# changelog

author: Nick Clifton <nickc@redhat.com> - 9.23-1
changelog:
  - INITIAL CREATION OF DTS-10 ANNOBIN. (#1852725)
  - Annocheck: Do not skip tests of the short-enums notes.  (#1743635)
  - Add (optional) llvm plugin.
    9.21-3
  - Fix the computations of ANNOBIN_GCC_PLUGIN_DIR and ANNOBIN_CLANG_PLUGIN_DIR.
    9.21-1
  - Fix stack clash protection problem. (#1803173)
    9.21-1
  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
    9.20-1
  - Annocheck: Detect Fortran compiled programs.  (#1824393)
    9.19-1
  - Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
    9.18-1
  - Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
    9.16-1
  - Annobin: Fix access to the -flto and -fsanitize flags.
    9.14-1
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
    9.13-1
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
    9.12-1
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
    9.11-1
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.
    9.10-1
  - Fix clang plugin to use hidden symbols.
    9.09-1
  - Add ability to build clang plugin (disabled by default).
    9.08-1
  - Annocheck: Fix error printing out the version number.
    9.07-1
  - Annobin: Add checks of the exact location of the examined switches.
    9.06-1
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
    9.05-1
  - Add configure option to suppress building annocheck.
    9.04-1
  - Fix debuginfod test.
    9.03-2
  - Correct the build requirement for building with debuginfod support.
    9.03-1
  - Add debuginfod support.
    9.01-1
  - Add clang plugin (experimental).
    8.92-1
  - Have annocheck ignore notes with an end address of 0.
    8.91-1
  - Improve checking of gcc versions.
    8.90-1
  - Do not skip positive results.
    8.88-1
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
    8.87-1
  - Replace address checks with dladdr1.
    8.86-1
  - Use libabigail like checking to ensure variable address consistency.
    8.85-1
  - Skip generation of global notes for hot/cold sections.
    8.84-1
  - Generate FAIL results if -Wall or -Wformat-security are missing.
    8.83-1
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
    8.81-1
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 2.32-15
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler.  (#1779698)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Stan Cox <scox@redhat.com> - 9.3.2-3
changelog:
  - rhbz1503116 possible soname clashes between base rhel- and devtoolset- dyninst
  - rhbz1538757 segfault with a glibc built with binutils-2.27: handle R_*_IRELATIVE


author: Stan Cox <scox@redhat.com> - 9.3.2-6
changelog:
  - rhbz1498558 Needs dyninst-devtoolset installed
  - rhbz1470149 Use separate debuginfo for dyninst-testsuite
  - rhbz1647471 so name clashes


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Remove ppc, ppc64, ppc64le, aarch64 for rhel-7
  - rhbz1763156 devtoolset-9-dyninst-10.1.0-3.el7.aarch64 broken 
  - rhbz1763157 devtoolset-9-dyninst-10.1.0-3.el7.ppc64 (big endian) broken


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Marek Polacek <polacek@redhat.com> 10.2.1-1.2
changelog:
  - avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
  - apply gcc10-libgfortran-compat-2.patch


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Qing Zhao <qing.zhao@oracle.com> 10.2.1-11.1.0.1
changelog:
  - Fix Orabug 31197798 (Profile data size way too big)
    same bug as PR gcov-profile/95348:
    gcc11-pr95348.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Keith Seitz <keiths@redhat.com> - 9.2-3.el7
changelog:
  - Backport testcase for tui/25126.
  - Use built-in readline for RHEL7. System readline is too old.
  - Remove gdb-testsuite-readline63-sigint-revert.patch.
  - Add patch to link against tinfo on rhel6.
  - Add patch to workaround make 3.81 bug.
  - Update gdb.spec for rhel6.


author: Keith Seitz <keiths@redhat.com> - 9.2-4.{el6,el7}
changelog:
  - Add debuginfod.m4 patch to use pkg-config.
  - Add BuildRequire for libcurl-devel for debuginfod on RHEL7.
  - Disable debuginfod on RHEL6.
  - Fix broken gdb-6.6-buildid-locate-rpm-scl.patch and regenerate
    patches.
  - Update debuginfod patch with test suite fixes from upstream.


