# changelog

author: Nick Clifton <nickc@redhat.com> - 9.23-1
changelog:
  - INITIAL CREATION OF DTS-10 ANNOBIN. (#1852725)
  - Annocheck: Do not skip tests of the short-enums notes.  (#1743635)
  - Add (optional) llvm plugin.
    9.21-3
  - Fix the computations of ANNOBIN_GCC_PLUGIN_DIR and ANNOBIN_CLANG_PLUGIN_DIR.
    9.21-1
  - Fix stack clash protection problem. (#1803173)
    9.21-1
  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
    9.20-1
  - Annocheck: Detect Fortran compiled programs.  (#1824393)
    9.19-1
  - Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
    9.18-1
  - Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
    9.16-1
  - Annobin: Fix access to the -flto and -fsanitize flags.
    9.14-1
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
    9.13-1
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
    9.12-1
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
    9.11-1
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.
    9.10-1
  - Fix clang plugin to use hidden symbols.
    9.09-1
  - Add ability to build clang plugin (disabled by default).
    9.08-1
  - Annocheck: Fix error printing out the version number.
    9.07-1
  - Annobin: Add checks of the exact location of the examined switches.
    9.06-1
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
    9.05-1
  - Add configure option to suppress building annocheck.
    9.04-1
  - Fix debuginfod test.
    9.03-2
  - Correct the build requirement for building with debuginfod support.
    9.03-1
  - Add debuginfod support.
    9.01-1
  - Add clang plugin (experimental).
    8.92-1
  - Have annocheck ignore notes with an end address of 0.
    8.91-1
  - Improve checking of gcc versions.
    8.90-1
  - Do not skip positive results.
    8.88-1
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
    8.87-1
  - Replace address checks with dladdr1.
    8.86-1
  - Use libabigail like checking to ensure variable address consistency.
    8.85-1
  - Skip generation of global notes for hot/cold sections.
    8.84-1
  - Generate FAIL results if -Wall or -Wformat-security are missing.
    8.83-1
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
    8.81-1
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Marek Polacek <polacek@redhat.com> 10.2.1-1.2
changelog:
  - avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
  - apply gcc10-libgfortran-compat-2.patch


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Keith Seitz <keiths@redhat.com> - 9.2-3.el7
changelog:
  - Backport testcase for tui/25126.
  - Use built-in readline for RHEL7. System readline is too old.
  - Remove gdb-testsuite-readline63-sigint-revert.patch.
  - Add patch to link against tinfo on rhel6.
  - Add patch to workaround make 3.81 bug.
  - Update gdb.spec for rhel6.


author: Keith Seitz <keiths@redhat.com> - 9.2-4.{el6,el7}
changelog:
  - Add debuginfod.m4 patch to use pkg-config.
  - Add BuildRequire for libcurl-devel for debuginfod on RHEL7.
  - Disable debuginfod on RHEL6.
  - Fix broken gdb-6.6-buildid-locate-rpm-scl.patch and regenerate
    patches.
  - Update debuginfod patch with test suite fixes from upstream.


author: Keith Seitz <keiths@redhat.com> - 9.2-5.el7
changelog:
  - Backport "Fix unused function error" (Luis Machcado)
  - Disable 
  python_binary="on"
  buildroot_path="RHEL7,"
  bytecode_compilation_path=".${buildroot_path/#$RPM_BUILD_ROOT}"
  failure=0
  pushd $RPM_BUILD_ROOT
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile || failure=1
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile || failure=1
  popd
  test $failure -eq 0


author: Keith Seitz <keiths@redhat.com> - 9.2-10.el7
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903377)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905704)
  - Backport "Exclude debuginfo files from 'outside of ELF segments'
    warning" (Keith Seitz, RH BZ 1915440)


author: Will Cohen <wcohen@redhat.com> - 1.1.0-4
changelog:
  - Update events non-x86 architectures (aarch64, power, zseries)
  - Add support for newer Intel processors.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-1
changelog:
  - Rebase to v5.1; drop upstream patches on top of 4.24.
  - Add upstream commits 7ada13f3 ("evdev: avoid bit vector decoding
    on non-successful and 0 return codes"), 96194ed7 ("evdev: fix array size
    calculation in decode_bitset_"), and cdd8206a ("tests: test evdev bitset
    decoding more thoroughly") as separate patches.
  - Resolves: #1666405.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790057):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1795273):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1847679 as upstream release, plus:
    - rhbz1857749 with rhel8.3 baseos patch
    - rhbz1852021 with rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-4
changelog:
  match gcc-toolset-10
  - rhbz1878303 - align with base rhel systemtap-4.4-8.el8
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.16.1-3
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72:  (#1954564)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.77-1
changelog:
  - annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)
  - annocheck: Improve detection of shared libraries.  (#1958954)


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.


author: Nick Clifton <nickc@redhat.com> - 9.82-1
changelog:
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.29-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)


author: Nick Clifton <nickc@redhat.com> - 10.35-1
changelog:
  - Tests: Fix fortify and debuginfod tests to use newly built annobin plugin.  (#2031133)
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in golang symbols.
  - Annocheck: Initial deployment of libannocheck.


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el7
changelog:
  - Drop gdb-linux_perf-bundle.patch and v1.5-libipt-static.patch.
  - Include gdb-dts-use-decltype.patch.
  - Rebase to 10.2 (RH BZ 1958327)


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Nick Clifton <nickc@redhat.com> 2.28-6
changelog:
  - Fix s390 assembler so that it remove fake local symbols from its output.
    (#1460254)
    (#1472486)


author: Nick Clifton <nickc@redhat.com> 2.28-9
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1515340)


author: Nick Clifton <polacek@redhat.com> 2.28-1
changelog:
  - Rebase to FSF binutils 2.28
  - Retire: binutils-2.23.52.0.1-addr2line-dynsymtab.patch
  - Retire: binutils-2.27-local-dynsym-count.patch
  - Retire: binutils-2.27-monotonic-section-offsets.patch
  - Retire: binutils-2.27-aarch64-relro-default.patch
  - Retire: binutils-2.27-power9.patch
  - Import FSF binutils patch to fix running readelf on debug info binaries.
  - Import FSF binutils patch to fix an abort with PowerPC dynamic relocs.
  - Backport patch to add support for putting name, comp_dir and
    producer strings into the .debug_str section. 
  - Add support for GNU BUILD NOTEs.


author: Nick Clifton <nickc@redhat.com> 2.28-8.1
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1519864)


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Update to elfutils 0.167 (#1366182,#1356263)
    Drop upstreamed patch: elfutils-0.166-elfcmp-comp-gcc6.patch


author: Mark Wielaard <mjw@redhat.com> - 0.168-1
changelog:
  - New upstream release from new project home https://sourceware.org/elfutils/
    Resolves: Rebase elfutils to 0.168 bugfix release (#1412299)


author: Mark Wielaard <mark@klomp.org> - 0.168-3
changelog:
  - Adjust internal library so names (#1412305).
  - Never use old, deprecated, filter_provides_in, it really is too broken.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.169-3
changelog:
  - Add elfutils-0.169-dup-shstrtab.patch (#1455687)
  - Add elfutils-0.169-strip-empty.patch (#1455620)


author: Mark Wielaard <mjw@redhat.com> - 0.170-4
changelog:
  - Add elfutils-0.170-dwarf_aggregate_size.patch (#1527966).
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Jeff Law <law@redhat.com> 7.3.1-5.4
changelog:
  - Add Jakub's patch to generalize default exponent handling to
    instead cover all DEC runtime extensions
    Update 0022 patch for changes from Jakub's work.
    (#1561204)


author: Marek Polacek <polacek@redhat.com> 7.3.1-5.7
changelog:
  - fix 0014-Allow-non-logical-expressions-in-IF-statements.patch: also allow
    non logical expressions in ELSE-IF statements


author: Jeff Law <polacek@redhat.com> 7.3.1-5.9
changelog:
  - Fix INCLUDE handling when pathname is on a separate line
  - Integrate updates to patches #0005 and #0014.  Add testcases for
  - various legacy fortran extensions (#1586289)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.0.1-32.fc26
changelog:
  - Backport upstream fix for Intel PKRU (Walfred Tedeschi).
  - Backport upstream fix AVX instr. single-stepping (RH BZ 1515209, Pedro Alves).
  - Fix snapgnulib bundle number.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-10
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: DJ Delorie <dj@redhat.com> - 0.7.91-15
changelog:
  Jeff Law <law@redhat.com>
  - Pull in fc24 patches
  - Remove local patch #204
  - Sync BuildRequires and %build with Fedora to fix aarch64 problem
  - Add missing #includes to some aarch64 code


author: DJ Delorie <dj@redhat.com> - 0.7.91-17
changelog:
  - Remove mentions of (and one attempt to patch) backup files in 
    ltrace-0.7.91-unwind-elfutils.patch (#1427140)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: DJ Delorie <dj@redhat.com> - 4.12-3
changelog:
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Duplicate vhangup/chown patch for -m32 also.


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3s
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-4
changelog:
  - Rebase to fedora valgrind version (#1467952)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-arm-index-hardwire.patch
    - Add valgrind-3.13.0-ucontext_t.patch
    - Add valgrind-3.13.0-gdb-8-testfix.patch
    - Add valgrind-3.13.0-disable-vgdb-child.patch
    - Add valgrind-3.13.0-arm64-hwcap.patch
    - Add valgrind-3.13.0-epoll_pwait.patch
    - Add valgrind-3.13.0-ppc64-diag.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-10
changelog:
  - Add valgrind-3.13.0-ppc64-timebase.patch (#1523871)
  - Sync with rhel 7.5 valgrind (#1523872)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-xml-socket.patch
    - Add valgrind-3.13.0-ppc64-vex-fixes.patch
    - Add valgrind-3.13.0-amd64-eflags-tests.patch
    - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
    - Add valgrind-3.13.0-static-tls.patch


author: Nick Clifton <nickc@redhat.com> 2.30-18
changelog:
  - Fix a seg-fault parsing corrupt DWARF information.  (#1573360)
  - Fix another seg-fault parsing corrupt DWARF information.  (#1573367)
  - Fix a seg-fault copying a corrupt ELF file.  (#1551788)
  - Fix a seg-fault parsing a large ELF files on a 32-bit host.  (#1539891)
  - Fix a seg-fault running nm on a corrupt ELF file.  (#15343247)
  - Fix a seg-fault running nm on a file containing corrupt DWARF information.  (#1551781)
  - Fix another seg-fault running nm on a file containing corrupt DWARF information.  (#1551763)


author: Nick Clifton <nickc@redhat.com> 2.30-19
changelog:
  - Fix a seg-fault running objcopy on a corrupt PE format file.  (#1574702)
  - Fix a seg-fault running objcopy on a corrupt ELF format file.  (#1574705)


author: Nick Clifton <nickc@redhat.com> 2.30-20
changelog:
  - Have the x86 linker resolve relocations against the _end, _edata and __bss_start symbols locally.  (#1576735)
  - Do not generate GNU build notes for linkonce sections.  (#1576362)


author: Nick Clifton <nickc@redhat.com> 2.30-22
changelog:
  - Fix handling of local versioned symbols by the x86 linker.  (PR 23194)
  - Fix linker testsuite failures.


author: Nick Clifton <nickc@redhat.com> 2.30-24
changelog:
  - When installing both ld.bfd and ld.gold, do not reset the current alternative if upgrading.  (#1592069)


author: Nick Clifton <nickc@redhat.com> 2.30-26
changelog:
  - Restore the long-long patch as it is needed for compatibilit between the 32-bit and 64-bit devel rpms.  (#1605913)


author: Nick Clifton <nickc@redhat.com> - 2.30-47
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Update x86_64 linker testsuite after previous delta.  (#1624779)
  - Disable the x86_64 linker's elimination of PLT entries.  (#1624779)
  - Disable readelf's reporting of gaps in build notes.  (#1623556)
  - Fix some more PowerPC64 linker testsuite failures.  (#1584565)
  - Remove PLT eliision patch.  (#1618748)
  - Restore the binutils-2.25-set-long-long.patch.
  - Fix GOLDs creation of PT_NOTE segments.  (#1614908)  (#1614920)
  - Improve objcopy's --merge-notes option.  (#1608390)
  - Remove x86 ISA property notes with empty bits.  (#1609801)
  - Rebuild with fixed binutils
  - Move the .gnu.build.attributes section to after the .comment section.
  - Merge .gnu.build.attribute sections together.  (#1608390)
  - Fix the gold linker so that it can handle relocs in discardeable note sections.  (#1607054)
  - Fix the generation of relocations for assembler created notes.  (#1598551)


author: Nick Clifton <nickc@redhat.com> - 2.30-54
changelog:
  - Fix AArch64 linker testsuite problems.  (#1702247)
  - Fix S390x linker testsuite problems.  (#1702248)
  - Fix PPC64le linker testsuite problems.  (#1702249)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-8
changelog:
  - Add elfutils-0.170-sys-ptrace.patch
  - Make sure spec can be build even when ldconfig_scriplets aren't defined.
  - Add elfutils-0.170-m68k-packed-not-aligned.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Marek Polacek <polacek@redhat.com> 8.2.1-7
changelog:
  - update from Fedora gcc-8.2.1-7 (#1664796)
  - drop gcc8-fortran-include.patch
  - add -fdec-include and -fpad-source (#1647048)
  - include forgotten ppc* intrinsic headers


author: Marek Polacek <polacek@redhat.com> 8.3.1-2
changelog:
  - update from Fedora 8.3.1-2 gcc (#1664796)
  - put liblsan_preinit.o to FULLPATH instead of FULLLPATH


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3
  - two small autoFDO fixes (#1684650)
  - fix std::hash for 2GB+ strings (PR libstdc++/89629)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.1
changelog:
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730724)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730726)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.2
changelog:
  - move UNSPEC_DARN* from altivec.md to rs6000.md (#1760208)
  - use unspec_volatile for darn (PR target/91481, #1760208, CVE-2019-15847)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.1.90.20180727-39.fc29
changelog:
  - [dts] Fix build by removing a patch for already removed pahole.py .
  - [dts rhel6] Fix build by updating gdb-gnat-dwarf-crash-3of3.patch .


