crypt module init function).


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703534 and rhbz#1704372


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-1
changelog:
  - Update to 2.7.18, the last release of the Python 2 series
  - Security fix for CVE-2019-18348
  - Security fix for CVE-2019-20907
  Resolves: rhbz#1882656, rhbz#1882670, rhbz#1882666


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883541


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-1
changelog:
  - Update to 2.7.18, the last release of the Python 2 series
  - Security fix for CVE-2019-18348
  - Security fix for CVE-2019-20907
  Resolves: rhbz#1881145, rhbz#1765149, rhbz#1856542


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883254


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-3
changelog:
  - Security fixes for CVE-2021-3177, CVE-2021-23336 and CVE-2020-27619
  Resolves: rhbz#1918168, rhbz#1928904, rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-4
changelog:
  - Security fixes for CVE-2021-3733, CVE-2021-3737, CVE-2021-4189 and CVE-2022-0391
  - Fix test suite issues with the latest expat security update
  Resolves: rhbz#1995234, rhbz#1995162, rhbz#2036020, rhbz#2047376


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-9
changelog:
  - Add patch to resolve missing libffi while building
  - Remove BuildRequires: db4-devel, add BuildRequires: libdb-devel


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.8-1
changelog:
  - Update to 2.7.8.
  Resolves: rhbz#1167912
  - Make python-devel depend on scl-utils-build.
  Resolves: rhbz#1170993


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.8-2
changelog:
  - Fix %check setion not failing properly on failed test
  - Fixed CVE-2013-1752, CVE-2013-1753 
  Resolves: rhbz#1187779


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/python33/root/usr/lib64/python3.3/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-4
changelog:
  - Own the pkgconfig dir and tapsetdir, these are not owned by any
  the respective packages in SCL (rhbz#966547).


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-5
changelog:
  - Disable default bytecompilation during build, fixes rhbz#971427.
  - Fix for gettext plural form headers, fixes rhbz#968928.
  - Compile debug build libraries with -O1, fixes rhbz#967900.
  - Print repr() in when C assert fails in debug build, fixes rhbz#971858.


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-8
changelog:
  - Fix memory leak in gdbm module (rhbz#977308)
  - Make building depending collections on top of python33 easier
  - Fix build with libffi containing multilib wrapper for ffi.h (rhbz#979696).


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-9
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-13
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-14
changelog:
  - Addendum for the Fix for CVE-2016-0772 (rhbz#1303647)
    In this version of Python, smtplib has 644 permissons, not 755,
    thus I modified the patch to expect this and not adjust the permissons.
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-15
changelog:
  - Addendum for the Fix for CVE-2016-5699 (rhbz#1303699)
    Python 3.3 does not yet have functions fullmatch and subTest,
    the patch was rewritten accordingly
  Resolves: rhbz#1346359


author: Mat Booth <mat.booth@redhat.com> - 1:9.1.0-1
changelog:
  - Update to Neon.1 release
  - Fix bootstrapping modes
  - Fix binary stripping and permissions on native libraries
  - Fix build on ppc64le


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.1-6
changelog:
  - Increase minimum memory for Eclipse/devstudio
  - Enable nashorn extension for javascript tools/devstudio
  - Resolves: rhbz#1380438


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.2-1
changelog:
  - Update to Neon.2
  - Bootstrap build due to ant update
  - Port to new ant version
  - Rebuild for ECF update
  - Pull in usage plugin by default


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.2-3
changelog:
  - Drop dep on javax.annotation APIs, these should instead be provided by the JRE
    through the system bundle - rhbx#1392150


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.6.2-7
changelog:
  - Hide the p2 Droplets from the Available Software Sites listing.
  - Guard against null URI path in droplet check for Install Wizard Combo.
  - Resolves: rhbz#1413778, rhbz#1420225


author: Mat Booth <mat.booth@redhat.com> - 9.0.2-2
changelog:
  - Backport patch to compensate for API changes in CDT
  - Use global instead of define for macros
  - Increase max heap used in build for arm


author: Mat Booth <mat.booth@redhat.com> - 1:5.1.2-1
changelog:
  - Update to release 5.1.2
  - Remove bundled third-party libs rhbz#1339362
  - Fix valid encoding detection failure rhbz#1327642
  - Improve system jython integration
  - Make symlinking jars more portable


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - config: document value 2 for protocol.version (upstream patch)
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1
    (see #1625677)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Arbitrary path overwriting via export-marks in-stream command
    Resolves: CVE-2019-1348
  - Recursive submodule cloning allows using git directory twice with synonymous
    directory name written in .git/
    Resolves: CVE-2019-1349
  - Fixes CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Carl George <carl@george.computer> - 2.3.4-4
changelog:
  - Use vendored libraries on RHEL
  - Skip test on RHEL
  - Don't build man pages on RHEL due to missing ronn
  - Don't build html versions of man pages


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-1
changelog:
  - Initial commit with git v2.9.2
  - Fixes troubles with infinite loop in "git ls-tree" for broken symlink
    under refs/heads
  - Rename git.service to git@.service to make it usable
  - Resolves: #1204191 #1251460


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-5
changelog:
  - fix service file to use rh-git29 instead of native git
  - fix desktop file - changed names & paths inside the file,
      use scl rh-git29 instead of native git, change filename
      and path of the file to system directory instead of scl
  - *git-daemon: xinetd.d: use system directory and added prefix to the filename
  - *git-gitweb: store git.conf to directory of httpd24 sclm add scl prefix
      to the filename and correct paths inside the file to correct rh-git29
      www directory
  - fix doubled path for emacs-sitelisp files
  - build and link files with httpd24-libcurl
    Resolves: #1345897


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-1
changelog:
  - Rebase to 2.9.3
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1359176 #1382708


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-3
changelog:
  - prevent command injection via malicious ssh URLs
  - dissalow repo names beginning with dash
    Resolves: CVE-2017-8386 CVE-2017-1000117


author: Sebastian Kisela <skisela@redhat.com> - 2.9.3-4
changelog:
  - Backport the fix for CVE-2018-11235 and CVE-2018-11233.
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.11.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 2.7.x.


author: Marcel Plch <mplch@redhat.com> - 2.9.3-6
changelog:
  - Patch for arbitrary code execution via .gitmodules (CVE-2018-17456)
  - Original backport by Jonathan Nieder for Debian
  - Original backport: https://repo.or.cz/git/debian.git/commit/63af93488dc4066a937aaa130b35dff398db2368
  - Original tests: https://repo.or.cz/git/debian.git/commit/2b4d394113d28a856f2cf375d0cbef3806e9a2c8
  - Resolves: rhbz#1638265


author: Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
changelog:
  - Update to 1.8.15 (#1660514)
  - Build with new OpenSLL for ALPN support (#1595865)
  - Fix seemless reloads for send-proxy/accept-proxy (#1649041)
  - Resolve CVE-2018-11469 (#1584788)
  - Resolve CVE-2018-20102 (#1659017)
  - Resolve CVE-2018-20103 (#1659018)


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-1
changelog:
  - Rebase to version 10.0.17
  - Added variable for turn off skipping some tests
  - Add SELinux rules for pid file
  - Add SELinux definition for /var/log/mariadb.*
    Related: #1194206


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-4
changelog:
  - Include client plugins into -common package since they are used by both -libs
    and base packages.
  - Do not use libedit
    Related: #1201988
  - Daemon wrapper to run process with proper SELinux context
    Resolves: #1202011
  - Let plugin dir to be owned by -common


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-7
changelog:
  - Add dependency for semanage
  - Define SELinux context for files under /etc/my.cnf.d
    Related: #1203991
  - Add openssl as BuildRequires to run some openssl tests during build
    Related: #1189180


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-9
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207170


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.25-1
changelog:
  - Rebase to version 10.0.25
    Resolves: #1330445
    Also fixes: CVE-2016-2047 CVE-2016-0668 CVE-2016-0666 CVE-2016-0655
    CVE-2016-0651 CVE-2016-0650 CVE-2016-0649 CVE-2016-0648 CVE-2016-0647
    CVE-2016-0646 CVE-2016-0644 CVE-2016-0643 CVE-2016-0642 CVE-2016-0641
    CVE-2016-0640 CVE-2016-0616 CVE-2016-0610 CVE-2016-0609 CVE-2016-0608
    CVE-2016-0606 CVE-2016-0600 CVE-2016-0598 CVE-2016-0597 CVE-2016-0596
    CVE-2016-0546 CVE-2016-0505 CVE-2015-7744 CVE-2015-4913 CVE-2015-4895
    CVE-2015-4879 CVE-2015-4870 CVE-2015-4861 CVE-2015-4858 CVE-2015-4836
    CVE-2015-4830 CVE-2015-4826 CVE-2015-4819 CVE-2015-4816 CVE-2015-4815
    CVE-2015-4807 CVE-2015-4802 CVE-2015-4792


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.26-1
changelog:
  - Rebase to version 10.0.26
    Resolves: #1359868
    Also fixes: CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-5440


author: Michal Schorm <mschorm@redhat.com> - 1:10.0.28-5
changelog:
  - Rebase to 10.0.28
  - JdbcMariaDB.jar test removed
  - PCRE version check added
  - Tests blacklist updated
    Related: #1393306, #1396945
    Also fixes: CVE-2016-3492 CVE-2016-5612 CVE-2016-5616 CVE-2016-5624
                CVE-2016-5626 CVE-2016-5629 CVE-2016-5630 CVE-2016-6662
                CVE-2016-6663 CVE-2016-8283


author: Honza Horak <hhorak@redhat.com> - 1:10.0.31-1
changelog:
  - Rebase to 10.0.31
    Also fixes: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238
    CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3313
    CVE-2017-3317 CVE-2017-3318 CVE-2017-3291 CVE-2017-3302 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1463418
  - Fix mysql-prepare-db-dir for CVE-2017-3265
    Resolves: #1463413


author: Honza Horak <hhorak@redhat.com> - 1:10.0.32-1
changelog:
  - Update to 10.0.32
  - Remove mariadb-covscan-stroverflow.patch that was fixed upstream
  - Update bundled pcre version to 8.41
    Related: #1463415


author: Honza Horak <hhorak@redhat.com> - 1:10.0.33-3
changelog:
  - Use selinux for the mysqld_safe_helper also on RHEL-6
    Related: #1463417
  - Print the same messages as before when starting the service in SysV init,
    to not scare users
    Related: #1463411


author: Honza Horak <hhorak@redhat.com> - 25.3.12-10
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1466473
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed
    Related: #1466473