author: Keith Seitz <keiths@redhat.com> - 9.2-5.el7
changelog:
  - Backport "Fix unused function error" (Luis Machcado)
  - Disable 
  python_binary="on"
  buildroot_path="RHEL7,"
  bytecode_compilation_path=".${buildroot_path/#$RPM_BUILD_ROOT}"
  failure=0
  pushd $RPM_BUILD_ROOT
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile || failure=1
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile || failure=1
  popd
  test $failure -eq 0


author: Keith Seitz <keiths@redhat.com> - 9.2-10.el7
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903377)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905704)
  - Backport "Exclude debuginfo files from 'outside of ELF segments'
    warning" (Keith Seitz, RH BZ 1915440)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Will Cohen <wcohen@redhat.com> - 1.1.0-4
changelog:
  - Update events non-x86 architectures (aarch64, power, zseries)
  - Add support for newer Intel processors.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-1
changelog:
  - Rebase to v5.1; drop upstream patches on top of 4.24.
  - Add upstream commits 7ada13f3 ("evdev: avoid bit vector decoding
    on non-successful and 0 return codes"), 96194ed7 ("evdev: fix array size
    calculation in decode_bitset_"), and cdd8206a ("tests: test evdev bitset
    decoding more thoroughly") as separate patches.
  - Resolves: #1666405.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790057):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1795273):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1847679 as upstream release, plus:
    - rhbz1857749 with rhel8.3 baseos patch
    - rhbz1852021 with rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-4
changelog:
  match gcc-toolset-10
  - rhbz1878303 - align with base rhel systemtap-4.4-8.el8
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.16.1-3
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72:  (#1954564)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.77-1
changelog:
  - annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)
  - annocheck: Improve detection of shared libraries.  (#1958954)


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.


author: Nick Clifton <nickc@redhat.com> - 9.82-1
changelog:
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.29-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)


author: Nick Clifton <nickc@redhat.com> - 10.35-1
changelog:
  - Tests: Fix fortify and debuginfod tests to use newly built annobin plugin.  (#2031133)
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in golang symbols.
  - Annocheck: Initial deployment of libannocheck.


author: Marek Polacek <polacek@redhat.com> 11.1.1-2
changelog:
  - update from Fedora gcc 11.1.1-2
  - fix up mausezahn miscompilation (PR tree-optimization/100566)
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)


author: Marek Polacek <polacek@redhat.com> 11.1.1-6
changelog:
  - update from Fedora gcc 11.1.1-6 (#1957522)
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
     fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
     libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
     middle-end/100250, middle-end/100307, middle-end/100574,
     middle-end/100684, middle-end/100732, middle-end/100876,
     middle-end/101062, middle-end/101167, target/99842, target/99939,
     target/100310, target/100777, target/100856, target/100871,
     target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986841)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996860)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047298)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047298)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996860)
    - PRs target/100208, target/100316, target/102761
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - apply DTS-specific testsuite patches (#1986854)


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el7
changelog:
  - Drop gdb-linux_perf-bundle.patch and v1.5-libipt-static.patch.
  - Include gdb-dts-use-decltype.patch.
  - Rebase to 10.2 (RH BZ 1958327)


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Marek Polacek <polacek@redhat.com> - 12.0-1
changelog:
  - use rpm/macros.devtoolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Rebase:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.
  - Annocheck: Even more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Annocheck: Skip PIE anf PIC tests for GO binaries.
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2030667)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Replace CLVC_BOOLEAN with CLVC_BIT_SET/CLVC_BIT_CLEAR.
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Remove bogus Provides from annobin-doc subpackage.  (#2099481)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.


author: Nick Clifton <nickc@redhat.com> - 10.98-1
changelog:
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Rebase to 11.06.  (#2165024)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.


author: Stephen Brennan <stephen.s.brennan@oracle.com> - 2.36.1-6.0.1
changelog:
  - Build libctf.a and libctf-nobfd.a with -fPIC, as its dependencies already are. [Orabug: 36179758]
  - Replace libctf.so and libctf-nobfd.so with GNU linker scripts. [Orabug: 36179758]


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110580)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Alexandra Hájková - 11.1-8
changelog:
  - Backport upstream patch "[PR gdb/27026] CTRL-C is ignored
    when debug info is downloaded" (RHBZ 2024875, Aaron Merey).