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-16
changelog:
  - Add valgrind-3.14.0-gettid.patch
  - Add valgrind-3.14.0-ppc64-quotactl.patch
  - Add valgrind-3.14.0-ppc-subfe.patch
  - Add valgrind-3.14.0-s390x-vec-facility-bit.patch.
  - Update valgrind-3.14.0-rsp-clobber.patch
  - Add valgrind-3.14.0-subrange_type-count.patch


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-14
changelog:
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> - 2.32-14.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1788503)


author: Nick Clifton <nickc@redhat.com> - 2.32-5
changelog:
  - REBASE TO MATCH gcc-toolset-9 binutils
  - Fix configuring binutils with plugins and address sanitization enabled.  (#1709720)
  - Add: binutils-CVE-2019-9071.patch
  - Add: binutils-CVE-2019-9073.patch
  - Add: binutils-CVE-2019-9074.patch
  - Add: binutils-CVE-2019-9075.patch
  - Add: binutils-CVE-2019-9077.patch
  - Add: binutils-aarch64-gold-PLT-for-MOVW_ABS.patch
  - Add: binutils-alignment-of-decompressed-sections.patch
  - Add: binutils-check-dlsym-for-plugins.patch
  - Add: binutils-disassembling-efi-files.patch
  - Add: binutils-export-demangle.h.patch
  - Add: binutils-gold-8-byte-note-segments.patch
  - Add: binutils-ld-testsuite-fixes.patch
  - Add: binutils-s390x-arch13-descriptions.patch
  - Add: binutils-special-sections-in-groups.patch
  - Retire: binutils-2.22.52.0.1-export-demangle.h.patch
  - Retire: binutils-2.26-lto.patch
  - Retire: binutils-2.30-allow_R_AARCH64-symbols.patch
  - Retire: binutils-CVE-2018-10372.patch
  - Retire: binutils-CVE-2018-10373.patch
  - Retire: binutils-CVE-2018-10534.patch
  - Retire: binutils-CVE-2018-10535.patch
  - Retire: binutils-CVE-2018-17358.patch
  - Retire: binutils-CVE-2018-6323.patch
  - Retire: binutils-CVE-2018-6759.patch
  - Retire: binutils-CVE-2018-7208.patch
  - Retire: binutils-CVE-2018-7568.patch
  - Retire: binutils-CVE-2018-7569.patch
  - Retire: binutils-CVE-2018-7570.patch
  - Retire: binutils-CVE-2018-7642.patch
  - Retire: binutils-CVE-2018-7643.patch
  - Retire: binutils-CVE-2018-8945.patch
  - Retire: binutils-PowerPC-IEEE-long-double-warnings.patch
  - Retire: binutils-debug-section-marking.patch
  - Retire: binutils-disable-readelf-gap-reports.patch
  - Retire: binutils-fix-testsuite-failures-2.patch
  - Retire: binutils-gas-build-notes.patch
  - Retire: binutils-gold-llvm-plugin.patch
  - Retire: binutils-gold-note-segment.patch
  - Retire: binutils-ifunc-relocs-in-notes.patch
  - Retire: binutils-linkonce-notes.patch
  - Retire: binutils-merge-attribute-sections.patch
  - Retire: binutils-missing-notes.patch
  - Retire: binutils-nested-func-name-lookup.patch
  - Retire: binutils-note-merge-improvements.patch
  - Retire: binutils-page-to-segment-assignment.patch
  - Retire: binutils-remove-empty-ISA-properties.patch
  - Retire: binutils-revert-PowerPC-speculation-barriers.patch
  - Retire: binutils-s390x-arch13.patch
  - Retire: binutils-skip-dwo-search-if-not-needed.patch
  - Retire: binutils-speed-up-objdump.patch
  - Retire: binutils-strip-unknown-relocs.patch
  - Retire: binutils-x86-local-relocs.patch
  - Retire: binutils-x86-local-version.patch
  - Retire: binutils-x86_64-disable-PLT-elision.patch


author: Nick Clifton <nickc@redhat.com> - 2.32-15
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler.  (#1779698)


author: Marek Polacek <polacek@redhat.com> 9.1.1-1.1
changelog:
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - apply Fortran patches (#1728355)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix off-by-one errors in indexed xlat handling.
  - Remove bogus indexed xlat warning.
  - Resolves #1666405.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Jakub Čajka <jcajka@redhat.com> - 1.8-0.rc3.2
changelog:
  - make possible to override default traceback level at build time
  - add sub-package race containing std lib built with -race enabled
  - Related: BZ#1411242


author: Jan Kaluza <jkaluza@redhat.com> - 1.1-7
changelog:
  - Obsolete all versions of httpd24-apr and httpd24-apr-util on RHEL7 (#1218271)
  - Do not mention RHSCL version in README and man page (#1219112)
  - Fix bad man page syntax (#1219511)


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8
changelog:
  - Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9
changelog:
  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10
changelog:
  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11
changelog:
  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14
changelog:
  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-16
changelog:
  - remove bundled mod_md module
  - Resolves: #1788976 - RFE: updated collection for httpd 2.4
  - Resolves: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite 
    potential open redirect


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-18.1
changelog:
  - Resolves: #1869068 - CVE-2020-9490 httpd24-httpd: httpd: Push diary
    crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-19
changelog:
  - Resolves: #1823836 - Backport of SessionExpiryUpdateInterval directive
  - Resolves: #1600579 - mod_proxy_hcheck Doesn't perform checks in VirtualHost
  - Resolves: #1809494 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set
    worker secret passed to tomcat
  - Resolves: #1828812 - httpd response contains garbage in Content-Type header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-20
changelog:
  - Resolves: #1869069 - CVE-2020-9490 httpd24-httpd: httpd: Push diary crash
    on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-21
changelog:
  - Resolves: #1637891 - RHSCL httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-22
changelog:
  - Resolves: #1869076 - CVE-2020-11984 httpd24-httpd: httpd: mod_proxy_uswgi
    buffer overflow
  - Resolves: #1607737 - TCP healthchecks failing falsely / not actually checking
  - Resolves: #1869078 - CVE-2020-11993 httpd24-httpd: httpd: mod_http2 concurrent
    pool usage


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-22.1
changelog:
  - Resolves: #2007237 - CVE-2021-40438 httpd24-httpd: httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23
changelog:
  - Resolves: #2007238 - CVE-2021-40438 httpd24-httpd: httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.1
changelog:
  - Resolves: #2035056 - CVE-2021-44790 httpd24-httpd: httpd: mod_lua: possible
    buffer overflow when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.2
changelog:
  - Resolves: #2065438 - CVE-2022-22720 httpd24-httpd: httpd: HTTP request
    smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.3
changelog:
  - Resolves: #1996513 - CVE-2021-33193 httpd24-httpd: httpd: Request splitting
    via HTTP/2 method injection and mod_proxy
  - Resolves: #2007192 - CVE-2021-34798 httpd24-httpd: httpd: NULL pointer
    dereference via malformed requests
  - Resolves: #2007196 - CVE-2021-39275 httpd24-httpd: httpd: out-of-bounds
    write in ap_escape_quotes() via malicious input
  - Resolves: #2007200 - CVE-2021-36160 httpd24-httpd: httpd: mod_proxy_uwsgi: 
    out-of-bounds read via a crafted request uri-path
  - Resolves: #2035029 - CVE-2021-44224 httpd24-httpd: httpd: possible NULL 
    dereference or SSRF in forward proxy configurations
  - Resolves: #2065236 - CVE-2022-22719 httpd24-httpd: httpd: mod_lua: Use of
    uninitialized value of in r:parsebody
  - Resolves: #2066263 - CVE-2022-23943 httpd24-httpd: httpd: mod_sed: Read/write
    beyond bounds
  - Resolves: #2066794 - CVE-2022-22721 httpd24-httpd: httpd: core: Possible
    buffer overflow with very large or unlimited LimitXMLRequestBody
  - Resolves: #2096999 - CVE-2022-26377 httpd24-httpd: httpd: mod_proxy_ajp:
    Possible request smuggling
  - Resolves: #2097017 - CVE-2022-28614 httpd24-httpd: httpd: out-of-bounds read
    via ap_rwrite()
  - Resolves: #2097033 - CVE-2022-28615 httpd24-httpd: httpd: out-of-bounds read
    in ap_strcmp_match()
  - Resolves: #2097453 - CVE-2022-29404 httpd24-httpd: httpd: mod_lua: DoS in
    r:parsebody
  - Resolves: #2097460 - CVE-2022-30522 httpd24-httpd: httpd: mod_sed: DoS
    vulnerability
  - Resolves: #2097482 - CVE-2022-30556 httpd24-httpd: httpd: mod_lua: Information
    disclosure with websockets
  - Resolves: #2098249 - CVE-2022-31813 httpd24-httpd: httpd: mod_proxy:
    X-Forwarded-For dropped by hop-by-hop mechanism


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.5
changelog:
  - Related: #2035029 - CVE-2021-44224 httpd24-httpd: httpd: possible NULL
    dereference or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8.1
changelog:
  - Resolves: #1745694 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of data
    request leads to denial of service
  - Resolves: #1745679 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers 
    leads to denial of service
  - Resolves: #1745682 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25
changelog:
  - Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-1
changelog:
  - update to 2.4.10
  - remove mod_proxy_html obsolete (#1174790)
  - remove dbmmanage from httpd-tools (#1151375)
  - add slash before root_libexecdir macro (#1149076)
  - ab: fix integer overflow when printing stats with lot of requests (#1091650)
  - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1079925)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-2
changelog:
  - allow enabling additional SCLs using service-environment file
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-7
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)
  - core: fix pointer dereference crash with ErrorDocument 400 pointing
    to a local URL-path (CVE-2015-0253)
  - mod_lua: fix possible mod_lua crash due to websocket bug (CVE-2015-0228)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-1
changelog:
  - update to version 2.4.18
  - add support for http/2
  - mod_auth_digest: use anonymous shared memory (#1225116)
  - core: improve error message for inaccessible DocumentRoot (#1207093)
  - ab: try all addresses instead of failing on first one when not available (#1209552)
  - apachectl: ignore HTTPD variable from sysconfig (#1221681)
  - apachectl: fix "graceful" documentation (#1221702)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1221650)
  - do not display "bomb" icon for files ending with "core" (#1196553)
  - mod_proxy_wstunnel: load this module by default (#1253396)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-2
changelog:
  - use HTTPD_LANG in sysconfig file on RHEL6 (#1222055)
  - ignore HTTPD sysconfig variable on RHEL6 (#1204075)
  - call restorecon on /etc/rc.d/init.d/htcacheclean after install (#1222494)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Joe Orton <jorton@redhat.com> - 2.4.25-9
changelog:
  - link only httpd, not support/* against -lselinux -lsystemd (#1433474)
  - don't enable SO_REUSEPORT in default configuration (#1432249)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.26-5
changelog:
  - Resolves: #1472846 - CVE-2017-9788 CVE-2017-9789 httpd24-httpd: various flaws
  - updated mod_systemd patch


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-3
changelog:
  - Resolves: #1486843 - apache user is not created during httpd
    installation when apache group already exist
  - Resolves: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-7.1
changelog:
  - Resolves: #1744824 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large
    amount of data request leads to denial of service
  - Resolves: #1745691 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood
    using PRIORITY frames resulting in excessive resource consumption


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8
changelog:
  - Resolves: #1745692 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: # 1744825 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large 
    amount of data request leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8.1
changelog:
  - Resolves: #1845302 - CVE-2020-11080 httpd24-nghttp2: nghttp2: overly large
    SETTINGS frames can lead to DoS


author: Joe Orton <jorton@redhat.com> - 2.9.2-7
changelog:
  - Requires(pre): httpd-filesystem to ensure apache user exists
  - enable mlogc everywhere, use buildcond to disable


author: John Dennis <jdennis@redhat.com> - 0.10.0-1
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-2
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-3
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches,
    fix patch to pickup change in configure script that causes
    HAVE_ECP to be defined
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.
  - Add lasso 2.5.0 version dependency
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-2
changelog:
  - Resolves: bug #1296286
    mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
  - Resolves: bug #1324536
    Installing mod_auth_mellon causes working Kerberos authentication
    to start failing
  - Add ECP.rst documentation file that was erroneously omitted


author: John Dennis <jdennis@redhat.com> - 0.11.0-4
changelog:
  - Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
    Rebuilding due to missing comment in Changelog


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: Luboš Uhliarik <luhliari@redhat.com> - 0.13.1-2
changelog:
  - Resolves: #1514391 - [RFE] Include mod_auth_mellon for RHSCL httpd24
  - Merged with RHEL-7.5 branch, SCLized spec


author: Lubos Uhliarik <luhliari@redhat.com> - 0.13.1-2.1
changelog:
  - Resolves: #1692458 - CVE-2019-3878 httpd24-mod_auth_mellon: mod_auth_mellon:
    authentication bypass in ECP flow


author: Lubos Uhliarik <luhliari@redhat.com> - 0.14.0-2
changelog:
  - Resolves: #1568475 - mod_auth_mellon: tmpfiles.d drop-in wrong location
  - Resolves: #1568837 - ownership test fail


author: Lubos Uhliarik <luhliari@redhat.com> - 0.14.0-3
changelog:
  - Resolves: #1692459 - CVE-2019-3878 httpd24-mod_auth_mellon: mod_auth_mellon:
    authentication bypass in ECP flow


author: Björn Esser <fedora@besser82.io> - 3.6.2-5
changelog:
  - Rebuilt for libjsoncpp.so.11
  - Bootstrap without gui, due inter-circular dependency in qt5-rpm-macros


author: Tilmann Scheller <tschelle@redhat.com> - 5.0.1-2
changelog:
  - Add %enable_llvmtoolset7 macro to make it easier to activate llvm-toolset-7
    during package builds.


author: Tilmann Scheller <tschelle@redhat.com> - 5.0.1-3
changelog:
  - Move %enable_llvmtoolset7 macro to the -build subpackage to avoid conflicts
    between multiple definitions of llvm-toolset-7.0 when using llvm-toolset-7 to build a SCL


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-1
changelog:
  - Rebased to Python 2.7.13
  - Removed backport of PEP 466 (Patches 213-228)
  - Rebased/rewritten patches 1, 6, 10, 55, 102, 112, 134, 136, 137, 146, 153,
    156, 167, 170, 180, 181, 189, 191
  - Dropped patches 166, 184, 196, 197, 229, 230, 232, 237, 238, 242
  - Added the rewheel module: patch 198
  Resolves: rhbz#1402809


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-2
changelog:
  - Rebuilding because some .pyc/.pyo files were not properly generated in the
    official build for some reason


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1709403 and rhbz#1709407


author: Victor Stinner <vstinner@redhat.com> - 2.7.16-4
changelog:
  - Fix regression in the crypt module introduced in update to Python 2.7.16
    (fix the name of the _crypt module init function).


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703534 and rhbz#1704372


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-1
changelog:
  - Update to 2.7.18, the last release of the Python 2 series
  - Security fix for CVE-2019-18348
  - Security fix for CVE-2019-20907
  Resolves: rhbz#1882656, rhbz#1882670, rhbz#1882666


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883541


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-1
changelog:
  - Update to 2.7.18, the last release of the Python 2 series
  - Security fix for CVE-2019-18348
  - Security fix for CVE-2019-20907
  Resolves: rhbz#1881145, rhbz#1765149, rhbz#1856542


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883254


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-3
changelog:
  - Security fixes for CVE-2021-3177, CVE-2021-23336 and CVE-2020-27619
  Resolves: rhbz#1918168, rhbz#1928904, rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-4
changelog:
  - Security fixes for CVE-2021-3733, CVE-2021-3737, CVE-2021-4189 and CVE-2022-0391
  - Fix test suite issues with the latest expat security update
  Resolves: rhbz#1995234, rhbz#1995162, rhbz#2036020, rhbz#2047376


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
  - Rebase to new snapshot with some fixes integrated
  - Reenable one test that I can't replicate the failure with.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.2.1-5
changelog:
  - Rebuild to generate bytecode properly after fixing rhbz#956289
  - scl-utils now compile man-pages -> use proper name in %files.


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Charalampos Stratakis <cstratak@redhat.com> - 7.1.0-2
changelog:
  - Change license tag to doc tag so directory is owned by the collection
  - Will revert when ownership of directories is defined in scl-utils-build package
  Resolves: rhbz#1334447


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Rebased to 8.1.2
  - Updated to a new PyPI source URL
  - Rebased and renamed prefix-stripping Patch 0
  Resolves: rhbz#1344674


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-4
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1882669


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-5
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1882668


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-4
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1774944


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-5
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1774985


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
  - update for upstream release
  - Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
  - Fix python main package having dependencies for the python2.6 subpackage
  - Fix places that used the default python instead of python26
  - Attempt to make byte compilation more robust in case we add python3 to EPEL5
  - Run unittests on python3 in F15+


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996705


author: Tomas Orsava <torsava@redhat.com> - 13.1.0-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory
  Resolves: rhbz#1353200


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - config: document value 2 for protocol.version (upstream patch)
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1
    (see #1625677)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Arbitrary path overwriting via export-marks in-stream command
    Resolves: CVE-2019-1348
  - Recursive submodule cloning allows using git directory twice with synonymous
    directory name written in .git/
    Resolves: CVE-2019-1349
  - Fixes CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Java SIG <java-devel@lists.fedoraproject.org> - 2:0.5-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Alexander Kurtakov <akurtako@redhat.com> 1.8-0.12.svn1230816.11
changelog:
  - Move to Batik 1.7 manifests.
  - Remove old stuff.
  - Remove provenance=W3C attribute from Import-Package. (rhbz #1073110)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Alexander Kurtakov <akurtako@redhat.com> 0:5.4.1-2
changelog:
  - Organize Sources numbering.
  - Drop old jpackage header - package has nothing in common anymore.
  - Drop 3+ years old provides/obsoletes.
  - Move old changelog to separate file to ease working with the spec file.


