# changelog

author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Nick Clifton <nickc@redhat.com> 2.28-7
changelog:
  - Fix s390 assembler so that it remove fake local symbols from its output.
    (#1460254)
    (#1472486)


author: Nick Clifton <nickc@redhat.com> 2.28-10
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1515340)


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Stan Cox <scox@redhat.com> - 9.3.2-3
changelog:
  - rhbz1503116 possible soname clashes between base rhel- and devtoolset- dyninst
  - rhbz1538757 segfault with a glibc built with binutils-2.27: handle R_*_IRELATIVE


author: Mark Wielaard <mjw@redhat.com> - 0.168-1
changelog:
  - New upstream release from new project home https://sourceware.org/elfutils/
    Resolves: Rebase elfutils to 0.168 bugfix release (#1412299)


author: Mark Wielaard <mark@klomp.org> - 0.168-3
changelog:
  - Adjust internal library so names (#1412305).
  - Never use old, deprecated, filter_provides_in, it really is too broken.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.169-3
changelog:
  - Add elfutils-0.169-dup-shstrtab.patch (#1455687)
  - Add elfutils-0.169-strip-empty.patch (#1455620)


author: Mark Wielaard <mjw@redhat.com> - 0.170-4
changelog:
  - Add elfutils-0.170-dwarf_aggregate_size.patch (#1527966).
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Marek Polacek <polacek@redhat.com> 7.3.1-5.7
changelog:
  - fix 0014-Allow-non-logical-expressions-in-IF-statements.patch: also allow
    non logical expressions in ELSE-IF statements


author: Jeff Law <polacek@redhat.com> 7.3.1-5.9
changelog:
  - Fix INCLUDE handling when pathname is on a separate line
  - Integrate updates to patches #0005 and #0014.  Add testcases for
  - various legacy fortran extensions (#1586289)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.0.1-32.fc26
changelog:
  - Backport upstream fix for Intel PKRU (Walfred Tedeschi).
  - Backport upstream fix AVX instr. single-stepping (RH BZ 1515209, Pedro Alves).
  - Fix snapgnulib bundle number.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-11
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: DJ Delorie <dj@redhat.com> - 0.7.91-13
changelog:
  - Remove mentions of (and one attempt to patch) backup files in 
    ltrace-0.7.91-unwind-elfutils.patch (#1427140)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: Will Cohen <wcohen@redhat.com> - 1.1.0-4
changelog:
  - Update events non-x86 architectures (aarch64, power, zseries)
  - Add support for newer Intel processors.


author: DJ Delorie <dj@redhat.com> - 4.12-3
changelog:
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Duplicate vhangup/chown patch for -m32 also.


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3s
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-1
changelog:
  - valgrind 3.13.0 final.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch


author: Mark Wielaard <mjw@redhat.com>
changelog:
  - Rebase to fedora valgrind version (#1467952)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-arm-index-hardwire.patch
    - Add valgrind-3.13.0-ucontext_t.patch
    - Add valgrind-3.13.0-gdb-8-testfix.patch
    - Add valgrind-3.13.0-disable-vgdb-child.patch
    - Add valgrind-3.13.0-arm64-hwcap.patch
    - Add valgrind-3.13.0-epoll_pwait.patch
    - Add valgrind-3.13.0-ppc64-diag.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-10
changelog:
  - Add valgrind-3.13.0-ppc64-timebase.patch (#1523871)
  - Sync with rhel 7.5 valgrind (#1523872)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-xml-socket.patch
    - Add valgrind-3.13.0-ppc64-vex-fixes.patch
    - Add valgrind-3.13.0-amd64-eflags-tests.patch
    - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
    - Add valgrind-3.13.0-static-tls.patch


author: Nick Clifton <nickc@redhat.com> 2.30-26
changelog:
  - Restore the long-long patch as it is needed for compatibilit between the 32-bit and 64-bit devel rpms.  (#1605913)


author: Nick Clifton <nickc@redhat.com> - 2.30-47
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Update x86_64 linker testsuite after previous delta.  (#1624779)
  - Disable the x86_64 linker's elimination of PLT entries.  (#1624779)
  - Disable readelf's reporting of gaps in build notes.  (#1623556)
  - Fix some more PowerPC64 linker testsuite failures.  (#1584565)
  - Remove PLT eliision patch.  (#1618748)
  - Restore the binutils-2.25-set-long-long.patch.
  - Fix GOLDs creation of PT_NOTE segments.  (#1614908)  (#1614920)
  - Improve objcopy's --merge-notes option.  (#1608390)
  - Remove x86 ISA property notes with empty bits.  (#1609801)
  - Rebuild with fixed binutils
  - Move the .gnu.build.attributes section to after the .comment section.
  - Merge .gnu.build.attribute sections together.  (#1608390)
  - Fix the gold linker so that it can handle relocs in discardeable note sections.  (#1607054)
  - Fix the generation of relocations for assembler created notes.  (#1598551)


author: Nick Clifton <nickc@redhat.com> - 2.30-54
changelog:
  - Fix AArch64 linker testsuite problems.  (#1702247)
  - Fix S390x linker testsuite problems.  (#1702248)
  - Fix PPC64le linker testsuite problems.  (#1702249)


author: Stan Cox <scox@redhat.com> - 9.3.2-6
changelog:
  - rhbz1498558 Needs dyninst-devtoolset installed
  - rhbz1470149 Use separate debuginfo for dyninst-testsuite
  - rhbz1647471 so name clashes


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.
  - Add elfutils-0.173-index-shadow.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.
  - Add elfutils-0.174-no-shadow.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Marek Polacek <polacek@redhat.com> 8.2.1-7
changelog:
  - update from Fedora gcc-8.2.1-7 (#1664796)
  - drop gcc8-fortran-include.patch
  - add -fdec-include and -fpad-source (#1647048)
  - include forgotten ppc* intrinsic headers


author: Marek Polacek <polacek@redhat.com> 8.3.1-2
changelog:
  - update from Fedora 8.3.1-2 gcc (#1664796)
  - put liblsan_preinit.o to FULLPATH instead of FULLLPATH


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3
  - two small autoFDO fixes (#1684650)
  - fix std::hash for 2GB+ strings (PR libstdc++/89629)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.1
changelog:
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730724)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730726)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.2
changelog:
  - move UNSPEC_DARN* from altivec.md to rs6000.md (#1760208)
  - use unspec_volatile for darn (PR target/91481, #1760208, CVE-2019-15847)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-0.1.GIT
changelog:
  - New upstream (pre-)release.
  - Add valgrind-3.14.0-add-vector-h.patch.
  - Add valgrind-3.14.0-disable-s390x-z13.patch.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-16
changelog:
  - Add valgrind-3.14.0-gettid.patch
  - Add valgrind-3.14.0-ppc64-quotactl.patch
  - Add valgrind-3.14.0-ppc-subfe.patch
  - Add valgrind-3.14.0-s390x-vec-facility-bit.patch.
  - Update valgrind-3.14.0-rsp-clobber.patch
  - Add valgrind-3.14.0-subrange_type-count.patch


