# changelog

author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-53
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Jan Friesse <jfriesse@redhat.com> 3.0.3-4
changelog:
  - Resolves: rhbz#1780137
  - Resolves: rhbz#1791792
  - Resolves: rhbz#1809864
  - Resolves: rhbz#1816653

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
  - merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
  - man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
  - merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
  - merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
  - stats: Add stats for scheduler misses (rhbz#1791792)
  - merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
  - stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
  - merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
  - main: Add schedmiss timestamp into message (rhbz#1791792)
  - merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
  - votequorum: Change check of expected_votes (rhbz#1809864)
  - merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
  - quorumtool: exit on invalid expected votes (rhbz#1809864)
  - merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
  - votequorum: set wfa status only on startup (rhbz#1816653)
  - merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-1
changelog:
  - Resolves: rhbz#1855293
  - Resolves: rhbz#1855303
  - Resolves: rhbz#1870449
  - Resolves: rhbz#1887400

  - New upstream release (rhbz#1855293)
  - Support for reload of crypto configuration (rhbz#1855303)
  - Increase default token timeout to 3000ms (rhbz#1870449)
  - Add support for nodelist callback into quorum service (rhbz#1887400)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to 2.4 upstream tarball
  - Drop patches: cppcheck-1.83-tinyxml.patch, cppcheck-1.81-translations.patch, cppcheck-1.78-cfgdir.patch.
  - Bump BuildRequires for tinyxml2-devel to 2.6.0 at least.
  - Add BuildRequires pandoc.
  - There is no more bundled tinyxml in this new version of cppcheck.
  - Use the man/build-html.sh script to build the html version of the manual
  - Adjust $datadir/CppCheck to $datadir/Cppcheck.
  - Add $bindir/cppcheck*.qm files to the package.
  - Resolves: rhbz#1959478


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Milan Crha <mcrha@redhat.com> - 3.28.5-11
changelog:
  - Update patch for RH bug #1713619 (test-cal-client-get-revision could fail due to delayed D-Bus property change notification)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Marek Polacek <polacek@redhat.com> 8.5.0-2
changelog:
  - revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
  - fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Björn Esser <fedora@besser82.io> - 0.3.3-12
changelog:
  - Rebuilt for /lib64/libglog.so: undefined reference to
    'gflags::FlagRegisterer::FlagRegisterer'-madness


author: Jiri Kucera <jkucera@redhat.com> - 1.13.1-8
changelog:
  - Add LICENSES file into the tarball, update License field
    Add pkgconfig files to gpgme-devel
    Resolves: #1882423, #1953905


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-3
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-4
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2018189


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2055396


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.5-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+5
  - Update release notes to 17.0.3.0+5
  - Switch to EA mode for 17.0.3 pre-release builds.
  - Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.6-1
changelog:
  - April 2022 security update to jdk 17.0.3+6
  - Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)
  - Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga
  - Update release notes to 17.0.3.0+6
  - Add missing README.md and generate_source_tarball.sh
  - Introduce tests/tests.yml, based on the one in java-11-openjdk
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073575


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.6-2
changelog:
  - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476
  - Related: rhbz#2073575


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.3.2-12
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-3
changelog:
  PMTUd: Fix MTU calculation when using crypto
    Resolves: rhbz#1736872
    host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    ResolveS: rhbz#1761711


author: Christine Caulfield <ccaulfie@redhat.com> - 1.22-1
changelog:
  Rebase to 1.22
    Resolves: rhbz#1999976

    * Wed Sep 23 2020 Christine Caulfield <ccaulfie@redhat.com> - 1.18-1
    Rebase to 1.18
    Resolves: rhbz#1855301


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-8
changelog:
  - Suppress documentation in Flatpak builds
    Resolves: rhbz#1896257
  - build gir with non-parallel to avoid strange behavior.


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.17.dev16
changelog:
  - fix rpmlint warnings
  - do not depend on perl
  - update upstream project URL
  - update to the latest upstream pre-release


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-23
changelog:
  - Ignore the user.WofCompressedData xattr
    resolves: rhbz#1811539
  - sysprep: new ipa-client and kerberos-hostkeytab operations
    resolves: rhbz#1789592


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-26
changelog:
  - insufficient default memsize to open anaconda default RHEL 8.2 luks device
    resolves: rhbz#1837765


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-27
changelog:
  - selinux-relabel does not work if SELINUXTYPE != targeted
  - tar-in command does not allow restoring file capabilities
    resolves: rhbz#1384241 rhbz#1828952


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Jakub Jelen <jjelen@redhat.com> - 1.9.5-1
changelog:
  - Rebase to 1.9.5 version to address race conditions (#2014641)
  - Drop dowstream polkit policy to avoid repeated authentication requests in remote sessions (#1928154)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-1
changelog:
  - Update to 1.06.
  - Remove Obsoletes: perl-Locale-gettext.
  - Remove LD_MESSAGES hack.
  - Modernize spec.
  - Drop compatibility-with-POSIX-module.diff (upstreamed).
  - Add BR: perl(Encode).


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.07-1
changelog:
  - Upstream update.
  - Reflect upstream having changed tarball name to Locale-gettext.
  - Rename binary package to perl-Locale-gettext.
  - Remove BR: per(Data::Dumper).


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042522


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Petr Pisar <ppisar@redhat.com> - 6.4-3
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