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.28-1
changelog:
  - Update to upstream 4.0.28 release.
  - Fixes CVE-2015-2156 (HttpOnly cookie bypass).
  - Resolves RHBZ#1111502


author: Michal Srb <msrb@redhat.com> - 5.0.3-1.1
changelog:
  - SCL-ize spec file
  - Remove dependency on unavailable parent POM
  - Drop jpackage_script
  - Make it a compat package


author: Honza Horak <hhorak@redhat.com> - 25.3.20-2
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1415720
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed


author: Honza Horak <hhorak@redhat.com> - 1:10.2.7-4
changelog:
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Do not use mysql-wait-stop on RHEL-7 service files


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-2
changelog:
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Run mysql-prepare-db-dir as non-root


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-3
changelog:
  - Handle left-over files that do not uninstall
    Resolves: #1487292
  - Fix uninstalled directories
    Resolves: #1487292
  - Files outside of /opt/rh should be in syspath package
    Resolves: #1492645
  - Split mariadb package to more sub-packages to match upstream's RPM list
    Resolves: #1490419


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-4
changelog:
  - Fix issues found by rpmdiff, particularly:
    unexpanded macro %{mysqld_pid_dir} -- left-over from switching pid file dir,
    we can remove in new SCL
    jar files included in connect engine
    Related: #1455850


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-5
changelog:
  - Support MYSQLD_OPTS and _WSREP_NEW_CLUSTER env vars in init script,
    same as it is done in case of systemd unit file
    Related: #1455850


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.22-1
changelog:
  - Rebase to 10.2.22
    Resolves: #1510416
    Resolves: #1645934
  - Use downstream tmpfiles instead of the upstream one
  - Patch 2 upstreamed
  - Patch 8 obsolete - upstream started to use macros
  - Patch 40 upstreamed
  - Add patch for wsrep_recover_position function in mysqld_safe
    Resolves: #1694679
  - CVEs fixed: #1664048
    CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3156
    CVE-2018-3282 CVE-2018-3277 CVE-2018-3143 CVE-2018-3251 CVE-2018-3185
  - CVEs fixed: #1617946
    CVE-2018-3058 CVE-2018-3060 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066
  - CVEs fixed: #1572138
    CVE-2018-2755 CVE-2018-2759 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
    CVE-2018-2777 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786
    CVE-2018-2787 CVE-2018-2810 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819
    CVE-2018-3081
  - CVEs fixed: #1559064
    CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665
    CVE-2018-2668 CVE-2018-3133
  - CVEs fixed: #1558264
    CVE-2017-15365
  - CVEs fixed: #1558261
    CVE-2017-10268 CVE-2017-10378
  - CVEs fixed: #1640321
    CVE-2018-3174


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.29-1
changelog:
  - Rebase to 10.2.29
  - CVEs fixed: #1880308
    CVE-2019-2614 CVE-2019-2627 CVE-2019-2628
  - CVEs fixed: #1880310
    CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2758 CVE-2019-2805
  - CVEs fixed: #1880312
    CVE-2019-2938 CVE-2019-2974
  - CVEs fixed: #1880323
    CVE-2020-2922 CVE-2020-2780


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.32-1
changelog:
  - Rebase to 10.2.32
  - CVEs fixed: #1880332
    CVE-2020-13249
  - CVEs fixed: #1880323
    CVE-2020-2760 CVE-2020-2752 CVE-2020-2814 CVE-2020-2812


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.9-1
changelog:
  - Rebase to 10.3.9
  - Add workaround for short SSL certificates
  - Fix parallel installability for x86_64 and i686 devel packages
  - CVEs fixed: #1603531
    CVE-2018-3058 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.10-3
changelog:
  - Fix "-fstack-protector-strong" static analysis errors
    Resolves: #1624139
  - Add wsrep_sst_rsync_tunnel script, add README
    Resolves: #1650463
  - Fix few covscan issues
    Resolves: #1649707
  - Fix galera_new_cluster script
    Resolves: #1641663


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - Remove README.mysql-cnf as we don't ship example configuration files anymore
    Resolves: #1653318
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.13-4
changelog:
  - Enable testsuite during build
    Resolves: #1688529
  - Fix SPECfile problems
    Related: #1688392
  - Ship client plugins in SCL
    Resolves: #1689204


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.9.2-1
changelog:
  - Update to upstream version 1.9.2
  - Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
  - Remove RPM bug workaround


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Roman Vais <rvais@redhat.com> - 1.57-1
changelog:
  - Update to upstream version 1.57
  - Correct directory setup in prep section
  - Change of tarball name in source url to correspond to upstream


author: Roman Vais <rvais@redhat.com> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Add patch for issue https://github.com/cbeust/jcommander/issues/367


author: gil cattaneo <puntogil@libero.it> 1.1-10
changelog:
  - rebuilt for upgrade el apis gid:aid (rhbz#1223468)
  - adapt to current guideline
  - use mvn()-like BRs
  - fix rpmlint problem in changelog entries


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.1-21
changelog:
  - Update to current packaging guidelines
  - Remove rpm bug workaround
  - Remove legacy obsoletes/provides


author: Noa Resare <noa@resare.com> - 18.0-5
changelog:
  - enable module guava-testlib
  - enable tests in guava-testlib
  - backport fix to HashMap related test from 19.0-SNAPSHOT


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7.6-2.5
changelog:
  - Fix various security flaws
  - Resolves: CVE-2018-11307, CVE-2018-12022, CVE-2018-12023,
    CVE-2018-14718, CVE-2018-14719, CVE-2018-14720, CVE-2018-14721,
    CVE-2018-19360, CVE-2018-19361, CVE-2018-19362


author: Marian Koncek <mkoncek@redhat.com> - 2.7.6-2.9
changelog:
  - Fix security vulnerabilities
  - Resolves: CVE-2020-10969, CVE-2020-11113, CVE-2020-10968, CVE-2020-11111,
    CVE-2020-11112


author: Michael Simacek <msimacek@redhat.com> - 0:6.1.3-1
changelog:
  - Update to upstream version 6.1.3
  - Use new upstream location
  - Generate scripts with jpackage_script


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-1
changelog:
  - Update to upstream version 3.0.0
  - Remove legacy obsoletes/provides
  - Update to current packaging guidelines


author: Mat Booth <mat.booth@redhat.com> - 3.0.1-2
changelog:
  - Fix build against new maven-archiver, which removed some deprecated methods
    that this plugin was using


author: Mat Booth <mat.booth@redhat.com> - 1.10.19-10
changelog:
  - Explicitly import more cglib packages in OSGi metadata to prevent mockito
    failing under certain circumstances during Eclipse test suites


author: Michael Simacek <msimacek@redhat.com> - 1.6.2-1
changelog:
  - Update to upstream version 1.6.2
  - Update upstream URL
  - Use upstream tarball since the bundled files are opensource and thus can be
    removed in %prep


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: gil cattaneo <puntogil@libero.it> - 1.0.5-5
changelog:
  - update Url and Source0 fields
  - minor changes to adapt to current guideline
  - introduce license macro


author: Mat Booth <mat.booth@redhat.com> - 6.9.12-1
changelog:
  - Update to upstream version 6.9.12
  - Avoid 'SNAPSHOT' in pom version to fix tests in testng-remote package


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: gil cattaneo <puntogil@libero.it> 31-4
changelog:
  - remove enforcer plugin support
  - related to rhbz#1308237,1308238
  - use BRs mvn()-like
  - introduce license macro


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.2-15
changelog:
  - Use %jpackage_script to generate scripts.
  - Add OSGi metadata to manifest instead of discarding everything else in it.
  - Drop dependency on xml-commons-api, add one on java(-headless).
  - Crosslink javadocs with Java's.
  - Include NOTICE* in docs.
  - Update URLs.
  - Specfile cleanups.


author: jchaloup <jchaloup@redhat.com> - 0-0.4.git4727d76
changelog:
  - internal packages are not provided but are needed for building
    related: #1250509
    resolves: #1255155


author: jchaloup <jchaloup@redhat.com> - 0-0.3.gitc57d4a7
changelog:
  - Repository has moved to github.com/golang/crypto, updating spec file accordingly
    resolves: #1231618


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1-3
changelog:
  - Resolves: rhbz#1141875 - newpackage
  - no debug_package
  - preserve timestamps
  - do not redefine gopath


author: Marek Skalický <mskalick@redhat.com> - 1.60.0-2
changelog:
  - disable using libquadmath (gcc in RHEL6 does not provide)
  - Disable container library - it contains typedef redefinition
    which fails with gcc 4.4 in RHEL6


author: Marek Skalický <mskalick@redhat.com> - 3.4.5-0.2.git4d4d965
changelog:
  - Build also mongoreplay
  - patch vendored dependency github.com/spacemonkeygo/spacelog to use syscall.Dup3


author: Remi Collet <remi@fedoraproject.org> - 1.6.1-2
changelog:
  - rebuild with new upstream tarball
  - add examples in devel documentation
  - use patch instead of sed hacks for rpm specific changes


author: Marek Skalický <mskalick@redhat.com> - 1.6.3-2
changelog:
  - Rebase to mongo-c-driver from Fedora 27 and convert it to SCL
  - disable man pages (RHEL does not contain new enough sphinx)


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1.0-1
changelog:
  - Update to 2.1.0.
  - Fix rhel conditional.
  - Binary has been renamed.
  - Build python3 subpackage.
  - Include documentation in HTML instead of Markdown format.
  - Run tests.


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-1
changelog:
  - Rebase to MySQL 8.0.12
  - Fix the SYS_NICE capabilities
    Related: #1540946
  - Add requires for the semanage binary
  - CVEs fixed: CVE-2018-3054 CVE-2018-3056 CVE-2018-3060 CVE-2018-3062
    CVE-2018-3064 CVE-2018-3065 CVE-2018-3077 CVE-2018-3081 CVE-2018-3067
    CVE-2018-3073 CVE-2018-3074 CVE-2018-3075 CVE-2018-3078 CVE-2018-3079
    CVE-2018-3080 CVE-2018-3082 CVE-2018-3084


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-3
changelog:
  - Add bundled ICU version
  - Add a patch for the 'mysql_com.h' header file
  - Use system mecab tool
  - Use RPATH for mysqld, so we can set capabilities for this binary
    and also ship a small SELinux policy to allow sys_nice capability
    Related: #1628814


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-6
changelog:
  - Fix the default configuration of the server, so it uses same authentication
    method as MySQL 5.7
    Resolves: #1631396


author: Michal Schorm <mschorm@redhat.com> - 8.0.13-1
changelog:
  - Rebase to 8.0.13
  - CVEs fixed: #1642059
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
    CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
    CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
    CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
    CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
    CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
    CVE-2018-3280 CVE-2018-3203 CVE-2018-3155


author: Honza Horak <hhorak@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
    CVEs fixed:
    Resolves: #1670206
    CVE-2019-2420 CVE-2019-2434 CVE-2019-2436 CVE-2019-2481 CVE-2019-2482
    CVE-2019-2486 CVE-2019-2494 CVE-2019-2495 CVE-2019-2502 CVE-2019-2507
    CVE-2019-2528 CVE-2019-2529 CVE-2019-2530 CVE-2019-2531 CVE-2019-2532
    CVE-2019-2533 CVE-2019-2534 CVE-2019-2535 CVE-2019-2536 CVE-2019-2539
    Resolves: #1707124
    CVE-2019-2580 CVE-2019-2581 CVE-2019-2584 CVE-2019-2585 CVE-2019-2587
    CVE-2019-2589 CVE-2019-2592 CVE-2019-2593 CVE-2019-2596 CVE-2019-2606
    CVE-2019-2607 CVE-2019-2614 CVE-2019-2617 CVE-2019-2620 CVE-2019-2623
    CVE-2019-2624 CVE-2019-2625 CVE-2019-2626 CVE-2019-2627 CVE-2019-2628
    CVE-2019-2630 CVE-2019-2631 CVE-2019-2635 CVE-2019-2636 CVE-2019-2644
    CVE-2019-2681 CVE-2019-2683 CVE-2019-2685 CVE-2019-2686 CVE-2019-2687
    CVE-2019-2688 CVE-2019-2689 CVE-2019-2691 CVE-2019-2693 CVE-2019-2694
    CVE-2019-2695 CVE-2019-2634
    Resolves: #1733478, #1733486
    CVE-2019-2800 CVE-2019-2822
    Other CVEs fixed in 8.0.17:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.18-1
changelog:
  - Rebase to 8.0.18
    Resolves: #1768196
    CVEs fixed:
    CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019-2946 CVE-2019-2957
    CVE-2019-2960 CVE-2019-2963 CVE-2019-2966 CVE-2019-2967 CVE-2019-2968
    CVE-2019-2974 CVE-2019-2982 CVE-2019-2991 CVE-2019-2993 CVE-2019-2997
    CVE-2019-2998 CVE-2019-3004 CVE-2019-3009 CVE-2019-3011 CVE-2019-3018
    CVE-2020-2752
  - Add libzstd-devel dependencies


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.19-1
changelog:
  - Rebase to 8.0.19
    Resolves: #1796897
    CVEs fixed:
    CVE-2020-2577 CVE-2020-2579 CVE-2020-2580 CVE-2020-2584 CVE-2020-2588
    CVE-2020-2589 CVE-2020-2660 CVE-2020-2679 CVE-2020-2686 CVE-2020-2694
    CVE-2020-2627 CVE-2020-2570 CVE-2020-2573 CVE-2020-2574


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.20-1
changelog:
  - Rebase to 8.0.20
    Resolves: #1830105
    CVEs fixed:
    CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020-2763 CVE-2020-2765
    CVE-2020-2770 CVE-2020-2774 CVE-2020-2779 CVE-2020-2780 CVE-2020-2804
    CVE-2020-2812 CVE-2020-2814 CVE-2020-2853 CVE-2020-2892 CVE-2020-2893
    CVE-2020-2895 CVE-2020-2896 CVE-2020-2897 CVE-2020-2898 CVE-2020-2901
    CVE-2020-2903 CVE-2020-2904 CVE-2020-2921 CVE-2020-2923 CVE-2020-2924
    CVE-2020-2925 CVE-2020-2926 CVE-2020-2928 CVE-2020-2930 CVE-2020-2760


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.21-1
changelog:
  - Rebase to 8.0.21
    Resolves: #1867720
    CVEs fixed:
    CVE-2020-14539 CVE-2020-14540 CVE-2020-14547 CVE-2020-14550 CVE-2020-14553
    CVE-2020-14559 CVE-2020-14567 CVE-2020-14568 CVE-2020-14575 CVE-2020-14576
    CVE-2020-14586 CVE-2020-14597 CVE-2020-14614 CVE-2020-14619 CVE-2020-14620
    CVE-2020-14623 CVE-2020-14624 CVE-2020-14631 CVE-2020-14632 CVE-2020-14633
    CVE-2020-14634 CVE-2020-14641 CVE-2020-14643 CVE-2020-14654 CVE-2020-14656
    CVE-2020-14663 CVE-2020-14678 CVE-2020-14680 CVE-2020-14697 CVE-2020-14702
    CVE-2020-14725 CVE-2020-14651
  - Use bundled libzstd and libevent
  - Check that we have correct versions in bundled(*) Provides
  - Remove re2 bundled dependency
  - Delete load_generator test, due to failing compilation