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).


author: Alexander Kurtakov <akurtako@redhat.com> 3.0-9
changelog:
  - Drop eclipse-xsd as it's no longer part of emf.
  - Drop eclipse-rpmstubby as it's merged into rpm-editor.


author: Sami Wagiaalla <swagiaal@redhat.com> 1.0-29
changelog:
  - Build for DTS 3
  - Change tomcat6 BRs to tomcat7
  - Correct Changelog dates.
  - Copy changes from Fedora.


author: Patsy Franklin <pfrankli@redhat.com> - 2.24-14
changelog:
  - Rebase to official binutils 2.24 release and recent patches.
    - Fix detection of little endian PPC64 binaries.  (#1095885)
    - Fix detection of uncompressed .debug_str sections.  (#1082370)
    - Fix compiling using gcc 4.9  (#1087374)
    - Use 2.24 in Source string.  Delete unused patches.
    - Fix decoding of abbrevs using a DW_FORM_ref_addr attribute.  (#1056797)
    - Import fixes on 2.24 branch that affect AArch64 IFUNC and PLT handling.
    - Fix building opcodes library with -Werror=format-security.  (#1037026)
    - Delete: binutils-2.23.52.0.1-64-bit-thin-archives.patch
    - Delete: binutils-rh980601.patch
    - Remove: binutils-2.23.52.0.1-revert-pr15149.patch from spec file.


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Jeff Johnston <jjohnstn@redhat.com> - 1:8.4.0-0.9.git20140506
changelog:
  - Put cdtdebug.sh into /usr/bin/cdtdebug and fix up references
  - Also modify the README file accordingly


author: Jeff Johnston <jjohnstn@redhat.com> - 1:8.4.0-0.10.git20140506
changelog:
  - Add desktop file so debugger can be run from desktop
  - Change workspace and configuration directory locations so that this version of
    Standalone Debugger can co-exist with any version user downloads from eclipse.org
  - Fix logic that finds filesystem plugin in cdtdebug script
  - Also add check for cdtdebug script being newer than its configuration directory
    in which case, clean or create the directory from scratch
  - Resolves: #1110934 #1108636


author: Jeff Johnston <jjohnstn@redhat.com> - 1:8.4.0-1
changelog:
  - Update to CDT 8.4.0
  - Update to Linux Tools 3.0
  - Add Standalone Debugger fixes
  - Resolves: #1116937


author: Mat Booth <fedora@matbooth.co.uk> - 3.8.0-1
changelog:
  - Update to latest upstream.
  - Now necessary to explicitly build more fine-grained features.
  - Drop unneeded dep on jakarta-commons-httpclient.
  - Fixed mixed use of tabs and spaces.
  - Switch core package to R: java-headless, rhbz #1068037


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.2-1
changelog:
  - Update to latest upstream, Kepler SR2
  - Drop requires on java, rhbz #1068039
  - Remove unused patch
  - Update project URL


author: Mat Booth <mat.booth@redhat.com> - 2.10.0-1
changelog:
  - Update to latest upstream release
  - Fix obsoletes on emf-core package, rhbz #1095431
  - Move edit plugin from core to main package


author: Mat Booth <mat.booth@redhat.com> - 3.9.100-1.gitb63ec56
changelog:
  - Update to latest upstream release
  - Add a script to make smaller source tarballs
  - Add BR on eclipse-license


author: Petr Machata <pmachata@redhat.com> - 0.155-2
changelog:
  - The bzip2-devel, zlib-devel and xz-devel dependencies should be
    unconditional.  These are all shipped in all currently supported
    OS's.


