# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.2-4
changelog:
  - Update to 3.1.2-4
  - Resolves: Issue 6489 - After log rotation refresh the FD pointer
  - Resolves: Issue 6554 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)
  - Resolves: Issue 6555 - Potential crash when deleting a replicated backend


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Update to 3.1.3-2
  - Resolves: Issue 5120 - Fix compilation error
  - Resolves: Issue 6782 - Improve paged result locking
  - Resolves: Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  - Resolves: Issue 6822 - Backend creation cleanup and Database UI tab error
    handling (#6823)
  - Resolves: Issue 6753 - Add 'add_exclude_subtree' and
    'remove_exclude_subtree' methods to Attribute uniqueness plugin
  - Resolves: Issue 6857 - uiduniq: allow specifying match rules in the
    filter
  - Resolves: Issue 6756 - CLI, UI - Properly handle disabled NDN cache
    (#6757)
  - Resolves: Issue 6854 - Refactor for improved data management (#6855)
  - Resolves: Issue 6850 - AddressSanitizer: memory leak in mdb_init
  - Resolves: Issue 6848 - AddressSanitizer: leak in do_search
  - Resolves: Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  - Resolves: Issue 6868 - UI - schema attribute table expansion break after
    moving to a new page
  - Resolves: Issue 6859 - str2filter is not fully applying matching rules
  - Resolves: Issue 6872 - compressed log rotation creates files with world
    readable permission
  - Resolves: Issue 6888 - Missing access JSON logging for TLS/Client auth
  - Resolves: Issue 6772 - dsconf - Replicas with the "consumer" role allow
    for viewing and modification of their changelog. (#6773)
  - Resolves: Issue 6893 - Log user that is updated during password modify
    extended operation
  - Resolves: Issue 6901 - Update changelog trimming logging
  - Resolves: Issue 6430 - implement read-only bdb (#6431)
  - Resolves: Issue 6663 - Fix NULL subsystem crash in JSON error logging
    (#6883)
  - Resolves: Issue 6895 - Crash if repl keep alive entry can not be created
  - Resolves: Issue 6884 - Mask password hashes in audit logs (#6885)
  - Resolves: Issue 6778 - Memory leak in
    roles_cache_create_object_from_entry part 2
  - Resolves: Issue 6901 - Update changelog trimming logging - fix tests
  - Resolves: Issue 6181 - RFE - Allow system to manage uid/gid at startup
  - Resolves: Issue 6468 - CLI - Fix default error log level
  - Resolves: Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  - Resolves: Issue 6430 - Fix build with bundled libdb


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.4-5
changelog:
  - Go back to bundling dr_flac and dr_mp3, since it is not straightforward to
    patch for the current releases


author: Dominik Mierzejewski <dominik@greysector.net> - 2.0.5^20260117git1be041b-1
changelog:
  - update to 20260117 snapshot from stable-2.0 branch
  - fixes CVE-2025-14369 (resolves rhbz#2431177)
  - fixes rpmbuild -bi --short-circuit


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-5
changelog:
  - update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
  - Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-1
changelog:
  - Update to CKBI 2.69_v8.0.401 from NSS 3.103
  -    Adding:
  -     # Certificate "Sectigo Public Code Signing Root R46"
  -     # Certificate "Sectigo Public Code Signing Root E46"


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.304-1.0
changelog:
  - Update to CKBI 2.80_v9.0.304 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"


author: Troy Dawson <tdawson@redhat.com> - 0.10.1-1
changelog:
  - Determining if package is synced solely on distrobaker config (sgajdosi)
  - Use the authenticated session for PP API (sgallagh)


author: Troy Dawson <tdawson@redhat.com> - 0.10.2-1
changelog:
  - Add support for cXs-aie-partner branches : CS-3294 (michal)
  - Determine_rhel_state: Add check for locked tags: CS-2997 (sgallagh)
  - Fix use-before-assignment (sgallagh)


author: Than Ngo <than@redhat.com> - 144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
    * CVE-2026-0899: Out of bounds memory access in V8
    * CVE-2026-0900: Inappropriate implementation in V8
    * CVE-2026-0901: Inappropriate implementation in Blink
    * CVE-2026-0902: Inappropriate implementation in V8
    * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    * CVE-2026-0904: Incorrect security UI in Digital Credentials
    * CVE-2026-0905: Insufficient policy enforcement in Network
    * CVE-2026-0906: Incorrect security UI
    * CVE-2026-0907: Incorrect security UI in Split View
    * CVE-2026-0908: Use after free in ANGLE