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-7
changelog:
  - filter auto-provides from module subpackages (#1434349)
  - drop perl vendorarch directory ownership (#1434333)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.12.1-1
changelog:
  - update to 1.12.1
  - Resolves: CVE-2017-7529 nginx: Integer overflow in nginx range filter module
    leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - update to version 1.14.1
  - Resolves: #1648223 - CVE-2018-16845 rh-nginx114-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1648225 - CVE-2018-16844 rh-nginx114-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648228 - CVE-2018-16843 rh-nginx114-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1.1
changelog:
  - Resolves: #1744818 - CVE-2019-9511 rh-nginx114-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744330 - CVE-2019-9513 rh-nginx114-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745043 - CVE-2019-9516 rh-nginx114-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - update to version 1.14.1
  - Resolves: #1650092 - CVE-2018-16843 rh-nginx114-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1650093 - CVE-2018-16844 rh-nginx114-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648365 - CVE-2018-16845 rh-nginx114-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-3
changelog:
  - Resolves: #1745696 - CVE-2019-9511 rh-nginx116-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745689 - CVE-2019-9513 rh-nginx116-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745668 - CVE-2019-9516 rh-nginx116-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-4.1
changelog:
  - Resolves: #1848449 - CVE-2019-20372 rh-nginx116-nginx: nginx: HTTP request
    smuggling via error pages in http/ngx_http_special_response.c


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-5
changelog:
  - Resolves: #1798233 - CVE-2019-20372 rh-nginx116-nginx: nginx: HTTP request
    smuggling via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-6
changelog:
  - Resolves: #1963181 - CVE-2021-23017 rh-nginx116-nginx: nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-1
changelog:
  - Resolves: #1853206 - RFE: add collection for NGINX 1.18
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1963183 - CVE-2021-23017 rh-nginx118-nginx: nginx: Off-by-one
    in ngx_resolver_copy() when labels are followed by a pointer to a root 
    domain name


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.3.0-1
changelog:
  - Update to 8.3.0
  - update V8 to 6.0
  - update libuv to 1.13.1
  - add bundled provides for npm modules
  - enable aarch64 builds


author: Zuzana Svetlikova <zsvtelik@redhat.com> - 8.9.4-2
changelog:
  - Resolves: RHBZ#1513560 #1542079
  - fix outdated minizlib dependency in npm node_modules tree
  - https://github.com/nodejs/node/pull/16509


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.1.0-1
changelog:
  - Initial v10 packaging
  - patch crypto/openssl 1.1.0 -> 1.0.2
  - remove scl prefixes from bundled dependencies
  - TODO: update patches and dependencies


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.10.0-1
changelog:
  - rebase to v10.10.0
  - update patches for openssl
  - TODO: remove useless comments, fix failing tests, update bundled provides


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.10.0-2
changelog:
  - Resolves: RHBZ#1584252
  - comment out native.req file to prevent conflict with other Node.js
  - installations (rhbz#1637922)


author: Jan Staněk <jstanek@redhat.com> - 10.16.3-1
changelog:
  - Rebase to version 10.16.3
  - Resolves: rhbz#1744307 rhbz#1744593 rhbz#1744732 rhbz#1744745 rhbz#1744773 rhbz#1744807 rhbz#1745090 rhbz#1745160


author: Jan Staněk <jstanek@redhat.com> - 10.16.3-1
changelog:
  - Rebase to version 10.16.3
  - Resolves: rhbz#1744308 rhbz#1744594 rhbz#1744733 rhbz#1744746 rhbz#1744774 rhbz#1744808 rhbz#1745091 rhbz#1745161


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.1.4-1
changelog:
  - Security update (https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/)
  - Fixes RHBZ#1463132 and RHBZ#1469706


author: Honza Horak <hhorak@redhat.com> - 12.10.0-1.1
changelog:
  - Rebase to 12.10.0 and apply patches for openssl compatibility
    (patches prepared by Zuzana and Jan)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 12.16.1
changelog:
  - Resolves: RHBZ#1800402, RHBZ#1800401, RHBZ#1800377, RHBZ#1774113
  - also 1788310, 1788305, 1788301 (December security release)
  - also 1793482
  - use devtoolset-8, build with -j4
  - added uvwasi bundled dependency
  - revert more features #23188, #30637, #29598, #29292, #29489, #30055, #30053


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 12.16.1
changelog:
  - Resolves: RHBZ#1800404, RHBZ#1800403, RHBZ#1800378, RHBZ#1774113
  - Resolves: RHBZ#1803154, RHBZ#1803157, RHBZ#1803160 (nmp CVEs)
  - also 1793482
  - use devtoolset-8, build with -j4
  - added uvwasi bundled dependency
  - revert more features #23188, #30637, #29598, #29292, #29489, #30055, #30053


author: Jan Staněk <jstanek@redhat.com> - 12.22.2-1
changelog:
  - Rebase to 12.22.2
    Resolves: CVE-2021-22918, CVE-2021-23362, CVE-2021-27290, CVE-2021-33502
  - Drop upstreamed deps-y18n-address-prototype-pollution-issue.patch


author: Jan Staněk <jstanek@redhat.com> - 12.22.4-1
changelog:
  - Rebase to 12.22.4 with additional fixes (http2-update-handling-of-streams-on-rst_stream-frames.patch)
    Resolves: CVE-2021-22930
  - Backport fix for CVE-2021-23343 in bundled(nodejs-path-parse)
    Resolves: rhbz#1986744


author: Jan Staněk <jstanek@redhat.com> - 12.22.12-1
changelog:
  - Rebase to last upstream release
    Resolves: CVE-2021-37701 CVE-2021-37712 CVE-2021-22960 CVE-2021-22959
    Resolves: CVE-2021-3918 CVE-2021-44531 CVE-2021-44532 CVE-2021-44533
    Resolves: CVE-2022-21824 CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 12.22.12-2
changelog:
  - Re-create patch for CVE-2021-44906 and apply to all found bundled dependencies
    Resolves: rhbz#2073596


author: Jan Staněk <jstanek@redhat.com> - 14.17.2-1
changelog:
  - Rebase to 14.17.2
    Resolves: CVE-2021-22918, CVE-2021-23362, CVE-2021-27290, CVE-2021-33502
  - Remove upstreamed deps-y18n-CVE-2020-7774.patch


author: Jan Staněk <jstanek@redhat.com> - 14.17.4-1
changelog:
  - Rebase to 14.17.4 with additional fixes (update-handling-on-rst_stream-frames.patch)
    Resolves: CVE-2021-22930
  - Patch bundled(nodejs-path-parse) for CVE-2021-23343
    Resolves: rhbz#1986745


author: Jan Staněk <jstanek@redhat.com> - 14.17.6-1
changelog:
  - Rebase to 14.17.6
    Resolves: rhbz#2031767 rhbz#2031769
  - Drop CVE-2021-23343-path-parse-redos.patch: fixed upstream


author: Jan Staněk <jstanek@redhat.com> - 14.20.1-2
changelog:
  - Record additional fixes included in current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824
    Resolves: CVE-2022-0235 CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 3.4.0-5
changelog:
  - Update addon.gypi
  - Update patch
  - Fixdep badly processed deps
  - Updated with script
  - Rebuild from zvetlik/rh-nodejs6


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 0.1.3-4
changelog:
  - Add missing ExclusiveArch and BuildArch
  - Use macro in -runtime dependency
  - Rebuilt with updated metapackage


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: Piotr Popieluch <piotr1212@gmail.com> - 0.1.18-2
changelog:
  - Added LICENSE to %files
  - Added rm -rf node_modules to %prep
  - Capitalized summary
  - Removed Group tag


author: Tomas Hrcka <thrcka@redhat.com> - 0.0.4-4
changelog:
  - Add missing macro /usr/lib/rpm/rh-nodejs6-symlink-deps /opt/rh/rh-nodejs6/root/usr/lib/node_modules


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-2
changelog:
  - Rebuild from zvetlik/rh-nodejs6
  - newer releases have problems with debug
  - add procps-ng for tests
  - remove unused patches


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476317
  - turn off lots of tests (mainly https and tls)
  - update to latest v6.x version (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)
  - add lldbinit


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476316
  - turn off lots of tests (mainly https and tls)
  - update to latest v6.x version (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)
  - add lldbinit


author: Jared Smith <jsmith@fedoraproject.org> - 3.0.2-1
changelog:
  - Update to upstream 3.0.2 release
  - disable self-test until we get all the run-time dependencies into Rawhide


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0.0-4
changelog:
  - add some post-install hackery to work around potential RPM bug resulting in
    symlinks still pointing to their old locations on upgrade (RHBZ#997978)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.6.0-1
changelog:
  - update to upstream release 0.6.0
  - History.md is now not included in the npm tarball
  - tests are now not included in the npm tarball, so download separately


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.0-3
changelog:
  - rename from opener to nodejs-opener
  - add exec permission on opener (executable and lib are same file)
  - remove DOS EOLs from LICENSE.txt


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.2.2-1
changelog:
  - New upstrem release
  - change license
  - change URL
  - remove Source1 and Source10
  - add LICENSE to %doc
  - updated Summary and %description


author: Stephen Gallagher <sgallagh@redhat.com> - 5.1.2-3
changelog:
  - Fix package review issues
  - Use npm(foo) syntax for BuildRequires
  - Drop unnecessary buildroot cleanup
  - Fix capitalization of Summary:


author: Ralph Bean <rbean@redhat.com> - 1.2.0-2
changelog:
  - Include license from github.
  - Enable tests.
  - Make cli.js into a symlink.
  - Comment out nodejs_symlink_deps --build, as per review.


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.1.0-2
changelog:
  - Removed %clean and rm -rf %buildroot from %install
  - changed Summary and %description to start with capital letter


author: Jan Staněk <jstanek@redhat.com> - 8.16.1-1
changelog:
  - Rebase to 8.16.1
  - Resolves: rhbz#1744305 rhbz#1744591 rhbz#1744734 rhbz#1744747 rhbz#1744771 rhbz#1744809 rhbz#1745092 rhbz#1745158


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561102)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561102)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561101)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561101)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-381
changelog:
  - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653529)
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c (bug #1653524)
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c (bug #1653526)
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c (bug #1653521)


author: Paul Howarth <paul@city-fan.org> - 20140910.001-1
changelog:
  - Update to 20140910.001
    - Update to the latest data (2014-09-10)
  - Use %license
  - Classify buildreqs by usage
  - Drop redundant LWP::Simple requires filter


author: Paul Howarth <paul@city-fan.org> - 20140910.002-1
changelog:
  - Update to 20140910.002
    - Look in the current directory for RangeMessage.xml if it's not in other
      locations; this can help with various Perl app packagers (also try
      ISBN_RANGE_MESSAGE env var)


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Grok dist names ending with something numeric containing underscores
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.143240-1
changelog:
  - Update to 2.143240
    - Give correct path in nested merges such as resources
    - Removed strings test that should have been removed when
      CPAN::Meta::Requirements was removed to a separate dist


author: Paul Howarth <paul@city-fan.org> - 2.150001-1
changelog:
  - Update to 2.150001
    - Include allowed values for license field in 1.x historic licenses rather
      than linking to Module::Build
    - Documented when fragment merging became available


author: Paul Howarth <paul@city-fan.org> - 2.150005-1
changelog:
  - Update to 2.150005
    - Metadata merging now does deep hash merging as long as keys don't conflict
    - Serialized CPAN::Meta objects now include a x_serialization_backend entry
    - Declared extra developer prereq
    - Added test for 'x_deprecated' field in "provides"
    - Noted explicitly that historical META spec files are licensed under the
      same terms as Perl
    - Changed some test data from UTF-8 to ASCII


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - Bump Module::Metadata prereq for $VERSION parsing (CPAN RT#101095)
    - Consistently require same version of CPAN::Meta::Requirements
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - Declare the minimum version required for the "merged_requirements"
      interface
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 2.132-1
changelog:
  - Update to 2.132
    - Precision of version requirement "0.00" is preserved when merging
      requirements


author: Paul Howarth <paul@city-fan.org> - 2.133-1
changelog:
  - Update to 2.133
    - In fixing preservation of "0.00", some Module => 0 optimizations were lost;
      this restores those optimizations


author: Paul Howarth <paul@city-fan.org> - 2.140-1
changelog:
  - Update to 2.140
    - Added method for getting structured requirements
    - Skips impossible tests on Perls earlier than 5.8.0 (before v-string magic)
    - On Perls before 5.8.1, pad 1-part and 2-part literal v-strings to avoid old
      version.pm bugs with v-strings less than 3 characters
    - Protect internal _isa_version from non-refs that pass ->isa('version')
    - Much better error messages, explaining what conflicted and how
    - Repackage with fixed tests
    - Expanded dist.ini from author bundle to individual plugins


author: Paul Howarth <paul@city-fan.org> - 1.5-1
changelog:
  - Update to 1.5
    - Work around global destruction order issue (CPAN RT#23568/68526)
  - This release by SHAY ⇒ update source URL
  - Drop %defattr, redundant since rpm 4.4
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Classify buildreqs by usage
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Major optimization to mkopt
  - Use %license
  - Simplify find expression using -delete


author: Paul Howarth <paul@city-fan.org> - 0.200005-1
changelog:
  - Update to 0.200005
    - Open DATA handles both :raw and :bytes to avoid content munging on Win32
    - This is not yet a perfect solution for Win32


author: Paul Howarth <paul@city-fan.org> - 0.200006-1
changelog:
  - Update to 0.200006
    - Skip tests on Win32 pre-5.14 related to line endings; perl munges the data
      before we're able to get at it


author: Paul Howarth <paul@city-fan.org> - 0.009-1
changelog:
  - Update to 0.009
    - In META.{yml,json}, point to public git repository
    - Bugfix: permit time of day for a DST change to extend up to 24:59:59,
      which POSIX (unclearly) permits and is actually seen in the current
      rule for timezone Asia/Amman
    - Support the extended form of the recipe syntax that is used by
      version 3 of the tzfile(5) file format
    - Bugfix: correct ->offset_for_local_datetime for perpetual-DST ruleset
      that can arise with the tzfile3 system
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.10-1
changelog:
  - Update to 0.10
    - We need Module::Runtime 0.009 for module_notional_filename (#6)
  - Update patch for building with Test::More < 0.88
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Drop the dep on List::MoreUtils
      (https://github.com/doy/dist-checkconflicts/pull/8)
  - Update patch for building with Test::More < 0.88
  - Don't try to run the extra tests for EPEL builds
  - Specify version requirements for extra test modules


author: Petr Pisar <ppisar@redhat.com> - 7.10-5
changelog:
  - Own ExtUtils/MM directory by perl-ExtUtils-MM-Utils only
  - Require perl-devel by perl-ExtUtils-MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.18-4
changelog:
  - No longer needs any non-core buildreqs, and hence bootstrapping
  - Drop references to pwhich, which is no longer included
  - This release by PLICEASE → update source URL


