# changelog

author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Pavol Žáčik <pzacik@redhat.com> - 2.7.0-0.1.rc1.4
changelog:
  - Bring back the patch that prevents access to global C++ variables
    once they are destroyed (with a minor adjustment).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.7.0-1
changelog:
  - Update to upstream release 2.7.0
  - Skip SHA-1 signing, DSA, and single DES tests when not supported
  - Fix fork tests to properly terminate child processes
  - Enable command-line test suite selection in p11test


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Peter Hanecak <hany@hany.sk> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - build_type_safety_c lowered to work around several "incompatible pointer type"
    errors


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.3.1-1
changelog:
  - Update to 1.3; Fixes: RHBZ#2379679
  - Backport upstream commit to use the systemd journal; Fixes: RHBZ#2375403


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.3-14
changelog:
  - Remove macros obsolete in Fedora
  - Use CMake RPM macros to build and install
  - Build and run the tests
  - Do not glob over the .so version
  - Test with the system gtest instead of the bundled one


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Emir Akdag <infraw.linux@proton.me> - 1.5.3-1
changelog:
  - Update spoofdpi to 1.5.3
  - Update to 1.5.3 to fix CVE-2026-27145
  - Add missing license for go-localereader
  - Fix build directory case sensitivity issue
  - Resolves: rhbz#2494220, rhbz#2494389


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.1-1
changelog:
  - rebuilt for version 2.3.1 fixes rhbz#1856025 rhbz#2454296 rhbz#2128374
  - modernized packaging, enabled generator, templates, and libev support


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Michael Bauer <mb.bauer@siemens.com> - 0.9.0-1
changelog:
  - Version 0.9.0
  - fix(git-cred-helper): ask for consent if needed when acquiring token by
    @fmoessbauer in #43
  - chore(sso-mib-tool): fix build without libjwt by @yselkowitz in #41
  - chore(doc): Added project's license information to meson.build by
    @fmoessbauer in #39
  - chore: remove debian packaging as package is in official debian by
    @fmoessbauer in #38


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Clark Williams <williams@redhat.com> - 1.28.1-1
changelog:
  - stalld: bump version to 1.28.1
  - tests: Fix journal flush race in logging destinations test
  - Merge remote-tracking branch 'wander/dev' into devel
  - stalld: fix format string type mismatch in set_cpu_affinity
  - stalld: fix error return in queue_track_get_cpu
  - stalld: fix snprintf truncation check in is_runnable
  - stalld: fix missing null-termination in is_runnable
  - stalld: guard nextline() returns in sched_debug parsing
  - stalld: remove NULL deref in fill_waiting_task error handler
  - stalld: fix type mismatches in detect_task_format
  - stalld: fix format string type mismatch for time_t
  - stalld: use CLOCK_MONOTONIC for starvation detection
  - stalld: remove async-signal-unsafe calls from signal handler
  - stalld: fix data race on config_buffer_size
  - stalld: fix signed integer overflow in set_reservation
  - stalld: check pthread_create return in conservative_main
  - stalld: check pthread_create return in aggressive_main
  - stalld: fix buffer underflow in sched_debug_get
  - stalld: fix buffer underflow in read_proc_stat
  - stalld: fix uninitialized buffer use in find_debugfs_mount_point
  - stalld: fix inverted DAEMON_UMASK value
  - stalld: fix data race on thread_running
  - bpf: Replace linear task scan with hash map
  - tests: Fix async-signal-unsafe handler
  - tests: Reduce timing and replace sleeps with event waits
  - tests: Remove redundant sleeps after start_stalld
  - tests: Drop redundant sleeps in test_pidfile
  - tests: Replace init sleeps in test_affinity
  - tests: Reduce starvation_gen durations
  - tests: Reduce default wait timeouts
  - tests: Extract wait_for_process_exit helper
  - tests: Introduce and adopt process helpers
  - tests: Remove dead code after making fail() fatal
  - tests: Abort immediately on test failure
  - tests: Remove if-wrappers around assert calls
  - tests: Replace wait conditionals with asserts
  - tests: Introduce and adopt assert_success() helper
  - tests: Remove weak, redundant, and assertion-free test blocks
  - tests: Introduce and adopt assert_log_contains() helper
  - tests: Remove redundant pkill from cleanup
  - tests: Add idle CPU skipping assertion
  - tests: Fix CPU selection grep substring matches
  - tests: Add assertions to SCHED_OTHER restoration test
  - chore: Remove legacy test infrastructure and stale docs
  - tests: Fix repeated log match finding same line
  - tests: Fix subshell swallowing test results
  - tests: Fix boost verification in runtime and duration tests
  - tests: Introduce assert_stalld_rejects() helper
  - tests: Consolidate and adopt init_functional_test()
  - tests: Fix task exit timing in test_boost_restoration
  - tests: Introduce find_starved_child() helper
  - tests: Introduce starvation and boost asserts
  - tests: Introduce cleanup_scenario() helper
  - tests: Introduce test_section() helper
  - stalld: Reject --force_fifo in single-threaded mode