author: Than Ngo <than@redhat.com> - 144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
    * CVE-2026-1861: Heap buffer overflow in libvpx
    * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
    * CVE-2026-2313: Use after free in CSS
    * CVE-2026-2314: Heap buffer overflow in Codecs
    * CVE-2026-2315: Inappropriate implementation in WebGPU
    * CVE-2026-2316: Insufficient policy enforcement in Frames
    * CVE-2026-2317: Inappropriate implementation in Animation
    * CVE-2026-2318: Inappropriate implementation in PictureInPicture
    * CVE-2026-2319: Race in DevTools
    * CVE-2026-2320: Inappropriate implementation in File input
    * CVE-2026-2321: Use after free in Ozone
    * CVE-2026-2322: Inappropriate implementation in File input
    * CVE-2026-2323: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
    * CVE-2026-2648: Heap buffer overflow in PDFium
    * CVE-2026-2649: Integer overflow in V8
    * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
    * CVE-2026-3061: Out of bounds read in Media
    * CVE-2026-3062: Out of bounds read and write in Tint
    * CVE-2026-3063: Inappropriate implementation in DevTools


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.2-1
changelog:
  - Updated to version 2.5.2
  - Upstream change notes:
    * This patch release fixes compatibility with GNU/Hurd and fixes running
      tests in parallel.
    * Commits:
      ea9c431 GNU/Hurd
      67800d4 Paralell tests take 2
      57dd3e0 Plugins tests
      f5246e4 strptime


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.8.1-1
changelog:
  - Update to v0.8.1
  - Drop Patch1 (unbundle picojson - replaced with nlohmann_json upstream)
  - Drop Patch3 (unbundle rang - dependency dropped upstream)
  - Drop Patch4 (libfmt10 compatibility - backport from this release)


author: Miroslav Suchý <msuchy@redhat.com> 1.65-1
changelog:
  - Add BSD-3-Clause WITH AdditionRef-WebM-patent license
  - add public domain dedication in desktop-backgrouds
  - mark OFL-1.1-RFN and OFL-1.1-no-RFN as equal
  - ultrapermissive dedication of broda from crosswords package


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Miroslav Suchý <msuchy@redhat.com> 1.71-1
changelog:
  - add GPL-2.0-or-later WITH LicenseRef-Fedora-Temporary-kvirc-openssl-exception
  - add GPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-cryptsetup-OpenSSL-
    exception
  - add LGPL-2.1-or-later WITH LicenseRef-Fedora-Temporary-Simple-Library-
    exception
  - add AGPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817
  - add LGPL-2.0-only WITH LicenseRef-Fedora-Temporary-Classpath-exception-
    variation
  - add LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib
  - add LicenseRef-Fedora-Temporary-OSSP
  - add LicenseRef-Fedora-Temporary-AZL
  - add LicenseRef-Fedora-Temporary-Python-trace
  - add Advanced-Cryptics-Dictionary license
  - add BSD-Mark-Modifications license
  - Remove deprecated parts from JSON
  - grammar: sort ID alphabetically
  - grammar: do not allow bad license with OR operator
  - add WTFNMFPL license
  - add LicenseRef-HPND-TAES as not-allowed
  - add LGPL-2.0-only WITH Universal-FOSS-exception-1.0
  - OPUBL-1.0: Move packages_with_exceptions into [license]
  - Add public-domain dedication for tinyxml2
  - add WordNet license
  - Extend ISO-8879 exception to dotnet10.0


author: Miroslav Suchý <msuchy@redhat.com> 1.73-1
changelog:
  - add dedications from linux-firmware from qcom/NOTICE.txt
  - add LGPL-2.0-only WITH Classpath-exception-2.0-short
  - add OSSP license
  - add GPL-3.0-or-later WITH GCC-exception-2.0
  - add hyphen-bulgarian license
  - add GPL-2.0-or-later WITH kvirc-openssl-exception
  - add LICENCE.siano from linux-firmware to firmware.txt
  - add HPND-SMC
  - removed LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Wadalab
  - rename LicenseRef-Fedora-Temporary-* to AdditionRef-Fedora-Temporary-*