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.1.14-1
changelog:
  - Fixed selinux policy
  - Update to 10.1.14 (includes various bug fixes)
  - Add -h and --help options to galera_new_cluster
    Resolves: #1333007


author: Michal Schorm <mschorm@redhat.com> - 1:10.1.19-6
changelog:
  - Rebase to version 10.1.19
  - JdbcMariaDB.jar test removed
  - PCRE version check added
    Related: #1393306, #1396934
    Also fix: CVE-2016-3492 CVE-2016-5616 CVE-2016-5624 CVE-2016-5626
              CVE-2016-5629 CVE-2016-6662 CVE-2016-6663 CVE-2016-8283


author: Michal Schorm <mschorm@redhat.com> - 1:10.1.19-7
changelog:
  - Rebase to version 10.1.19
  - JdbcMariaDB.jar test removed
  - PCRE version check added
  - All test removed from blacklist, 2 new added to blacklist
    Related: #1393306, #1396934
    Also fix: CVE-2016-3492 CVE-2016-5616 CVE-2016-5624 CVE-2016-5626
              CVE-2016-5629 CVE-2016-6662 CVE-2016-6663 CVE-2016-8283


author: Honza Horak <hhorak@redhat.com> - 1:10.1.20-1
changelog:
  - Rebase to version 10.1.24
    Also fixes: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238
    CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3313
    CVE-2017-3317 CVE-2017-3318 CVE-2017-3291 CVE-2017-3302 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1463417
  - Fix mysql-prepare-db-dir for CVE-2017-3265
    Resolves: #1463412
  - Use correct directories to search for language files
    Resolves: #1406391
  - Fix SELinux context for the daemon
    Resolves: #1336806


author: Honza Horak <hhorak@redhat.com> - 1:10.1.26-1
changelog:
  - Update to 10.1.26
  - Remove mariadb-covscan-stroverflow.patch that was fixed upstream
  - Update bundled pcre version to 8.41
    Related: #1463417


author: Honza Horak <hhorak@redhat.com> - 25.3.20-2
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1415720
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed


author: Honza Horak <hhorak@redhat.com> - 1:10.2.7-4
changelog:
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Do not use mysql-wait-stop on RHEL-7 service files


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-2
changelog:
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Run mysql-prepare-db-dir as non-root


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-3
changelog:
  - Handle left-over files that do not uninstall
    Resolves: #1487292
  - Fix uninstalled directories
    Resolves: #1487292
  - Files outside of /opt/rh should be in syspath package
    Resolves: #1492645
  - Split mariadb package to more sub-packages to match upstream's RPM list
    Resolves: #1490419


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-4
changelog:
  - Fix issues found by rpmdiff, particularly:
    unexpanded macro %{mysqld_pid_dir} -- left-over from switching pid file dir,
    we can remove in new SCL
    jar files included in connect engine
    Related: #1455850


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-5
changelog:
  - Support MYSQLD_OPTS and _WSREP_NEW_CLUSTER env vars in init script,
    same as it is done in case of systemd unit file
    Related: #1455850


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.22-1
changelog:
  - Rebase to 10.2.22
    Resolves: #1510416
    Resolves: #1645934
  - Use downstream tmpfiles instead of the upstream one
  - Patch 2 upstreamed
  - Patch 8 obsolete - upstream started to use macros
  - Patch 40 upstreamed
  - Add patch for wsrep_recover_position function in mysqld_safe
    Resolves: #1694679
  - CVEs fixed: #1664048
    CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3156
    CVE-2018-3282 CVE-2018-3277 CVE-2018-3143 CVE-2018-3251 CVE-2018-3185
  - CVEs fixed: #1617946
    CVE-2018-3058 CVE-2018-3060 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066
  - CVEs fixed: #1572138
    CVE-2018-2755 CVE-2018-2759 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
    CVE-2018-2777 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786
    CVE-2018-2787 CVE-2018-2810 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819
    CVE-2018-3081
  - CVEs fixed: #1559064
    CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665
    CVE-2018-2668 CVE-2018-3133
  - CVEs fixed: #1558264
    CVE-2017-15365
  - CVEs fixed: #1558261
    CVE-2017-10268 CVE-2017-10378
  - CVEs fixed: #1640321
    CVE-2018-3174


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.29-1
changelog:
  - Rebase to 10.2.29
  - CVEs fixed: #1880308
    CVE-2019-2614 CVE-2019-2627 CVE-2019-2628
  - CVEs fixed: #1880310
    CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2758 CVE-2019-2805
  - CVEs fixed: #1880312
    CVE-2019-2938 CVE-2019-2974
  - CVEs fixed: #1880323
    CVE-2020-2922 CVE-2020-2780


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.32-1
changelog:
  - Rebase to 10.2.32
  - CVEs fixed: #1880332
    CVE-2020-13249
  - CVEs fixed: #1880323
    CVE-2020-2760 CVE-2020-2752 CVE-2020-2814 CVE-2020-2812


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.10-3
changelog:
  - Fix "-fstack-protector-strong" static analysis errors
    Resolves: #1624139
  - Add wsrep_sst_rsync_tunnel script, add README
    Resolves: #1650463
  - Fix few covscan issues
    Resolves: #1649707
  - Fix galera_new_cluster script
    Resolves: #1641663


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - Remove README.mysql-cnf as we don't ship example configuration files anymore
    Resolves: #1653318
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.13-4
changelog:
  - Enable testsuite during build
    Resolves: #1688529
  - Fix SPECfile problems
    Related: #1688392
  - Ship client plugins in SCL
    Resolves: #1689204


author: Honza Horak <hhorak@redhat.com> - 2.6.7-9
changelog:
  - Remove NFS register feature for questionable usage for DBs
  - Allow to skip tests during build
  - Simplify few SCL macros


author: Marek Skalicky <mskalick@redhat.com> 2.6.9-1
changelog:
  - Correct SELinux type for slc-helper script 
    Resolves: #1202013
  - Fix mongodb user HOME (Resolves: #1206157)
  - Upgrade to latest minor release 2.6.9 (Resolves: #1207118)


author: Marek Skalicky <mskalick@redhat.com> - 3.0.6-1
changelog:
  - Fixed systemd service PIDFile setting (#1231269)
  - Temporarily disable WiredTiger (FPC request to bundle it)
  - Enable c++11 (MongoDB requires it since 3.0.5)
  - Upgrade to version 3.0.6


author: Marek Skalicky <mskalick@redhat.com> - 3.0.6-2
changelog:
  - Enable bundled WiredTiger
    (FPC ticket - https://fedorahosted.org/fpc/ticket/562,
     upstream discussion - https://groups.google.com/forum/#!topic/mongodb-dev/31FQSo4KVCI)


author: Marek Skalicky <mskalick@redhat.com> - 3.2.1-1
changelog:
  - Configuration files updated
    (mongod and mongos also listen on ipv6 localhost by default)
  - test subpackage contains resmoke.py tool instead of smoke.py
  - Upgrade to latest minor upgrade 3.2.1


author: Marek Skalický <mskalick@redhat.com> - 1.60.0-2
changelog:
  - disable using libquadmath (gcc in RHEL6 does not provide)
  - Disable container library - it contains typedef redefinition
    which fails with gcc 4.4 in RHEL6


author: Marek Skalický <mskalick@redhat.com> - 1.2-2
changelog:
  - Rebase to libunwind 1.2 from Fedora 27 and convert it to SCL
  - Do not install man pages - latex2man is not RHEL and it is needed
    to regenerate manpages (libunwind is only dependency of rh-mongodb34
    collection and using it for other purposes is not supported)


author: Remi Collet <remi@fedoraproject.org> - 1.6.0-1
changelog:
  - update to 1.6.0
  - add fix for https://jira.mongodb.org/browse/CDRIVER-2042
    from https://github.com/mongodb/mongo-c-driver/pull/421


author: Remi Collet <remi@fedoraproject.org> - 1.6.1-2
changelog:
  - rebuild with new upstream tarball
  - add examples in devel documentation
  - use patch instead of sed hacks for rpm specific changes


author: Marek Skalický <mskalick@redhat.com> - 1.6.3-2
changelog:
  - Rebase to mongo-c-driver from Fedora 27 and convert it to SCL
  - disable man pages (RHEL does not contain new enough sphinx)


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.1.2-3
changelog:
  - Remove ExclusiveArch. While a MongoDB instance is little endian only, this is a client
  - Build with openssl 1.0


author: Marek Skalický <mskalick@redhat.com> - 3.4.5-0.2.git4d4d965
changelog:
  - Build also mongoreplay
  - patch vendored dependency github.com/spacemonkeygo/spacelog to use syscall.Dup3


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - gp-Use-initial-exec-tls-for-libunwind-s-recursion-flag.patch [bz#1339710]
  - Resolves: bz#1339710
    (initalization of 'recursive' tls variable in libunwind stack capturer occasionally triggers deadlock in ceph)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - Rebase to 2.6.1 [bz#1431240]
  - Removed libunwind usage [bz#1467203]
  - Resolves: bz#1431240 
    (gperftools fails to build on s390x, lacks s390x support)
  - Resolves: bz#1467203
    (Please, remove libunwind from the gperftools-libs (and 389-ds-base) requirements)


author: Marek Skalicky <mskalick@redhat.com> - 0.5.1-10
changelog:
  - Fixed rh-mongodb32 buildrequires boost library from collection
  - Fixed pkgconfig directory ownership


author: Honza Horak <hhorak@redhat.com> - 5.6.23-7
changelog:
  - Do not use system libedit
    Related: #1202016
  - Daemon wrapper to run process with proper SELinux context
    Resolves: #1202016


author: Honza Horak <hhorak@redhat.com> - 5.6.23-9
changelog:
  - Add dependency for semanage
  - Define SELinux context for files under /etc/my.cnf.d
    Related: #1203991


author: Matej Muzila <mmuzila@redhat.com> - 5.6.24-1
changelog:
  - Update to MySQL 5.6.24 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  - Resolves: #1214590
  - Also fixes: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
      CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573


author: Honza Horak <hhorak@redhat.com> - 5.6.24-2
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207514


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.25-1
changelog:
  - Update to MySQL 5.6.25 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html
  - Resolves: #1247025


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.32-1
changelog:
  - Update to MySQL 5.6.32, which contains various security fixes
    (http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html)
  - Resolves: #1359623


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.33-1
changelog:
  - Update to MySQL 5.6.33, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html)
    Resolves: #1384962


author: Honza Horak <hhorak@redhat.com> - 5.6.34-1
changelog:
  - Update to MySQL 5.6.34, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html)
    Related: #1384962