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Tom Callaway <spot@fedoraproject.org> - 8.0.3-3
changelog:
  - lua-devel is no longer needed, suricata is getting lua support from a bundled rust crate
  - this seems weird and wrong, but whatever
  - added libunwind-devel as BR since the configure script wants it (and Fedora has it)


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Peter Czanik <peter@czanik.hu> - 4.12.0-1
changelog:
  - update to 4.12.0
  - remove openssl 4.0 patch (part of the 4.12.0 release)
  - comment out secure logging related files (feature
    disabled by default by upstream)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.9-1
changelog:
  - update upstream URL
  - add tmpfiles configs for Image Mode
  - rebase to the latest upstraem release (rhbz#2419756)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 261.2-1
changelog:
  - Version 261.2
  - a bugfix release with correctness and security-relevant fixes too. 276
    patches, so too much to describe here.


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Jonathan Wright <jonathan@almalinux.org> - 1.98.4-1
changelog:
  - update to 1.98.4
  - Allow nftables to satisfy firewall dependency in lieu of iptables rhbz#2453924
  - Fix 45s timeout on shutdowns in certain cases rhbz#2440864
  - Fixes CVE-2026-34165 rhbz#2454571
  - Fixes CVE-2026-33762 rhbz#2454572


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream fix for savannah bug 65838, commit 1e6ce98e (fedora#2427654)
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS) (fedora#2389217)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582 (fedora#2380007)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.9.6-0.1
changelog:
  - Snapshot of upcoming upstream release 0.9.6
  - New upstream source at github
  - Removed patches and hacks merged upstream
  - Installs a default systemd unit tayga.service that points to a default config
    (similar to Debian and upstream)
  - Pulled support for older EL releases


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.15-3
changelog:
  - Fixed SPDX license case, it was according to the SPDX standard, but
    now it should be more easy to validate with some XML validators


author: Peter Bieringer <pb@bieringer.de> - 7.6-110
changelog:
  - add patch to fix errors on GCC 15 (#2341423)
  - add patch to fix some warnings
  - change URLs to GitHub repository


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.13.16-42
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (Zbigniew Jędrzejewski-Szmek)
  - Fix GCC build, compiling with -std=gnu17


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3-3
changelog:
  - apply following patches from RHEL 10
    - tftp: propagate exit codes in non-interactive mode
    - fix creation of /var/lib/tftpboot on bootc systems


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-4
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259
          CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
          CVE-2026-50264


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.3-2
changelog:
  - Backport upstream CVE fixes
  - Fixes rhbz#2452969 CVE-2026-3945
  - Fixes rhbz#2455913 CVE-2026-31842
  - Run upstream test suite


author: Miro Hrončok <mhroncok@redhat.com> - 1:8.4.3-44
changelog:
  - Drop needles runtime requirements on tk-devel and tcl-devel
  - Make the package installable with tk/ctl 8 as well as tk8/tcl8 compat packages
    Resolves: #2337797


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Stewart Smith <trawets@amazon.com> - 1.4.48-29
changelog:
  - Update project and source URLs.
  - Update description to include the author's suggestions of successors


author: Dimitris Soumis <dsoumis@redhat.com> - 1:2.0.14-2
changelog:
  - The old description is from the 1.x era when tomcat-native provided broad
    APR integration. In 2.x it's focused solely on TLS/OpenSSL.