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Compress::FAQ - Added a section on bgzip (CPAN RT#103295)
    - IO::Compress::Zip - Zip64 needs to be first in extra field to work around
      a Windows Explorer bug (see
      http://www.info-zip.org/phpBB3/viewtopic.php?f=3&t=440 for details)


author: Paul Howarth <paul@city-fan.org> - 1:0.96-1
changelog:
  - Update to 0.96
    - Require Module::Load::Conditional 0.66 to resolve CVE-2016-1238
      (avoid loading optional modules from default .)
  - Update patch for use of ExtUtils::MM::Utils
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.92-5
changelog:
  - Address intermittent test failures (CPAN RT#20105, RH BZ#1094395)
  - Add runtime dependency on Data::Dumper
  - Add build dependency on IO::Tty for the test suite
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.94-1
changelog:
  - Update to 0.94
    - Update License discrepancies (CPAN RT#100858)
    - Many typo corrections
    - Fix t/pty.t fails on Solaris 10 (CPAN RT#20105)
  - Drop upstreamed patch for CPAN RT#20105
  - Use %license


author: Petr Pisar <ppisar@redhat.com> - 1.25-4
changelog:
  - Break build-cycle: perl-IPC-System-Simple → perl-Test-Perl-Critic
    → perl-Perl-Critic → perl-PPI → perl-IO-All → perl-File-MimeInfo
    → perl-File-BaseDir → perl-IPC-System-Simple


author: Paul Howarth <paul@city-fan.org> - 2.27400-1
changelog:
  - Update to 2.27400
    - Applied and merged long term neglected patches and pull requests
    - Modified Makefile.PL to set UNINST=1 if needed on old perls
    - Decode decimals to Perl's internal NV type
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Implemented and then reverted a change to use Sub::Name (CPAN RT#98097)
  - Modernize spec
  - Hack out references to currently-unavailable Test::CleanNamespaces


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Resolve an edge-case with DEPRECATED (CPAN RT#101555)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Add FORCE_SAFE_INC option to address CVE-2016-1238
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.000025-1
changelog:
  - Update to 1.000025
    - Evaluate version assignment in a clean environment, to fix assignment in a
      block (CPAN RT#101095)
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.000027-1
changelog:
  - Update to 1.000027
    - Work around issues with an unconfigured Log::Contextual
    - Allow tests to pass in a perl with no taint support


author: Paul Howarth <paul@city-fan.org> - 1.106-1
changelog:
  - Update to 1.106
    - Update github links
    - Typo fix
  - Update patch for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 1:1.4417-1
changelog:
  - Update to 1.4417
    - Outputs the version of backends used
    - Updated repo metadata and boilerplate files
    - Pointed issue tracker to the Perl-Toolchain-Gang Github repo
  - Classify buildreqs by usage
  - Use %license
  - Package CONTRIBUTING.mkdn and README files
  - Expand %description
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1:1.4421-1
changelog:
  - Update to 1.4421
    - Add CPAN_META_JSON_BACKEND to allow requesting non-JSON.pm backends
    - Add CPAN_META_JSON_DECODER to allow Mojo::JSON/JSON::Tiny to be used just
      for decoding
    - Re-encode strings before decode_json since that expects bytes
    - Add test cases for wide characters in META files
    - Bump JSON::PP prerequisite to 2.27300 to work around a bug before perl
      5.8.7; includes a test to confirm correct behavior
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.010-1
changelog:
  - Update to 1.010
    - Added 'msys' as a Unix-type OS
  - BR: perl-generators where available
  - Simplify find command using -delete
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 0.103011-1
changelog:
  - Update to 0.103011
    - Do not load Sub::Install, since it isn't used!
    - Eliminate superfluous FULL STOP characters (".")
  - Update patch for building with old Test::More versions
  - Classify buildreqs by usage
  - Use %doc where possible


author: Paul Howarth <paul@city-fan.org> - 0.103012-1
changelog:
  - Update to 0.103012
    - Consider license names without parentheses when scanning text for license
    - When scanning text for license, put known substrings inside \b..\b
  - Simplify find command using -delete
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.928-1
changelog:
  - Update to 0.928
    - Cope with subroutines with spaces in their names when catching warnings
    - Don't assume that the source sub isn't blessed in tests (!)


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Do not lose argument(s) to import
      (https://github.com/rjbs/Test-Deep/issues/29)


author: Paul Howarth <paul@city-fan.org> - 0.119-1
changelog:
  - Update to 0.119
    - Overloading of & and | no longer can change All or Any objects found as
      arguments
    - An All as an argument to an All constructed is flattened out into its
      All-ed values; the same goes for Any
    - Remove use of Test::NoWarnings for user-facing tests


author: Paul Howarth <paul@city-fan.org> - 1.120-1
changelog:
  - Update to 1.120
    - Add none() test; it's like any(), but negative
    - Fix stringification of any() expectations


author: Paul Howarth <paul@city-fan.org> - 0.012-1
changelog:
  - Update to 0.012
    - Go back to auto-detecting the required Test::More, reverting the changes
      made for CPAN RT#62699
  - Drop support for all current EL releases (5 and 6) since we need Test::More
    version 0.96 or later for the test suite


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Avoid assuming that t/todo.t is always called t/todo.t
  - Classify buildreqs by usage
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.302022-1
changelog:
  - Update to 1.302022
    - Many micro-optimizations
    - Spelling fixes and tests
    - Fix leaky File.t file so that tmp doesn't fill up
    - Move some modules out of the known broken list in xt tests
    - Add Test2-based tools to downstream testing
    - Change when PID/TID are stashed (for forkprove)
    - VMS fixes for Files.t and IPC system
    - Improve thread checks to better detect broken 5.10 builds
    - Use thread checks to skip/run t/Legacy/Regression/637.t


author: Paul Howarth <paul@city-fan.org> - 1.302026-1
changelog:
  - Update to 1.302026
    - Do not fail if Test2::API::Breakage cannot load (rare 5.10.0 issue)
    - Potential fix for t/Legacy/Regression/637.t
    - Make t/Legacy/Regression/637.t AUTHOR_TESTING for now
    - Add Generic event type
    - Make sure enabling culling/shm sets pid and tid (fix #679)


author: Paul Howarth <paul@city-fan.org> - 1.302030-1
changelog:
  - Update to 1.302030
    - Use pre_filter instead of filter for TODO in Test::Builder (fix #683)
    - Fix typos in transitions doc (#681)
    - Add 'inherit_trace' param to run_subtest
    - Properly skip thread test when threads are broken


author: Paul Howarth <paul@city-fan.org> - 1.302037-1
changelog:
  - Update to 1.302037
    - Restore PerlIO layer cloning on STDERR and STDOUT
  - Bump obsoletes/provides versions for perl-Test2 to maintain upgrade path from
    packages in third-party repositories


author: Paul Howarth <paul@city-fan.org> - 1.302040-1
changelog:
  - Update to 1.302040
    - Fix broken MANIFEST.SKIP entries (#689)
    - Add Info event for better diagnostics


author: Paul Howarth <paul@city-fan.org> - 0.022-1
changelog:
  - Update to 0.022
    - Propagate all warnings to any previously-declared __WARN__ handlers
      (unlike with __DIE__, merely calling warn() is not sufficient)


author: Paul Howarth <paul@city-fan.org> - 0.023-1
changelog:
  - Update to 0.023
    - Properly handle propagating warnings to previously declared handlers that
      are not coderefs (i.e. a sub name, or the magic DEFAULT and IGNORE)


author: Paul Howarth <paul@city-fan.org> - 0.025-1
changelog:
  - Update to 0.025
    - Prereqs lowered from required to suggested:
      - CPAN::Meta::Check
      - CPAN::Meta::Requirements
    - Tests are now quieter to avoid causing confusion, by suppressing the
      printing of stderr in tests


author: Paul Howarth <paul@city-fan.org> - 0.026-1
changelog:
  - Update to 0.026
    - Fixed use of modules loaded by t/zzz-check-breaks.t
    - Fix stderr suppression on perl 5.6


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Add optional test deps as recommended prereqs
      (https://github.com/doy/try-tiny/pull/18)
  - Update patch for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix syntax of example code (PR#22)
    - 'perl' removed from prerequisite recommendations, to avoid tripping up CPAN
      clients
    - Sub::Util is used preferentially to Sub::Name in most cases (PR#27)
  - This release by ETHER → update source URL
  - Modernize spec
  - Don't run the extra tests


author: Paul Howarth <paul@city-fan.org> - 1:0.231-1
changelog:
  - Update to 0.231
    - Restore test compatibility where Perl does not provide
      &Config::non_bincompat_options (CPAN RT#102626)


author: Paul Howarth <paul@city-fan.org> - 1:0.233-1
changelog:
  - Update to 0.233
    - The diagnostic about inheriting from ourselves was removed; it served no
      purpose as Perl already warns if we try to inherit in a circular way


author: Paul Howarth <paul@city-fan.org> - 1:0.234-1
changelog:
  - Update to 0.234
    - Fix the test for PMC loading to work on versions on Perl that don't have
      Config::non_bincompat_options (CPAN RT#102626)


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0-3
changelog:
  - Define macros %tests_req and %tests_subpackage_requires in case the
    perl-macros is not in buildroot


author: Jitka Plesnikova <jplesnik@redhat.com>, Petr Pisar <ppisar@redhat.com> - 2.3-1
changelog:
  - Initial version for SCL 2.3
  - Escape apostrophs in rh-perl-520(7) manual page
  - Fix ownership of man directories
  - Resolves: rhbz#1219522, rhbz#1225445


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-398
changelog:
  - Fix reporting malformed UTF-8 character (RT#131646)
  - Fix File::Glob rt131211.t test random failures
  - Fix t/op/hash.t test random failures
  - Parse caret variables with subscripts as normal variables inside ${...}
    escaping (RT#131664)
  - Do not display too many bytes when reporting malformed UTF-8 character
  - Fix select called with a repeated magical variable (RT#131645)
  - Fix error message for "our sub foo::bar" (RT#131679)
  - Fix executing arybase::_tie_it() in Safe compartement (RT#131588)
  - Fix handling attribute specification on our variables (RT#131597)
  - Fix splitting non-ASCII strings if unicode_strings feature is enabled (RT#130907)
  - Fix compiler warnings in code generated by ExtUtils::Constant
    (CPAN RT#63832, CPAN RT#101487)
  - Fix GCC version detection for -D_FORTIFY_SOURCE override (RT#131809)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-399
changelog:
  - Fix unreliable Time-HiRes tests (CPAN RT#122819)
  - Do not require $Config{libs} providers by perl-devel package (bug #1481324)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-404
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561100)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561100)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-405
changelog:
  - 5.26.3 bump (bug #1658969)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c)
  - Fix CVE-2018-18314 (heap based buffer overflow)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-395
changelog:
  - perl package installs all core modules, interpreter moved to
    perl-interpreter package, perl-core package is obsolete
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
    (bug #1464903)


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - More Makefile.PL updates
    - Makefile.PL now checks for a working compiler using ExtUtils::HasCompiler
      (inlined into the build) rather than ExtUtils::CBuilder (CPAN RT#113685)
  - Simplify find command using -delete
  - Fix EPEL conditional - only currently buildable for EPEL 7 onwards
  - Drop BR: for Test::Pod::No404s, which breaks koji builds


author: Paul Howarth <paul@city-fan.org> - 2.150010-1
changelog:
  - Update to 2.150010
    Added:
    - Merged Parse::CPAN::Meta 1.4420 into this distribution
    Fixed:
    - CPAN::Meta::Prereqs now fully accepts phases and types starting with 'x_';
      new 'phases' and 'types_in' interfaces have been added
    - No longer relies on JSON backend for data structure cloning; this is much
      faster than using JSON::PP
    - The cloning routine would raise an error on expected types when it
      previously would stringify; the old behavior is restored
    - Fixed used of Encode in Parse::CPAN::Meta::load_json_string (cherry picked
      from Parse::CPAN::Meta 1.4422)
    - Added "use warnings" to Parse::CPAN::Meta
    - The YAML and JSON backend variables are ignored when building/testing the
      perl core itself, where non-core backends are not yet installed
    Tests:
    - The 'extra_mappings' feature for meta merging is now tested and documented
    - During tests, delete new environment variables added by Parse::CPAN::Meta
      1.4418
    Spec:
    - Clarifies acceptable values for booleans
    - Cleaned up text and links of historical specs
  - Obsolete old perl-Parse-CPAN-Meta package
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.013-1
changelog:
  - Update to 0.013
    - Make tests more resilient against dev versions of dependencies
  - BR: perl-generators
  - Drop legacy Group: tag
  - Take advantage of features in recent EU::MM to simplify flow


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Undef versions are now passed through to CPAN::Meta::Requirements for the
      check, rather than failing with "Missing version" errors


author: Paul Howarth <paul@city-fan.org> - 2.140-7
changelog:
  - Introduce build-condition for optional tests
  - Simplify find command using -delete
  - Switch to hunspell for spell check


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.200007-1
changelog:
  - Update to 0.200007
    - Rename the test library "Parent.pm" to "Mother.pm" to avoid conflict with
      core "parent.pm" on case-insensitive systems
  - Drop legacy Group: tag
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - No longer include a Makefile.PL in the distribution
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Convert .cvsignore to .gitignore
  - Classify buildreqs by usage
  - Don't need to remote empty directories from the buildroot
  - Make %files list more explicit
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - No longer include a Makefile.PL in the distribution
    - In META.{yml,json}, point to public bug tracker
    - In META.json, specify type of public repository
  - Classify buildreqs by usage
  - Make %files list more specific
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - No longer include a Makefile.PL in the distribution
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - In META.json, specify type of public repository
  - Drop redundant %{?perl_default_filter}
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.14-1
changelog:
  - Update to 0.14
    - A couple of minor optimizations (GH#8)
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    - Switch to GitHub Issues
  - Author/Release tests moved to xt/, so don't bother trying to run them


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    - Generated exception classes are now added to %INC; if you subclass a
      generated class with "use base" then base.pm will no longer attempt to load
      the requested class (GH#8)


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    - The full_message() method in Exception::Class::Base now calls message()
      instead of accessing the object's hash key, which makes it easier to
      override message() in a subclass (GH#11)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    - You can now pass "frame_filter", "filter_frames_early" and "skip_frames"
      to the throw() method of an exception class; these will be passed on to
      the Devel::StackTrace constructor (GH#6)


author: Petr Pisar <ppisar@redhat.com> - 2.12-367
changelog:
  - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree()
    and remove_tree()) (bug #1457834)