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.33-1
changelog:
  - Update to MySQL 5.6.33, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html)
    Resolves: #1384963


author: Honza Horak <hhorak@redhat.com> - 5.6.34-1
changelog:
  - Update to MySQL 5.6.34, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html)
    Related: #1384963


author: Michal Schorm <mschorm@redhat.com> - 5.6.36-1
changelog:
  - Udate to MySQL 5.6.36, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  - CVEs fixed by this commit, #1445525:
    CVE-2017-3302 CVE-2017-3305/Riddle CVE-2016-5483/CVE-2017-3600
    CVE-2017-3308 CVE-2017-3309 CVE-2017-3450 CVE-2017-3452
    CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3599
  - CVEs fixed by this commit, #1445533:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257
    CVE-2017-3258 CVE-2017-3273 CVE-2017-3313 CVE-2017-3317
    CVE-2017-3318 CVE-2017-3291
  - CVEs fixed by this commit, #1445537:
    CVE-2017-3312 CVE-2017-3265
  - 'force' option for 'rm' removed in specfile
  - Testsuite extended by '--big-test' option
  - Following tests were disabled, for they started to fail or are unstable:
    main.events_2
  - Resolves: #1452469; MD5 in FIPS mode


author: Michal Schorm <mschorm@redhat.com> - 5.6.36-2
changelog:
  - Previous CVE fix was incomplete, fixed now
  - CVEs fixed by this commit, #1445537:
    CVE-2017-3265
  - Resolves: #1445537


author: Honza Horak <hhorak@redhat.com> - 5.6.37-5
changelog:
  - Remove the attempt to implement mysqld@.service, because mysqld_safe
    is not capable of keeping arguments order as mysqld expects
    Reverts: #1452518


author: Michal Schorm <mschorm@redhat.com> - 5.6.36-1
changelog:
  - Udate to MySQL 5.6.36, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  - CVEs fixed by this commit, #1445524:
    CVE-2017-3302 CVE-2017-3305/Riddle CVE-2016-5483/CVE-2017-3600
    CVE-2017-3308 CVE-2017-3309 CVE-2017-3450 CVE-2017-3452
    CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3599
  - CVEs fixed by this commit, #1445534:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257
    CVE-2017-3258 CVE-2017-3273 CVE-2017-3313 CVE-2017-3317
    CVE-2017-3318 CVE-2017-3291
  - CVEs fixed by this commit, #1445538:
    CVE-2017-3312 CVE-2017-3265
  - 'force' option for 'rm' removed in specfile
  - Testsuite extended by '--big-test' option
  - Following tests were disabled, for they started to fail or are unstable:
    main.events_2
  - Resolves: #1351791; MD5 in FIPS mode


author: Honza Horak <hhorak@redhat.com> - 5.6.37-5
changelog:
  - Remove the attempt to implement mysqld@.service, because mysqld_safe
    is not capable of keeping arguments order as mysqld expects
    Reverts: #1449695


author: Honza Horak <hhorak@redhat.com> - 5.6.38-1
changelog:
  - Update to 5.6.38
    Also fixes CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276
    CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294 CVE-2017-10314
    CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
    Resolves: #1505112


author: Michal Schorm <mschorm@redhat.com> - 5.6.39-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-39.html
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533831
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2562 CVE-2018-2573 CVE-2018-2583
              CVE-2018-2590 CVE-2018-2591 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640
              CVE-2018-2645 CVE-2018-2647 CVE-2018-2665 CVE-2018-2668


author: Michal Schorm <mschorm@redhat.com> - 5.6.39-1
changelog:
  - Rebase to MySQL 5.6.39, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-39.html
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533831
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2562 CVE-2018-2573 CVE-2018-2583
              CVE-2018-2590 CVE-2018-2591 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640
              CVE-2018-2645 CVE-2018-2647 CVE-2018-2665 CVE-2018-2668


author: Michal Schorm <mschorm@redhat.com> - 5.6.40-1
changelog:
  - Rebase to MySQL 5.6.40, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-40.html
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
  - CVE fixes: #1571242
              CVE-2018-2755 CVE-2018-2758 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
              CVE-2018-2773 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787
              CVE-2018-2805 CVE-2018-2813 CVE-2018-2817 CVE-2018-2818 CVE-2018-2819
    Resolves: rhbz#1571242


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Honza Horak <hhorak@redhat.com> - 5.7.11-1
changelog:
  - Update to 5.7.11
    Thanks to Norvald H. Ryeng
    Removing tar ball with boost and using mysql tar ball with boost bundled


author: Honza Horak <hhorak@redhat.com> - 5.7.15-1
changelog:
  - Update to MySQL 5.7.15, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html
    Resolves: #1376457
  - Adjust list of problematic tests from Fedora


author: Jakub Dorňák <jdornak@redhat.com> - 5.7.16-1
changelog:
  - Udate to MySQL 5.7.16, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-16.html
    Resolves: #1376457


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-1
changelog:
  - Udate to MySQL 5.7.18, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
  - CVEs fixed by this commit, #1445528:
    CVE-2016-5483/CVE-2017-3600 CVE-2017-3308 CVE-2017-3309
    CVE-2017-3331 CVE-2017-3450 CVE-2017-3453 CVE-2017-3454
    CVE-2017-3455 CVE-2017-3456 CVE-2017-3457 CVE-2017-3458
    CVE-2017-3459 CVE-2017-3460 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3465 CVE-2017-3467
    CVE-2017-3468 CVE-2017-3599
  - CVEs fixed by this commit, #1445517:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3251
    CVE-2017-3256 CVE-2017-3257 CVE-2017-3258 CVE-2017-3273
    CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 CVE-2017-3319
    CVE-2017-3320 CVE-2017-3291
  - CVEs fixed by this commit, #1445521:
    CVE-2017-3312
  - 'force' option for 'rm' removed in specfile
  - Sample my-*.cnf are gone (removed by upstream)
  - Testsuite extended by '--big-test' option
  - Fixed SCL exit code processing ('set -e')
  - Following tests were disabled, for they started to fail or are unstable:
    main.datadir_permission main.m_i_db main.grant_user_lock
  - Resolves: #1452514; MD5 in FIPS mode


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-2
changelog:
  - Previous CVE fix was incomplete, fixed now
  - CVEs fixed by this commit, #1445521:
    CVE-2017-3312
  - Resolves: #1445521


author: Honza Horak <hhorak@redhat.com> - 5.7.18-2
changelog:
  - Run mysqld with correct context
    Resolves: #1466474
  - Work-around for #1172683 is not needed any more, SELinux context is
    properly defined for mysqld_safe-scl-helper binary in selinux-policy
    package already.
    However, what we really need is context of mysqld,
    not mysqld_safe, so using mysqld-scl-helper instead and defining own
    context for this file.
    Related: #1466474
  - Do not run mysql-check-socket script as mysql user, since then it
    cannot see other processes' open files, as per see fuser(1) man page.
    Since the script only reads data, running it as root on RHEL-6 does not
    cause any security issues.
    Resolves: #1466477


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-1
changelog:
  - Udate to MySQL 5.7.18, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
  - CVEs fixed by this commit, #1445527:
    CVE-2016-5483/CVE-2017-3600 CVE-2017-3308 CVE-2017-3309
    CVE-2017-3331 CVE-2017-3450 CVE-2017-3453 CVE-2017-3454
    CVE-2017-3455 CVE-2017-3456 CVE-2017-3457 CVE-2017-3458
    CVE-2017-3459 CVE-2017-3460 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3465 CVE-2017-3467
    CVE-2017-3468 CVE-2017-3599
  - CVEs fixed by this commit, #1445518:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3251
    CVE-2017-3256 CVE-2017-3257 CVE-2017-3258 CVE-2017-3273
    CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 CVE-2017-3319
    CVE-2017-3320 CVE-2017-3291
  - CVEs fixed by this commit, #1445520:
    CVE-2017-3312
  - 'force' option for 'rm' removed in specfile
  - Sample my-*.cnf are gone (removed by upstream)
  - Testsuite extended by '--big-test' option
  - Fixed SCL exit code processing ('set -e')
  - Following tests were disabled, for they started to fail or are unstable:
    main.datadir_permission main.m_i_db main.grant_user_lock
  - Resolves: #1449689; MD5 in FIPS mode


author: Honza Horak <hhorak@redhat.com> - 5.7.18-2
changelog:
  - Run mysqld with correct context
    Resolves: #1461102
  - Work-around for #1172683 is not needed any more, SELinux context is
    properly defined for mysqld_safe-scl-helper binary in selinux-policy
    package already.
    However, what we really need is context of mysqld,
    not mysqld_safe, so using mysqld-scl-helper instead and defining own
    context for this file.
    Related: #1461102
  - Do not run mysql-check-socket script as mysql user, since then it
    cannot see other processes' open files, as per see fuser(1) man page.
    Since the script only reads data, running it as root on RHEL-6 does not
    cause any security issues.
    Resolves: #1461445


author: Honza Horak <hhorak@redhat.com> - 5.7.20-1
changelog:
  - Update to MySQL 5.7.20, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html
    Also fixes: CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276
                CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294
                CVE-2017-10314 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
    Resolves: #1505114


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.21-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
  - Add rpcgen to buildrep
  - Add support for libtirpc
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533832
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2565 CVE-2018-2573 CVE-2018-2576
              CVE-2018-2583 CVE-2018-2586 CVE-2018-2590 CVE-2018-2600 CVE-2018-2612
              CVE-2018-2622 CVE-2018-2640 CVE-2018-2645 CVE-2018-2646 CVE-2018-2647
              CVE-2018-2665 CVE-2018-2667 CVE-2018-2668


author: Honza Horak <hhorak@redhat.com> - 5.7.20-2
changelog:
  - Release bump for rebuilding on new arches
    Related: #1518842
  - Use gcc from devtoolset-7 for building because otherwise the build
    fails on aarch64 (RHEL-7 only)
    Related: #1518842


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.21-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
  - Add rpcgen to buildrep
  - Add support for libtirpc
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533834
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2565 CVE-2018-2573 CVE-2018-2576
              CVE-2018-2583 CVE-2018-2586 CVE-2018-2590 CVE-2018-2600 CVE-2018-2612
              CVE-2018-2622 CVE-2018-2640 CVE-2018-2645 CVE-2018-2646 CVE-2018-2647
              CVE-2018-2665 CVE-2018-2667 CVE-2018-2668


author: Honza Horak <hhorak@redhat.com> - 5.7.24-1
changelog:
  - Update to 5.7.24
    Also fixes the following CVEs:
    CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
    CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
    CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779
    Resolves: #1642523
    CVE-2018-3054 CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 CVE-2018-3061
    CVE-2018-3062 CVE-2018-3064 CVE-2018-3065 CVE-2018-3066 CVE-2018-3070
    CVE-2018-3071 CVE-2018-3077 CVE-2018-3081
    Resolves: #1643060
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162
    CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174
    CVE-2018-3282 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3133
    CVE-2018-3143 CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3185
    CVE-2018-3155
    Resolves: #1643049


author: Michal Schorm <mschorm@redhat.com> - 5.7.22-1
changelog:
  - Rebase to 5.7.22 version
  - CVE fixes: #1568963
              CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
              CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
              CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 CVE-2018-2780
              CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786 CVE-2018-2787
              CVE-2018-2810 CVE-2018-2812 CVE-2018-2813 CVE-2018-2816 CVE-2018-2817
              CVE-2018-2818 CVE-2018-2819 CVE-2018-2839 CVE-2018-2846


