# changelog

author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.78.3-2
changelog:
  - Rebuilt for Go 1.25.3
  - resolves rhbz#2407547 CVE-2025-58189, rhbz#2408551 CVE-2025-61725,
    rhbz#2409002 CVE-2025-61723, rhbz#2409945 CVE-2025-58185, rhbz#2410882
    CVE-2025-58188, rhbz#2412486 CVE-2025-58183


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.98.0-1
changelog:
  - update to 2.98.0
  - resolves: rhbz#2403136 (CVE-2025-11579), rhbz#2420569 (CVE-2025-47913),
    rhbz#2421867 (CVE-2025-66564), rhbz#2432197 (CVE-2026-23831),
    rhbz#2433101 (CVE-2026-23991), rhbz#2433104 (CVE-2026-23992),
    rhbz#2433535 (CVE-2026-24117), rhbz#2433572 (CVE-2026-24137),
    rhbz#2434246 (CVE-2026-24686), rhbz#2452365 (CVE-2026-32285),
    rhbz#2454524 (CVE-2026-34165), rhbz#2454525 (CVE-2026-33762),
    rhbz#2455638 (CVE-2026-34986)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: Tom Callaway <spot@fedoraproject.org> - 1.7.0-0.1.rc2
changelog:
  - update to 1.7.0-rc2
  - disable tests on s390x (reported upstream: https://github.com/libunwind/libunwind/issues/464)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Pavel Raiskup <pavel@raiskup.cz> 44.3-1
changelog:
  - the fedora-release-eln renamed to fedora-eln-release
  - Add config for Fedora 44 version of RISC-V port (marcin@juszkiewicz.com.pl)
  - set bootstrap_image_ready=True for AlmaLinux configs (andrew.lukoshko@gmail.com)
  - re-enable bootstrap images for x86_64_v2 AlmaLinux configs (andrew.lukoshko@gmail.com)
  - remove dependency on python3-dnf (msuchy@redhat.com)


author: Paul Howarth <paul@city-fan.org> - 1.17-29
changelog:
  - Replace use of cryptographically-insecure rand() function (CVE-2026-8700);
    use Crypt::URandom instead, which has a backend that calls getrandom() on
    Linux
  - Avoid use of 2-argument open() (CVE-2026-8704)
  - Fix "Use of uninitialized value $cur_part in hash element" warning in
    Crypt::DSA::KeyChain
  - Add security note discouraging use of Crypt::DSA
  - Fix typo in Crypt::DSA::Util
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.261630-1
changelog:
  - Update to 0.261630 (rhbz#2488228)
    - Change the default hash algorithm to HMAC-SHA256, and increase the default
      number of iterations to 600,000, in line with current OWASP recommendations
      (CVE-2026-9641)
    - Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
      builtin rand(), which is not cryptographically secure (CVE-2026-9638)
    - Use a constant-time comparison in 'validate' to avoid timing attacks
      (CVE-2017-20240)
  - Switch to Module::Build::Tiny flow
  - Package new README file


author: Paul Howarth <paul@city-fan.org> - 2.83-1
changelog:
  - Update to 2.83
    - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
      but gdlib-config (the check was too strict)


author: Paul Howarth <paul@city-fan.org> - 2.84-1
changelog:
  - Update to 2.84
    - Added Makefile.PL --with and --without options to bypass autodetection
      errors or upstream libgd or subsequent library errors (GH#55)
    - Better support MSWin32 without gdlib.pc (requires manual --options and
      --lib_gd_path)
    - Work around broken ExtUtils::PkgConfig->find (GH#61)
    - Fixed snprintf for newer MSVC (>= VS 2015)
    - Added GD::Image::supported() image types method
    - Added newFromTiffData() method
    - Fixed t/GD.t for unsupported image types
    - Add GIFANIM to the default since 2.0.33 (GH#56)
    - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
    - Add demos/png2jpeg.pl
  - Don't disable XPM support if GD config doesn't explicitly require -lX11
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.85-1
changelog:
  - Update to 2.85
    - Tolerate runtime TIFF decode failures in autodetect (GH#62)
    - Replace cpm with cpanm in github actions
    - Fixed a minor precedence bug in t/z_manifest.t


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - raise dependency on libbson and libmongc 1.28.0
  - raise dependency on libmongocrypt 1.11.0


author: Robert Scheck <robert@fedoraproject.org> 4.4-13
changelog:
  - Add patch to replace pipes.quote() from deprecated Python
    pipes (#2318435, thanks to Sean Carlos and Patrick Scheck)


author: Michel Lind <salimma@fedoraproject.org> - 0.62.1-1
changelog:
  - Update to 0.62.1 for ability to enforce SSO login/signups
  - Generate extras subpackages
  - Enforce that the license file is shipped


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2452368
  - Fix rhbz#2453084
  - Fix rhbz#2455643
  - Fix rhbz#2458928
  - Fix CVE-2026-47215


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