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Release with new tooling
  - This release by ETHER → update source URL
  - BR: perl-generators
  - Simpify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.014-1
changelog:
  - Update to 1.014
    - pushd/tempd warn if called in void context (GH#9)
    - Fixed test failures on some 5.8 perls
  - Simplify find command using -delete
  - Use features from recent EUMM to simplify %install
  - Use %license
  - Drop redundant Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix prototype errors while lazy loading File::GlobMapper (CPAN RT#117675)
    - zipdetails: Avoid loading optional modules from default . (CPAN RT#116538,
      CVE-2016-1238)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.98-1
changelog:
  - Update to 0.98
    - Added wait_loop_callback for run_forked()
    - Only search in curdir in can_run() when on Win32 (CPAN RT#105601)
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 1.25-12
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
  - Introduce build-condition for optional tests
  - Use %license where possible
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.93000-1
changelog:
  - Update to 2.93
    - Changed the number detection logic (experimental)
    - Correct 0 handling (GH#23)
    - Removed base.pm dependency (GH#5)
    - Fixed wrong character offset (CPAN RT#116998)
    - Address VAX issues (CPAN RT#118469)
    - Various documentation fixes
    - Remove . in @INC in json_pp (GH#25, CVE-2016-1238)
    - Removed $VAR1 from json_pp output (GH#11)
    - Fixed an issue to ignore trailing 0 (GH#29)
    - Added Scalar::Util dependency for Perl 5.8+ (CPAN RT#84347)
    - Fixed issues spotted by Nicolas Seriot's JSON Test Suite including
      experimental UTF-16/32 support and backward incompatible change of
      C style comment handling (now disabled by default) (GH#28)
    - Moved the guts of JSON::PP::Boolean into lib/JSON/PP/Boolean.pm and gave
      it a proper version
    - Refactored incremental parser to let it handle incomplete JSON text
      properly
    - Imported and tweaked tests from JSON.pm
    - Minor code clean up
    - Fixed not to fail tests under Perl 5.25.* (CPAN RT#119114)
    - Reworked documentation, based on the one for JSON::XS
    - Let json_pp utility show the version of JSON::PP
    - Fix loading order of B module (GH#31)
    - Fixed isa tests for bignum
  - This release by ISHIGAKI → update source URL
  - Use five-digit version number for rpm to maintain upgrade path
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1:2.96-1
changelog:
  - Update to 2.96
    - json_pp now prints an encoded json string (CPAN RT#123653)
    - Fix is_bool to use ->isa("JSON::PP::Boolean"), instead of
      UNIVERSAL::isa("JSON::PP::Boolean") (GH#34)
    - Avoid use of newer Test::More features (CPAN RT#122421)


author: Paul Howarth <paul@city-fan.org> - 1:2.97-1
changelog:
  - Update to 2.97
    - Fix is_bool to use blessed() instead of ref()
    - Use 5 digit minor version number for a while to avoid confusion (GH#33)
  - Stick to 2 digit minor version downstream as we already bumped epoch


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Don't run pod tests on user installs
    - Stop using Module::Install to fix installation when @INC doesn't have the
      current directory (CPAN RT#119016)
    - Repository migrated to the github moose organization
  - This release by HAARG → update source URL
  - Simplify find command using -delete


author: Petr Pisar <ppisar@redhat.com> - 0.09-10
changelog:
  - Break build cycle when bootstrapping (Test::CleanNamespaces →
    Package::Stash → Module::Implementation)


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Add FORCE_SAFE_INC option to address CVE-2016-1238
  - BR: perl-generators
  - Simplify find command using -delete
  - Drop legacy Group: tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.000031-1
changelog:
  - 1.000031 bump; Used trial version to compete with Perl 5.24
    - Refactor and expand test cases
    - Fix a $VERSION extraction issue on perl 5.6.2 (CPAN RT#105978, PR#17)
    - Fix the detection of package Foo when $Foo::VERSION is set (CPAN RT#85961)
    - Fix missing "use" statement in refactored test helper (only affected older
      perls, due to other module interactions)
    - Temporary directories cleaned up during tests
    - More accurately mark tests as TODO, so as to have a quieter and less
      confusing test run without passing TODO tests
    - Be less noisy on failure when building as part of perl core (see
      Perl RT#126685)


author: Paul Howarth <paul@city-fan.org> - 1.000033-1
changelog:
  - Update to 1.000033
    - Use a more strict matching heuristic when attempting to infer the "primary"
      module name in a parsed .pm file
    - Only report "main" as the module name if code was seen outside another
      namespace, fixing bad results for pod files (CPAN RT#107525)
    - Fix file operation in tests for VMS
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Fix spurious warning in taint mode (GH#12)
  - Update patch for building with old Test::More versions
  - No documentation for Package::Stash::Conflicts in this release
  - Classify buildreqs by usage
  - Use %license where possible
  - Don't try to run the extra tests for EL builds as we won't have the
    dependencies


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Explicitly load the B module; previously, the code relied on this already
      being loaded by something else (GH#11)
    - Removed the alpha warning from the docs


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Trying to create a validator for positional parameters where a required
      param came after one with a default did not throw an exception
    - A positional params validator with a slurpy type that had coercions did not
      return the coerced values; it returned the original values instead


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - The source_for() exported by Params::ValidationCompiler did not work at all
      (GH#16)


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - All exceptions now include a stack trace by default when treated as a
      string; this makes finding where validation failed a lot easier (GH#18)
    - The name for a subroutine is now used in some exception messages, even if
      Sub::Util cannot be installed


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - The exceptions.t test would fail if Sub::Util was not installed (GH#19)
    - Fix test failures on Windows (GH#20)


author: Paul Howarth <paul@city-fan.org> - 0.094-1
changelog:
  - Update to 0.094
    - Path::Tiny will prefer PerlIO::utf8_strict over encoding(UTF-8) if
      available and Unicode::UTF8 is not installed
    - The 'touch' method can now set the current time on files that aren't owned,
      as long as they are writeable
    - Improved consistency of symlink support inspection; now always looks at
      $Config{d_symlink}
    - Skips impossible test on 'msys' platform.
  - BR: perl-generators where possible
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.096-1
changelog:
  - Update to 0.096
    - Improved method for hiding some modules during tests
  - BR: perl-generators unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.098-1
changelog:
  - Update to 0.098
    - Added 'realpath' option for 'tempfile' and 'tempdir' for situations where
      an absolute temporary path just isn't enough


author: Paul Howarth <paul@city-fan.org> - 0.100-1
changelog:
  - Update to 0.100
    - Fixed tests for eventual removal of '.' from @INC in Perl
    - Fixed filehandle mode doc typo
    - Fixed doc typo in relative() that mentioned rel2abs instead of abs2rel


author: Paul Howarth <paul@city-fan.org> - 0.104-1
changelog:
  - Update to 0.104
    - The 'absolute' method now always returns an absolute path, even if a user
      provided a relative path for the base path; the old, odd behavior was
      documented, but people often don't read docs so the new behavior avoids
      surprises
    - Added 'cached_temp' method


author: Paul Howarth <paul@city-fan.org> - 1.010-4
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88
    - Spell checker is always hunspell now
  - Introduce build-condition for optional tests


author: Petr Pisar <ppisar@redhat.com> - 3.28-2
changelog:
  - Introduce a build-condition on groff
  - Rename a _without_tk build-condition to
    _without_perl_Pod_Perldoc_enables_tk_test


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Fix support of 5.8 (GH#29, GH#34)
    - Additional optimizations
    - More extensive test suite


author: Paul Howarth <paul@city-fan.org> - 0.200-1
changelog:
  - Update to 0.200
    - Reimplement in pure Perl, with a dynamic dependency on a new Ref::Util::XS
      module that contains the fast XS implementation
  - This release by ARC → update source URL
  - Package is now noarch


author: Paul Howarth <paul@city-fan.org> - 0.203-1
changelog:
  - Update to 0.203
    - Fix space/tab issue in Makefile
    - Don't use DynamicPrereqs for unrelated Makefile.PL snippet
    - Use of the Pure-Perl implementation can now be forced at runtime by setting
      either $Ref::Util::IMPLEMENTATION or $ENV{PERL_REF_UTIL_IMPLEMENTATION} to
      "XS"
    - Fix is_*_formatref() error messages (GH#38)
    - Speed enhancements for is_*_formatref() on 5.8+
    - Restore 5.6 and 5.8 compatibility
    - PP behaviour now matches XS for \v1.2.3 and \sub {}
    - Updated documentation to reflect the PP/XS split


author: Paul Howarth <paul@city-fan.org> - 1.20141117-1
changelog:
  - Update to 1.20141117
    - Improved export mechanism
    - Removed useless Exporter tests
    - Improved docs (CPAN RT#79681)


author: Paul Howarth <paul@city-fan.org> - 1.20141117-6
changelog:
  - Package LICENSE file
  - Drop legacy spec file elements not needed for EL-6 onwards
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Remove useless use of UNIVERSAL::isa (CPAN RT#105948)
  - Classify buildreqs by usage
  - Drop obsoletes/provides for old tests sub-package
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for common commands
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.103013-1
changelog:
  - Update to 0.103013
    - guess_license_from_pod() now knows about Software::License::CC0_1_0
    - Enable "v" as a version word
    - Improve FreeBSD (2-Clause) phrases
    - Added EUPL v1.1 and v1.2
  - This release by LEONT → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Possible fix for very weird failures seen under threaded Perls with some
      modules that use Specio


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Simplify checks for overloading to not call overload::Overloaded(); just
      checking the return value of overload::Method() is sufficient


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Many bug fixes and improvements to the types created by
      {any,object}_{can,does,isa}_type; in some cases, an invalid value could
      cause an exception in type check itself, and in other cases, a value that
      failed a type check would cause an exception when generating a message
      describing the failure
    - The messages describing a failure for all of these types have been improved
    - You can now create anonymous *_does and *_isa types using the exports from
      Specio::Declare


author: Paul Howarth <paul@city-fan.org> - 0.40-1
changelog:
  - Update to 0.40
    - Fixed more bugs with {any,object}_{can,does,isa}_type
      - When passed a glob (not a globref) they would die in their type check
      - On Perl 5.16 or earlier, passing a number to an any_* type would also die
    - Fixed subification overloading: if Sub::Quote was loaded, this would be
      used, but any environment variables needed for the closure would not be
      included, which broke enums, among other things


author: Paul Howarth <paul@city-fan.org> - 0.42-1
changelog:
  - Update to 0.42
    - Fixed checks for whether a class is loaded in light of upcoming
      optimization in Perl 5.28 (GH#12)
    - The Perl library claimed it provided types named LaxVersionStr and
      StrictVersionStr but they were really named LaxVersion and StrictVersion;
      the names have now been fixed to match the documentation, so they are
      LaxVersionStr and StrictVersionStr


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 0.001012-1
changelog:
  - Update to 0.001012
    - Many small performance improvements
  - BR: perl-generators
  - Simplify find command using -delete
  - Update old Test::More patch
  - Package new LICENSE file


author: Paul Howarth <paul@city-fan.org> - 0.001013-1
changelog:
  - Update to 0.001013
    - Avoid possible warnings about special variables only being used once
  - Update old Test::More patch


author: Paul Howarth <paul@city-fan.org> - 1.122-1
changelog:
  - Update to 1.122
    - Added $Test::Deep::LeafWrapper to control the behavior of simple values in
      the "expected" definition
    - Documentation improvements
    - Avoid a few evals, localize $@ in a few places where eval is used
    - Goodbye tabs, hello spaces
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.123-1
changelog:
  - Update to 1.123
    - Remove test suite reliance on "." appearing @INC
    - When an object with stringification overloading fails to match a "re" test,
      its stringification is included in the diagnostics


author: Paul Howarth <paul@city-fan.org> - 1.124-1
changelog:
  - Update to 1.124
    - Avoid an uninitialized warning when array_each() compares to a
      non-reference


author: Paul Howarth <paul@city-fan.org> - 1.126-1
changelog:
  - Update to 1.126
    - If objects in the "expected" structure have an as_test_deep_cmp method, it
      will be called and its return (which should be a Test::Deep::Cmp object)
      will be used as the test for that location in the structure
    - Internal undocumented class_base routine has been replaced with a
      different, clearly private routine
    - The LeafWrapper is also used for objects with an unknown reftype (like
      LVALUE or other weird ones)


author: Paul Howarth <paul@city-fan.org> - 1.127-1
changelog:
  - Update to 1.127
    - Do not eagerly convert simple scalars into tests in the all, any and none
      tests; this was breaking LeafWrapper application
  - Drop EL-5-isms
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1:1.302106-1
changelog:
  - Update to 1.302106
    - Combine multiple diags into one event
    - Make version number in HashBase sane


author: Paul Howarth <paul@city-fan.org> - 1:1.302111-1
changelog:
  - Update to 1.302111
    - Fix some fragile tests
    - Apply p5p test patch from Craig A. Berry
    - Allow regexp in Test::Tester


author: Paul Howarth <paul@city-fan.org> - 1:1.302113-1
changelog:
  - Update to 1.302113
    - Fix test on threaded 5.8
    - Fix SIGPIPE in IPC test
    - Mark t/Test2/regression/gh_16.t as usually AUTHOR_TESTING only


author: Paul Howarth <paul@city-fan.org> - 1:1.302118-1
changelog:
  - Update to 1.302118
    - Added pre-subtest hook to Test2::API (GH#801)
    - ipc_wait now reports exit and signal values
    - Add better interface for ipc_wait
    - Fix event Out of Order bug
    - Add driver_abort() hook for IPC Drivers


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Improve support for warnings with trailing newlines
  - This release by BIGJ → update source URL
  - Classify buildreqs by usage
  - Simplify find command using -delete
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.03-1
changelog:
  - Update to 0.03
    - Add the $SIG{__WARN__} hook in an INIT block; we really don't want to
      trigger this because of a compile-time warning, and because of a bug in
      Test::Builder, this can actually cause the warning to be lost entirely
      (https://github.com/Test-More/test-more/issues/729)
    - The Test2::Event::Warning event now returns true for increments_count,
      which means that the test failure caused by a warning will not be output
      as a TAP test line; previously this was just seen as a diag line, which
      could be quite confusing
      (https://github.com/Test-More/test-more/issues/728)


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04
    - Load Test2::Event::Warning in the plugin instead of relying on Test2 to do
      it for us; this should avoid the bug fixed in the previous version and
      eliminates the need for the INIT block, which caused its own problems


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
  - Update to 0.05
    - Skip compile.t on Windows; this test uses IPC::Run3, which doesn't seem to
      work well on that platform (CPAN RT#118443)


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Warnings inside a subtest were not emitted as TAP events, breaking the TAP
      and making for great confusion: this is because of a bug in the core TAP
      formatter (https://github.com/Test-More/test-more/issues/776); warnings
      are now emitted as Ok events instead of Warning events


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - "finally" blocks are now run for all methods of leaving the try block
       (including via exit, goto) (CPAN RT#112099)
    - Switch from finalizers using an array to a hash, to resolve segfaults when
      creating a pseudofork on MSWin before perl 5.20
      (karenetheridge/Sub-Name/#3)
    - Repository moved to the github p5sagit organization (the primary is on
      shadowcat, mirrored to github)
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Enabled some tests of finally blocks that were disabled on 5.6, now that
      that functionality works (since 0.13) (GH#4)


author: Paul Howarth <paul@city-fan.org> - 1.71-5
changelog:
  - Soften Business::ISBN dependency from Requires: to Suggests: to avoid
    pulling in gd and X libraries (#1380152)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
   - Allow quoted map keys in arrays (GH#146)
   - B::Deparse is loaded at runtime now
   - New feature $YAML::Preserve (GH#9)
  - This release by INGY → update source URL


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Declare variables with our() to avoid warnings (GH#109, GH#171)
    - Empty mapping value at the end resolves to null (was becoming empty string)
      (GH#131, GH#170)
    - Output key in warning when duplicate key was found (GH#119, GH#169)
    - Allow reading and writing to IO::Handle (GH#157, GH#168)


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24
    - Fix $LoadCode (GH#180, GH#181, GH#182)
  - This release by TINITA → update source URL
  - Drop redundant Group: tag


author: Petr Pisar <ppisar@redhat.com> - 1.10-5
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 3.10-2
changelog:
  - Net::libnetFAQ document replaced with a hyper link because of the Artistic
    license (CPAN RT#117888)


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Skip failing tests with old Moo or when Sub::Util is broken
      (CPAN RT#107643)


author: Petr Pisar <ppisar@redhat.com> - 0.28-3
changelog:
  - Break build-cycle: perl-namespace-autoclean → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Break build-cycle: perl-namespace-autoclean → perl-Mouse → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Remove unused direct test dependency on Class::MOP