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 2.32-5
changelog:
  - REBASE TO MATCH gcc-toolset-9 binutils
  - Fix configuring binutils with plugins and address sanitization enabled.  (#1709720)
  - Add: binutils-CVE-2019-9071.patch
  - Add: binutils-CVE-2019-9073.patch
  - Add: binutils-CVE-2019-9074.patch
  - Add: binutils-CVE-2019-9075.patch
  - Add: binutils-CVE-2019-9077.patch
  - Add: binutils-aarch64-gold-PLT-for-MOVW_ABS.patch
  - Add: binutils-alignment-of-decompressed-sections.patch
  - Add: binutils-check-dlsym-for-plugins.patch
  - Add: binutils-disassembling-efi-files.patch
  - Add: binutils-export-demangle.h.patch
  - Add: binutils-gold-8-byte-note-segments.patch
  - Add: binutils-ld-testsuite-fixes.patch
  - Add: binutils-s390x-arch13-descriptions.patch
  - Add: binutils-special-sections-in-groups.patch
  - Retire: binutils-2.22.52.0.1-export-demangle.h.patch
  - Retire: binutils-2.26-lto.patch
  - Retire: binutils-2.30-allow_R_AARCH64-symbols.patch
  - Retire: binutils-CVE-2018-10372.patch
  - Retire: binutils-CVE-2018-10373.patch
  - Retire: binutils-CVE-2018-10534.patch
  - Retire: binutils-CVE-2018-10535.patch
  - Retire: binutils-CVE-2018-17358.patch
  - Retire: binutils-CVE-2018-6323.patch
  - Retire: binutils-CVE-2018-6759.patch
  - Retire: binutils-CVE-2018-7208.patch
  - Retire: binutils-CVE-2018-7568.patch
  - Retire: binutils-CVE-2018-7569.patch
  - Retire: binutils-CVE-2018-7570.patch
  - Retire: binutils-CVE-2018-7642.patch
  - Retire: binutils-CVE-2018-7643.patch
  - Retire: binutils-CVE-2018-8945.patch
  - Retire: binutils-PowerPC-IEEE-long-double-warnings.patch
  - Retire: binutils-debug-section-marking.patch
  - Retire: binutils-disable-readelf-gap-reports.patch
  - Retire: binutils-fix-testsuite-failures-2.patch
  - Retire: binutils-gas-build-notes.patch
  - Retire: binutils-gold-llvm-plugin.patch
  - Retire: binutils-gold-note-segment.patch
  - Retire: binutils-ifunc-relocs-in-notes.patch
  - Retire: binutils-linkonce-notes.patch
  - Retire: binutils-merge-attribute-sections.patch
  - Retire: binutils-missing-notes.patch
  - Retire: binutils-nested-func-name-lookup.patch
  - Retire: binutils-note-merge-improvements.patch
  - Retire: binutils-page-to-segment-assignment.patch
  - Retire: binutils-remove-empty-ISA-properties.patch
  - Retire: binutils-revert-PowerPC-speculation-barriers.patch
  - Retire: binutils-s390x-arch13.patch
  - Retire: binutils-skip-dwo-search-if-not-needed.patch
  - Retire: binutils-speed-up-objdump.patch
  - Retire: binutils-strip-unknown-relocs.patch
  - Retire: binutils-x86-local-relocs.patch
  - Retire: binutils-x86-local-version.patch
  - Retire: binutils-x86_64-disable-PLT-elision.patch


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-14
changelog:
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Marek Polacek <polacek@redhat.com> 9.1.1-1.1
changelog:
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - apply Fortran patches (#1728355)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-1
changelog:
  - Rebase to v5.1; drop upstream patches on top of 4.24.
  - Add upstream commits 7ada13f3 ("evdev: avoid bit vector decoding
    on non-successful and 0 return codes"), 96194ed7 ("evdev: fix array size
    calculation in decode_bitset_"), and cdd8206a ("tests: test evdev bitset
    decoding more thoroughly") as separate patches.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Jan Kaluza <jkaluza@redhat.com> - 1.1-7
changelog:
  - Obsolete all versions of httpd24-apr and httpd24-apr-util on RHEL7 (#1218271)
  - Do not mention RHSCL version in README and man page (#1219112)
  - Fix bad man page syntax (#1219511)


author: Jan Kaluza <jkaluza@redhat.com> - 1.4.6-2
changelog:
  - initial spec rewrite for scl build
  - fix strict-aliasing gcc warning
  - remove unused SHA384 and SHA512 code
  - update license


author: Luboš Uhliarik <luhliari@redhat.com> - 1.5.1-1.1
changelog:
  - Resolves: #1540984 - CVE-2017-12613 httpd24-apr: apr: Out-of-bounds
    array deref in apr_time_exp*() functions


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9
changelog:
  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10
changelog:
  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11
changelog:
  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14
changelog:
  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-16
changelog:
  - remove bundled mod_md module
  - Resolves: #1788976 - RFE: updated collection for httpd 2.4
  - Resolves: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite 
    potential open redirect


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-18.1
changelog:
  - Resolves: #1869068 - CVE-2020-9490 httpd24-httpd: httpd: Push diary
    crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8
changelog:
  - Resolves: #1745692 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: # 1744825 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large 
    amount of data request leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8.1
changelog:
  - Resolves: #1845302 - CVE-2020-11080 httpd24-nghttp2: nghttp2: overly large
    SETTINGS frames can lead to DoS


author: Slavek Kabrda <bkabrda@redhat.com> - 1.1-17
changelog:
  - Require python-pip and python-wheel (note: in rh-python34
    this is not necessary, because "python" depends on these).


author: Charalampos Stratakis <cstratak@redhat.com> - 1.1-18
changelog:
  - Properly define XDG_DATA_DIRS variable to avoid breaking applications (rhbz#1266529)
  - Escape apostrophs in metapackage manual page(rhbz#1219527)


author: Robert Kuska <rkuska@redhat.com> - 1.1-23
changelog:
  - Insert proper value into requires/provides macros
  - Use Release number 23 as there is already built version 22 in brew


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703534 and rhbz#1704372


author: Victor Stinner <vstinner@redhat.com> - 2.7.16-4
changelog:
  - Fix regression in the crypt module introduced in update to Python 2.7.16
    (fix the name of the _crypt module init function).


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
  - Rebase to new snapshot with some fixes integrated
  - Reenable one test that I can't replicate the failure with.


author: David Malcolm <dmalcolm@redhat.com> - 1.1.2-5
changelog:
  - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
  - disable selftests that fail under 3.3


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.2.1-5
changelog:
  - Rebuild to generate bytecode properly after fixing rhbz#956289
  - scl-utils now compile man-pages -> use proper name in %files.