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 8.0.11-2
changelog:
  - MySQL 8.0 has notify support
  - SQL restart command needs MYSQLD_PARENT_PID=1
  - Increase LimitNOFILE
  - Disable symbolic links is default (and option deprecated)
  - Move mysqld to /usr/bin, with mysqld_safe gone there no reason
    to have mysqld in libexec
  - FIPS mode is now supported:
     https://dev.mysql.com/doc/refman/8.0/en/fips-mode.html
  - Remove legacy embedded refs from cnf files
  - Clean up patches: re-numbering and removing
  - Recommend to use systemctl edit to modify service files


author: Honza Horak <hhorak@redhat.com> - 8.0.11-5
changelog:
  - Move log file to a directory owned by mysql user
    Resolves: #1590369
  - Use explicitly openssl-devel as dependency for -devel sub-package


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-1
changelog:
  - Rebase to MySQL 8.0.12
  - Fix the SYS_NICE capabilities
    Related: #1540946
  - Add requires for the semanage binary
  - CVEs fixed: CVE-2018-3054 CVE-2018-3056 CVE-2018-3060 CVE-2018-3062
    CVE-2018-3064 CVE-2018-3065 CVE-2018-3077 CVE-2018-3081 CVE-2018-3067
    CVE-2018-3073 CVE-2018-3074 CVE-2018-3075 CVE-2018-3078 CVE-2018-3079
    CVE-2018-3080 CVE-2018-3082 CVE-2018-3084


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-3
changelog:
  - Add bundled ICU version
  - Add a patch for the 'mysql_com.h' header file
  - Use system mecab tool
  - Use RPATH for mysqld, so we can set capabilities for this binary
    and also ship a small SELinux policy to allow sys_nice capability
    Related: #1628814


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-6
changelog:
  - Fix the default configuration of the server, so it uses same authentication
    method as MySQL 5.7
    Resolves: #1631396


author: Michal Schorm <mschorm@redhat.com> - 8.0.13-1
changelog:
  - Rebase to 8.0.13
  - CVEs fixed: #1642059
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
    CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
    CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
    CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
    CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
    CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
    CVE-2018-3280 CVE-2018-3203 CVE-2018-3155


author: Honza Horak <hhorak@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
    CVEs fixed:
    Resolves: #1670206
    CVE-2019-2420 CVE-2019-2434 CVE-2019-2436 CVE-2019-2481 CVE-2019-2482
    CVE-2019-2486 CVE-2019-2494 CVE-2019-2495 CVE-2019-2502 CVE-2019-2507
    CVE-2019-2528 CVE-2019-2529 CVE-2019-2530 CVE-2019-2531 CVE-2019-2532
    CVE-2019-2533 CVE-2019-2534 CVE-2019-2535 CVE-2019-2536 CVE-2019-2539
    Resolves: #1707124
    CVE-2019-2580 CVE-2019-2581 CVE-2019-2584 CVE-2019-2585 CVE-2019-2587
    CVE-2019-2589 CVE-2019-2592 CVE-2019-2593 CVE-2019-2596 CVE-2019-2606
    CVE-2019-2607 CVE-2019-2614 CVE-2019-2617 CVE-2019-2620 CVE-2019-2623
    CVE-2019-2624 CVE-2019-2625 CVE-2019-2626 CVE-2019-2627 CVE-2019-2628
    CVE-2019-2630 CVE-2019-2631 CVE-2019-2635 CVE-2019-2636 CVE-2019-2644
    CVE-2019-2681 CVE-2019-2683 CVE-2019-2685 CVE-2019-2686 CVE-2019-2687
    CVE-2019-2688 CVE-2019-2689 CVE-2019-2691 CVE-2019-2693 CVE-2019-2694
    CVE-2019-2695 CVE-2019-2634
    Resolves: #1733478, #1733486
    CVE-2019-2800 CVE-2019-2822
    Other CVEs fixed in 8.0.17:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.18-1
changelog:
  - Rebase to 8.0.18
    Resolves: #1768196
    CVEs fixed:
    CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019-2946 CVE-2019-2957
    CVE-2019-2960 CVE-2019-2963 CVE-2019-2966 CVE-2019-2967 CVE-2019-2968
    CVE-2019-2974 CVE-2019-2982 CVE-2019-2991 CVE-2019-2993 CVE-2019-2997
    CVE-2019-2998 CVE-2019-3004 CVE-2019-3009 CVE-2019-3011 CVE-2019-3018
    CVE-2020-2752
  - Add libzstd-devel dependencies


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.19-1
changelog:
  - Rebase to 8.0.19
    Resolves: #1796897
    CVEs fixed:
    CVE-2020-2577 CVE-2020-2579 CVE-2020-2580 CVE-2020-2584 CVE-2020-2588
    CVE-2020-2589 CVE-2020-2660 CVE-2020-2679 CVE-2020-2686 CVE-2020-2694
    CVE-2020-2627 CVE-2020-2570 CVE-2020-2573 CVE-2020-2574


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.20-1
changelog:
  - Rebase to 8.0.20
    Resolves: #1830105
    CVEs fixed:
    CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020-2763 CVE-2020-2765
    CVE-2020-2770 CVE-2020-2774 CVE-2020-2779 CVE-2020-2780 CVE-2020-2804
    CVE-2020-2812 CVE-2020-2814 CVE-2020-2853 CVE-2020-2892 CVE-2020-2893
    CVE-2020-2895 CVE-2020-2896 CVE-2020-2897 CVE-2020-2898 CVE-2020-2901
    CVE-2020-2903 CVE-2020-2904 CVE-2020-2921 CVE-2020-2923 CVE-2020-2924
    CVE-2020-2925 CVE-2020-2926 CVE-2020-2928 CVE-2020-2930 CVE-2020-2760


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.21-1
changelog:
  - Rebase to 8.0.21
    Resolves: #1867720
    CVEs fixed:
    CVE-2020-14539 CVE-2020-14540 CVE-2020-14547 CVE-2020-14550 CVE-2020-14553
    CVE-2020-14559 CVE-2020-14567 CVE-2020-14568 CVE-2020-14575 CVE-2020-14576
    CVE-2020-14586 CVE-2020-14597 CVE-2020-14614 CVE-2020-14619 CVE-2020-14620
    CVE-2020-14623 CVE-2020-14624 CVE-2020-14631 CVE-2020-14632 CVE-2020-14633
    CVE-2020-14634 CVE-2020-14641 CVE-2020-14643 CVE-2020-14654 CVE-2020-14656
    CVE-2020-14663 CVE-2020-14678 CVE-2020-14680 CVE-2020-14697 CVE-2020-14702
    CVE-2020-14725 CVE-2020-14651
  - Use bundled libzstd and libevent
  - Check that we have correct versions in bundled(*) Provides
  - Remove re2 bundled dependency
  - Delete load_generator test, due to failing compilation


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-4
changelog:
  - drop explicit Requires for openssl, gd
  - run nginx under SCL environment from systemd service
  - fix module .conf path in nginx.conf
  - pass PERL5LIB, LD_LIBRARY_PATH from env when perl is loaded (#1421927)


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-7
changelog:
  - filter auto-provides from module subpackages (#1434349)
  - drop perl vendorarch directory ownership (#1434333)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.10.2-8
changelog:
  - Resolves: CVE-2017-7529 rh-nginx110-nginx: nginx: Integer overflow
    in nginx range filter module leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-8.1
changelog:
  - Resolves: #1648363 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1650091 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9
changelog:
  - Resolves: #1648226 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1648220 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9.1
changelog:
  - Resolves: #1744814 - CVE-2019-9511 rh-nginx110-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744327 - CVE-2019-9513 rh-nginx110-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745041 - CVE-2019-9516 rh-nginx110-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.12.1-1
changelog:
  - update to 1.12.1
  - Resolves: CVE-2017-7529 nginx: Integer overflow in nginx range filter module
    leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.12.1-2.1
changelog:
  - Resolves: #1648364 - CVE-2018-16845 rh-nginx112-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1650094 - CVE-2018-16844 rh-nginx112-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1650088 - CVE-2018-16843 rh-nginx112-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.12.1-3
changelog:
  - Resolves: #1648227 - CVE-2018-16843 rh-nginx112-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1648224 - CVE-2018-16844 rh-nginx112-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648221 - CVE-2018-16845 rh-nginx112-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.12.1-3.1
changelog:
  - Resolves: #1744816 - CVE-2019-9511 rh-nginx112-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744332 - CVE-2019-9513 rh-nginx112-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745039 - CVE-2019-9516 rh-nginx112-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - update to version 1.14.1
  - Resolves: #1648223 - CVE-2018-16845 rh-nginx114-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1648225 - CVE-2018-16844 rh-nginx114-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648228 - CVE-2018-16843 rh-nginx114-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1.1
changelog:
  - Resolves: #1744818 - CVE-2019-9511 rh-nginx114-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744330 - CVE-2019-9513 rh-nginx114-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745043 - CVE-2019-9516 rh-nginx114-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - update to version 1.14.1
  - Resolves: #1650092 - CVE-2018-16843 rh-nginx114-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1650093 - CVE-2018-16844 rh-nginx114-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648365 - CVE-2018-16845 rh-nginx114-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-3
changelog:
  - Resolves: #1745696 - CVE-2019-9511 rh-nginx116-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745689 - CVE-2019-9513 rh-nginx116-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745668 - CVE-2019-9516 rh-nginx116-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-4.1
changelog:
  - Resolves: #1848449 - CVE-2019-20372 rh-nginx116-nginx: nginx: HTTP request
    smuggling via error pages in http/ngx_http_special_response.c


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-5
changelog:
  - Resolves: #1798233 - CVE-2019-20372 rh-nginx116-nginx: nginx: HTTP request
    smuggling via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-6
changelog:
  - Resolves: #1963181 - CVE-2021-23017 rh-nginx116-nginx: nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-1
changelog:
  - Resolves: #1853206 - RFE: add collection for NGINX 1.18
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1963183 - CVE-2021-23017 rh-nginx118-nginx: nginx: Off-by-one
    in ngx_resolver_copy() when labels are followed by a pointer to a root 
    domain name


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.1.4-1
changelog:
  - Security update (https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/)
  - Fixes RHBZ#1463132 and RHBZ#1469706


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.3.0-1
changelog:
  - Update to 8.3.0
  - update V8 to 6.0
  - update libuv to 1.13.1
  - add bundled provides for npm modules
  - enable aarch64 builds


author: Zuzana Svetlikova <zsvtelik@redhat.com> - 8.9.4-2
changelog:
  - Resolves: RHBZ#1513560 #1542079
  - fix outdated minizlib dependency in npm node_modules tree
  - https://github.com/nodejs/node/pull/16509


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.1.0-1
changelog:
  - Initial v10 packaging
  - patch crypto/openssl 1.1.0 -> 1.0.2
  - remove scl prefixes from bundled dependencies
  - TODO: update patches and dependencies


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.10.0-1
changelog:
  - rebase to v10.10.0
  - update patches for openssl
  - TODO: remove useless comments, fix failing tests, update bundled provides


