# changelog

author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.0.1-32.fc26
changelog:
  - Backport upstream fix for Intel PKRU (Walfred Tedeschi).
  - Backport upstream fix AVX instr. single-stepping (RH BZ 1515209, Pedro Alves).
  - Fix snapgnulib bundle number.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.1.90.20180727-39.fc29
changelog:
  - [dts] Fix build by removing a patch for already removed pahole.py .
  - [dts rhel6] Fix build by updating gdb-gnat-dwarf-crash-3of3.patch .


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
  - mod_proxy_fcgi: fix heap-based buffer overflow (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22
changelog:
  - Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-1
changelog:
  - update to 2.4.10
  - fix return value of htcacheclean init script when lockfile exists, but
    htcacheclean is not running (#1092067)
  - use proper SELinux context for initscripts (#1093039)
  - remove mod_proxy_html obsolete (#1174790)
  - remove dbmmanage from httpd-tools (#1151375)
  - add slash before root_libexecdir macro (#1149076)
  - ab: fix integer overflow when printing stats with lot of requests (#1091650)
  - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1079925)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-2
changelog:
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-1
changelog:
  - update to version 2.4.12
  - fix possible crash in SIGINT handling (#1184034)
  - fix return value of httpd init script when lockfile exists, but
    httpd is not running (#1184441)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-5
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)
  - core: fix pointer dereference crash with ErrorDocument 400 pointing
    to a local URL-path (CVE-2015-0253)
  - mod_lua: fix possible mod_lua crash due to websocket bug (CVE-2015-0228)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-1
changelog:
  - update to version 2.4.18
  - add support for http/2
  - mod_auth_digest: use anonymous shared memory (#1225116)
  - core: improve error message for inaccessible DocumentRoot (#1207093)
  - ab: try all addresses instead of failing on first one when not available (#1209552)
  - apachectl: ignore HTTPD variable from sysconfig (#1221681)
  - apachectl: fix "graceful" documentation (#1221702)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1221650)
  - do not display "bomb" icon for files ending with "core" (#1196553)
  - mod_proxy_wstunnel: load this module by default (#1253396)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-2
changelog:
  - use HTTPD_LANG in sysconfig file on RHEL6 (#1222055)
  - ignore HTTPD sysconfig variable on RHEL6 (#1204075)
  - call restorecon on /etc/rc.d/init.d/htcacheclean after install (#1222494)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.26-5
changelog:
  - Resolves: #1472846 - CVE-2017-9788 CVE-2017-9789 httpd24-httpd: various flaws
  - updated mod_systemd patch


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-3
changelog:
  - Resolves: #1486843 - apache user is not created during httpd
    installation when apache group already exist
  - Resolves: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8
changelog:
  - Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9
changelog:
  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10
changelog:
  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11
changelog:
  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14
changelog:
  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-16
changelog:
  - remove bundled mod_md module
  - Resolves: #1788976 - RFE: updated collection for httpd 2.4
  - Resolves: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite 
    potential open redirect


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-18.1
changelog:
  - Resolves: #1869068 - CVE-2020-9490 httpd24-httpd: httpd: Push diary
    crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8.1
changelog:
  - Resolves: #1745694 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of data
    request leads to denial of service
  - Resolves: #1745679 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers 
    leads to denial of service
  - Resolves: #1745682 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
  - Rebase to new snapshot with some fixes integrated
  - Reenable one test that I can't replicate the failure with.


author: David Malcolm <dmalcolm@redhat.com> - 1.1.2-5
changelog:
  - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
  - disable selftests that fail under 3.3


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.2.1-5
changelog:
  - Rebuild to generate bytecode properly after fixing rhbz#956289
  - scl-utils now compile man-pages -> use proper name in %files.