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Charalampos Stratakis <cstratak@redhat.com> - 7.1.0-2
changelog:
  - Change license tag to doc tag so directory is owned by the collection
  - Will revert when ownership of directories is defined in scl-utils-build package
  Resolves: rhbz#1334447


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Rebased to 8.1.2
  - Updated to a new PyPI source URL
  - Rebased and renamed prefix-stripping Patch 0
  Resolves: rhbz#1344674


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
  - update for upstream release
  - Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
  - Fix python main package having dependencies for the python2.6 subpackage
  - Fix places that used the default python instead of python26
  - Attempt to make byte compilation more robust in case we add python3 to EPEL5
  - Run unittests on python3 in F15+


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996705


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tomas Orsava <torsava@redhat.com> - 13.1.0-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory
  Resolves: rhbz#1353200


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Java SIG <java-devel@lists.fedoraproject.org> - 2:0.5-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Alexander Kurtakov <akurtako@redhat.com> 1.8-0.12.svn1230816.11
changelog:
  - Move to Batik 1.7 manifests.
  - Remove old stuff.
  - Remove provenance=W3C attribute from Import-Package. (rhbz #1073110)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Alexander Kurtakov <akurtako@redhat.com> 0:5.4.1-2
changelog:
  - Organize Sources numbering.
  - Drop old jpackage header - package has nothing in common anymore.
  - Drop 3+ years old provides/obsoletes.
  - Move old changelog to separate file to ease working with the spec file.


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.28-1
changelog:
  - Update to upstream 4.0.28 release.
  - Fixes CVE-2015-2156 (HttpOnly cookie bypass).
  - Resolves RHBZ#1111502


author: Michal Srb <msrb@redhat.com> - 5.0.3-1.1
changelog:
  - SCL-ize spec file
  - Remove dependency on unavailable parent POM
  - Drop jpackage_script
  - Make it a compat package


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Honza Horak <hhorak@redhat.com> - 25.3.12-10
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1466473
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed
    Related: #1466473


author: Michal Schorm <mschorm@redhat.com> - 1:10.1.19-7
changelog:
  - Rebase to version 10.1.19
  - JdbcMariaDB.jar test removed
  - PCRE version check added
  - All test removed from blacklist, 2 new added to blacklist
    Related: #1393306, #1396934
    Also fix: CVE-2016-3492 CVE-2016-5616 CVE-2016-5624 CVE-2016-5626
              CVE-2016-5629 CVE-2016-6662 CVE-2016-6663 CVE-2016-8283


author: Honza Horak <hhorak@redhat.com> - 1:10.1.20-1
changelog:
  - Rebase to version 10.1.24
    Also fixes: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238
    CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3313
    CVE-2017-3317 CVE-2017-3318 CVE-2017-3291 CVE-2017-3302 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1463417
  - Fix mysql-prepare-db-dir for CVE-2017-3265
    Resolves: #1463412
  - Use correct directories to search for language files
    Resolves: #1406391
  - Fix SELinux context for the daemon
    Resolves: #1336806


author: Honza Horak <hhorak@redhat.com> - 1:10.1.26-1
changelog:
  - Update to 10.1.26
  - Remove mariadb-covscan-stroverflow.patch that was fixed upstream
  - Update bundled pcre version to 8.41
    Related: #1463417


author: Honza Horak <hhorak@redhat.com> - 1:10.1.29-3
changelog:
  - Use selinux for the mysqld_safe_helper also on RHEL-6
    Related: #1463417
  - Print the same messages as before when starting the service in SysV init,
    to not scare users
    Related: #1463411


author: Honza Horak <hhorak@redhat.com> - 25.3.20-2
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1415720
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed


author: Honza Horak <hhorak@redhat.com> - 1:10.2.7-4
changelog:
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Do not use mysql-wait-stop on RHEL-7 service files


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-2
changelog:
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Run mysql-prepare-db-dir as non-root


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-3
changelog:
  - Handle left-over files that do not uninstall
    Resolves: #1487292
  - Fix uninstalled directories
    Resolves: #1487292
  - Files outside of /opt/rh should be in syspath package
    Resolves: #1492645
  - Split mariadb package to more sub-packages to match upstream's RPM list
    Resolves: #1490419


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-4
changelog:
  - Fix issues found by rpmdiff, particularly:
    unexpanded macro %{mysqld_pid_dir} -- left-over from switching pid file dir,
    we can remove in new SCL
    jar files included in connect engine
    Related: #1455850


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-5
changelog:
  - Support MYSQLD_OPTS and _WSREP_NEW_CLUSTER env vars in init script,
    same as it is done in case of systemd unit file
    Related: #1455850


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.22-1
changelog:
  - Rebase to 10.2.22
    Resolves: #1510416
    Resolves: #1645934
  - Use downstream tmpfiles instead of the upstream one
  - Patch 2 upstreamed
  - Patch 8 obsolete - upstream started to use macros
  - Patch 40 upstreamed
  - Add patch for wsrep_recover_position function in mysqld_safe
    Resolves: #1694679
  - CVEs fixed: #1664048
    CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3156
    CVE-2018-3282 CVE-2018-3277 CVE-2018-3143 CVE-2018-3251 CVE-2018-3185
  - CVEs fixed: #1617946
    CVE-2018-3058 CVE-2018-3060 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066
  - CVEs fixed: #1572138
    CVE-2018-2755 CVE-2018-2759 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
    CVE-2018-2777 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786
    CVE-2018-2787 CVE-2018-2810 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819
    CVE-2018-3081
  - CVEs fixed: #1559064
    CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665
    CVE-2018-2668 CVE-2018-3133
  - CVEs fixed: #1558264
    CVE-2017-15365
  - CVEs fixed: #1558261
    CVE-2017-10268 CVE-2017-10378
  - CVEs fixed: #1640321
    CVE-2018-3174


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.4.2-2
changelog:
  - update to 1.4.2 (iterative build)
  - emacs and vim subpackages obsoleted as they're no longer provided


author: jchaloup <jchaloup@redhat.com> - 0-0.4.git4727d76
changelog:
  - internal packages are not provided but are needed for building
    related: #1250509
    resolves: #1255155


author: jchaloup <jchaloup@redhat.com> - 0-0.3.gitc57d4a7
changelog:
  - Repository has moved to github.com/golang/crypto, updating spec file accordingly
    resolves: #1231618


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1-3
changelog:
  - Resolves: rhbz#1141875 - newpackage
  - no debug_package
  - preserve timestamps
  - do not redefine gopath


author: Jan Pacner <jpacner@redhat.com> - 2.0-16
changelog:
  - Related: #1035187 (disable checks about breaking strict-aliasing rules)
  - revert the previous restoration and allow fortifying symbols