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.10.0-2
changelog:
  - Resolves: RHBZ#1584252
  - comment out native.req file to prevent conflict with other Node.js
  - installations (rhbz#1637922)


author: Jan Staněk <jstanek@redhat.com> - 10.16.3-1
changelog:
  - Rebase to version 10.16.3
  - Resolves: rhbz#1744307 rhbz#1744593 rhbz#1744732 rhbz#1744745 rhbz#1744773 rhbz#1744807 rhbz#1745090 rhbz#1745160


author: Jan Staněk <jstanek@redhat.com> - 10.16.3-1
changelog:
  - Rebase to version 10.16.3
  - Resolves: rhbz#1744308 rhbz#1744594 rhbz#1744733 rhbz#1744746 rhbz#1744774 rhbz#1744808 rhbz#1745091 rhbz#1745161


author: Honza Horak <hhorak@redhat.com> - 12.10.0-1.1
changelog:
  - Rebase to 12.10.0 and apply patches for openssl compatibility
    (patches prepared by Zuzana and Jan)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 12.16.1
changelog:
  - Resolves: RHBZ#1800402, RHBZ#1800401, RHBZ#1800377, RHBZ#1774113
  - also 1788310, 1788305, 1788301 (December security release)
  - also 1793482
  - use devtoolset-8, build with -j4
  - added uvwasi bundled dependency
  - revert more features #23188, #30637, #29598, #29292, #29489, #30055, #30053


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 12.16.1
changelog:
  - Resolves: RHBZ#1800404, RHBZ#1800403, RHBZ#1800378, RHBZ#1774113
  - Resolves: RHBZ#1803154, RHBZ#1803157, RHBZ#1803160 (nmp CVEs)
  - also 1793482
  - use devtoolset-8, build with -j4
  - added uvwasi bundled dependency
  - revert more features #23188, #30637, #29598, #29292, #29489, #30055, #30053


author: Jan Staněk <jstanek@redhat.com> - 12.22.2-1
changelog:
  - Rebase to 12.22.2
    Resolves: CVE-2021-22918, CVE-2021-23362, CVE-2021-27290, CVE-2021-33502
  - Drop upstreamed deps-y18n-address-prototype-pollution-issue.patch


author: Jan Staněk <jstanek@redhat.com> - 12.22.4-1
changelog:
  - Rebase to 12.22.4 with additional fixes (http2-update-handling-of-streams-on-rst_stream-frames.patch)
    Resolves: CVE-2021-22930
  - Backport fix for CVE-2021-23343 in bundled(nodejs-path-parse)
    Resolves: rhbz#1986744


author: Jan Staněk <jstanek@redhat.com> - 12.22.12-1
changelog:
  - Rebase to last upstream release
    Resolves: CVE-2021-37701 CVE-2021-37712 CVE-2021-22960 CVE-2021-22959
    Resolves: CVE-2021-3918 CVE-2021-44531 CVE-2021-44532 CVE-2021-44533
    Resolves: CVE-2022-21824 CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 12.22.12-2
changelog:
  - Re-create patch for CVE-2021-44906 and apply to all found bundled dependencies
    Resolves: rhbz#2073596


author: Jan Staněk <jstanek@redhat.com> - 14.17.2-1
changelog:
  - Rebase to 14.17.2
    Resolves: CVE-2021-22918, CVE-2021-23362, CVE-2021-27290, CVE-2021-33502
  - Remove upstreamed deps-y18n-CVE-2020-7774.patch


author: Jan Staněk <jstanek@redhat.com> - 14.17.4-1
changelog:
  - Rebase to 14.17.4 with additional fixes (update-handling-on-rst_stream-frames.patch)
    Resolves: CVE-2021-22930
  - Patch bundled(nodejs-path-parse) for CVE-2021-23343
    Resolves: rhbz#1986745


author: Jan Staněk <jstanek@redhat.com> - 14.17.6-1
changelog:
  - Rebase to 14.17.6
    Resolves: rhbz#2031767 rhbz#2031769
  - Drop CVE-2021-23343-path-parse-redos.patch: fixed upstream


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Tomas Hrcka <thrcka@redhat.com> - 4.3.0-5
changelog:
  - New upstream release 4.3.0
  - https://nodejs.org/en/blog/release/v4.3.0/
  - Build with bundled openssl, this will be reverted ASAP
  - Unbundled http-parser


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.6.2-4
changelog:
  - Resolves: #1392914
  - Update to 4.6.2
  - Modified/fixed/refactored patches
  - http tests were failing, had to update http-parser too


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.8.4-2
changelog:
  - Resolves: RHBZ#1476314
  - backport https://github.com/nodejs/node/commit/e3ef382f357d2bd12e7429711936aa79cc1d7699
  - fix segfaulting npm


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.8.4-2
changelog:
  - Resolves: RHBZ#1476315
  - backport https://github.com/nodejs/node/commit/e3ef382f357d2bd12e7429711936aa79cc1d7699
  - fix segfaulting npm


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-2
changelog:
  - Rebuild from zvetlik/rh-nodejs6
  - newer releases have problems with debug
  - add procps-ng for tests
  - remove unused patches


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476317
  - turn off lots of tests (mainly https and tls)
  - update to latest v6.x version (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)
  - add lldbinit


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476316
  - turn off lots of tests (mainly https and tls)
  - update to latest v6.x version (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)
  - add lldbinit


author: Jan Staněk <jstanek@redhat.com> - 8.16.1-1
changelog:
  - Rebase to 8.16.1
  - Resolves: rhbz#1744305 rhbz#1744591 rhbz#1744734 rhbz#1744747 rhbz#1744771 rhbz#1744809 rhbz#1745092 rhbz#1745158


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Jan Kaluza <jkaluza@redhat.com> - 4.0.50-5
changelog:
  - use /var/run/passenger instead of /tmp for temporary directory
  - use rpath to find libev and libev-eio


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Another COW violation (CPAN RT#98069)
    - Misleading nesting/indentation found by Coverity (CPAN RT#95405)


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Silence more compiler warnings
    - Disable running of 07bufsize.t by default; COMPRESS_ZLIB_RUN_MOST needs to
      be set to run it, which makes life more bearable on legacy platforms


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Paul Howarth <paul@city-fan.org> - 0.402-1
changelog:
  - Update to 0.402 (significant and slightly incompatible update - see Changes)
  - This release by REHSACK → update source URL
  - Classify buildreqs by usage
  - Modernize spec as this isn't going to anywhere older than F-22


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - Skip pairmap()'s MULTICALL implementation 5.8.9/5.10.0 as it doesn't work
      (CPAN RT#87857)
    - Comment on the fact that package "0" is defined but false (CPAN RT#88201)
    - TODO test in t/readonly.t now passes since 5.19.3 (CPAN RT#88223)
    - Added any, all, none, notall list reduction functions (inspired by
      List::MoreUtils)
    - Added List::Util::product()
    - Added Scalar::Util::unweaken()
    - Avoid C99/C++-style comments in XS code
    - Fix dualvar tests for perl 5.6; fix skip() test counts in dualvar.t
    - Neater documentation examples of other functions that can be built using
      reduce
    - Implement reduce() and first() even in the absence of MULTICALL
    - Various documentation changes/updates
    - Correct uses of overload operators in unit tests (CPAN RT#91969)


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Do not change the string arg in XS, use copy instead (CPAN RT#96893)
    - Add README make target
    - Add more distribution metadata
  - This release by ETHER → update source URL
  - Update debugger patch (CPAN RT#96893)
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Copy the contents of the %DB::sub entry if it exists; fixes
      Devel::NYTProf's anon sub handling (CPAN RT#50524)
  - Drop upstreamed debugger patch
  - Drop EL-5 compatibility since we need Devel::CheckBin, which can't be
    built for EPEL-5 or EPEL-6


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Move variable declaration to fix warning under
      -Werror=declaration-after-statement, to allow compilation under MSVC (GH#3)
    - Converted distribution packaging to Dist::Zilla
    - Fix licence in LICENSE and pod
  - Package new upstream CONTRIBUTING and LICENSE files
  - Classify buildreqs by usage


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.9-6
changelog:
  - Fixed file conflict with others Perl SCLs
  - Update local path in default perl.conf
  - Resolves: rhbz#1227192, rhbz#1210621


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-8
changelog:
  - Register a collection into the httpd environment (bug #1382514)
  - Pass SCL environment to subprocesses (bug #1382514)


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-10
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626273)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.035-3
changelog:
  - Remove using of iconv, because it is not needed (bug #1368046)
  - Fix default value for nossl option (bug #1366773)


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Paul Howarth <paul@city-fan.org> - 2:1.23-1
changelog:
  - Update to 1.23
    - Fixed several issues with the handling of non-integer values passed to
      from_epoch() (GH#11)
      - This method was simply broken for negative values, which would end up
        being incremented by a full second, so for example -0.5 became 0.5
      - The method did not accept all valid float values; specifically, it did
        not accept values in scientific notation
      - Finally, this method now rounds all non-integer values to the nearest
        millisecond, which matches the precision we can expect from Perl itself
        (53 bits) in most cases
    - Make all DateTime::Infinite objects return the system's representation of
      positive or negative infinity for any method that returns a number or
      string representation (year(), month(), ymd(), iso8601(), etc.); previously
      some of these methods could return "Nan", "-Inf--Inf--Inf", and other
      confusing outputs (CPAN RT#110341)


author: Paul Howarth <paul@city-fan.org> - 2:1.24-1
changelog:
  - Update to 1.24
    - The last release partially broke $dt->time; if you passed a value to use
      as unit separator, it was ignored (CPAN RT#112585)


author: Paul Howarth <paul@city-fan.org> - 2:1.25-1
changelog:
  - Update to 1.25
    - DateTime->from_object would die if given a DateTime::Infinite object; now
      it returns another DateTime::Infinite object (CPAN RT#112712)
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.27-1
changelog:
  - Update to 1.27
    - Added an environment variable PERL_DATETIME_DEFAULT_TZ to globally set the
      default time zone (GH#14); using this is very dangerous - be careful!
  - BR: perl-generators


author: Paul Howarth <paul@city-fan.org> - 2:1.28-1
changelog:
  - Update to 1.28
    - Fixed handling of some floating point epochs; since DateTime treated the
      epoch like a string instead of a number, certain epochs with a non-integer
      value ended up treated like integers (Perl is weird) (GH#15, fixes GH#6)


author: Paul Howarth <paul@city-fan.org> - 2:1.33-1
changelog:
  - Update to 1.33
    - When you pass a locale to $dt->set you will now get a warning suggesting
      you should use $dt->set_locale instead (CPAN RT#115420)
    - Added support for $dt->truncate( to => 'quarter' ) (GH#17)
    - Fixed the $dt->set docs to say that you cannot pass a locale (even though
      you can but you'll get a warning) and added more docs for $dt->set_locale
    - Require DateTime::Locale 1.05
    - Require DateTime::TimeZone 2.00
  - Take advantage of NO_PACKLIST option in recent EU:MM


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add get_winsize and set_winsize
    - Explicitly drop support for Win32 (CPAN RT#77813)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add support for PERL_MM_OPT
    - Fix typo in compiler detection error message (CPAN RT#75649)
    - Fix "redefinition of typedef" errors with v5.19.4 and above
  - Classify buildreqs by usage


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.21-1
changelog:
  - Upstream update.
  - Reflect Attribute::Params::Validate having been dropped from
    Params::Validate.
  - Add %license.