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Charalampos Stratakis <cstratak@redhat.com> - 7.1.0-2
changelog:
  - Change license tag to doc tag so directory is owned by the collection
  - Will revert when ownership of directories is defined in scl-utils-build package
  Resolves: rhbz#1334447


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Rebased to 8.1.2
  - Updated to a new PyPI source URL
  - Rebased and renamed prefix-stripping Patch 0
  Resolves: rhbz#1344674


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
  - update for upstream release
  - Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
  - Fix python main package having dependencies for the python2.6 subpackage
  - Fix places that used the default python instead of python26
  - Attempt to make byte compilation more robust in case we add python3 to EPEL5
  - Run unittests on python3 in F15+


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996705


author: Tomas Orsava <torsava@redhat.com> - 13.1.0-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory
  Resolves: rhbz#1353200


author: Java SIG <java-devel@lists.fedoraproject.org> - 2:0.5-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Alexander Kurtakov <akurtako@redhat.com> 1.8-0.12.svn1230816.11
changelog:
  - Move to Batik 1.7 manifests.
  - Remove old stuff.
  - Remove provenance=W3C attribute from Import-Package. (rhbz #1073110)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Alexander Kurtakov <akurtako@redhat.com> 0:5.4.1-2
changelog:
  - Organize Sources numbering.
  - Drop old jpackage header - package has nothing in common anymore.
  - Drop 3+ years old provides/obsoletes.
  - Move old changelog to separate file to ease working with the spec file.


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.28-1
changelog:
  - Update to upstream 4.0.28 release.
  - Fixes CVE-2015-2156 (HttpOnly cookie bypass).
  - Resolves RHBZ#1111502


author: Michal Srb <msrb@redhat.com> - 5.0.3-1.1
changelog:
  - SCL-ize spec file
  - Remove dependency on unavailable parent POM
  - Drop jpackage_script
  - Make it a compat package


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.4.2-2
changelog:
  - update to 1.4.2 (iterative build)
  - emacs and vim subpackages obsoleted as they're no longer provided


author: jchaloup <jchaloup@redhat.com> - 0-0.4.git4727d76
changelog:
  - internal packages are not provided but are needed for building
    related: #1250509
    resolves: #1255155


author: jchaloup <jchaloup@redhat.com> - 0-0.3.gitc57d4a7
changelog:
  - Repository has moved to github.com/golang/crypto, updating spec file accordingly
    resolves: #1231618


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1-3
changelog:
  - Resolves: rhbz#1141875 - newpackage
  - no debug_package
  - preserve timestamps
  - do not redefine gopath


author: Marek Skalický <mskalick@redhat.com> - 1.60.0-2
changelog:
  - disable using libquadmath (gcc in RHEL6 does not provide)
  - Disable container library - it contains typedef redefinition
    which fails with gcc 4.4 in RHEL6


author: Marek Skalický <mskalick@redhat.com> - 3.4.5-0.2.git4d4d965
changelog:
  - Build also mongoreplay
  - patch vendored dependency github.com/spacemonkeygo/spacelog to use syscall.Dup3


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 0.1.3-4
changelog:
  - Add missing ExclusiveArch and BuildArch
  - Use macro in -runtime dependency
  - Rebuilt with updated metapackage


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: Piotr Popieluch <piotr1212@gmail.com> - 0.1.18-2
changelog:
  - Added LICENSE to %files
  - Added rm -rf node_modules to %prep
  - Capitalized summary
  - Removed Group tag


author: Tomas Hrcka <thrcka@redhat.com> - 0.0.4-4
changelog:
  - Add missing macro /usr/lib/rpm/rh-nodejs6-symlink-deps /opt/rh/rh-nodejs6/root/usr/lib/node_modules


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.6.2-3
changelog:
  - Resolves: #1392914
  - Update to 4.6.2
  - Modified/fixed/refactored/removed patches
  - http tests were failing, had to update http-parser too


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-1
changelog:
  - Update to 6.9.1
  - use zvetlik/rh-nodejs6 as a base
  - add gyp as build dependency
  - update/merge/remove patches


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476317
  - disable lots of tests (mainly https and tls)
  - update to latest v6.x release (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476316
  - disable lots of tests (mainly https and tls)
  - update to latest v6.x release (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-5
changelog:
  - Resolves: RHBZ#1508986
  - revert some upstream commits to fix https+openssl-1.0.1 segfaults
  - remove expanding pkgdocdir macros


author: Jared Smith <jsmith@fedoraproject.org> - 3.0.2-1
changelog:
  - Update to upstream 3.0.2 release
  - disable self-test until we get all the run-time dependencies into Rawhide


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0.0-4
changelog:
  - add some post-install hackery to work around potential RPM bug resulting in
    symlinks still pointing to their old locations on upgrade (RHBZ#997978)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.6.0-1
changelog:
  - update to upstream release 0.6.0
  - History.md is now not included in the npm tarball
  - tests are now not included in the npm tarball, so download separately