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Exclusively use Package::Stash::PP on perls < 5.8.7 until a fixed
      Package::Stash::XS ships - breakage keeps getting re-introduced
      (CPAN RT#74151, CPAN RT#107343)
    - Explicitly document the late runtime binding of 'sort SUBNAME ...'
      (CPAN RT#101247)
    - No longer rely on Sub::Identify - either use Sub::Util or B (CPAN RT#96945)
  - Classify buildreqs by usage
  - Filter dependency on private package namespace::clean::_Util
  - Drop EL-6 support since build requirements can't be met there


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Allow packages to be cleaned multiple times
    - Ensure the debugger workarounds are applied only when DB::sub is actively
      used (they are superfluous otherwise)
    - Work around P5#72210, resulting in fails on 5.8.8 -Duselongdouble
    - Fix incorrect name in META (CPAN RT#107813)
  - BR: perl-generators where available
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.236-1
changelog:
  - Update to 0.236
    - Add Travis test configuration
    - Make test for PMC availability more reliable
    - Disable benchmark test rt62341.t as it runs out of memory on many smoker
      systems (CPAN RT#118310)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 20160302-1
changelog:
  - Update to 20160302
    - Corrected a minor problem in which an unwanted newline was placed before
      the closing brace of an anonymous sub with a signature, if it was in a
      list (CPAN RT#112534)
    - Corrected a minor problem in which occasional extra indentation was given
      to the closing brace of an anonymous sub in a list when the -lp parameter
      was set


author: Paul Howarth <paul@city-fan.org> - 20170521-1
changelog:
  - Update to 20170521
    - Includes fix for CVE-2016-10374: Uses current working directory without
      symlink-attack protection
    - See CHANGES for details of other bug fixes and enhancements
  - Simplify find command using -delete


author: Petr Pisar <ppisar@redhat.com> - 2.0.10-13
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1623267)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-443
changelog:
  - Fix propagating non-string variables in an exception value (RT#134291)
  - Include trailing zero in scalars holding trie data (RT#134207)
  - Fix a use after free in /(?{...})/ (RT#134208)
  - Fix a use after free in debugging output of a collation
  - Fix file mode of a perl-example.stp example


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
changelog:
  - Fix a NULL pointer dereference in PerlIOVia_pushed()
  - Fix a crash when setting $@ on unwinding a call stack (RT#134266)
  - Fix parsing a denominator when parsing a Unicode property name
  - Fix a documentation about a future API change
  - Do not run File-Find tests in parallel


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
changelog:
  - Adjust spec file to rpm-build-4.15.0-0.rc1.1
  - Fix parsing a Unicode property name when compiling a regular expression
  - Fix a buffer overread when parsing a Unicode property while compiling
    a regular expression (RT#134133)
  - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
  - Fix a buffer overread when compiling a regular expression with many escapes
    (RT#134325)
  - Fix a buffer overflow when compiling a regular expression with many branches
    (RT#134329)
  - Correct a misspelling in perlrebackslash documentation (RT#134395)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-446
changelog:
  - Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
  - Fix a detection for futimes (RT#134432)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.1-447
changelog:
  - 5.30.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.1/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-448
changelog:
  - Fix overloading for binary and octal floats (RT#125557)
  - Fix handling undefined array members in Dumpvalue (RT#134441)
  - Fix taint mode documentation regarding @INC
  - Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
  - Fix an unintended upgrade to UTF-8 in the middle of a transliteration
  - Fix a race in File::stat() tests (GH#17234)
  - Fix a buffer overread when parsing a number (GH#17279)
  - Fix GCC 10 version detection (GH#17295)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix memory corruption on perls 5.8.0 - 5.8.3
    - Improve use of constants in compile-time perl version checks
  - BR: perl-generators unconditionally
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Paul Howarth <paul@city-fan.org> - 2:1.51-1
changelog:
  - Update to 1.51
    - Fix CLDR formatting of 'S' pattern with more than 9 digits of precision;
      while we only store nanoseconds in the DateTime object we should still be
      able to handle an arbitrary number of digits properly (GH#89)
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.0010-1
changelog:
  - Update to 0.0010
    - Makefile.PL: better prereqs declaration
    - Documentation typo fix
  - Switch upstream from search.cpan.org to metacpan.org
  - Drop legacy Group: tag
  - Use plain 'perl' instead of '%{__perl}' macro
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:2.04-1
changelog:
  - Update to 2.04.
  - Remove release_tests (Dropped by upstream).
  - Remove author_tests (Avoid packaging bloat).


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Add rules files for 'prove' and Test::Harness to specify that tests need to
      be run serially for now
    - Support spaces (and other special characters too) in share files (GH#2)
  - BR: perl(CPAN::Meta::YAML) so we can process testrules.yml


author: Paul Howarth <paul@city-fan.org> - 1.016-1
changelog:
  - Update to 1.016
    - Directories created with tempd will only be cleaned up by the PID that
      created them, not by forked children
  - Switch upstream from search.cpan.org to metacpan.org


author: Tom Stellard <tstellar@redhat.com> - 3.72-21
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Make sure that Net::SSLeay::CTX_get0_param is defined before using
      X509_V_FLAG_PARTIAL_CHAIN; Net::SSLeay 1.85 defined only the second with
      LibreSSL 2.7.4 but not the first (CPAN RT#128716)
    - Prefer AES for server side cipher default since it is usually
      hardware-accelerated
    - Fix test t/verify_partial_chain.t by using the newly exposed function
      can_partial_chain instead of guessing (wrongly) if the functionality is
      available


author: Paul Howarth <paul@city-fan.org> - 2.066-5
changelog:
  - Runtime openssl dependency should be on openssl-libs
  - Always require preferred IPv6 back-end: IO::Socket::IP ≥ 0.31
  - Always require preferred IDN back-end: URI::_idna
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.98-1
changelog:
  - Update to 0.98
    - Switch to using $!{EINTR}
    - Honor umask for user/group permissions on a +rw file
    - Remove commented code from CPAN RT#50739
    - Fix _write on invalid objects (GH#63)
    - Make slave the controlling terminal so more programs can be called from
      IPC::Run reliably (GH#54)
    - Prevent Not a GLOB reference in close_terminal by untieing before close
      (GH#53)
    - Fix '&' closing the stdin of the right process (GH#46)
    - Do POSIX::_exit not ::exit (GH#41)
    - Ensure child Win32 processes have same priority as parent (GH#40)
    - Add unit test for passing use of Readonly.pm (GH#38)
    - Fix GLOB test in IPC::Run::IO->new (GH#39)
    - Fix for memory leak (GH#86, CPAN RT#57990)
    - MANIFEST was updated; new tests may start shipping now


author: Paul Howarth <paul@city-fan.org> - 0.99-1
changelog:
  - Update to 0.99
    - Fixes for Windows unit tests so they skip or pass
      - t/autoflush.t
      - t/readonly.t
      - t/run_stdin-callback-return-array.t


author: Paul Howarth <paul@city-fan.org> - 20180523.0-1
changelog:
  - Update to 20180523.0
    - Fix using fd in child process when it happens to be the same number in the
      child as it was in the parent (GH#99)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 1.25-12
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
  - Introduce build-condition for optional tests
  - Use %doc where possible
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 1:4.00-1
changelog:
  - Update to 4.00
    - BACKWARD INCOMPATIBILITY: As JSON::XS 4.0 changed its policy and enabled
      allow_nonref by default, JSON::PP also enabled allow_nonref by default
    - Implement allow_tags that was introduced by JSON::XS 3.0
    - Add boolean_values that was introduced by JSON::XS 4.0
    - Allow literal tags in strings in relaxed mode, as JSON::XS 3.02 does
    - Allow PERL_JSON_PP_USE_B environmental variable to restore old number
      detection behavior for compatibility
    - Various documentation updates
  - Drop provides filter, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.000035-1
changelog:
  - Update to 1.000035
    - Fix how relative paths are absolutized, so they work properly on MSWin32
      (GH#24)
    - Quieten noisy tests (GH#31)


author: Paul Howarth <paul@city-fan.org> - 1.86-0.2.09
changelog:
  - Get libraries to link against from pkg-config
    https://github.com/radiator-software/p5-net-ssleay/pull/127


author: Paul Howarth <paul@city-fan.org> - 1.88-1
changelog:
  - Update to 1.88
    Summary of major changes since version 1.85
    - Mike McCauley has stepped down as maintainer: the new maintainers are Chris
      Novakovic, Heikki Vatiainen and Tuure Vartiainen
    - The source code has moved from the now-defunct Debian Subversion server
      (alioth.debian.org) to GitHub
      (https://github.com/radiator-software/p5-net-ssleay)
    - Net-SSLeay is provided under the terms of the Artistic License 2.0; this
      has been the case since version 1.66, but references to other licenses
      remained in the source code, causing ambiguity
    - Perl 5.8.1 or newer is now required to use Net-SSLeay; this has already
      been the case for some time in practice, as the test suite hasn't fully
      passed on Perl 5.6 for several years
    - Much-improved compatibility with OpenSSL 1.1.1, and improved support for
      TLS 1.3
    - Fixed a long-standing bug in cb_data_advanced_put() that caused memory
      leaks when callbacks were frequently added and removed
    - Support in the test suite for "hardened" OpenSSL configurations that set a
      default security level of 2 or higher (e.g., in the OpenSSL packages that
      ship with recent versions of Debian, Fedora and Ubuntu)


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Avoid new warning in 5.21.x regarding too many arguments for printf/sprintf
    - Canonical repository moved to https://github.com/moose/Package-Stash
  - Package new CONTRIBUTING file
  - Specify all build dependencies
  - Don't bother running the extra tests
  - Simplify find command using -delete
  - Drop EL-5 support
    - Drop legacy Group: tag
    - Drop explicit buildroot cleaning in %install section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Quiet compiler warning (GH#2)
    - Canonical repository moved to https://github.com/moose/Package-Stash-XS
  - Package new CONTRIBUTING file
  - Don't bother running the extra tests
  - Drop EL-5 support
    - Drop legacy Group: tag
    - Drop explicit buildroot cleaning in %install section
    - BR: perl-devel and perl(Variable::Magic) unconditionally
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.015-3
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Fixed a bug with inlining Moose types: if a type's parent needed
      environment variables, those would not get closed over (GH#22)
    - Added a debug option to dump the source of the subroutine before it is
      eval'd


author: Paul Howarth <paul@city-fan.org> - 0.30-1
changelog:
  - Update to 0.30
    - Added a new option for named params, "return_object", which causes the
      validation sub to return an object with methods for each param rather than
      a hashref; this is a great way to avoid typos in hash keys (idea
      shamelessly stolen from Toby Inkster's Type::Params module)
    - Tweaked the POD formatting so that the table of contents generated by
      MetaCPAN is more useful
    - Optionally use Class::XSAccessor


author: Paul Howarth <paul@city-fan.org> - 0.106-1
changelog:
  - Update to 0.106
    - The PERL_PATH_TINY_NO_FLOCK environment variable has been added to allow
      users to disable file locking (and any associated warnings)
    - Detection of unsupported 'flock' is no longer BSD-specific; this allows
      detecting and warning, for example, with the Luster filesystem on Linux
    - Improve reliability and diagnostics of tests run via 'do'


author: Paul Howarth <paul@city-fan.org> - 0.108-1
changelog:
  - Update to 0.108
    - Fixed a bug where failure to load optional modules would trigger an
      external $SIG{__DIE__} handler


author: Paul Howarth <paul@city-fan.org> - 0.204-1
changelog:
  - Update to 0.204
    - Fix Makefile.PL so that the 'install' sub is patched before WriteMakefile()
      is called (GH#41)


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Emmanuel Seyman <emmanuel@seyman.fr> - 2.000007-1
changelog:
  - Update to 2.000007
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to "make" with %{make_build}
  - Tage LICENSE file as such


author: Paul Howarth <paul@city-fan.org> - 2.001001-1
changelog:
  - Update to 2.001001
  - This release by HAARG: update source URL
  - Classify buildreqs by usage
  - Fix permissions verbosely
  - Drop redundant use of %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.103014-1
changelog:
  - Update to 0.103014
    - Added SPDX license expression support
  - This release by LEONT → update source URL


author: Paul Howarth <paul@city-fan.org> - 0.43-1
changelog:
  - Update to 0.43
    - Optimized compile-time operations to make Specio itself quicker to load;
      Specio's load time is a non-trivial part of the load time of DateTime (and
      presumably other things that use it)
    - Based on https://github.com/houseabsolute/DateTime.pm/issues/85
  - Package new CODE_OF_CONDUCT.md file


author: Paul Howarth <paul@city-fan.org> - 0.44-1
changelog:
  - Update to 0.44
    - Replaced the use of B with XString if it is installed; the latter is much
      smaller and provides the one subroutine from B we cared about (based on
      GH#15)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.987-15
changelog:
  - Drop some support for older distributions
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workarounds for building with Test::More < 0.94


author: Paul Howarth <paul@city-fan.org> - 1.44.3-1
changelog:
  - Update to 1.443
    - Found another relative path require issue:
      http://blogs.perl.org/users/ryan_voots/2017/04/trials-and-troubles-with-changing-inc.html
    - This is another attempt at avoiding failures from the v5.26 removal of . from @INC
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.10-14
changelog:
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section
  - Drop redundant explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 3:1.302166-1
changelog:
  - Update to 1.302166
    - Better diagnostics when a context is destroyed unexpectedly
    - Add an event to notify when END phase starts


author: Paul Howarth <paul@city-fan.org> - 3:1.302168-1
changelog:
  - Update to 1.302168
    - Fix typo in a Test2::API::Breakage warning
    - Delay loading of Term::Table until needed


author: Paul Howarth <paul@city-fan.org> - 3:1.302169-1
changelog:
  - Update to 1.302169
    - Update inlined Object::HashBase
    - Avoid 'used only once' warnings in BEGIN and END blocks


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
  - Update to 0.33
    - Clean up some manpage language (Debian Bug #322351, CPAN RT#49519)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 0.34-1
changelog:
  - Update to 0.34
    - Added a note that XS warnings might not be caught (CPAN RT#42070, GH#1)
    - Removed TODO section
    - Updated Copyright section


author: Paul Howarth <paul@city-fan.org> - 0.35-1
changelog:
  - Update to 0.35
    - Create META.json so that perl Makefile.PL stops complaining (GH#2)
    - Update META.yml (GH#3)
    - Add missing comma in Makefile.PL (GH#4)
    - Pod clean-up (GH#5)
    - README clean-up: assign copyright to current author (GH#6)


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.07-1
changelog:
  - Update to 0.07
    - Reverted back to using the Warning event type, since the bug in the Test2
      core that caused this to be a problem has since been fixed
    - Replaced use of Test2::Bundle::Extended with Test2::V0
  - Package new document CODE_OF_CONDUCT.md
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Use IPC::Run3 instead of Capture::Tiny for all tests, which fixes an issue
      with the 'tap-bug-in-test2.t' on Windows (CPAN RT#129294)


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Skip tests of "when" and "given/when" usage for perl 5.27.7 *only*
      (see CPAN RT#123908)


author: Paul Howarth <paul@city-fan.org> - 1.28-1
changelog:
  - Update to 1.28
    - Security fix: only enable loading globs when $LoadCode is set (GH#213)
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (CPAN RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 20181120-1
changelog:
  - Update to 20181120 (see CHANGES.md for details)
  - Drop UTF-8 patch, no longer needed
  - Text documentation converted to markdown upstream


author: Remi Collet <remi@fedoraproject.org> 1:1.9.5-3
changelog:
  - update Archive_Tar to 1.3.13
  - merge with SCL spec file
  - requires httpd-filesystem for /var/www/html ownership (F21+)


author: Remi Collet <rcollet@redhat.com> 1:1.10.1-1
changelog:
  - update PEAR to 1.10.1 for PHP 7 and RHSCL 2.3
  - update Archive_Tar to 1.4.2
  - update Console_Getopt to 1.4.1
  - update Structures_Graph to 1.1.1
  - update XML_Util to 1.3.0
  - add PEAR_Manpages to 1.10.0


author: Remi Collet <rcollet@redhat.com> - 7.1.5-2
changelog:
  - fix License, timelib is MIT
  - add upstream security patches for oniguruma CVE-2017-9224,
    CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - update to 7.2.7 for rh-php72 collection in RHSCL 7.2
  - FPM: add getallheaders, backported from 7.3


author: Remi Collet <rcollet@redhat.com> 1:1.10.5-1
changelog:
  - initial package for rh-php72 in RHSCL-3.2
  - update PEAR to 1.10.5
  - update Archive_Tar to 1.4.3
  - update XML_Util to 1.4.3
  - add patch for PHP 7.2 from https://github.com/pear/pear-core/pull/71


author: Remi Collet <rcollet@redhat.com> - 7.3.33-1
changelog:
  - rebase to 7.3.33 #2100753
  - fix uninitialized array in pg_query_params() leading to RCE
    CVE-2022-31625


author: Remi Collet <rcollet@redhat.com> 1:1.10.9-1
changelog:
  - initial package for rh-php73 in RHSCL-3.4
  - update PEAR to 1.10.9
  - update Archive_Tar to 1.4.7
  - update Console_Getopt to 1.4.2


author: Pavel Raiskup <praiskup@redhat.com> - 3.0-7
changelog:
  - fix hack with _pkgdocdir; _pkgdocdir was defined every second build because we
    defined the _pkgdocdir for ourselves


author: Petr Kubat <pkubat@redhat.com> - 9.6.5-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 10.5-1
changelog:
  - update to 10.5 per release notes:
    https://www.postgresql.org/docs/10/static/release-10-4.html
    https://www.postgresql.org/docs/10/static/release-10-5.html


author: Patrik Novotný <panovotn@redhat.com> - 10.15-1
changelog:
  - Rebase to upstream release 10.15
    Resolves: CVE-2020-25695
    Resolves: CVE-2020-25694
    Resolves: CVE-2020-25696


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: CVE-2020-25695
    Resolves: CVE-2020-25694
    Resolves: CVE-2020-25696


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.5-1
changelog:
  - Rebuilt for SCL.
  - Updated to version 1.5.
  - python-imaging is only a soft dependency, removing it for now.