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Marek Skalicky <mskalick@redhat.com> 2.6.9-1
changelog:
  - Correct SELinux type for slc-helper script 
    Resolves: #1202013
  - Fix mongodb user HOME (Resolves: #1206157)
  - Upgrade to latest minor release 2.6.9 (Resolves: #1207118)


author: Marek Skalicky <mskalick@redhat.com> - 3.2.1-1
changelog:
  - Configuration files updated
    (mongod and mongos also listen on ipv6 localhost by default)
  - test subpackage contains resmoke.py tool instead of smoke.py
  - Upgrade to latest minor upgrade 3.2.1


author: Marek Skalicky <mskalick@redhat.com> - 0.5.1-10
changelog:
  - Fixed rh-mongodb32 buildrequires boost library from collection
  - Fixed pkgconfig directory ownership


author: Marek Skalický <mskalick@redhat.com> - 3.0-13
changelog:
  - Fix ownership on aarch64 and ppc64le
    Resolves: RHBZ#1482016
  - Add requirements for collection metapackage to install mongo shell and mongo-tools
    Resolves: RHBZ#1483966


author: Marek Skalický <mskalick@redhat.com> - 1.60.0-2
changelog:
  - disable using libquadmath (gcc in RHEL6 does not provide)
  - Disable container library - it contains typedef redefinition
    which fails with gcc 4.4 in RHEL6


author: Marek Skalický <mskalick@redhat.com> - 1.2-2
changelog:
  - Rebase to libunwind 1.2 from Fedora 27 and convert it to SCL
  - Do not install man pages - latex2man is not RHEL and it is needed
    to regenerate manpages (libunwind is only dependency of rh-mongodb34
    collection and using it for other purposes is not supported)


author: Remi Collet <remi@fedoraproject.org> - 1.6.0-1
changelog:
  - update to 1.6.0
  - add fix for https://jira.mongodb.org/browse/CDRIVER-2042
    from https://github.com/mongodb/mongo-c-driver/pull/421


author: Remi Collet <remi@fedoraproject.org> - 1.6.1-2
changelog:
  - rebuild with new upstream tarball
  - add examples in devel documentation
  - use patch instead of sed hacks for rpm specific changes


author: Marek Skalický <mskalick@redhat.com> - 1.6.3-2
changelog:
  - Rebase to mongo-c-driver from Fedora 27 and convert it to SCL
  - disable man pages (RHEL does not contain new enough sphinx)


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.1.2-3
changelog:
  - Remove ExclusiveArch. While a MongoDB instance is little endian only, this is a client
  - Build with openssl 1.0


author: Marek Skalický <mskalick@redhat.com> - 3.4.5-0.2.git4d4d965
changelog:
  - Build also mongoreplay
  - patch vendored dependency github.com/spacemonkeygo/spacelog to use syscall.Dup3


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Honza Horak <hhorak@redhat.com> - 5.7.20-1
changelog:
  - Update to MySQL 5.7.20, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html
    Also fixes: CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276
                CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294
                CVE-2017-10314 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
    Resolves: #1505114


author: Honza Horak <hhorak@redhat.com> - 5.7.20-2
changelog:
  - Release bump for rebuilding on new arches
    Related: #1518842
  - Use gcc from devtoolset-7 for building because otherwise the build
    fails on aarch64 (RHEL-7 only)
    Related: #1518842


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.21-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
  - Add rpcgen to buildrep
  - Add support for libtirpc
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533834
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2565 CVE-2018-2573 CVE-2018-2576
              CVE-2018-2583 CVE-2018-2586 CVE-2018-2590 CVE-2018-2600 CVE-2018-2612
              CVE-2018-2622 CVE-2018-2640 CVE-2018-2645 CVE-2018-2646 CVE-2018-2647
              CVE-2018-2665 CVE-2018-2667 CVE-2018-2668


author: Honza Horak <hhorak@redhat.com> - 5.7.24-1
changelog:
  - Update to 5.7.24
    Also fixes the following CVEs:
    CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
    CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
    CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779
    Resolves: #1642523
    CVE-2018-3054 CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 CVE-2018-3061
    CVE-2018-3062 CVE-2018-3064 CVE-2018-3065 CVE-2018-3066 CVE-2018-3070
    CVE-2018-3071 CVE-2018-3077 CVE-2018-3081
    Resolves: #1643060
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162
    CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174
    CVE-2018-3282 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3133
    CVE-2018-3143 CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3185
    CVE-2018-3155
    Resolves: #1643049


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-4
changelog:
  - drop explicit Requires for openssl, gd
  - run nginx under SCL environment from systemd service
  - fix module .conf path in nginx.conf
  - pass PERL5LIB, LD_LIBRARY_PATH from env when perl is loaded (#1421927)


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-7
changelog:
  - filter auto-provides from module subpackages (#1434349)
  - drop perl vendorarch directory ownership (#1434333)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.10.2-8
changelog:
  - Resolves: CVE-2017-7529 rh-nginx110-nginx: nginx: Integer overflow
    in nginx range filter module leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9
changelog:
  - Resolves: #1648226 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1648220 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9.1
changelog:
  - Resolves: #1744814 - CVE-2019-9511 rh-nginx110-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744327 - CVE-2019-9513 rh-nginx110-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745041 - CVE-2019-9516 rh-nginx110-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.6.2-3
changelog:
  - Resolves: #1392914
  - Update to 4.6.2
  - Modified/fixed/refactored/removed patches
  - http tests were failing, had to update http-parser too


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-1
changelog:
  - Update to 6.9.1
  - use zvetlik/rh-nodejs6 as a base
  - add gyp as build dependency
  - update/merge/remove patches


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476316
  - disable lots of tests (mainly https and tls)
  - update to latest v6.x release (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-5
changelog:
  - Resolves: RHBZ#1508986
  - revert some upstream commits to fix https+openssl-1.0.1 segfaults
  - remove expanding pkgdocdir macros


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 0.1.3-4
changelog:
  - Add missing ExclusiveArch and BuildArch
  - Use macro in -runtime dependency
  - Rebuilt with updated metapackage


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: Piotr Popieluch <piotr1212@gmail.com> - 0.1.18-2
changelog:
  - Added LICENSE to %files
  - Added rm -rf node_modules to %prep
  - Capitalized summary
  - Removed Group tag


author: Tomas Hrcka <thrcka@redhat.com> - 0.0.4-4
changelog:
  - Add missing macro /usr/lib/rpm/rh-nodejs6-symlink-deps /opt/rh/rh-nodejs6/root/usr/lib/node_modules


author: Jared Smith <jsmith@fedoraproject.org> - 3.0.2-1
changelog:
  - Update to upstream 3.0.2 release
  - disable self-test until we get all the run-time dependencies into Rawhide


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0.0-4
changelog:
  - add some post-install hackery to work around potential RPM bug resulting in
    symlinks still pointing to their old locations on upgrade (RHBZ#997978)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.6.0-1
changelog:
  - update to upstream release 0.6.0
  - History.md is now not included in the npm tarball
  - tests are now not included in the npm tarball, so download separately


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.0-3
changelog:
  - rename from opener to nodejs-opener
  - add exec permission on opener (executable and lib are same file)
  - remove DOS EOLs from LICENSE.txt


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.2.2-1
changelog:
  - New upstrem release
  - change license
  - change URL
  - remove Source1 and Source10
  - add LICENSE to %doc
  - updated Summary and %description


author: Stephen Gallagher <sgallagh@redhat.com> - 5.1.2-3
changelog:
  - Fix package review issues
  - Use npm(foo) syntax for BuildRequires
  - Drop unnecessary buildroot cleanup
  - Fix capitalization of Summary:


author: Ralph Bean <rbean@redhat.com> - 1.2.0-2
changelog:
  - Include license from github.
  - Enable tests.
  - Make cli.js into a symlink.
  - Comment out nodejs_symlink_deps --build, as per review.