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.11-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-9-11/21786 bz#2483769


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-5
changelog:
  - Fix tests for F41 https://bugzilla.redhat.com/show_bug.cgi?id=2301337
  - Revert exclude broken test on s390


author: Adrian Freihofer <adrian.freihofer@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0
  - Drop sha1/sha256 Fedora patches (already upstream in 1.3.0)
  - Replace downstream OpenSSL 4.0 patch with upstream cherry-pick (6dcc3b2)


author: Vincent Mihalkovic <vmihalko@redhat.com> - 2.3.1-1
changelog:
  - update to 2.3.1, switch source to GitLab unix-tree archive
  - refresh patches for 2.3.1 (tree-static-analysis.patch tree.c hunk)


author: Akira TAGOH <tagoh@redhat.com> - 1.9.0-1
changelog:
  - New upstream release.
    Resolves: rhbz#2347165
  - Disable OpenSSL support.
    OpenSSL plugin isn't packaged. should be no harm.


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Packit <hello@packit.dev> - 0.19.8-1
changelog:
  - preload: Fix libc name on alpha architecture (Thanks Michael Cree!)
  - preload: Check dlopen(libc) failure
  - ioctl: Fix array.resize(0) to work with gcc 16 static analyzer
  - tests: Fix Gentoo tests, re-enable them in CI


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 16.0.01-1
changelog:
  - Version 16.0.01
  - License tag is updated and converted to proper SPDX
  - The ttf subpackage is dropped and will be removed from systems


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Zipinfo: remove the extra %c that cause invalid reads
  - Zipinfo: fix the whitespace formating of the help message
  Related: RHEL-59972


author: Jakub Martisko <jamartis@redhat.com> - 6.0-71
changelog:
  - Port some RHEL downstream patches to fedora
  - Fixes for RHEL-86228, RHEL-45997 + some issues found by coverity and other scans
  - Fixes for CVE-2022-0529 and 2022-0530 (Thanks Stewart Smith for the Heads up about these)


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Michal Hlavinka <mhlavink@redhat.com> - 1.114-14
changelog:
  - drop console.apps files as pam no longer uses those and pam_console
    was dropped https://fedoraproject.org/wiki/Changes/RemovePamConsole


author: Michael Jeanson <mjeanson@efficios.com> - 0.15.0-1
changelog:
  - New upstream release
  - The 'signal' flavour of liburcu was removed upstream
  - Enable compiler atomics


author: Charles R. Anderson <cra@alum.wpi.edu> - 0.5.20^20241111git7ef9e26-2
changelog:
  - Rebuilt for Tcl/Tk 9.0 (#2337805)
  - Patch to always set -D_REENTRANT since Tcl 9.0 no longer sets TCL_THREADS,
    and add -std=gnu17 to CFLAGS since GCC 15 changed to gnu23 which fails.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@remirepo.net> - 9.1.1-1
changelog:
  - Valkey 9.1.1 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639
  - own /etc/logrotate.d as its owner is an optional dependency
  - refresh the documentation
  - drop OpenSSL 4 patch merged upstream


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Carl George <carlwgeorge@fedoraproject.org> - 2.8.0-9
changelog:
  - Port to new golang packaging guidelines
  - Use vendor tarball for build dependencies
  - Remove golang-github-vrothberg-vgrep-devel subpackage rhbz#2446694


author: Petr Pisar <ppisar@redhat.com> - 1.2.4-41
changelog:
  - Adapt to GCC 15 (bug #2341514)
  - Correct a license tag to "BSD-3-Clause AND MIT-open-group AND SMLNJ"