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099 
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996706


author: Charalampos Stratakis <cstratak@redhat.com> - 13.1.2-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1353206


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.12-1
changelog:
  - Update to 3.6.12 (rhbz#1873080)
  - Security fixes for CVE-2019-18348 (rhbz#1765148), CVE-2019-16935 (rhbz#1798002),
    CVE-2020-8492 (rhbz#1810620), CVE-2019-20907 (rhbz#1856545),
    CVE-2020-14422 (rhbz#1857276)
  - Fix faulthandler stack size
  - Reduce the number of tests running during the profile guided optimizations build
    and enable the optimizations for all the supported architectures


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-3
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1774951


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-4
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1826520


author: Tomas Orsava <torsava@redhat.com> - 2.0-1
changelog:
  - Created the rh-python38 metapackage by importing and modifying rh-python36
  - Resolves: rhbz#1671025


author: Tomas Orsava <torsava@redhat.com> - 3.8.0-8
changelog:
  - Building with new gcc from devtoolset
  - Re-added dtrace and -fno-semantic-interposition
  - Resolves: rhbz#1671025


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-13
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1815645


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-15
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1817494


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.6-1
changelog:
  - Update to 3.8.6
  - Security fixes for CVE-2020-26116, CVE-2020-14422 and CVE-2019-20907
  Resolves: rhbz#1882438, rhbz#1883256, rhbz#1857277, rhbz#1856546


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.11-1
changelog:
  - Update to 3.8.11
  - Security fixes for CVE-2021-3426, CVE-2021-23336, CVE-2021-3177 and CVE-2020-27619
  Resolves: rhbz#1935913, rhbz#1928904, rhbz#1918168, rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.11-2
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Update to 3.8.13
  - Fix test suite issues with the latest expat security update
  Resolves: rhbz#2068592


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.6-1
changelog:
  - Update to 3.8.6
  - Security fixes for CVE-2020-26116, CVE-2020-14422 and CVE-2019-20907
  Resolves: rhbz#1885289, rhbz#1885287, rhbz#1885290, rhbz#1885296


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Miro Hrončok <mhroncok@redhat.com> - 19.2.3-1
changelog:
  - Update to 19.2.3 (#1742230)
  - Drop patch that should strip path prefixes from RECORD files, the paths are relative


author: Lumír Balhar <lbalhar@redhat.com> - 19.3.1
changelog:
  - Rebase to 19.3.1 to enable support for manylinux2014
  Resolves: rhbz#1827267
  - + some other fixes from Fedora 32 where we have the same version now


author: Charalampos Stratakis <cstratak@redhat.com> - 19.3.1-2
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Christian Heimes <cheimes@redhat.com> - 2.14-18
changelog:
  - Add build dependency on cpp for unit tests
  - Add dependency on python-ply version to prevent "yacc table file version is out of date"
  - Fixes RHBZ#1668230


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Tomas Orsava <torsava@redhat.com> - 41.6.0-1
changelog:
  - Upgrade to 41.6.0 (#1758945).
  - https://setuptools.readthedocs.io/en/latest/history.html#v41-6-0
  - Disabled a failing upstream test: https://github.com/pypa/setuptools/issues/1896


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.7-2
changelog:
  - Subpackage python2-urllib3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lumír Balhar <lbalhar@redhat.com> - 1.25.7-7
changelog:
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1968074
  - Update RECENT_DATE dynamically


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <rcollet@redhat.com> - 3.2.3-1
changelog:
  - rebase to 3.2.3 #1368102
  - fix redis-shutdown script
  - init script doesn't support load/force-reload option #1369495


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - provide redis-check-rdb as a symlink to redis-server
    add patch from https://github.com/antirez/redis/pull/3494
  - data and configuration should not be publicly readable #1374717
  - remove /var/run/redis with systemd
  - add man pages from https://github.com/antirez/redis/pull/3491 #1369821


author: Remi Collet <rcollet@redhat.com> - 3.2.13
changelog:
  - rebase to 3.2.13
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192


author: Remi Collet <rcollete@redhat.com> - 5.0.5-1
changelog:
  - rebase to 5.0.5
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.5-2
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Remi Collet <rcollete@redhat.com> - 6.0.16-2
changelog:
  - update to 6.0.16 for
    CVE-2021-32626 CVE-2021-32627 CVE-2021-32628 CVE-2021-32687
    CVE-2021-41099 CVE-2021-32675


author: Josef Stribny <jstribny@redhat.com> - 1:4.0.2-1
changelog:
  - Update to ActionPack 4.0.2
    - Resolves: rhbz#1037985
  - Fix CVE-2013-6417, CVE-2013-6414, CVE-2013-6415, CVE-2013-6416 and CVE-2013-4491
    - Resolves: rhbz#1036421


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-3
changelog:
  - Fix Timing attack vulnerability in Action Controller - rhbz#1301933
    - Resolves: CVE-2015-7576
  - Fix Possible Object Leak and Denial of Service attack - rhbz#1301946
    - Resolves: CVE-2016-0751
  - Fix Possible Information Leak Vulnerability - rhbz#1301963
    - Resolves: CVE-2016-0752
  - Fix Object leak vulnerability for wildcard controller routes - rhbz#1301981
    - Resolves: CVE-2015-7581


author: Jun Aruga <jaruga@redhat.com> - 1:4.2.6-5
changelog:
  - Fix a render file directory traversal in Action View
    Resolves: CVE-2019-5418
  - Fix a denial of service vulnerability in Action View
    Resolves: CVE-2019-5419


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Nested attributes rejection proc bypass - rhbz#1301957
    - Resolves: CVE-2015-7577


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Fix Timing attack vulnerability in basic authentication - rhbz#1301933
    - Resolves: CVE-2015-7576


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.4.0-2
changelog:
  - Removed the duplicated "git checkout" in comment.
  - BR: rubygem(therubyracer) for tests, don't use deprecated js.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.0.4-1
changelog:
  - Update to Journey 1.0.4, as this version is needed by ActionPack 3.2.6.
  - Remove unneded Requires: ruby.


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.0-1
changelog:
  - Update to loofah 2.0.0 (RHBZ #1096760)
  - Adjustments for https://fedoraproject.org/wiki/Changes/Ruby_2.1


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.2-1
changelog:
  - Update to loofah 2.0.2 (rhbz#1218819)
  - Drop patch to skip failing test (it works now, with Nokogiri 1.6.6.2)
  - Drop Fedora 19 support
  - Use %license macro


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.3-1
changelog:
  - Update to loofah 2.0.3 (rhbz#1256165)
  - Use %autosetup macro
  - Drop macros for Fedora 20 (it is now EOL)
  - Drop unneeded %license definition


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Run unit and acceptance tests in a single process
  - Patch test suite to work outside rake/bundler


author: Vít Ondruch <vondruch@redhat.com> - 0.3.1-1
changelog:
  - Updated to the latest upstream version.
  - Tests enabled.
  - Documentation moved into separate package.
  - Remove unnecessary Hoe runtime dependency.


author: Josef Stribny <jstribny@redhat.com> - 1:1.4.5-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Added patch0 to fix tests for Ruby 2.0
  - Update to Rack 1.4.5


author: Pavel Valena <pvalena@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - License file is missing https://github.com/rails/rails-html-sanitizer/pull/47
  - Skip failing tests due to possible incompatibility with libxml2


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.3.1-1
changelog:
  - Update from Marek Goldmann <mgoldman@redhat.com>
    - Updated to 1.3.1
    - Patch to make it work with Rake >= 0.9.0.beta.0


author: Pavel Valena <pvalena@redhat.com> - 3.4.2-6
changelog:
  - Add rubygem-builder to BuildRequires
  - Add rubygem-gherkin to BuildRequires
  - Add rubygem-multi_test to BuildRequires
  - Add rubygem-ffi to BuildRequires


author: Josef Stribny <jstribny@redhat.com> - 3.2.6-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to sass 3.2.6.
  - Own extra and rails directories (rhbz#911648).


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.1.6-2
changelog:
  - Update to shoulda-context 1.1.6
  - Clean up comments
  - Remove unnecessary BR: on ruby
  - Exclude developer-only files from binary packages


author: Jun Aruga <jaruga@redhat.com> - 1:5.0.1-1
changelog:
  - Update to Active Support 5.0.1.
  - Fix warnings: Fixnum and Bignum are deprecated in Ruby trunk
  - Fix Ruby 2.4.0 compatibility.


author: Jun Aruga <jaruga@redhat.com> - 9.0.6-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Pavel Valena <pvalena@redhat.com> - 2.0.3-3
changelog:
  - Include Gemfile and Rakefile in -doc subpackage
  - Do not use %license macro
  - Explicitly require runtime subpackage


author: Jun Aruga <jaruga@redhat.com> - 3.6.0-2
changelog:
  - Add openssl-devel dependency to enable HTTPS support.
  - Add regenerated parser logic.
  - Improve Ruby load path to run test suite.
  - Improve files section.


author: Jun Aruga <jaruga@redhat.com> - 3.7.1-1
changelog:
  - Update to Sprockets 3.7.1.
  - Update scl_prefix_nodejs declaration to build with no-SCL environment.


author: Pavel Valena <pvalena@redhat.com> - 0.3.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
  - Correct attributes for websocket_mask.so


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com>
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Josef Stribny <jstribny@redhat.com> - 1.7.6-2
changelog:
  - Keep ssl_certs/certificate_manager.rb file (used in tests)
  - Correctly add load paths for gems during tests


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Jun Aruga <jaruga@redhat.com> - 2.5.0-5
changelog:
  - They are broken by recen tzdata update.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.3-6
changelog:
  - Update to Ruby 2.5.3.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563076
    Removed Patch11: ruby-2.5.0-parse.y-assignable_error.patch; subsumed
    Removed Patch12: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
    Removed Patch13: ruby-2.5.0-st.c-retry-operations-if-rebuilt.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir
    Resolves: rhbz#1602877


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-7
changelog:
  - Upgrade to Ruby 2.5.5.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-9
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952998
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1953001


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1701182
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950331
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-120
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Upgrade to Ruby 2.6.9.
    Resolves: rhbz#2056947
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Resolves: CVE-2020-36327


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-128
changelog:
  - Upgrade to Ruby 2.7.1.
    Resolves: rhbz#1826872
  - Call load builtin macro if it is defined, or call own load macro.


author: Vít Ondruch <vondruch@redhat.com> - 2.7.3-129
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947931
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950016


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-130
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: rhbz#1996669
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: rhbz#1996666
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: rhbz#1996668
  - Revert a commit changing CFLAGS to avoid failures in test_jit.rb.
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327
  - Fix some failing Bundler tests with old Git.


author: Jun Aruga <jaruga@redhat.com> - 1.2.1-1
changelog:
  - Update to pg 1.2.1.
  - Add marking lines at the start and end of the setup.log
  - Assign a random testing port.


author: Jun Aruga <jaruga@redhat.com> - 3.7-2
changelog:
  - Add explicit IRB dependency.
    Related: rhbz#1921719
  - Fix a typo in the scldevel description.
    Related: rhbz#1903661


author: Jun Aruga <jaruga@redhat.com> - 3.0.0-144
changelog:
  - Upgrade to Ruby 3.0.0.
    Resolves: rhbz#1903661
  - Skip the ssl tests for offline on Brew build environment.
  - Remove the rdoc symbolic files that are specific in SCL.


author: Jun Aruga <jaruga@redhat.com> - 3.0.0-145
changelog:
  - Fix the ruby systemtap file path.
    Resolves: rhbz#1932291
  - Revert removing the rdoc symbolic files that are specific in SCL.
  - Bundle RDoc into StdLib.
    Resolves: rhbz#1921719
  - Merge commits from Fedora rawhide branch.
    Related: rhbz#1903661


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-148
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
    Resolves: rhbz#1995172
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
    Resolves: rhbz#1995174
  - Fix StartTLS stripping vulnerability in Net::IMAP. (CVE-2021-32066)
    Resolves: rhbz#1995173
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
    Resolves: rhbz#1968497
  - Re-enable SSL tests.
  - Fix some failing Bundler tests with old Git.


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-2
changelog:
  - Add the basedir option to mysql_install_db to avoid an error on mariadb <= 5.5.64.
    Resolves: rhbz#1903661


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2
changelog:
  - Update to current packaging guidelines
  - Remove legacy build conditionals
  - Remove file requires
  - Remove usage of shutil (not available on RHEL)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2.3
changelog:
  - Update requires
  - Install ant.d config file to correct directory in rh-java-common
  - Use correct JAVADIR in bindir scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-1
changelog:
  - update to Varnish 6.0.6
  - Resolves: #1819937 - rh-varnish6-varnish: varnish: remote clients may
    cause Varnish to assert and restart which could result in DoS
  - Resolves: #1707831 - Permissions wrong on /var/opt/rh/rh-varnish6/log/varnish
  - remove unused varnish.tmpfiles


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
changelog:
  - new version 6.0.8
  - Resolves: #1982864 - CVE-2021-36740 rh-varnish6-varnish: varnish: HTTP/2
    request smuggling attack via a large Content-Length header for a POST request


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2.1
changelog:
  - Resolves: #2081576 - CVE-2022-23959 rh-varnish6-varnish: varnish: HTTP/1
    request smuggling vulnerability


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
changelog:
  - new version 6.0.8
  - Resolves: #1982865 - CVE-2021-36740 rh-varnish6: varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