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.1.0-2
changelog:
  - Removed %clean and rm -rf %buildroot from %install
  - changed Summary and %description to start with capital letter


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0-2
changelog:
  - Added definition of LD_LIBRARY_PATH into the macro %__perl
  - Added macro %perl_small for SCL restrictions


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0-3
changelog:
  - Define macros %tests_req and %tests_subpackage_requires in case the
    perl-macros is not in buildroot


author: Jitka Plesnikova <jplesnik@redhat.com>, Petr Pisar <ppisar@redhat.com> - 2.3-1
changelog:
  - Initial version for SCL 2.3
  - Escape apostrophs in rh-perl-520(7) manual page
  - Fix ownership of man directories
  - Resolves: rhbz#1219522, rhbz#1225445


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.9-6
changelog:
  - Fixed file conflict with others Perl SCLs
  - Update local path in default perl.conf
  - Resolves: rhbz#1227192, rhbz#1210621


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-8
changelog:
  - Register a collection into the httpd environment (bug #1382514)
  - Pass SCL environment to subprocesses (bug #1382514)


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-10
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626273)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561101)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561101)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-381
changelog:
  - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653529)
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c (bug #1653524)
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c (bug #1653526)
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c (bug #1653521)


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-368
changelog:
  - Do not use unitialized memory in $h{\const} warnings (RT#128189)
  - Fix precedence in hv_ename_delete (RT#128086)
  - Do not treat %: as a stash (RT#128238)


author: Paul Howarth <paul@city-fan.org> - 20140910.001-1
changelog:
  - Update to 20140910.001
    - Update to the latest data (2014-09-10)
  - Use %license
  - Classify buildreqs by usage
  - Drop redundant LWP::Simple requires filter


author: Paul Howarth <paul@city-fan.org> - 20140910.002-1
changelog:
  - Update to 20140910.002
    - Look in the current directory for RangeMessage.xml if it's not in other
      locations; this can help with various Perl app packagers (also try
      ISBN_RANGE_MESSAGE env var)


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Grok dist names ending with something numeric containing underscores
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - Bump Module::Metadata prereq for $VERSION parsing (CPAN RT#101095)
    - Consistently require same version of CPAN::Meta::Requirements
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - Declare the minimum version required for the "merged_requirements"
      interface
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 2.132-1
changelog:
  - Update to 2.132
    - Precision of version requirement "0.00" is preserved when merging
      requirements


author: Paul Howarth <paul@city-fan.org> - 2.133-1
changelog:
  - Update to 2.133
    - In fixing preservation of "0.00", some Module => 0 optimizations were lost;
      this restores those optimizations


author: Paul Howarth <paul@city-fan.org> - 2.140-1
changelog:
  - Update to 2.140
    - Added method for getting structured requirements
    - Skips impossible tests on Perls earlier than 5.8.0 (before v-string magic)
    - On Perls before 5.8.1, pad 1-part and 2-part literal v-strings to avoid old
      version.pm bugs with v-strings less than 3 characters
    - Protect internal _isa_version from non-refs that pass ->isa('version')
    - Much better error messages, explaining what conflicted and how
    - Repackage with fixed tests
    - Expanded dist.ini from author bundle to individual plugins


author: Paul Howarth <paul@city-fan.org> - 1.5-1
changelog:
  - Update to 1.5
    - Work around global destruction order issue (CPAN RT#23568/68526)
  - This release by SHAY ⇒ update source URL
  - Drop %defattr, redundant since rpm 4.4
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Classify buildreqs by usage
  - Make %files list more explicit


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.035-3
changelog:
  - Remove using of iconv, because it is not needed (bug #1368046)
  - Fix default value for nossl option (bug #1366773)


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Major optimization to mkopt
  - Use %license
  - Simplify find expression using -delete


author: Paul Howarth <paul@city-fan.org> - 0.200005-1
changelog:
  - Update to 0.200005
    - Open DATA handles both :raw and :bytes to avoid content munging on Win32
    - This is not yet a perfect solution for Win32


author: Paul Howarth <paul@city-fan.org> - 0.200006-1
changelog:
  - Update to 0.200006
    - Skip tests on Win32 pre-5.14 related to line endings; perl munges the data
      before we're able to get at it


author: Paul Howarth <paul@city-fan.org> - 2:1.23-1
changelog:
  - Update to 1.23
    - Fixed several issues with the handling of non-integer values passed to
      from_epoch() (GH#11)
      - This method was simply broken for negative values, which would end up
        being incremented by a full second, so for example -0.5 became 0.5
      - The method did not accept all valid float values; specifically, it did
        not accept values in scientific notation
      - Finally, this method now rounds all non-integer values to the nearest
        millisecond, which matches the precision we can expect from Perl itself
        (53 bits) in most cases
    - Make all DateTime::Infinite objects return the system's representation of
      positive or negative infinity for any method that returns a number or
      string representation (year(), month(), ymd(), iso8601(), etc.); previously
      some of these methods could return "Nan", "-Inf--Inf--Inf", and other
      confusing outputs (CPAN RT#110341)


author: Paul Howarth <paul@city-fan.org> - 2:1.24-1
changelog:
  - Update to 1.24
    - The last release partially broke $dt->time; if you passed a value to use
      as unit separator, it was ignored (CPAN RT#112585)


author: Paul Howarth <paul@city-fan.org> - 2:1.25-1
changelog:
  - Update to 1.25
    - DateTime->from_object would die if given a DateTime::Infinite object; now
      it returns another DateTime::Infinite object (CPAN RT#112712)
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.27-1
changelog:
  - Update to 1.27
    - Added an environment variable PERL_DATETIME_DEFAULT_TZ to globally set the
      default time zone (GH#14); using this is very dangerous - be careful!
  - BR: perl-generators


author: Paul Howarth <paul@city-fan.org> - 2:1.28-1
changelog:
  - Update to 1.28
    - Fixed handling of some floating point epochs; since DateTime treated the
      epoch like a string instead of a number, certain epochs with a non-integer
      value ended up treated like integers (Perl is weird) (GH#15, fixes GH#6)


author: Paul Howarth <paul@city-fan.org> - 2:1.33-1
changelog:
  - Update to 1.33
    - When you pass a locale to $dt->set you will now get a warning suggesting
      you should use $dt->set_locale instead (CPAN RT#115420)
    - Added support for $dt->truncate( to => 'quarter' ) (GH#17)
    - Fixed the $dt->set docs to say that you cannot pass a locale (even though
      you can but you'll get a warning) and added more docs for $dt->set_locale
    - Require DateTime::Locale 1.05
    - Require DateTime::TimeZone 2.00
  - Take advantage of NO_PACKLIST option in recent EU:MM


author: Paul Howarth <paul@city-fan.org> - 0.009-1
changelog:
  - Update to 0.009
    - In META.{yml,json}, point to public git repository
    - Bugfix: permit time of day for a DST change to extend up to 24:59:59,
      which POSIX (unclearly) permits and is actually seen in the current
      rule for timezone Asia/Amman
    - Support the extended form of the recipe syntax that is used by
      version 3 of the tzfile(5) file format
    - Bugfix: correct ->offset_for_local_datetime for perpetual-DST ruleset
      that can arise with the tzfile3 system
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.10-1
changelog:
  - Update to 0.10
    - We need Module::Runtime 0.009 for module_notional_filename (#6)
  - Update patch for building with Test::More < 0.88
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Drop the dep on List::MoreUtils
      (https://github.com/doy/dist-checkconflicts/pull/8)
  - Update patch for building with Test::More < 0.88
  - Don't try to run the extra tests for EPEL builds
  - Specify version requirements for extra test modules


author: Petr Pisar <ppisar@redhat.com> - 7.10-5
changelog:
  - Own ExtUtils/MM directory by perl-ExtUtils-MM-Utils only
  - Require perl-devel by perl-ExtUtils-MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.18-4
changelog:
  - No longer needs any non-core buildreqs, and hence bootstrapping
  - Drop references to pwhich, which is no longer included
  - This release by PLICEASE → update source URL