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.0-3
changelog:
  - rename from opener to nodejs-opener
  - add exec permission on opener (executable and lib are same file)
  - remove DOS EOLs from LICENSE.txt


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.2.2-1
changelog:
  - New upstrem release
  - change license
  - change URL
  - remove Source1 and Source10
  - add LICENSE to %doc
  - updated Summary and %description


author: Stephen Gallagher <sgallagh@redhat.com> - 5.1.2-3
changelog:
  - Fix package review issues
  - Use npm(foo) syntax for BuildRequires
  - Drop unnecessary buildroot cleanup
  - Fix capitalization of Summary:


author: Ralph Bean <rbean@redhat.com> - 1.2.0-2
changelog:
  - Include license from github.
  - Enable tests.
  - Make cli.js into a symlink.
  - Comment out nodejs_symlink_deps --build, as per review.


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.1.0-2
changelog:
  - Removed %clean and rm -rf %buildroot from %install
  - changed Summary and %description to start with capital letter


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-368
changelog:
  - Do not use unitialized memory in $h{\const} warnings (RT#128189)
  - Fix precedence in hv_ename_delete (RT#128086)
  - Do not treat %: as a stash (RT#128238)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561102)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561102)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561101)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561101)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-381
changelog:
  - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653529)
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c (bug #1653524)
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c (bug #1653526)
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c (bug #1653521)


author: Paul Howarth <paul@city-fan.org> - 20140910.001-1
changelog:
  - Update to 20140910.001
    - Update to the latest data (2014-09-10)
  - Use %license
  - Classify buildreqs by usage
  - Drop redundant LWP::Simple requires filter


author: Paul Howarth <paul@city-fan.org> - 20140910.002-1
changelog:
  - Update to 20140910.002
    - Look in the current directory for RangeMessage.xml if it's not in other
      locations; this can help with various Perl app packagers (also try
      ISBN_RANGE_MESSAGE env var)


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Grok dist names ending with something numeric containing underscores
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.143240-1
changelog:
  - Update to 2.143240
    - Give correct path in nested merges such as resources
    - Removed strings test that should have been removed when
      CPAN::Meta::Requirements was removed to a separate dist


author: Paul Howarth <paul@city-fan.org> - 2.150001-1
changelog:
  - Update to 2.150001
    - Include allowed values for license field in 1.x historic licenses rather
      than linking to Module::Build
    - Documented when fragment merging became available


author: Paul Howarth <paul@city-fan.org> - 2.150005-1
changelog:
  - Update to 2.150005
    - Metadata merging now does deep hash merging as long as keys don't conflict
    - Serialized CPAN::Meta objects now include a x_serialization_backend entry
    - Declared extra developer prereq
    - Added test for 'x_deprecated' field in "provides"
    - Noted explicitly that historical META spec files are licensed under the
      same terms as Perl
    - Changed some test data from UTF-8 to ASCII


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - Bump Module::Metadata prereq for $VERSION parsing (CPAN RT#101095)
    - Consistently require same version of CPAN::Meta::Requirements
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - Declare the minimum version required for the "merged_requirements"
      interface
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 2.132-1
changelog:
  - Update to 2.132
    - Precision of version requirement "0.00" is preserved when merging
      requirements


author: Paul Howarth <paul@city-fan.org> - 2.133-1
changelog:
  - Update to 2.133
    - In fixing preservation of "0.00", some Module => 0 optimizations were lost;
      this restores those optimizations


author: Paul Howarth <paul@city-fan.org> - 2.140-1
changelog:
  - Update to 2.140
    - Added method for getting structured requirements
    - Skips impossible tests on Perls earlier than 5.8.0 (before v-string magic)
    - On Perls before 5.8.1, pad 1-part and 2-part literal v-strings to avoid old
      version.pm bugs with v-strings less than 3 characters
    - Protect internal _isa_version from non-refs that pass ->isa('version')
    - Much better error messages, explaining what conflicted and how
    - Repackage with fixed tests
    - Expanded dist.ini from author bundle to individual plugins


author: Paul Howarth <paul@city-fan.org> - 1.5-1
changelog:
  - Update to 1.5
    - Work around global destruction order issue (CPAN RT#23568/68526)
  - This release by SHAY ⇒ update source URL
  - Drop %defattr, redundant since rpm 4.4
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Classify buildreqs by usage
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Major optimization to mkopt
  - Use %license
  - Simplify find expression using -delete