author: Petr Machata <pmachata@redhat.com> - 0.155-3
changelog:
  - Make sure the highest address for the CU is marked as end_sequence.
    (elfutils-0.155-dwarf_line.patch)


author: Mark Wielaard <mjw@redhat.com> - 0.155-7
changelog:
  - Don't blow up stack in dwarf_getsrclines with lots of lines.
    (elfutils-0.155-dwarf_getsrclines.patch)


author: Sami Wagiaalla <swagiaal@redhat.com> 0.12.0-8
changelog:
  - Prepare for DTS 3 build
  - Copy mvn_rpmbuild fix from rawhide.
  - Use maven scl for maven packages.
  - enable maven scl for maven commands.


author: Sami Wagiaalla <swagiaal@redhat.com> 0.12.0-8
changelog:
  - Build for DTS 3 build
  - Install javadoc manually
  - Use java-1.7.0-openjdk-devel for java-devel req.


author: Java SIG <java-devel@lists.fedoraproject.org> - 0.10.0-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Jakub Jelinek <jakub@redhat.com> 4.9.0-6
changelog:
  - update from 4.9 branch
  - backport -fsanitize=float-cast-overflow from the trunk
  - make sure libcilkrts can use system libgcc_s.so.1 (#1101242)
  - fix compat testing


author: Jakub Jelinek <jakub@redhat.com> 4.9.1-5
changelog:
  - update from 4.9 branch
  - fix libgfortran overflows on allocation (#1125219, CVE-2014-5044)
  - backport -fsanitize=alignment support from the trunk


author: Jakub Jelinek <jakub@redhat.com> 4.9.2-5
changelog:
  - update from 4.9 branch (#1149294, #1025729)
  - don't include libatomic and libitm packages on RHEL 7 (#1160176)
  - avoid file dependency in devtoolset-*-libstdc++-devel package (#1167957)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.7.91.20140721-12.fc21
changelog:
  - Rebase to FSF GDB 7.7.91.20140721 (pre-7.8 snapshot).
  - Rebase the Intel VLA patchset.
  - New fix of the optimized-out entry data values crash (BZ 1111910).
  - [testsuite] Fix paginate-*.exp race for "read1".


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-14.fc21
changelog:
  - Rebase to FSF GDB 7.7.91.20140724 (pre-7.8 snapshot).
  - Import TUI regression fix (Pedro Alves, BZ 1123003).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-20.fc21
changelog:
  - Fix babeltrace errors (Yao Qi).
  - Fix crash on Python frame filters with unreadable arg (BZ 1126177).


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.2.1-2
changelog:
  - Install NOTICE.txt file
  - Fix javadir directory ownership
  - Fix directory permissions
  - Preserve timestamps
  - Replace add_to_maven_depmap with add_maven_depmap


author: Sami Wagiaalla <swagiaal@redhat.com> 4.3.3-1
changelog:
  - Build for DTS 3.
  - Copy latest specfile and sources from RAWHIDE.
  - Manually install javadoc.
  - enable maven30 scl form mvn_ macros.


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-1
changelog:
  - Update to 2.0.17.
  - Add OSGI manifest info to the runtime jar.
  - Bundle generator docs with the generator in the main package.


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Alexander Kurtakov <akurtako@redhat.com> 2.0.17-6
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about
    subtracting one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-4
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)
  - Fix a couple nits in ltrace.1 (ltrace-0.7.91-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Michael Simacek <msimacek@redhat.com> - 0:4.7.0-7
changelog:
  - Generate dependencies for POMs
  - Revert to using POM files for build and installation (ivy files don't specify
    interproject dependencies)
  - Split into subpackages
  - Clean up BR's
  - Remove unused patches
  - Enable tests


author: Roman Kennke <rkennke@redhat.com> 1.9.0-6
changelog:
  - Place JavaDoc in directly under /opt/rh/devtoolset-3/root/usr/share/javadoc/devtoolset-3-mockito instead
    of /opt/rh/devtoolset-3/root/usr/share/javadoc/devtoolset-3-mockito/javadoc


author: Severin Gehwolf <sgehwolf@redhat.com> 1.9.0-10
changelog:
  - More Import-Package fixes. Note that fix-cglib-refs.patch is
    not suitable for upstream:
    http://code.google.com/p/mockito/issues/detail?id=373


author: Jiri Vanek <jvanek@redhat.com> 1.2-9
changelog:
  - Added patch2 - JRockitInstantntiatorCharacters.patch to fix unmappable characters
  - Added build requires  apache-resource-bundles and  maven-remote-resources-plugin