author: Miroslav Suchý <msuchy@redhat.com> 1.74-1
changelog:
  - remove LicenseRef-Romio as it equals to SPDX ID mpich2
  - add public domain dedication from gstreamer1-plugins-bad-free
  - add public domain dedication from openmpi
  - add LICENSE.QualcommAtheros_ar3k from linux-firmware to firmware.txt
  - add text to LicenseRef-* licenses
  - add public domain dedication from rb_libtorrent
  - add LicenseRef-BSD-TPM as not-allowed
  - add LicenseRef-Hippocratic-3.0 as not-allowed
  - add LICENSE.i915 from linux-firmware to firmware.txt
  - add LICENCE.IntcSST2 from linux-firmware to firmware.txt
  - add LicenseRef-ECMA-spec license
  - add NPL-1.1 license
  - rename LGPL-2.1-or-later_WITH_AdditionRef-Fedora-Temporary-Simple-Library-
    exception to final LGPL-2.1-or-later_WITH_Simple-Library-Usage-exception
  - rename LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib to ALGLIB-
    Documentation
  - rename AGPL-3.0-or-later_WITH_AdditionRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817 to AGPL-3.0-or-later_WITH_PS-or-PDF-font-
    exception-20170817
  - add firmware license from linux-firmware - LICENSE.amdnpu
  - add firmware license from linux-firmware - LICENCE.Marvell
  - add firmware license from linux-firmware - LICENCE.OLPC
  - add firmware license from linux-firmware - LICENCE.ti-connectivity
  - add firmware license from linux-firmware - LICENCE.xc4000
  - add firmware license from linux-firmware - LICENCE.adsp_sst
  - add LICENCE.mediatek from linux-firmware to firmware.txt


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Michal Kolar <mkolar@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
  - Backport upstream commit ce106639c20 from Tom de Vries, fixing a
    gdb.threads/thread-specific-bp.exp failure.
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.
  - Modify gdb-add-rpm-suggestion-script.patch to meet PEP 257
    requirement about termination of first line of docstring
    as required by gdb.gdb/unittest.exp.
  - Made spec file change to build gdb with --disable-gdb-compile due to
    this feature's brokenness.  With it disabled, failing tests skip
    cleanly without timeouts.  Also reduces binary size and attack
    surface.


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Augusto Caringi <acaringi@redhat.com> [6.18.9-0]
changelog:
  - Add a couple of bzs to be fixed with the 6.18.9 build (Justin M. Forbes)
  - media: ipu-bridge: Add DMI quirk for Dell XPS laptops with upside down sensors (Hans de Goede)
  - media: ov02c10: Remove unnecessary hflip and vflip pointers (Hans de Goede)
  - media: ov02c10: Fix the horizontal flip control (Hans de Goede)
  - media: ov02c10: Adjust x-win/y-win when changing flipping to preserve bayer-pattern (Hans de Goede)
  - media: ov02c10: Fix bayer-pattern change after default vflip change (Hans de Goede)
  - media: ov02c10: Support hflip and vflip (Sebastian Reichel)
  - media: ov02c10: Fix default vertical flip (Sebastian Reichel)
  - Linux v6.18.9


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-2
changelog:
  - Revise template
  - Remove transition artifacts - from non-versioned kubernetes
  - Remove unneeded network rpms
  - Remove duplicate requires


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2414539
  - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
  - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
  - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
  - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
  - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
  - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.11-4
changelog:
  - Reorder CRI Recommends
  - Update cri-o recommend with correct version information
  - Reorder CRI as (for example): Recommends:  (cri-o1.34 or containerd)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.12-2
changelog:
  - Skip unicode test in annocheck
  - unicode test fails in packit ci rpminspect on kubectl and kubeadm
  - failing symbol is 'go:(*struct { io.Reader; io.WriterTo }).Read' but
    looks correct


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.13-1
changelog:
  - Update to release v1.32.13
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release v1.33.6
  - Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
  - Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
  - Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
  - Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
  - Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
  - Resolves: rhbz#2412804
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-3
changelog:
  - Drop deprecated --fail-swap-on=false flag
  - Drop flag from kubeadm systemd drop-in file
  - Remove deprecated flags and comment out EnvironmentFiles


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release v1.34.2
  - Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
  - Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
  - Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
  - Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
  - Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
  - Resolves: rhbz#2412805
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-1
changelog:
  - Update to release v1.34.3
  - Resolves: rhbz#2420902
  - Upstream fixes h Please enter the commit message for your changes. Lines
    starting


