# changelog

author: Michal Schorm <mschorm@redhat.com> - 1.0.5-42
changelog:
  - Start providing the lower-case 'judy-devel' name for compatibility with
    other RPM based distributions (rhbz#2435466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Than Ngo <than@redhat.com> - 143.0.13^chromium143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192 [rhbz#2427842]
  - * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for
    x86_64/aarch64
  - Enable build for epel10.1


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/107536, ada/113536, ada/117517, ada/118343, c/122188, c++/120757,
  	c++/121981, c++/122302, fortran/108581, fortran/121616,
  	fortran/121939, go/104290, libstdc++/122062, libstdc++/122322,
  	middle-end/121922, middle-end/122133, target/110812, target/121599,
  	target/121652, target/121742, target/121780, target/121781,
  	target/121845, target/121875, target/122119, target/122177,
  	target/122187, target/122210, target/122220, target/122222,
  	target/122223, tree-optimization/121772, tree-optimization/122104,
  	tree-optimization/122213
  - package libgcobol.spec (#2401679)


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/81087, ada/118208, ada/118782, c++/122192, c++/122253, c++/122310,
  	c++/122381, c++/122421, fortran/107968, fortran/114023,
  	fortran/122206, fortran/122386, rtl-optimization/122321,
  	target/99930, target/118460, target/119079, target/120674,
  	target/121604, target/122097, target/122270, target/122323,
  	target/122516, target/122527, tree-optimization/122012,
  	tree-optimization/122394, tree-optimization/122408,
  	tree-optimization/122505
    - fix ICE while building firefox with LTO+PGO (#2395476, PR lto/122620)


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/111433, ada/115305, ada/122640, ada/123037, c/121506, c/123018,
  	c++/119580, c++/120529, c++/120876, c++/121325, c++/121445,
  	c++/122625, c++/122658, c++/122677, c++/122789, fortran/122709,
  	fortran/122977, libstdc++/122661, libstdc++/122726, libstdc++/122743,
  	libstdc++/122842, libstdc++/122921, lto/122515, middle-end/120052,
  	middle-end/120564, middle-end/121581, middle-end/122624,
  	rtl-optimization/122627, target/110796, target/118446, target/119275,
  	target/121853, target/122175, target/122189, target/122216,
  	target/122446, target/122539, target/122652, target/122656,
  	target/122692, target/122695, target/122858, target/122867,
  	target/122991, tree-optimization/121776, tree-optimization/122126,
  	tree-optimization/122225, tree-optimization/122943
  - create gnatgcc symlink only when building Ada
  - avoid building libssp and disabled libraries
  - remove various unpackaged files from the buildroot


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-6
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122668, c++/122752, c++/122772, c++/122834, c++/122922,
  	c++/123331, debug/121964, diagnostics/120063, fortran/107406,
  	libfortran/122936, libstdc++/120446, libstdc++/122812,
  	libstdc++/122907, middle-end/111817, middle-end/123392,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123523, target/117575,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	testsuite/123353, tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch
    - PRs c++/122070, c++/122550, c++/123597, libstdc++/123147,
  	middle-end/123107, middle-end/123703, target/119130, target/123742,
  	tree-optimization/122793, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Jerry James <loganjerry@gmail.com> - 0.0.14-8
changelog:
  - Minor packaging enhancements
  - BR gpgverify instead of gnupg2
  - Add a VCS field
  - Run pdflatex in nonstop mode


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.1-0]
changelog:
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.19 cycle (Justin M. Forbes)
  - add libasan-static and libubsan as BR for selftests (Thorsten Leemhuis)
  - add liburing-devel as BR for selftests (Thorsten Leemhuis)
  - add a few optional BRs for perf (Thorsten Leemhuis)
  - Linux v6.18.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.3-0]
changelog:
  - Config update due to stable patches (Justin M. Forbes)
  - wifi: iwlwifi: Fix firmware version handling (Ville Syrjälä)
  - Linux v6.18.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.5-0]
changelog:
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - Linux v6.18.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Karel Zak <kzak@redhat.com> - 2.40.4-9
changelog:
  - wall: Always use utmp as a fallback [BZ#2283049]
  - clean up the patches section in the spec file
  - re-sync patches with Git


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: John Wolfe <john.wolfe@broadcom.com> - 12.4.0-1
changelog:
  - Package a new upstream version of open-vm-tools-12.4.0-23259341.
    - A number of Coverity reported issues have been addressed.


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.1-6
changelog:
  - adjust file locations now /usr/sbin is a symlink to /usr/bin
  - remove debugedit fix as no longer needed


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-6
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
          CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.4-2
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434045)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434047)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