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3^20241114.git11e15a1-2
changelog:
  - Fix issues with /usr/bin/ and /usr/sbin/ merge (#2363531)
  - Always use consolehelper, implicitly allowed for root,
    remove consoleuser sub-package
  - Remove pam_console.so from vpnc.pam (not available anymore)


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-3
changelog:
  - use upstream way of running tests
  - run unit tests
  - re-enable most tests on s390x now that they pass
  - skip failing test on ppc64le and s390x with GCC 15


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.37-1
changelog:
  - update to 1.0.37 (resolves rhbz#2349655)
  - skip new failing tests on i686 and ppc64le
  - re-enable wasm2c/spec/float_exprs.txt test, now that GCC 15 is fixed


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Neal Gompa <ngompa@fedoraproject.org> - 0.5.0-3
changelog:
  - Refresh build dependencies to match actual build requirements
  - Refresh free codec patch
  - Drop ffmpeg 7 compatibility patch as its included in this release


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Joe Doss <joe@solidadmin.com> - 1.0.20260223-1
changelog:
  - Update to 1.0.20260223
  - syncconf: account for persistent keepalive removed from config file
  - config: preserve const correctness
  - wg-quick@.service: add deps on wg-quick.target
  - wg-quick: linux: do not unnecessarily set sysctl
  - wg-quick: use addconf instead of setconf
  - wg-quick: linux: deal with resolvconf migration more gracefully
  - wg-quick: pass on # comments to {Pre,Post}{Up,Down}
  - syncconf: account for psks removed from config file
  - wg-quick: linux: use smallest mtu, not largest


author: Shawn W Dunn <sfalken@opensuse.org> - 0.7-1
changelog:
  - Update to 0.7
  - Add 0001-fix-config-path.patch to put configs in the correct place
  - Add 0002-remove-google-chrome.patch to remove Google Chrome and enable
    Firefox as default browser
  - Update to libbase-aa0da7a355b04b1dd8572a94261a0b0c497e1a85
  - Change Recommends: to firefox, foot, and wdisplays for functionality


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: Michal Schorm <mschorm@redhat.com> - 1:1.0.4-2
changelog:
  - Fix SPDX license expression: 'GPL-2.0-only AND CC-BY-3.0 AND CC-BY-SA-3.0'
  - 'ogg_to_pcm.c' is GPL-2.0-only (from vorbis-tools), not GPL-2.0-or-later


author: Sun Haiyong <sunhaiyong@zdbr.net> - 3.2.9-3
changelog:
  - Add loongarch64 to the condition for using lib64 in the wx-config file.
  - Skip failing tests on riscv64


author: Tom Callaway <spot@fedoraproject.org> - 4.2.6-1
changelog:
  - so, funny story. turns out this thing is still being actively developed.
    and... i just noticed. whoops. sorry.
  - anyways, new achievement: Back From The Dead
  - update to 4.2.6


author: Patrick Monnerat <patrick@monnerat.net> 2.9.0-5
changelog:
  - Patch "openssl4" for openssl version 4 compatibility.
  - Remove BR openssl-devel-engine for Fedora > 44.
  - Perform tests.


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.1.3-2
changelog:
  - spec cleanup and modernization - use https for spec urls - sort BR in
    alphabetical order - silent rpmlint


author: Neal Gompa <ngompa@fedoraproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races (#2319081)
  - Fix minor spec formatting inconsistencies


author: Hans de Goede <hans@hansg.org> - 3.2.9a-1.20250317gitce9782a
changelog:
  - Update to 3.2.9a + latest git changes to fix build with -std=c11
  - Switch to upstream appdata/metainfo and desktop file
  - Drop all patches (all upstreamed)
  - Resolves: rhbz#2341567
  - Resolves: rhbz#2385740