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561102)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561102)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561101)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561101)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-381
changelog:
  - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653529)
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c (bug #1653524)
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c (bug #1653526)
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c (bug #1653521)


author: Petr Pisar <ppisar@redhat.com> - 2.0.10-10
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626275)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.41-1
changelog:
  - Update to 1.41
    - The DateTime->add and ->subtract methods now accept DateTime::Duration
      objects; this used to work by accident but is now done intentionally, with
      docs and tests (GH#45)


author: Paul Howarth <paul@city-fan.org> - 2:1.42-1
changelog:
  - Update to 1.42
    - The DateTime::Duration->add and ->subtract methods now accept
      DateTime::Duration objects; this used to work by accident but is now done
      intentionally, with docs and tests (GH#50)


author: Paul Howarth <paul@city-fan.org> - 2:1.43-1
changelog:
  - Update to 1.43
    - Added a small optimization for boolification overloading: rather than
      relying on a fallback to stringification, we now return true directly,
      which is a little faster in cases like "if ($might_be_dt) { ... }"
    - The datetime() method now accepts a single argument to use as the separator
      between the date and time portion; this defaults to "T"
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 2:1.44-1
changelog:
  - Update to 1.44
    - Added a stringify() method, which does exactly the same thing as
      stringification overloading does (GH#58)
    - Added an is_last_day_of_month() method to indicate whether or not an object
      falls on the last day of its month (GH#60)


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %doc where possible
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Paul Howarth <paul@city-fan.org> - 0.61-1
changelog:
  - Update to 0.61
    - Avoid relying on current working directory being in @INC
    - Documentation typo fixes
  - Drop redundant Group: tag
  - Simplify find commands using -empty and -delete


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-395
changelog:
  - perl package installs all core modules, interpreter moved to
    perl-interpreter package, perl-core package is obsolete
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
    (bug #1464903)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-398
changelog:
  - Fix reporting malformed UTF-8 character (RT#131646)
  - Fix File::Glob rt131211.t test random failures
  - Fix t/op/hash.t test random failures
  - Parse caret variables with subscripts as normal variables inside ${...}
    escaping (RT#131664)
  - Do not display too many bytes when reporting malformed UTF-8 character
  - Fix select called with a repeated magical variable (RT#131645)
  - Fix error message for "our sub foo::bar" (RT#131679)
  - Fix executing arybase::_tie_it() in Safe compartement (RT#131588)
  - Fix handling attribute specification on our variables (RT#131597)
  - Fix splitting non-ASCII strings if unicode_strings feature is enabled (RT#130907)
  - Fix compiler warnings in code generated by ExtUtils::Constant
    (CPAN RT#63832, CPAN RT#101487)
  - Fix GCC version detection for -D_FORTIFY_SOURCE override (RT#131809)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-399
changelog:
  - Fix unreliable Time-HiRes tests (CPAN RT#122819)
  - Do not require $Config{libs} providers by perl-devel package (bug #1481324)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-404
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561100)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561100)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-405
changelog:
  - 5.26.3 bump (bug #1658969)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c)
  - Fix CVE-2018-18314 (heap based buffer overflow)


author: Petr Pisar <ppisar@redhat.com> - 2.0.10-13
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1623267)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Paul Howarth <paul@city-fan.org> - 2:1.51-1
changelog:
  - Update to 1.51
    - Fix CLDR formatting of 'S' pattern with more than 9 digits of precision;
      while we only store nanoseconds in the DateTime object we should still be
      able to handle an arbitrary number of digits properly (GH#89)
  - Modernize spec using %{make_build} and %{make_install}


author: Tom Stellard <tstellar@redhat.com> - 3.72-21
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.86-0.2.09
changelog:
  - Get libraries to link against from pkg-config
    https://github.com/radiator-software/p5-net-ssleay/pull/127


author: Paul Howarth <paul@city-fan.org> - 1.88-1
changelog:
  - Update to 1.88
    Summary of major changes since version 1.85
    - Mike McCauley has stepped down as maintainer: the new maintainers are Chris
      Novakovic, Heikki Vatiainen and Tuure Vartiainen
    - The source code has moved from the now-defunct Debian Subversion server
      (alioth.debian.org) to GitHub
      (https://github.com/radiator-software/p5-net-ssleay)
    - Net-SSLeay is provided under the terms of the Artistic License 2.0; this
      has been the case since version 1.66, but references to other licenses
      remained in the source code, causing ambiguity
    - Perl 5.8.1 or newer is now required to use Net-SSLeay; this has already
      been the case for some time in practice, as the test suite hasn't fully
      passed on Perl 5.6 for several years
    - Much-improved compatibility with OpenSSL 1.1.1, and improved support for
      TLS 1.3
    - Fixed a long-standing bug in cb_data_advanced_put() that caused memory
      leaks when callbacks were frequently added and removed
    - Support in the test suite for "hardened" OpenSSL configurations that set a
      default security level of 2 or higher (e.g., in the OpenSSL packages that
      ship with recent versions of Debian, Fedora and Ubuntu)


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Quiet compiler warning (GH#2)
    - Canonical repository moved to https://github.com/moose/Package-Stash-XS
  - Package new CONTRIBUTING file
  - Don't bother running the extra tests
  - Drop EL-5 support
    - Drop legacy Group: tag
    - Drop explicit buildroot cleaning in %install section
    - BR: perl-devel and perl(Variable::Magic) unconditionally
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.015-3
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-443
changelog:
  - Fix propagating non-string variables in an exception value (RT#134291)
  - Include trailing zero in scalars holding trie data (RT#134207)
  - Fix a use after free in /(?{...})/ (RT#134208)
  - Fix a use after free in debugging output of a collation
  - Fix file mode of a perl-example.stp example


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
changelog:
  - Fix a NULL pointer dereference in PerlIOVia_pushed()
  - Fix a crash when setting $@ on unwinding a call stack (RT#134266)
  - Fix parsing a denominator when parsing a Unicode property name
  - Fix a documentation about a future API change
  - Do not run File-Find tests in parallel


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
changelog:
  - Adjust spec file to rpm-build-4.15.0-0.rc1.1
  - Fix parsing a Unicode property name when compiling a regular expression
  - Fix a buffer overread when parsing a Unicode property while compiling
    a regular expression (RT#134133)
  - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
  - Fix a buffer overread when compiling a regular expression with many escapes
    (RT#134325)
  - Fix a buffer overflow when compiling a regular expression with many branches
    (RT#134329)
  - Correct a misspelling in perlrebackslash documentation (RT#134395)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-446
changelog:
  - Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
  - Fix a detection for futimes (RT#134432)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.1-447
changelog:
  - 5.30.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.1/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-448
changelog:
  - Fix overloading for binary and octal floats (RT#125557)
  - Fix handling undefined array members in Dumpvalue (RT#134441)
  - Fix taint mode documentation regarding @INC
  - Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
  - Fix an unintended upgrade to UTF-8 in the middle of a transliteration
  - Fix a race in File::stat() tests (GH#17234)
  - Fix a buffer overread when parsing a number (GH#17279)
  - Fix GCC 10 version detection (GH#17295)


author: Remi Collet <rcollet@redhat.com> - 5.6.5-4
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868
  - zip: integer overflow when processing ZIP archives CVE-2015-2331


author: Remi Collet <rcollet@redhat.com> - 5.6.5-5
changelog:
  - mod_php: filter libphp5.so out of provides #1212726
  - fpm: fix incorrect selinux contexts #1194337


author: Remi Collet <rcollet@redhat.com> - 5.6.5-8
changelog:
  - Phar: fix segmentation fault in Phar::convertToData on
    invalid file CVE-2015-5589
  - Phar: fix buffer overflow and stack smashing error in
    phar_fix_filepath CVE-2015-5590
  - Phar: fix files from archive can be extracted outside of
    destination directory using phar CVE-2015-6833
  - Phar: NULL pointer dereference in phar_get_fp_offset()
    CVE-2015-7803
  - Phar: uninitialized pointer in phar_make_dirstream()
    CVE-2015-7804
  - Xslt: fix NULL pointer dereference in XSLTProcessor class
    CVE-2015-6837 CVE-2015-6838
  - Core: fix use-after-free vulnerability in session
    deserializer CVE-2015-6835
  - Core:  fix multiple unserialization use-after-free issues
    CVE-2015-6834
  - Spl: fix dangling pointer in the unserialization of
    ArrayObject items CVE-2015-6832
  - Spl: fix Use After Free Vulnerability in unserialize()
    CVE-2015-6831
  - Soap: fix type confusion in SOAP serialize_function_call()
    CVE-2015-6836


author: Remi Collet <remi@fedoraproject.org> 5.6.4-2
changelog:
  - Update to 5.6.4
    http://www.php.net/releases/5_6_4.php
  - add sybase_ct extension (in mssql sub-package)
  - xmlrpc requires xml


author: Remi Collet <rcollet@redhat.com> 5.6.5-1
changelog:
  - Update to 5.6.5
    http://www.php.net/releases/5_6_5.php
  - FPM: enable ACL for Unix Domain Socket
  - Embdded: filter requires for libphp5-5.6.so
  - add register.content


author: Remi Collet <rcollet@redhat.com> - 7.1.5-2
changelog:
  - fix License, timelib is MIT
  - add upstream security patches for oniguruma CVE-2017-9224,
    CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - update to 7.2.7 for rh-php72 collection in RHSCL 7.2
  - FPM: add getallheaders, backported from 7.3


author: Remi Collet <rcollet@redhat.com> - 7.3.33-1
changelog:
  - rebase to 7.3.33 #2100753
  - fix uninitialized array in pg_query_params() leading to RCE
    CVE-2022-31625


author: Petr Kubat <pkubat@redhat.com> - 9.6.5-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 10.5-1
changelog:
  - update to 10.5 per release notes:
    https://www.postgresql.org/docs/10/static/release-10-4.html
    https://www.postgresql.org/docs/10/static/release-10-5.html


author: Patrik Novotný <panovotn@redhat.com> - 10.15-1
changelog:
  - Rebase to upstream release 10.15
    Resolves: CVE-2020-25695
    Resolves: CVE-2020-25694
    Resolves: CVE-2020-25696


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: CVE-2020-25695
    Resolves: CVE-2020-25694
    Resolves: CVE-2020-25696