author: Paul Howarth <paul@city-fan.org> - 0.200005-1
changelog:
  - Update to 0.200005
    - Open DATA handles both :raw and :bytes to avoid content munging on Win32
    - This is not yet a perfect solution for Win32


author: Paul Howarth <paul@city-fan.org> - 0.200006-1
changelog:
  - Update to 0.200006
    - Skip tests on Win32 pre-5.14 related to line endings; perl munges the data
      before we're able to get at it


author: Paul Howarth <paul@city-fan.org> - 0.009-1
changelog:
  - Update to 0.009
    - In META.{yml,json}, point to public git repository
    - Bugfix: permit time of day for a DST change to extend up to 24:59:59,
      which POSIX (unclearly) permits and is actually seen in the current
      rule for timezone Asia/Amman
    - Support the extended form of the recipe syntax that is used by
      version 3 of the tzfile(5) file format
    - Bugfix: correct ->offset_for_local_datetime for perpetual-DST ruleset
      that can arise with the tzfile3 system
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.10-1
changelog:
  - Update to 0.10
    - We need Module::Runtime 0.009 for module_notional_filename (#6)
  - Update patch for building with Test::More < 0.88
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Drop the dep on List::MoreUtils
      (https://github.com/doy/dist-checkconflicts/pull/8)
  - Update patch for building with Test::More < 0.88
  - Don't try to run the extra tests for EPEL builds
  - Specify version requirements for extra test modules


author: Petr Pisar <ppisar@redhat.com> - 7.10-5
changelog:
  - Own ExtUtils/MM directory by perl-ExtUtils-MM-Utils only
  - Require perl-devel by perl-ExtUtils-MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.18-4
changelog:
  - No longer needs any non-core buildreqs, and hence bootstrapping
  - Drop references to pwhich, which is no longer included
  - This release by PLICEASE → update source URL


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Compress::FAQ - Added a section on bgzip (CPAN RT#103295)
    - IO::Compress::Zip - Zip64 needs to be first in extra field to work around
      a Windows Explorer bug (see
      http://www.info-zip.org/phpBB3/viewtopic.php?f=3&t=440 for details)


author: Paul Howarth <paul@city-fan.org> - 1:0.96-1
changelog:
  - Update to 0.96
    - Require Module::Load::Conditional 0.66 to resolve CVE-2016-1238
      (avoid loading optional modules from default .)
  - Update patch for use of ExtUtils::MM::Utils
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.92-5
changelog:
  - Address intermittent test failures (CPAN RT#20105, RH BZ#1094395)
  - Add runtime dependency on Data::Dumper
  - Add build dependency on IO::Tty for the test suite
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.94-1
changelog:
  - Update to 0.94
    - Update License discrepancies (CPAN RT#100858)
    - Many typo corrections
    - Fix t/pty.t fails on Solaris 10 (CPAN RT#20105)
  - Drop upstreamed patch for CPAN RT#20105
  - Use %license


author: Petr Pisar <ppisar@redhat.com> - 1.25-4
changelog:
  - Break build-cycle: perl-IPC-System-Simple → perl-Test-Perl-Critic
    → perl-Perl-Critic → perl-PPI → perl-IO-All → perl-File-MimeInfo
    → perl-File-BaseDir → perl-IPC-System-Simple


author: Paul Howarth <paul@city-fan.org> - 2.27400-1
changelog:
  - Update to 2.27400
    - Applied and merged long term neglected patches and pull requests
    - Modified Makefile.PL to set UNINST=1 if needed on old perls
    - Decode decimals to Perl's internal NV type
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Implemented and then reverted a change to use Sub::Name (CPAN RT#98097)
  - Modernize spec
  - Hack out references to currently-unavailable Test::CleanNamespaces