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.5-1
changelog:
  - Update to release v1.34.5
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0~rc.0-1
changelog:
  - Update to release v1.35-rc.0
  - First rc
  - COPR release for testing
  - Updated license. Current with v1.34 template
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-1
changelog:
  - Release v1.35.0
  - Initial release for Fedora.
  - Available for F44 (rawhide) and F43 given golang 1.25 requirement
  - Significant and numerous new features, changes, and fixes
  - Urgent upgrade notices with 'action required' when upgrading existing
    1.34 cluster
  - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-
    1.35.md#changelog-since-v1340


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.2-1
changelog:
  - Update to release v1.35.2
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Miroslav Suchý <msuchy@redhat.com> 26-1
changelog:
  - in verbose mode always print the text of license
  - finally make transformer work
  - fixes and more tests
  - add test for BSD-3-Clause-Clear
  - add tests
  - rework handling not-allowed licensing with exception
  - do not print the long traceback with -v on mismatch


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.14.0-1
changelog:
  - Update to v1.14.0
  - Drop Patch0 (test failures - backported from this release)
  - Drop Patch1 (kernel 6.11+ issues - backported from this release)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - mock: Use umask 0022 instead of 0002 to avoid strange permissions (ngompa@velocitylimitless.com)
  - expand_spec plugin: generating expanded-spec.txt in postdeps hook (yzhu@redhat.com)
  - do not fail (not just) hermetic builds for missing resolv.conf
  - use skopeo for hermetic bootstrap images (tkopecek@redhat.com)
  - support yum for hermetic build (tkopecek@redhat.com)
  - allow access to the buildroot binary RPMs even in hermetic builds (tkopecek@redhat.com)
  - adapt mock to Changes/droppingOfCertPemFile
  - file_util: improve rmtree performance (#1672) (Gerasimov.N.V)
  - disable traceLog() wrapper (will be removed)
  - `mock --scrub=all` now correctly backs up successful builds from the buildroot (sergio@serjux.com)
  - update subscription-manager instructions (msuchy@redhat.com)
  - configs: Switch openSUSE Tumbleweed to DNF5 (ngompa@opensuse.org)
  - depend on DNF5 for EL11+ distributions (ngompa@centosproject.org)
  - depend on DNF5 for Mageia 10+ and Cauldron (ngompa@mageia.org)
  - select personality for RISC-V DNF transactions
  - document --scrub=bootstrap (negativo17@gmail.com)
  - unbreq supports `--isolation=simple` and `--no-bootstrap-chroot` (marian.koncek@mailbox.org)
  - unbreq plugin no longer crashes for `(foo if bar)` build deps (marian.koncek@mailbox.org)
  - unbreq performance has been significantly improved through caching (marian.koncek@mailbox.org)
  - unbreq logs standard outputs of failed commands (mkoncek@users.noreply.github.com)


author: Miroslav Suchý <msuchy@redhat.com> 42.2-1
changelog:
  - fix: expand Oracle Linux distro_id from ol to oraclelinux
    (avi.miller@oracle.com)
  - Navy Linux 8 configuration fixes (adil@linux.com)
  - EuroLinux end-of-life (praiskup@redhat.com)
  - bugfix: upgrade openeuler chroots to latest release and fix gpg check failed
    in 20.03 (pkwarcraft@gmail.com)
  - Add Azure Linux 3 configuration (negativo17@gmail.com)
  - Add Azure Linux 2 configuration (negativo17@gmail.com)
  - Add Kylin 10 configuration files (negativo17@gmail.com)
  - Add AlmaLinux Kitten 10 + EPEL 10 configs (ngompa@almalinux.org)
  - Add AlmaLinux Kitten 10 configs (ngompa@almalinux.org)
  - Add openSUSE Leap 15.6, move openSUSE Leap 15.5 to eol (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.1.1-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.22-1
changelog:
  - Update to 0.22
    - Improve several error messages
    - Allow unabbreviated IPv6 addresses
  - Use %{make_build} and %{make_install} where appropriate


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26 (rhbz#2374271)
    - cidrvalidate() should accept IPv6 addresses with one uncompressed 0


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.30-2
changelog:
  - Rebuilt with jsonwebtoken patched for CVE-2026-25537
  - Fixes RHBZ#2437472; fixes RHBZ#2437467; fixes RHBZ#2437461


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