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add get_winsize and set_winsize
    - Explicitly drop support for Win32 (CPAN RT#77813)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add support for PERL_MM_OPT
    - Fix typo in compiler detection error message (CPAN RT#75649)
    - Fix "redefinition of typedef" errors with v5.19.4 and above
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 1:0.96-1
changelog:
  - Update to 0.96
    - Require Module::Load::Conditional 0.66 to resolve CVE-2016-1238
      (avoid loading optional modules from default .)
  - Update patch for use of ExtUtils::MM::Utils
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.92-5
changelog:
  - Address intermittent test failures (CPAN RT#20105, RH BZ#1094395)
  - Add runtime dependency on Data::Dumper
  - Add build dependency on IO::Tty for the test suite
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.94-1
changelog:
  - Update to 0.94
    - Update License discrepancies (CPAN RT#100858)
    - Many typo corrections
    - Fix t/pty.t fails on Solaris 10 (CPAN RT#20105)
  - Drop upstreamed patch for CPAN RT#20105
  - Use %license


author: Petr Pisar <ppisar@redhat.com> - 1.25-4
changelog:
  - Break build-cycle: perl-IPC-System-Simple → perl-Test-Perl-Critic
    → perl-Perl-Critic → perl-PPI → perl-IO-All → perl-File-MimeInfo
    → perl-File-BaseDir → perl-IPC-System-Simple


author: Paul Howarth <paul@city-fan.org> - 2.27400-1
changelog:
  - Update to 2.27400
    - Applied and merged long term neglected patches and pull requests
    - Modified Makefile.PL to set UNINST=1 if needed on old perls
    - Decode decimals to Perl's internal NV type
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Implemented and then reverted a change to use Sub::Name (CPAN RT#98097)
  - Modernize spec
  - Hack out references to currently-unavailable Test::CleanNamespaces


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Resolve an edge-case with DEPRECATED (CPAN RT#101555)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Add FORCE_SAFE_INC option to address CVE-2016-1238
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.106-1
changelog:
  - Update to 1.106
    - Update github links
    - Typo fix
  - Update patch for building with Test::More < 0.88


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.21-1
changelog:
  - Upstream update.
  - Reflect Attribute::Params::Validate having been dropped from
    Params::Validate.
  - Add %license.


author: Paul Howarth <paul@city-fan.org> - 1:1.4417-1
changelog:
  - Update to 1.4417
    - Outputs the version of backends used
    - Updated repo metadata and boilerplate files
    - Pointed issue tracker to the Perl-Toolchain-Gang Github repo
  - Classify buildreqs by usage
  - Use %license
  - Package CONTRIBUTING.mkdn and README files
  - Expand %description
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1:1.4421-1
changelog:
  - Update to 1.4421
    - Add CPAN_META_JSON_BACKEND to allow requesting non-JSON.pm backends
    - Add CPAN_META_JSON_DECODER to allow Mojo::JSON/JSON::Tiny to be used just
      for decoding
    - Re-encode strings before decode_json since that expects bytes
    - Add test cases for wide characters in META files
    - Bump JSON::PP prerequisite to 2.27300 to work around a bug before perl
      5.8.7; includes a test to confirm correct behavior
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.010-1
changelog:
  - Update to 1.010
    - Added 'msys' as a Unix-type OS
  - BR: perl-generators where available
  - Simplify find command using -delete
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 0.103011-1
changelog:
  - Update to 0.103011
    - Do not load Sub::Install, since it isn't used!
    - Eliminate superfluous FULL STOP characters (".")
  - Update patch for building with old Test::More versions
  - Classify buildreqs by usage
  - Use %doc where possible


author: Paul Howarth <paul@city-fan.org> - 0.103012-1
changelog:
  - Update to 0.103012
    - Consider license names without parentheses when scanning text for license
    - When scanning text for license, put known substrings inside \b..\b
  - Simplify find command using -delete
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.928-1
changelog:
  - Update to 0.928
    - Cope with subroutines with spaces in their names when catching warnings
    - Don't assume that the source sub isn't blessed in tests (!)


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Do not lose argument(s) to import
      (https://github.com/rjbs/Test-Deep/issues/29)


author: Paul Howarth <paul@city-fan.org> - 0.119-1
changelog:
  - Update to 0.119
    - Overloading of & and | no longer can change All or Any objects found as
      arguments
    - An All as an argument to an All constructed is flattened out into its
      All-ed values; the same goes for Any
    - Remove use of Test::NoWarnings for user-facing tests


author: Paul Howarth <paul@city-fan.org> - 1.120-1
changelog:
  - Update to 1.120
    - Add none() test; it's like any(), but negative
    - Fix stringification of any() expectations


author: Paul Howarth <paul@city-fan.org> - 0.012-1
changelog:
  - Update to 0.012
    - Go back to auto-detecting the required Test::More, reverting the changes
      made for CPAN RT#62699
  - Drop support for all current EL releases (5 and 6) since we need Test::More
    version 0.96 or later for the test suite


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Avoid assuming that t/todo.t is always called t/todo.t
  - Classify buildreqs by usage
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.302022-1
changelog:
  - Update to 1.302022
    - Many micro-optimizations
    - Spelling fixes and tests
    - Fix leaky File.t file so that tmp doesn't fill up
    - Move some modules out of the known broken list in xt tests
    - Add Test2-based tools to downstream testing
    - Change when PID/TID are stashed (for forkprove)
    - VMS fixes for Files.t and IPC system
    - Improve thread checks to better detect broken 5.10 builds
    - Use thread checks to skip/run t/Legacy/Regression/637.t


author: Paul Howarth <paul@city-fan.org> - 1.302026-1
changelog:
  - Update to 1.302026
    - Do not fail if Test2::API::Breakage cannot load (rare 5.10.0 issue)
    - Potential fix for t/Legacy/Regression/637.t
    - Make t/Legacy/Regression/637.t AUTHOR_TESTING for now
    - Add Generic event type
    - Make sure enabling culling/shm sets pid and tid (fix #679)


author: Paul Howarth <paul@city-fan.org> - 1.302030-1
changelog:
  - Update to 1.302030
    - Use pre_filter instead of filter for TODO in Test::Builder (fix #683)
    - Fix typos in transitions doc (#681)
    - Add 'inherit_trace' param to run_subtest
    - Properly skip thread test when threads are broken