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Resolve an edge-case with DEPRECATED (CPAN RT#101555)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Add FORCE_SAFE_INC option to address CVE-2016-1238
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.000025-1
changelog:
  - Update to 1.000025
    - Evaluate version assignment in a clean environment, to fix assignment in a
      block (CPAN RT#101095)
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.000027-1
changelog:
  - Update to 1.000027
    - Work around issues with an unconfigured Log::Contextual
    - Allow tests to pass in a perl with no taint support


author: Paul Howarth <paul@city-fan.org> - 1.106-1
changelog:
  - Update to 1.106
    - Update github links
    - Typo fix
  - Update patch for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 1:1.4417-1
changelog:
  - Update to 1.4417
    - Outputs the version of backends used
    - Updated repo metadata and boilerplate files
    - Pointed issue tracker to the Perl-Toolchain-Gang Github repo
  - Classify buildreqs by usage
  - Use %license
  - Package CONTRIBUTING.mkdn and README files
  - Expand %description
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1:1.4421-1
changelog:
  - Update to 1.4421
    - Add CPAN_META_JSON_BACKEND to allow requesting non-JSON.pm backends
    - Add CPAN_META_JSON_DECODER to allow Mojo::JSON/JSON::Tiny to be used just
      for decoding
    - Re-encode strings before decode_json since that expects bytes
    - Add test cases for wide characters in META files
    - Bump JSON::PP prerequisite to 2.27300 to work around a bug before perl
      5.8.7; includes a test to confirm correct behavior
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.010-1
changelog:
  - Update to 1.010
    - Added 'msys' as a Unix-type OS
  - BR: perl-generators where available
  - Simplify find command using -delete
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 0.103011-1
changelog:
  - Update to 0.103011
    - Do not load Sub::Install, since it isn't used!
    - Eliminate superfluous FULL STOP characters (".")
  - Update patch for building with old Test::More versions
  - Classify buildreqs by usage
  - Use %doc where possible


author: Paul Howarth <paul@city-fan.org> - 0.103012-1
changelog:
  - Update to 0.103012
    - Consider license names without parentheses when scanning text for license
    - When scanning text for license, put known substrings inside \b..\b
  - Simplify find command using -delete
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.928-1
changelog:
  - Update to 0.928
    - Cope with subroutines with spaces in their names when catching warnings
    - Don't assume that the source sub isn't blessed in tests (!)


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Do not lose argument(s) to import
      (https://github.com/rjbs/Test-Deep/issues/29)


author: Paul Howarth <paul@city-fan.org> - 0.119-1
changelog:
  - Update to 0.119
    - Overloading of & and | no longer can change All or Any objects found as
      arguments
    - An All as an argument to an All constructed is flattened out into its
      All-ed values; the same goes for Any
    - Remove use of Test::NoWarnings for user-facing tests


author: Paul Howarth <paul@city-fan.org> - 1.120-1
changelog:
  - Update to 1.120
    - Add none() test; it's like any(), but negative
    - Fix stringification of any() expectations


author: Paul Howarth <paul@city-fan.org> - 0.012-1
changelog:
  - Update to 0.012
    - Go back to auto-detecting the required Test::More, reverting the changes
      made for CPAN RT#62699
  - Drop support for all current EL releases (5 and 6) since we need Test::More
    version 0.96 or later for the test suite


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Avoid assuming that t/todo.t is always called t/todo.t
  - Classify buildreqs by usage
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.302022-1
changelog:
  - Update to 1.302022
    - Many micro-optimizations
    - Spelling fixes and tests
    - Fix leaky File.t file so that tmp doesn't fill up
    - Move some modules out of the known broken list in xt tests
    - Add Test2-based tools to downstream testing
    - Change when PID/TID are stashed (for forkprove)
    - VMS fixes for Files.t and IPC system
    - Improve thread checks to better detect broken 5.10 builds
    - Use thread checks to skip/run t/Legacy/Regression/637.t


author: Paul Howarth <paul@city-fan.org> - 1.302026-1
changelog:
  - Update to 1.302026
    - Do not fail if Test2::API::Breakage cannot load (rare 5.10.0 issue)
    - Potential fix for t/Legacy/Regression/637.t
    - Make t/Legacy/Regression/637.t AUTHOR_TESTING for now
    - Add Generic event type
    - Make sure enabling culling/shm sets pid and tid (fix #679)


author: Paul Howarth <paul@city-fan.org> - 1.302030-1
changelog:
  - Update to 1.302030
    - Use pre_filter instead of filter for TODO in Test::Builder (fix #683)
    - Fix typos in transitions doc (#681)
    - Add 'inherit_trace' param to run_subtest
    - Properly skip thread test when threads are broken


author: Paul Howarth <paul@city-fan.org> - 1.302037-1
changelog:
  - Update to 1.302037
    - Restore PerlIO layer cloning on STDERR and STDOUT
  - Bump obsoletes/provides versions for perl-Test2 to maintain upgrade path from
    packages in third-party repositories