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-3
changelog:
  - Include fix for RHBZ1095137: semantic error ... syscall.sendfile
  - Include fix for upstream http://sourceware.org/PR16894


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-4
changelog:
  - added BZ1099133.patch: at_var_cu test
  - added BZ1099472.patch: cast-scope.exp test
  - added BZ1099555.patch: gtod.exp test 
  - added BZ1099757.patch: vars.exp test
  - added BZ1099791.patch: vma_vdso test
  - added BZ1099825.patch: probe_by_pid test
  - added BZ1100813.patch: buildok tests
  - added BZ1109084.patch: initscript name sensitivity


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-8.1
changelog:
  - Rebase to 3.9.0-8.
  - Don't cleanup fake 32-bit libgcc created in %build. make regtest
    might depend on it to build -m32 binaries.
  - Use nonexp-regtest in check so gdbserver_tests are not run.
    They might hang the build.


author: Alexander Kurtakov <akurtako@redhat.com> 1:3.1.3-5
changelog:
  - Remove javax.xml.bind from osgi imports - it's part of the JVM now.
  - Drop the ws-jaxme dependency for the same reason.


author: Mat Booth <mat.booth@redhat.com> - 4.1-1
changelog:
  - Update IDE requires to include new Eclipse components
  - Fix some directory ownership issues
  - rhbz#1301003


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-6
changelog:
  - Drop BR on zip, use jar instead
  - Add more verbose description
  - Update to current packaging guidelines


author: Jeff Law <law@redhat.com> 2.25-7
changelog:
  - Resync with Fedora (binutils-2.25)
    Reapply DTS specific patches
    Backport testsuite patch to fix gold testsuite failure


author: Nick Clifton <nickc@redhat.com> 2.25-9
changelog:
  - Import patch from FSF to preserve the sh_link and sh_info fields in stripped ELF sections.
    (#1246390)


author: Patsy Franklin <pfrankli@redhat.com> 2.25.1-10
changelog:
  - Fix a case where the string was being used after the memory
    containing the string had been freed.


author: Mat Booth <mat.booth@redhat.com> - 1.52-5.4
changelog:
  - Move some tests that were erroneously in the main jar,
    avoids a runtime dep on junit in OSGi metadata


author: Roland Grunberg <rgrunber@redhat.com> - 2.7.26-3
changelog:
  - Depend upon hk2-locator as it's needed by jersey-client at runtime.
  - Require jaxb-api to temporarily satisfy an invalid requirement.


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.0-3.9
changelog:
  - Fix further ant version tests rhbz#1243711
  - Tighten up deps on junit/hamcrest
  - Build javadocs with java 8


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-4
changelog:
  - Backport patch for ebz#488226 for incorrect content assist colors,
    fixes rhbz#1253651 and rhbz#1196736
  - Fix broken link to mockito in tests


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-5.2
changelog:
  - Fix failure to run tests and backport patch for ebz#489953 in order to fix
    some unit tests, fixes rhbz#1316061 and rhbz#1262804


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.2-5.4
changelog:
  - Update eclipse-build snapshot for test-support enhancements,
    fixes rhbz#1315730 and rhbz#1263101


author: Jeff Johnston <jjohnstn@redhat.com> 1:8.7.0-1
changelog:
  - Initial CDT 8.7.0 offering (Mars SR0 release)
  - Use macro to control docker and remote support to allow
    boot-strapping CDT for use by eclipse-remote and
    eclipse-linuxtools-docker packages
  - Disable autotools and remote plug-ins/features if macro is 0
  - Make initial build a non-full-build with macro set to 0


author: Jeff Johnston <jjohnstn@redhat.com> 1:8.7.0-2
changelog:
  - Break up bootstrap into two phases
  - Enable remote phase so eclipse-linuxtools can build
  - Remove neko and xerces stuff which isn't needed here any more