author: Paul Howarth <paul@city-fan.org> - 1.302037-1
changelog:
  - Update to 1.302037
    - Restore PerlIO layer cloning on STDERR and STDOUT
  - Bump obsoletes/provides versions for perl-Test2 to maintain upgrade path from
    packages in third-party repositories


author: Paul Howarth <paul@city-fan.org> - 1.302040-1
changelog:
  - Update to 1.302040
    - Fix broken MANIFEST.SKIP entries (#689)
    - Add Info event for better diagnostics


author: Paul Howarth <paul@city-fan.org> - 0.022-1
changelog:
  - Update to 0.022
    - Propagate all warnings to any previously-declared __WARN__ handlers
      (unlike with __DIE__, merely calling warn() is not sufficient)


author: Paul Howarth <paul@city-fan.org> - 0.023-1
changelog:
  - Update to 0.023
    - Properly handle propagating warnings to previously declared handlers that
      are not coderefs (i.e. a sub name, or the magic DEFAULT and IGNORE)


author: Paul Howarth <paul@city-fan.org> - 0.025-1
changelog:
  - Update to 0.025
    - Prereqs lowered from required to suggested:
      - CPAN::Meta::Check
      - CPAN::Meta::Requirements
    - Tests are now quieter to avoid causing confusion, by suppressing the
      printing of stderr in tests


author: Paul Howarth <paul@city-fan.org> - 0.026-1
changelog:
  - Update to 0.026
    - Fixed use of modules loaded by t/zzz-check-breaks.t
    - Fix stderr suppression on perl 5.6


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Add optional test deps as recommended prereqs
      (https://github.com/doy/try-tiny/pull/18)
  - Update patch for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix syntax of example code (PR#22)
    - 'perl' removed from prerequisite recommendations, to avoid tripping up CPAN
      clients
    - Sub::Util is used preferentially to Sub::Name in most cases (PR#27)
  - This release by ETHER → update source URL
  - Modernize spec
  - Don't run the extra tests


author: Remi Collet <rcollet@redhat.com> 1.0-1
changelog:
  - initial packaging from php55 from rhscl 1.1
  - install macro in /usr/lib/rpm/macros.d
  - each package requires runtime (for license)


author: Remi Collet <rcollet@redhat.com> - 5.6.5-4
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868
  - zip: integer overflow when processing ZIP archives CVE-2015-2331


author: Remi Collet <rcollet@redhat.com> - 5.6.5-5
changelog:
  - mod_php: filter libphp5.so out of provides #1212726
  - fpm: fix incorrect selinux contexts #1194337


author: Remi Collet <rcollet@redhat.com> - 5.6.5-6
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 5.6.5-8
changelog:
  - Phar: fix segmentation fault in Phar::convertToData on
    invalid file CVE-2015-5589
  - Phar: fix buffer overflow and stack smashing error in
    phar_fix_filepath CVE-2015-5590
  - Phar: fix files from archive can be extracted outside of
    destination directory using phar CVE-2015-6833
  - Phar: NULL pointer dereference in phar_get_fp_offset()
    CVE-2015-7803
  - Phar: uninitialized pointer in phar_make_dirstream()
    CVE-2015-7804
  - Xslt: fix NULL pointer dereference in XSLTProcessor class
    CVE-2015-6837 CVE-2015-6838
  - Core: fix use-after-free vulnerability in session
    deserializer CVE-2015-6835
  - Core:  fix multiple unserialization use-after-free issues
    CVE-2015-6834
  - Spl: fix dangling pointer in the unserialization of
    ArrayObject items CVE-2015-6832
  - Spl: fix Use After Free Vulnerability in unserialize()
    CVE-2015-6831
  - Soap: fix type confusion in SOAP serialize_function_call()
    CVE-2015-6836


author: Remi Collet <remi@fedoraproject.org> 1:1.9.5-3
changelog:
  - update Archive_Tar to 1.3.13
  - merge with SCL spec file
  - requires httpd-filesystem for /var/www/html ownership (F21+)


author: Remi Collet <rcollet@redhat.com> 1:1.10.1-1
changelog:
  - update PEAR to 1.10.1 for PHP 7 and RHSCL 2.3
  - update Archive_Tar to 1.4.2
  - update Console_Getopt to 1.4.1
  - update Structures_Graph to 1.1.1
  - update XML_Util to 1.3.0
  - add PEAR_Manpages to 1.10.0


author: Petr Kubat <pkubat@redhat.com> - 9.5.4-1
changelog:
  - Rebase to 9.5.4 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-4.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-3.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.7-1
changelog:
  - Rebase to 9.5.7 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-7.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-6.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.14-1
changelog:
  - update to 9.5.14 per release notes:
    https://www.postgresql.org/docs/9.5/static/release-9-5-10.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-11.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-12.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-13.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-14.html


author: Pavel Raiskup <praiskup@redhat.com> - 3.0-7
changelog:
  - fix hack with _pkgdocdir; _pkgdocdir was defined every second build because we
    defined the _pkgdocdir for ourselves


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.5-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.10-1
changelog:
  - update to 9.6.10 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-7.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-8.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-9.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-10.html


author: Robert Kuska <rkuska@redhat.com> - 2.0-2
changelog:
  - Properly define XDG_DATA_DIRS variable to avoid breaking applications (rhbz#1266529)
  - Change packages installed by default with collection (rhbz#1229582)
  - Escape apostrophs in metapackage manual page (rbhz#1219528)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/rh-python35/root/usr/lib64/python3.5/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-11
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Updated %py_byte_compile macro
  Resolves rhbz#1374667


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.5-1
changelog:
  - Rebuilt for SCL.
  - Updated to version 1.5.
  - python-imaging is only a soft dependency, removing it for now.


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099 
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996706


author: Charalampos Stratakis <cstratak@redhat.com> - 13.1.2-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1353206


author: Tomas Orsava <torsava@redhat.com> - 2.0-1
changelog:
  - Created the rh-python36 metapackage by importing rh-python35, applying the
    following patch and modifying the version to 36
  - Moved pythondeps-scl-35.sh and 2 macro definitions from the -build subpackage
    to the rh-python35-python-devel subpackage where it should be for dependant
    collections to build properly
  Resolves: rhbz#1422346


author: Tomas Orsava <torsava@redhat.com> - 3.12-1
changelog:
  - Updated to the current Fedora version
  - Removed Patch 0 as it is already patched in 3.12:
    http://pyyaml.org/ticket/247


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/rh-python36/root/usr/lib64/python3.6/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Tomas Orsava <torsava@redhat.com> - 3.6.3-4
changelog:
  - Security fix for CVE-2019-9636
  - Increased the stack size to avoid segfault during tests
  Resolves: rhbz#1689322


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.12-1
changelog:
  - Update to 3.6.12 (rhbz#1873080)
  - Security fixes for CVE-2019-18348 (rhbz#1765148), CVE-2019-16935 (rhbz#1798002),
    CVE-2020-8492 (rhbz#1810620), CVE-2019-20907 (rhbz#1856545),
    CVE-2020-14422 (rhbz#1857276)
  - Fix faulthandler stack size
  - Reduce the number of tests running during the profile guided optimizations build
    and enable the optimizations for all the supported architectures