author: Paul Howarth <paul@city-fan.org> - 1.302040-1
changelog:
  - Update to 1.302040
    - Fix broken MANIFEST.SKIP entries (#689)
    - Add Info event for better diagnostics


author: Paul Howarth <paul@city-fan.org> - 0.022-1
changelog:
  - Update to 0.022
    - Propagate all warnings to any previously-declared __WARN__ handlers
      (unlike with __DIE__, merely calling warn() is not sufficient)


author: Paul Howarth <paul@city-fan.org> - 0.023-1
changelog:
  - Update to 0.023
    - Properly handle propagating warnings to previously declared handlers that
      are not coderefs (i.e. a sub name, or the magic DEFAULT and IGNORE)


author: Paul Howarth <paul@city-fan.org> - 0.025-1
changelog:
  - Update to 0.025
    - Prereqs lowered from required to suggested:
      - CPAN::Meta::Check
      - CPAN::Meta::Requirements
    - Tests are now quieter to avoid causing confusion, by suppressing the
      printing of stderr in tests


author: Paul Howarth <paul@city-fan.org> - 0.026-1
changelog:
  - Update to 0.026
    - Fixed use of modules loaded by t/zzz-check-breaks.t
    - Fix stderr suppression on perl 5.6


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Add optional test deps as recommended prereqs
      (https://github.com/doy/try-tiny/pull/18)
  - Update patch for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix syntax of example code (PR#22)
    - 'perl' removed from prerequisite recommendations, to avoid tripping up CPAN
      clients
    - Sub::Util is used preferentially to Sub::Name in most cases (PR#27)
  - This release by ETHER → update source URL
  - Modernize spec
  - Don't run the extra tests


author: Paul Howarth <paul@city-fan.org> - 1:0.231-1
changelog:
  - Update to 0.231
    - Restore test compatibility where Perl does not provide
      &Config::non_bincompat_options (CPAN RT#102626)


author: Paul Howarth <paul@city-fan.org> - 1:0.233-1
changelog:
  - Update to 0.233
    - The diagnostic about inheriting from ourselves was removed; it served no
      purpose as Perl already warns if we try to inherit in a circular way


author: Paul Howarth <paul@city-fan.org> - 1:0.234-1
changelog:
  - Update to 0.234
    - Fix the test for PMC loading to work on versions on Perl that don't have
      Config::non_bincompat_options (CPAN RT#102626)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.5-3
changelog:
  - update Archive_Tar to 1.3.13
  - merge with SCL spec file
  - requires httpd-filesystem for /var/www/html ownership (F21+)


author: Remi Collet <rcollet@redhat.com> 1:1.10.1-1
changelog:
  - update PEAR to 1.10.1 for PHP 7 and RHSCL 2.3
  - update Archive_Tar to 1.4.2
  - update Console_Getopt to 1.4.1
  - update Structures_Graph to 1.1.1
  - update XML_Util to 1.3.0
  - add PEAR_Manpages to 1.10.0


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.5-1
changelog:
  - Rebuilt for SCL.
  - Updated to version 1.5.
  - python-imaging is only a soft dependency, removing it for now.


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099 
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996706


author: Charalampos Stratakis <cstratak@redhat.com> - 13.1.2-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1353206


author: Iryna Shcherbina <ishcherb@redhat.com> - 9.0.1-1
changelog:
  - Update to version 9.0.1 and rebuild for rh-python36
  - Bootstrapping procedure, step 1/2: build_wheel 0


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-3
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1774951


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-4
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1826520


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-3
changelog:
  - Fix Timing attack vulnerability in Action Controller - rhbz#1301933
    - Resolves: CVE-2015-7576
  - Fix Possible Object Leak and Denial of Service attack - rhbz#1301946
    - Resolves: CVE-2016-0751
  - Fix Possible Information Leak Vulnerability - rhbz#1301963
    - Resolves: CVE-2016-0752
  - Fix Object leak vulnerability for wildcard controller routes - rhbz#1301981
    - Resolves: CVE-2015-7581


author: Jun Aruga <jaruga@redhat.com> - 1:4.2.6-5
changelog:
  - Fix a render file directory traversal in Action View
    Resolves: CVE-2019-5418
  - Fix a denial of service vulnerability in Action View
    Resolves: CVE-2019-5419


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Nested attributes rejection proc bypass - rhbz#1301957
    - Resolves: CVE-2015-7577


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Fix Timing attack vulnerability in basic authentication - rhbz#1301933
    - Resolves: CVE-2015-7576


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.4.0-2
changelog:
  - Removed the duplicated "git checkout" in comment.
  - BR: rubygem(therubyracer) for tests, don't use deprecated js.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.0.4-1
changelog:
  - Update to Journey 1.0.4, as this version is needed by ActionPack 3.2.6.
  - Remove unneded Requires: ruby.