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-7
changelog:
  - set the postgresql-ctl context in main package
  - rebase the postgresql-setup to v3.2 to fix --initdb for multiple
    postmasters scenario


author: Jozef Mlich <jmlich@redhat.com> - 9.4.4-1
changelog:
  - rebase to 9.4.4 due to security issues
    CVE-2015-3165 CVE-2015-3167 CVE-2015-3166
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.6-1
changelog:
  - update to 9.4.6 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-6.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.9-1
changelog:
  - update to 9.4.9 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-9.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-8.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.12-1
changelog:
  - update to 9.4.12 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-12.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-11.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-10.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.13-1
changelog:
  - update to 9.4.13 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-13.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.14-1
changelog:
  - update to 9.4.14 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-14.html


author: Honza Horak <hhorak@redhat.com> - 9.4.1-1
changelog:
  - Update to 9.4.1
    This also fixes CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1192910


author: Petr Kubat <pkubat@redhat.com> - 9.5.4-1
changelog:
  - Rebase to 9.5.4 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-4.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-3.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.7-1
changelog:
  - Rebase to 9.5.7 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-7.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-6.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.14-1
changelog:
  - update to 9.5.14 per release notes:
    https://www.postgresql.org/docs/9.5/static/release-9-5-10.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-11.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-12.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-13.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-14.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.1-1
changelog:
  - Rebase to 9.5.1 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-1.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.5.2-1
changelog:
  - Rebase to 9.5.2 (CVE-2016-3065) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.2-2
changelog:
  - fix upgrade path from rh-postgresql94 (rhbz#1334351)
  - fix path to binary directory in Makefile.regress (rhbz#1334706)


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.10-1
changelog:
  - update to 9.6.10 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-7.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-8.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-9.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-10.html


author: Patrik Novotný <panovotn@redhat.com> - 9.6.19-1
changelog:
  - Rebase to upstream release 9.6.19
    https://www.postgresql.org/docs/9.6/static/release-9-6-10.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-11.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-12.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-13.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-14.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-15.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-16.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-17.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-18.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-19.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.3-3
changelog:
  - fix provides to not include plugins as sonames
  - fix syspaths wrappers installation (spotted by Marek Skalický)
  - add *contrib-syspaths wrappers


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python34/root/usr/lib64/python3.4/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-10
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-11
changelog:
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-12
changelog:
  - Replace 512 bit dh key with a 1024 bit one (upstream change)
  - Python upstream issue #24985: https://bugs.python.org/issue24985
    python SSL test fails due to minimum key size being increased in OpenSSL
  Resolves: rhbz#1356506


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Updated to 3.4.2
  - Added scl-utils-build to Requires (rhbz#1144601)
  - Add pynche executable (rhbz#1094640)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-5
changelog:
  - Rename the patch for test imports to be the same as in RHEL 6 branch.
  - Fix failure in fips mode if index name is too long.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python35/root/usr/lib64/python3.5/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-11
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Updated %py_byte_compile macro
  Resolves rhbz#1374667


author: Tomas Orsava <torsava@redhat.com> - 3.12-1
changelog:
  - Updated to the current Fedora version
  - Removed Patch 0 as it is already patched in 3.12:
    http://pyyaml.org/ticket/247


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python36/root/usr/lib64/python3.6/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.12-1
changelog:
  - Update to 3.6.12 (rhbz#1873080)
  - Security fixes for CVE-2019-18348 (rhbz#1765148), CVE-2019-16935 (rhbz#1798002),
    CVE-2020-8492 (rhbz#1810620), CVE-2019-20907 (rhbz#1856545),
    CVE-2020-14422 (rhbz#1857276)
  - Fix faulthandler stack size
  - Reduce the number of tests running during the profile guided optimizations build
    and enable the optimizations for all the supported architectures


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-12
changelog:
  - Moved pythondeps-scl-35.sh and 2 macro definitions from the rh-python35-build
    subpackage here to the python-devel subpackage where it should be for
    dependant collections to build properly
  - Also defined the 2 macros in this spec file so they are available during the
    build of Python itself
  Resolves: rhbz#1422346


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-1
changelog:
  - Updated to the latest Fedora version 3.4.0
  - Renumbered Patch 1 to 2 to be in line with Fedora
  - Added Patch 1 from Fedora that fixes CVE-2013-7440 and CVE-2013-2099
  - Added Patch 3 from upstream for tests to pass without an active mongodb;
    We can't test pymongo with a running database like in Fedora, because in
    RHEL/RHSCLs it's packaged as a separate collection
  - Removed BuildRequires: python-nose as the test suite isn't using it any more


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-2
changelog:
  - Removed the commented out filter macros at the top of the specfile.
    While they were commented out, they still took effect since the macros still
    expanded. However, they were causing error messages in the buildlog [0] and
    causing the provides/requires generator script not to finish. Thus the
    packages were missing some of the required Provides and Requires tags.
    [0] warning: Ignoring invalid regex ^%{_scl_prefix}/.*$|%{_root_sysconfdir}/rpm/macros.rh-python36-config$
       (% signs were doubled to avoid rpm-lint warnings)


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Tomas Orsava <torsava@redhat.com> - 3.8.0-8
changelog:
  - Building with new gcc from devtoolset
  - Re-added dtrace and -fno-semantic-interposition
  - Resolves: rhbz#1671025


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-13
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1815645


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-15
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1817494


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.6-1
changelog:
  - Update to 3.8.6
  - Security fixes for CVE-2020-26116, CVE-2020-14422 and CVE-2019-20907
  Resolves: rhbz#1882438, rhbz#1883256, rhbz#1857277, rhbz#1856546


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.11-1
changelog:
  - Update to 3.8.11
  - Security fixes for CVE-2021-3426, CVE-2021-23336, CVE-2021-3177 and CVE-2020-27619
  Resolves: rhbz#1935913, rhbz#1928904, rhbz#1918168, rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.11-2
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Update to 3.8.13
  - Fix test suite issues with the latest expat security update
  Resolves: rhbz#2068592


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.6-1
changelog:
  - Update to 3.8.6
  - Security fixes for CVE-2020-26116, CVE-2020-14422 and CVE-2019-20907
  Resolves: rhbz#1885289, rhbz#1885287, rhbz#1885290, rhbz#1885296


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <rcollet@redhat.com> - 3.2.3-1
changelog:
  - rebase to 3.2.3 #1368102
  - fix redis-shutdown script
  - init script doesn't support load/force-reload option #1369495


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - provide redis-check-rdb as a symlink to redis-server
    add patch from https://github.com/antirez/redis/pull/3494
  - data and configuration should not be publicly readable #1374717
  - remove /var/run/redis with systemd
  - add man pages from https://github.com/antirez/redis/pull/3491 #1369821


author: Remi Collet <rcollet@redhat.com> - 3.2.13
changelog:
  - rebase to 3.2.13
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192


author: Remi Collet <rcollete@redhat.com> - 5.0.5-1
changelog:
  - rebase to 5.0.5
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.5-2
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Remi Collet <rcollete@redhat.com> - 6.0.16-2
changelog:
  - update to 6.0.16 for
    CVE-2021-32626 CVE-2021-32627 CVE-2021-32628 CVE-2021-32687
    CVE-2021-41099 CVE-2021-32675


author: Josef Stribny <jstribny@redhat.com> - 1.10.2-4
changelog:
  - Fix the .so name from * to cbson
  - Get rid of wrong .so provide on RHEL 6
    - Resolves: rhbz#1203138


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.6.beta5
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to 0.11.0
  - Add patch that fixes bignum operations on Ruby 2.0.


author: Jun Aruga <jaruga@redhat.com> - 9.0.6-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jun Aruga <jaruga@redhat.com> - 3.6.0-2
changelog:
  - Add openssl-devel dependency to enable HTTPS support.
  - Add regenerated parser logic.
  - Improve Ruby load path to run test suite.
  - Improve files section.


author: Pavel Valena <pvalena@redhat.com> - 0.3.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
  - Correct attributes for websocket_mask.so


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-2
changelog:
  - Fixed operating_system to properly install binary extensions.
  - Rebase patches to apply cleanly.
  - Fix PPC64LE support.
  - Fix -tcltk requires.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251465


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251466


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-18
changelog:
  - Upgrade to Ruby 2.2.9.
    Resolves: rhbz#1549646
    Resolves: CVE-2017-17405
    * Remove Patch7: rubygems-2.2.4-Limit-API-endpoint-to-original-security
      -domain.patch
      subsumed
    * Remove Patch8: rubygems-2.2.5-Fix-API-endpoint-domain-clamping.patch
      subsumed
    * Remove Patch9: ruby-2.2.3-dsym_fstrs-for-object-allocation-gc-phase.patch
      subsumed
    * Remove Patch10: ruby-2.3.0-test_gem_remote_fetcher.rb-get-rid-of-errors.patch
      subsumed
    * Remove Patch11: ruby-2.2.3-vm_args.c-protect-value-stack-from-calling-other
      -met.patch
      subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-19
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549646


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com>
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Jun Aruga <jaruga@redhat.com> - 2.5.0-5
changelog:
  - They are broken by recen tzdata update.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.3-6
changelog:
  - Update to Ruby 2.5.3.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563076
    Removed Patch11: ruby-2.5.0-parse.y-assignable_error.patch; subsumed
    Removed Patch12: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
    Removed Patch13: ruby-2.5.0-st.c-retry-operations-if-rebuilt.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir
    Resolves: rhbz#1602877


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-7
changelog:
  - Upgrade to Ruby 2.5.5.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-9
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952998
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1953001


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1701182
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950331
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-120
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Upgrade to Ruby 2.6.9.
    Resolves: rhbz#2056947
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Resolves: CVE-2020-36327


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-128
changelog:
  - Upgrade to Ruby 2.7.1.
    Resolves: rhbz#1826872
  - Call load builtin macro if it is defined, or call own load macro.


author: Vít Ondruch <vondruch@redhat.com> - 2.7.3-129
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947931
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950016


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-130
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: rhbz#1996669
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: rhbz#1996666
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: rhbz#1996668
  - Revert a commit changing CFLAGS to avoid failures in test_jit.rb.
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327
  - Fix some failing Bundler tests with old Git.


author: Jun Aruga <jaruga@redhat.com> - 1.2.1-1
changelog:
  - Update to pg 1.2.1.
  - Add marking lines at the start and end of the setup.log
  - Assign a random testing port.


author: Jun Aruga <jaruga@redhat.com> - 3.0.0-144
changelog:
  - Upgrade to Ruby 3.0.0.
    Resolves: rhbz#1903661
  - Skip the ssl tests for offline on Brew build environment.
  - Remove the rdoc symbolic files that are specific in SCL.


author: Jun Aruga <jaruga@redhat.com> - 3.0.0-145
changelog:
  - Fix the ruby systemtap file path.
    Resolves: rhbz#1932291
  - Revert removing the rdoc symbolic files that are specific in SCL.
  - Bundle RDoc into StdLib.
    Resolves: rhbz#1921719
  - Merge commits from Fedora rawhide branch.
    Related: rhbz#1903661


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-148
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
    Resolves: rhbz#1995172
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
    Resolves: rhbz#1995174
  - Fix StartTLS stripping vulnerability in Net::IMAP. (CVE-2021-32066)
    Resolves: rhbz#1995173
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
    Resolves: rhbz#1968497
  - Re-enable SSL tests.
  - Fix some failing Bundler tests with old Git.