author: Jeff Johnston <jjohnstn@redhat.com> - 1:8.7.0-6
changelog:
  - Change stand-alone debugger config.ini to use javax.annotation-api
    and go back to using org.eclipse.lucene.analysis
  - Resolves: #rhbz1247471


author: Mat Booth <mat.booth@redhat.com> - 1:8.8.1-8
changelog:
  - Use global instead of define
  - Move more bundles into SDK that should be there
  - Remove forbidden SCL macros
  - Minor other changes to make it easier to auto-SCLise


author: Roland Grunberg <rgrunber@redhat.com> - 4.1.0-3
changelog:
  - Resolve issues with docker script, and image build validation.
  - Resolves: rhbz#1259371, rhbz#1276303


author: Mat Booth <mat.booth@redhat.com> - 4.2.2-1.2
changelog:
  - Disable intermittent swtbot test in perf tools, rhbz#1315712
  - Rebuild against new bouncycastle packages, to fix broken symlinks
    in tests subpackage, rhbz#1311007


author: Alexander Kurtakov <akurtako@redhat.com> 5.4.0-1
changelog:
  - Update to upstream 5.4.0 release.
  - Add sh subpackage obsoleting/providing eclipse-shelled (now part of DLTK).


author: Mat Booth <mat.booth@redhat.com> - 3.12.2-2
changelog:
  - Avoid embedding versions of external deps in features. This avoids the need to
    rebuild when a dependency changes version.


author: Mat Booth <mat.booth@redhat.com> - 2.10.1-2
changelog:
  - Make core package archful so it can be installed into libdir
    where eclipse-platform expects it to be
  - Move eclipse-emf -> eclipse-emf-runtime, this is because we can have
    noarch sub-packages of an archful package, but cannot have archful
    sub-packages of a noarch package
  - Fix some minor rpmlint errors


author: Mat Booth <mat.booth@redhat.com> - 3.18.0-2
changelog:
  - Add missing BR/Rs needed for tests to run
  - Include maven descriptors to allow tests to be discovered
  - Fixes rhbz#1271125 - no results from mylyn-tests


author: Mat Booth <mat.booth@redhat.com> - 3.18.0-2.1
changelog:
  - Import latest from Fedora
  - Drop the subclipse package
  - Manually remove mockito from sdk, and cglib from doc-epub


author: Mat Booth <mat.booth@redhat.com> - 9.0.0-1.3
changelog:
  - Disable optimisation that generates no-strict-overflow warning instead of
    simply disabling the warning


author: Mat Booth <mat.booth@redhat.com> - 1:4.0.0-1
changelog:
  - Update to latest upstream release
  - No longer necessary to symlink optparse
  - Now archful package due to having a native component


author: Mat Booth <mat.booth@redhat.com> - 1:4.1.0-2.4
changelog:
  - Add all necessary symlinks for jython
  - Don't bother users with upstream project fund-raising screen
  - rhbz#1251408


author: Mat Booth <mat.booth@redhat.com> - 3.6.0-2
changelog:
  - Build/install with mvn_build/mvn_install
  - Drop unneeded BR/Rs and patches
  - General spec file clean up


author: Jeff Johnston <jjohnstn@redhat.com> - 4.0.0-1
changelog:
  - Import from Fedora rawhide and SCL-ize.
  - Set a bootstrap build to get stuff needed to build eclipse-remote
    which then can be used to build full eclipse-tm-terminal.


author: Jeff Johnston <jjohnstn@redhat.com> - 4.0.0-2
changelog:
  - Put back rse stuff that was erroneously removed.
  - Turn off bootstrap and build fully.
  - Fix BRs to add eclipse-remote when not bootstrapping.