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


author: Marcus Müller <mueller_fedora@baseband.digital> - 3.3.0-1
changelog:
  - Bump to new upstream release 3.3.0
  - Fix wrong license (see doc/COPYING in source code)
  - Fix installation location in a less hacky way
  - Fix keyring source. (you need to git clone the kernel gpgkeys repo and then
    grep for the key needed, then replace the Source here. This is not a
    sustainable system.)
  - Fix description typo
  - Remove stray tab byte from description, which was shown as \x09 in
    `dnf info xfsdump` (huh?)


author: Pavel Reichl <preichl@redhat.com> - 7.0.1-1
changelog:
  - Update to upstream v7.0.1
  - Move xfs_healer systemd units from xfsprogs-xfs_scrub to main xfsprogs package
  - Related: rhbz#2467694


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Greg Hellings <greg.hellings@gmail.com> - 4.3.1-1
changelog:
  - New upstream version 4.3.1 which already has editor fixed
  - Updated dependencies
  - Removed all patches


author: Greg Hellings <greg.hellings@gmail.com> - 4.4.0-1
changelog:
  - New upstream release 4.4.0
  - Introduction of speech services for TTS
  - Restoration of editor through GTK-native technologies


author: Tom spot Callaway <spotaws@amazon.com> - 3.0.7-5
changelog:
  - revert 6ca325d Fix libsv include path, while libsv upstream has moved
    their header location, the libsv in fedora has not moved it yet as of
    1.2-7


author: Tom Callaway <spot@fedoraproject.org> - 4.7-39
changelog:
  - am i wrong for keeping a motif app alive in 2025? No, it is the kids who are wrong.
  - uh, apply fix for compiling with c23 (gcc15)


author: Jonathan Wright <jonathan@almalinux.org> - 1.60.4-1
changelog:
  - update to 1.60.4 rhbz#2334236
  - re-enable builds against libxml2, no more bundled libexpat
  - fixes rhbz#2310136
  - fixes rhbz#2310146
  - fixes rhbz#2310152


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.23-1
changelog:
  - Update to xserver 21.1.23
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 24.1.12-1
changelog:
  - Update to xwayland 24.1.12
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.7-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix build with GCC15 (Dominik Mierzejewski)


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.8.3-1
changelog:
  - New upstream version 5.8.3 (fixes RHBZ#2453487, CVE-2026-34743)
  - Add Arabic language translations


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.6.1-1
changelog:
  - update to 2.3.6.1 fixes rhbz#1933807 rhbz#2381649
  - Switched to HTTPS for URL and Source0, consolidated patches
  - Use macros in %prep, %cmake macros, honor build flags


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 4.1.5^git20251117.c9a0e98-1
changelog:
  - Removed debug package creation opt-out.
  - Updated to Git revision c9a0e98 (Nov 17, 2025).
  - Updated the SPDX license expression.
  - The examples can now be found in the package documentation directory.
  - All package summaries and descriptions have been updated.
  - The README-file has been removed from the package as it doesn't contain any
    useful information for Fedora users.
  - The license file can now be found in the package license directory.
  - Made the generated project file architecture-independent.


author: Martin Gieseking <martin.gieseking@uos.de> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Dropped rpath patch which is no longer required
  - Updated license (libzint is now licensed under BSD-3-Clause)


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to v1.1.0
  - Upstream bug fixes: out-of-bounds array access, missing unistd.h header,
    localtime prototype, curses header preprocessor guard
  - Upstream build improvements: LDFLAGS support in Makefile
  - Migrate to %autorelease
  - Remove unnecessary %global _hardened_build 1 (default since F23)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.0.0-1
changelog:
  - Update to upstream 7.0.0 (fixes rhbz#2307507)
  - License audit and update to SPDX license expressions (fixes rhbz#2118200)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.1.0-1
changelog:
  - Update to upstream 7.1.0 (fixes rhbz#2330000, rhbz#2331292)
  - Update license string with final SPDX expression


author: Jakub Sencak <jsencak@redhat.com> - 0.13.78-6
changelog:
  - Replaced make macros with cmake macros; the cmake macro defaults to ninja generator instead of make
  - Removed obsolete files
  - Ship CMake config files in -devel package