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-1
changelog:
  - Updated to the latest Fedora version 3.4.0
  - Renumbered Patch 1 to 2 to be in line with Fedora
  - Added Patch 1 from Fedora that fixes CVE-2013-7440 and CVE-2013-2099
  - Added Patch 3 from upstream for tests to pass without an active mongodb;
    We can't test pymongo with a running database like in Fedora, because in
    RHEL/RHSCLs it's packaged as a separate collection
  - Removed BuildRequires: python-nose as the test suite isn't using it any more


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-2
changelog:
  - Removed the commented out filter macros at the top of the specfile.
    While they were commented out, they still took effect since the macros still
    expanded. However, they were causing error messages in the buildlog [0] and
    causing the provides/requires generator script not to finish. Thus the
    packages were missing some of the required Provides and Requires tags.
    [0] warning: Ignoring invalid regex ^%{_scl_prefix}/.*$|%{_root_sysconfdir}/rpm/macros.rh-python36-config$
       (% signs were doubled to avoid rpm-lint warnings)


author: Iryna Shcherbina <ishcherb@redhat.com> - 9.0.1-1
changelog:
  - Update to version 9.0.1 and rebuild for rh-python36
  - Bootstrapping procedure, step 1/2: build_wheel 0


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-3
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1774951


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-4
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1826520


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <rcollet@redhat.com> - 3.2.3-1
changelog:
  - rebase to 3.2.3 #1368102
  - fix redis-shutdown script
  - init script doesn't support load/force-reload option #1369495


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - provide redis-check-rdb as a symlink to redis-server
    add patch from https://github.com/antirez/redis/pull/3494
  - data and configuration should not be publicly readable #1374717
  - remove /var/run/redis with systemd
  - add man pages from https://github.com/antirez/redis/pull/3491 #1369821


author: Remi Collet <rcollet@redhat.com> - 3.2.13
changelog:
  - rebase to 3.2.13
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-3
changelog:
  - Fix Timing attack vulnerability in Action Controller - rhbz#1301933
    - Resolves: CVE-2015-7576
  - Fix Possible Object Leak and Denial of Service attack - rhbz#1301946
    - Resolves: CVE-2016-0751
  - Fix Possible Information Leak Vulnerability - rhbz#1301963
    - Resolves: CVE-2016-0752
  - Fix Object leak vulnerability for wildcard controller routes - rhbz#1301981
    - Resolves: CVE-2015-7581


author: Jun Aruga <jaruga@redhat.com> - 1:4.2.6-5
changelog:
  - Fix a render file directory traversal in Action View
    Resolves: CVE-2019-5418
  - Fix a denial of service vulnerability in Action View
    Resolves: CVE-2019-5419


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Nested attributes rejection proc bypass - rhbz#1301957
    - Resolves: CVE-2015-7577


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Fix Timing attack vulnerability in basic authentication - rhbz#1301933
    - Resolves: CVE-2015-7576


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.4.0-2
changelog:
  - Removed the duplicated "git checkout" in comment.
  - BR: rubygem(therubyracer) for tests, don't use deprecated js.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.0.4-1
changelog:
  - Update to Journey 1.0.4, as this version is needed by ActionPack 3.2.6.
  - Remove unneded Requires: ruby.


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.0-1
changelog:
  - Update to loofah 2.0.0 (RHBZ #1096760)
  - Adjustments for https://fedoraproject.org/wiki/Changes/Ruby_2.1


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.2-1
changelog:
  - Update to loofah 2.0.2 (rhbz#1218819)
  - Drop patch to skip failing test (it works now, with Nokogiri 1.6.6.2)
  - Drop Fedora 19 support
  - Use %license macro


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.3-1
changelog:
  - Update to loofah 2.0.3 (rhbz#1256165)
  - Use %autosetup macro
  - Drop macros for Fedora 20 (it is now EOL)
  - Drop unneeded %license definition


author: Pavel Valena <pvalena@redhat.com> - 2.0.3-3
changelog:
  - Include Gemfile and Rakefile in -doc subpackage
  - Do not use %license macro
  - Explicitly require runtime subpackage


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Run unit and acceptance tests in a single process
  - Patch test suite to work outside rake/bundler


author: Vít Ondruch <vondruch@redhat.com> - 0.3.1-1
changelog:
  - Updated to the latest upstream version.
  - Tests enabled.
  - Documentation moved into separate package.
  - Remove unnecessary Hoe runtime dependency.


author: Josef Stribny <jstribny@redhat.com> - 1:1.4.5-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Added patch0 to fix tests for Ruby 2.0
  - Update to Rack 1.4.5


author: Pavel Valena <pvalena@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - License file is missing https://github.com/rails/rails-html-sanitizer/pull/47
  - Skip failing tests due to possible incompatibility with libxml2


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.3.1-1
changelog:
  - Update from Marek Goldmann <mgoldman@redhat.com>
    - Updated to 1.3.1
    - Patch to make it work with Rake >= 0.9.0.beta.0


author: Pavel Valena <pvalena@redhat.com> - 3.4.2-6
changelog:
  - Add rubygem-builder to BuildRequires
  - Add rubygem-gherkin to BuildRequires
  - Add rubygem-multi_test to BuildRequires
  - Add rubygem-ffi to BuildRequires


author: Josef Stribny <jstribny@redhat.com> - 3.2.6-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to sass 3.2.6.
  - Own extra and rails directories (rhbz#911648).


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.1.6-2
changelog:
  - Update to shoulda-context 1.1.6
  - Clean up comments
  - Remove unnecessary BR: on ruby
  - Exclude developer-only files from binary packages


author: Jun Aruga <jaruga@redhat.com> - 1:5.0.1-1
changelog:
  - Update to Active Support 5.0.1.
  - Fix warnings: Fixnum and Bignum are deprecated in Ruby trunk
  - Fix Ruby 2.4.0 compatibility.


author: Jun Aruga <jaruga@redhat.com> - 9.0.6-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jun Aruga <jaruga@redhat.com> - 3.6.0-2
changelog:
  - Add openssl-devel dependency to enable HTTPS support.
  - Add regenerated parser logic.
  - Improve Ruby load path to run test suite.
  - Improve files section.


author: Jun Aruga <jaruga@redhat.com> - 3.7.1-1
changelog:
  - Update to Sprockets 3.7.1.
  - Update scl_prefix_nodejs declaration to build with no-SCL environment.


author: Pavel Valena <pvalena@redhat.com> - 0.3.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
  - Correct attributes for websocket_mask.so


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Josef Stribny <jstribny@redhat.com> - 1.7.6-2
changelog:
  - Keep ssl_certs/certificate_manager.rb file (used in tests)
  - Correctly add load paths for gems during tests


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2
changelog:
  - Update to current packaging guidelines
  - Remove legacy build conditionals
  - Remove file requires
  - Remove usage of shutil (not available on RHEL)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2.3
changelog:
  - Update requires
  - Install ant.d config file to correct directory in rh-java-common
  - Use correct JAVADIR in bindir scripts