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-2
changelog:
  - Add the basedir option to mysql_install_db to avoid an error on mariadb <= 5.5.64.
    Resolves: rhbz#1903661


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.6.4-3
changelog:
  - Change owner of thermostat-command-channel script to
    thermostat:thermostat. Resolves RHBZ#1379702


author: Jie Kang <jkang@redhat.com> - 1.6.4-9
changelog:
  - Use java-devel-openjdk requires instead of a hard
    require on java-1.7.0-openjdk. Resolves rhbz#1398232


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492
  - Allow MD5 in OpenSSL for tests.


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.8.beta5
changelog:
  - Don't install v8 scl macros, they should come in v8 scldevel subpackage
    - Resolves: rhbz#1065887


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
changelog:
  - Update to Ruby 2.0.0-p353
    - Fixes heap overflow in floating point parsing (CVE-2013-4164)
    - Resolves: rhbz#1033906


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
changelog:
  - Fix RubyGems test suite.
    Resolves: rhbz#1069184
  - Do not use bundled libyaml.
    Resolves: rhbz#1069107


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1071347


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164005
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164005
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164005


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
changelog:
  - Update to Ruby 2.0.0-p645.
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
         with-DESTDIR.patch; subsumed
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
        attack.patch; subsumed
    * Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
        CVE-2014-8080.patch; subsumed
    Resolves: rhbz#1070594


author: Augusto Mecking Caringi <acaringi@redhat.com> - 3.9-12
changelog:
  - fixed runtime dependencies (requires)
  - fixed service (systemd) related stuff
  - apply centos specific patch


author: Augusto Mecking Caringi <acaringi@redhat.com> - 3.9-15
changelog:
  - fixed problem related to listen_address and wait_for_service script
    function (#1507524)
  - remove wrong paths not included in SCL paths (#1507862)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.6-13
changelog:
  - Python 2 binary package renamed to python2-blist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: gil cattaneo <puntogil@libero.it> 1.6.5-0.12.git58097d9
changelog:
  - Added java bindings sub packages (rhbz#872103)
  - Minor changes to current guideline
  - Make -devel and -docs subpackages noarch


author: Todd Zullinger <tmz@pobox.com> - 2.11.1-3
changelog:
  - Remove unnecessary rsync requirement from git-core
  - Move gnome-keyring credential helper from git-core to git
  - Enable libsecret credential helper
  - Run git test suite
  - Use %{_mandir} in git/git-core file list filters
  - Fix version of emacs-git and emacs-git-el provides
  - Clean up contrib/{credential,subtree} to avoid cruft in git-core-doc
  - Fix a number of macro-in-comment warnings from rpmlint


author: Petr Stodulka <pstodulk@redhat.com> - 2.11.1-3
changelog:
  - remove non-ASCII characters from description and title of packages
  - fix requiremets
  - fix spec to be compatible for other systems
  - remove deprecated credential-gnome-keyring


author: Petr Stodulka <pstodulk@gmail.com> - 2.4.4-2
changelog:
  - git-svn - added requires for perl-Digest-MD5 (#1218176)
  - solve troubles with infinite loop due to broken symlink (probably
    shouldn't be problem here, but it's reproducible manually)
    (#1204193)


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 2.4.5-2
changelog:
  - Comply with modern Emacs packaging guidelines on recent Fedora
    No longer split out emacs-git and emacs-git-el sub-packages on recent Fedora
    Require emacs-filesystem on recent Fedora (#1234552)


author: Kees Monshouwer <km|monshouwer_com> 0.9.8-1
changelog:
  - Address reported security bug in chroot mode. Thanks to the
    "cPanel Security Team" for the discovery of this bug.
  - Improve chroot behavior in drop capability mode.


author: Remi Collet <remi@fedoraproject.org> - 3.2.0-0.7.RC1
changelog:
  - ignore tests/bug20636.phpt with IM 6.7.8.9
  - add fix for php 5.6 https://github.com/mkoppanen/imagick/pull/35


author: Remi Collet <remi@fedoraproject.org> - 3.3.0-0.2.RC1
changelog:
  - update to 3.3.0RC1
  - drop runtime dependency on pear, new scriptlets
  - set imagick.skip_version_check=1 in default configuration


author: Remi Collet <remi@fedoraproject.org> - 2.3.2-5
changelog:
  - sources from github, with test suite
  - run test suite when build using "--with tests" option
  - add upstream patch to fix crash when another extension calls
    call_user_function() during RINIT (e.g. phk)


author: Remi Collet <remi@remirepo.net> - 5.6.28-1
changelog:
  - update to 5.6.28 for security fix since 5.6.25
  - backport RETVAL_STRINGL_CHECK and RETURN_STRINGL_CHECK macros
  - backport safe_emalloc_string


author: Remi Collet <remi@fedoraproject.org> - 1.1.0-4
changelog:
  - add fix for PHP 7 compatibility
  - drop runtime dependency on pear, new scriptlets
  - don't install/register tests


author: Remi Collet <remi@fedoraproject.org> - 3.4.3-1
changelog:
  - update to 3.4.3 (stable for PHP 5 and 7)
  - add support for rh-php70 collection
  - drop support for php54 and php55 collections


author: Remi Collet <remi@remirepo.net> - 1.4.0-1
changelog:
  - update to 1.4.0 with libbson and libmongoc 1.9.2
  - enable snappy and zlib compression
  - build with --enable-mongodb-crypto-system-profile option


author: Remi Collet <remi@fedoraproject.org> - 3.1.0-1
changelog:
  - update to 3.1.0
  - open https://github.com/phpredis/phpredis/issues/1052 max version
  - open https://github.com/phpredis/phpredis/issues/1053 segfault
  - open https://github.com/phpredis/phpredis/issues/1054 warnings
  - open https://github.com/phpredis/phpredis/issues/1055 reflection
  - open https://github.com/phpredis/phpredis/issues/1056 32bits tests


author: Remi Collet <remi@fedoraproject.org> - 3.1.0-2
changelog:
  - test build for open upcoming 3.1.1
  - open https://github.com/phpredis/phpredis/issues/1060 broken impl
    with https://github.com/phpredis/phpredis/pull/1064
  - reed https://github.com/phpredis/phpredis/issues/1062 session php 7.1
    with https://github.com/phpredis/phpredis/pull/1063


author: Remi Collet <remi@fedoraproject.org> - 1.0.0-0.2.20160715gita64e3bf
changelog:
  - add minor fix for portability
  - add full reflection for all functions
  - open https://github.com/nrk/phpiredis/pull/53


author: Remi Collet <rcollet@redhat.com> - 0.8.0-0.2.rc1
changelog:
  - update to 0.8.0-rc1
  - rename from php-libsmbclient to php-smbclient
  - https://github.com/eduardok/libsmbclient-php/pull/26 rename


author: Remi Collet <remi@remirepo.net> - 7.0.27-2
changelog:
  - Fix null pointer dereference in imap_mail CVE-2018-19935
  - Fix imap_open allows to run arbitrary shell commands via
    mailbox parameter CVE-2018-19158


author: Remi Collet <remi@fedoraproject.org> - 3.0.1-2
changelog:
  - switch to pecl sources
  - enable test suite
  - open https://github.com/php-memcached-dev/php-memcached/pull/319
    fix test suite for 32bits build


author: Remi Collet <remi@remirepo.net> - 4.1.0~RC1-1
changelog:
  - update to 4.1.0RC1 (alpha)
  - open https://github.com/phpredis/phpredis/pull/1365
    use PHP_BINARY instead of php and allow override
  - report https://github.com/phpredis/phpredis/issues/1364
    missing files in pecl archive
  - add new redis.session.lock* options in provided configuration


author: Remi Collet <remi@remirepo.net> - 4.1.0~RC1-2
changelog:
  - test build with 7.3
  - open https://github.com/phpredis/phpredis/pull/1366
    Fix: Warning: time() expects exactly 0 parameters, 1 given ...


author: Remi Collet <remi@remirepo.net> - 5.0.1-1
changelog:
  - rename to php-pecl-redis5
  - update to 5.0.1
  - enable msgpack support
  - enable json support
  - update configuration for new options


author: Remi Collet <remi@remirepo.net> - 7.3.7-2
changelog:
  - fix partially uninitialized buffer returned by sodium_crypto_generichash_init
    see https://bugs.php.net/78510


author: Rob Crittenden <rcritten@redhat.com> - 1.2.5-1
changelog:
  - Update to upstream 1.2.5. Fixes single bug,
    http://www.calendarserver.org/changeset/15659
  - Include LICENSE since upstream dropped it from the tarball


author: Kamil Dudka <kdudka@redhat.com> - 7.21.5-3
changelog:
  - remove explicit dependency on keyutils-libs (reported by rpmlint)
  - update FSF address in COPYING-LGPL (detected by rpmlint)


author: Joe Orton <jorton@redhat.com> - 1.8.13-7
changelog:
  - move svnauthz to -tools; make svnauthz-validate a symlink
  - move svnmucc man page to -tools
  - restore dep on systemd (#1183873)


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.2.0-70.5
changelog:
  - Install setup complete stamp file for
    thermostat1-thermostat-storage.service
  - Resolves: RHBZ#1202300.


author: Jon VanAlten <jvanaltj@redhat.com> - 1.2.0-70.7
changelog:
  - Remove redundant symlinks to lucene jars
  - Resolves: RHBZ#1193828
  - Replace mongodb's deprecated userAdd with userCreate in thermostat-setup
  - Resolves: RHBZ#1193837


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.2.0-70.11
changelog:
  - Make deployment mechanism for the web endpoint using system
    tomcat work on RHEL-7.0 and RHEL-7.1. For RHEL-7.0 tomcat needs
    to get started via "service thermostat1-thermostat-tomcat start".
    On RHEL-7.1 it's "service tomcat@thermostat start".
  - Resolves: RHBZ#1215804


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-4
changelog:
  - multiple CVE fixes
  - CVE-2013-6639 CVE-2013-6640 CVE-2013-6650 
  - CVE-2013-6668 CVE-2014-1704 CVE-2014-5256


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-7
changelog:
  - Backport api for aborting on uncaught exception
  - https://github.com/joyent/node/commit/fbff7054a47551387a99244e2cf0631f30406798


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-8
changelog:
  - Backport Apply REPLACE_INVALID_UTF8 patch
  - https://github.com/joyent/node/commit/881ac26f27f4ac9585d66c8d8a67d5b246a23d1b


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-9
changelog:
  - Include upstream patch: Meaningful name for builtins in JitCodeEvent API
  - https://github.com/joyent/node/commit/5a60e0d904c38c2bdb04785203b1b784967c870d