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.0-1
changelog:
  - Update to loofah 2.0.0 (RHBZ #1096760)
  - Adjustments for https://fedoraproject.org/wiki/Changes/Ruby_2.1


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.2-1
changelog:
  - Update to loofah 2.0.2 (rhbz#1218819)
  - Drop patch to skip failing test (it works now, with Nokogiri 1.6.6.2)
  - Drop Fedora 19 support
  - Use %license macro


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.3-1
changelog:
  - Update to loofah 2.0.3 (rhbz#1256165)
  - Use %autosetup macro
  - Drop macros for Fedora 20 (it is now EOL)
  - Drop unneeded %license definition


author: Pavel Valena <pvalena@redhat.com> - 2.0.3-3
changelog:
  - Include Gemfile and Rakefile in -doc subpackage
  - Do not use %license macro
  - Explicitly require runtime subpackage


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Run unit and acceptance tests in a single process
  - Patch test suite to work outside rake/bundler


author: Vít Ondruch <vondruch@redhat.com> - 0.3.1-1
changelog:
  - Updated to the latest upstream version.
  - Tests enabled.
  - Documentation moved into separate package.
  - Remove unnecessary Hoe runtime dependency.


author: Josef Stribny <jstribny@redhat.com> - 1:1.4.5-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Added patch0 to fix tests for Ruby 2.0
  - Update to Rack 1.4.5


author: Pavel Valena <pvalena@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - License file is missing https://github.com/rails/rails-html-sanitizer/pull/47
  - Skip failing tests due to possible incompatibility with libxml2


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.3.1-1
changelog:
  - Update from Marek Goldmann <mgoldman@redhat.com>
    - Updated to 1.3.1
    - Patch to make it work with Rake >= 0.9.0.beta.0


author: Pavel Valena <pvalena@redhat.com> - 3.4.2-6
changelog:
  - Add rubygem-builder to BuildRequires
  - Add rubygem-gherkin to BuildRequires
  - Add rubygem-multi_test to BuildRequires
  - Add rubygem-ffi to BuildRequires


author: Josef Stribny <jstribny@redhat.com> - 3.2.6-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to sass 3.2.6.
  - Own extra and rails directories (rhbz#911648).


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.1.6-2
changelog:
  - Update to shoulda-context 1.1.6
  - Clean up comments
  - Remove unnecessary BR: on ruby
  - Exclude developer-only files from binary packages


author: Jun Aruga <jaruga@redhat.com> - 1:5.0.1-1
changelog:
  - Update to Active Support 5.0.1.
  - Fix warnings: Fixnum and Bignum are deprecated in Ruby trunk
  - Fix Ruby 2.4.0 compatibility.


author: Jun Aruga <jaruga@redhat.com> - 9.0.6-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jun Aruga <jaruga@redhat.com> - 3.6.0-2
changelog:
  - Add openssl-devel dependency to enable HTTPS support.
  - Add regenerated parser logic.
  - Improve Ruby load path to run test suite.
  - Improve files section.


author: Jun Aruga <jaruga@redhat.com> - 3.7.1-1
changelog:
  - Update to Sprockets 3.7.1.
  - Update scl_prefix_nodejs declaration to build with no-SCL environment.


author: Pavel Valena <pvalena@redhat.com> - 0.3.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
  - Correct attributes for websocket_mask.so


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Josef Stribny <jstribny@redhat.com> - 1.7.6-2
changelog:
  - Keep ssl_certs/certificate_manager.rb file (used in tests)
  - Correctly add load paths for gems during tests


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2
changelog:
  - Update to current packaging guidelines
  - Remove legacy build conditionals
  - Remove file requires
  - Remove usage of shutil (not available on RHEL)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2.3
changelog:
  - Update requires
  - Install ant.d config file to correct directory in rh-java-common
  - Use correct JAVADIR in bindir scripts