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Update to elfutils 0.166 (#1322412)
    Drop upstreamed patches:
    - elfutils-0.165-elf-libelf.patch
    - elfutils-0.165-nobitsalign-strip.patch


author: Marek Polacek <polacek@redhat.com> 5.2.1-1.1
changelog:
  - for DTS lib{l,t}san-devel require lib{l,t}san >= 5.1.1 (#1247146)
  - rename libgccjit to devtoolset-4-libgccjit; install libgccjit.so.* into
    /opt/rh/devtoolset-4/root/lib64/


author: Jakub Jelinek <jakub@redhat.com> 5.2.1-1.2
changelog:
  - split documentation out of devtoolset-4-libgccjit-devel package into
    devtoolset-4-libgccjit-docs (#1245102)
  - add 32-bit linker script and 32-bit gcc driver wrapper so that
    32-bit devtoolset-4-libgccjit{,-devel} can be used for linking
    and at runtime on x86_64 (#1245102)


author: Jakub Jelinek <jakub@redhat.com> 5.3.1-6
changelog:
  - update from Fedora 5.3.1-5 (#1305952)
  - include non-stripped copies of *.a libraries in the debuginfo subpackage


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-13.fc23
changelog:
  - Rebase to FSF GDB 7.9.90.20150822 (7.10 branch snapshot).
  - Remove --with testsuite BuildRequires: prelink (prelink is orphaned in F-23+).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-18.el7
changelog:
  - [rhel7] Provide libstdc++-v3-python with C++11 even on RHEL-7 (RH BZ 1239290).
  - Do not provide libstdc++-v3-python lib64 files on 32-bit archs.
  - [rhel6,rhel7] Delete pahole.py on Python2 systems.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.11-60.fc24
changelog:
  - New Fedora GDB testfile: rhbz1261564-aarch64-watchpoint.exp
  - Backport gdb-7.11 stable branch PR gdb/19676 fix (Pedro Alves).


author: Roland Grunberg <rgrunber@redhat.com> - 18.0-4.2
changelog:
  - Change %license to %doc (for RHEL 6 builds).
  - Make additional changes to satisfy build on RHEL 6.


author: Mat Booth <mat.booth@redhat.com> - 1.3.176-1
changelog:
  - Update to latest upstream stable release
  - Fix lucene BRs
  - Patch to remove implementation of non-existant inferface
  - Patch to fix tests broken by new servlet API


author: Mat Booth <mat.booth@redhat.com> - 1:54.1.1-1
changelog:
  - Update to latest upstream release
  - Add patch for building against java 8 taglet API
    - Fixes: rhbz#1087450, rhbz#1106794
  - Add patch for generating better OSGi metadata in core lib
  - Install core lib with mvn_install
  - Package localespi lib
  - Run test suite


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Mat Booth <mat.booth@redhat.com> - 1.2.9-8
changelog:
  - Fix unstripped binaries and empty debuginfo package
  - Ensure presence of ant-junit at buildtime
  - Fixed mixed use of space and tabs


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.10-9
changelog:
  - Package jline 2.x as jline. Resolves RHBZ#1022915.
  - Part of a large effort to make jline1 a compat package rather than jline2.
    See RHBZ#1022897.
  - Switch to xmvn.


author: Mat Booth <mat.booth@redhat.com> - 2.10-15
changelog:
  - Fix FTBFS due to missing BR on site-plugin
  - Fix directory ownership
  - Fix bogus date in changelog


author: Mat Booth <mat.booth@redhat.com> - 2.7-0.4.rc2
changelog:
  - Update to release candidate 2
  - Drop jline and libreadline in favour of jline 2
  - Resolves: rhbz#1182482 - don't ship windows executables


author: Mat Booth <mat.booth@redhat.com> - 2.0.17-17.2
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about subtracting
    one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-10
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Omair Majid <omajid@redhat.com> - 1.9.0-17
changelog:
  - Use .mfiles to pick up xmvn metadata
  - Don't use obsolete _mavenpomdir and _mavendepmapfragdir macros
  - Fix FTBFS


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.28-1
changelog:
  - Update to upstream 4.0.28 release.
  - Fixes CVE-2015-2156 (HttpOnly cookie bypass).
  - Resolves RHBZ#1111502


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-9
changelog:
  - dts3.1 merge from rhel-7.1
  - remove bodies of with_java, with_virtguest, with_virthost conditionals


author: Roland Grunberg <rgrunber@redhat.com> - 0.23.0-5.1
changelog:
  - SCL-ize.
  - Make bootstrap build work with maven-plugin-plugin < 3.2
  - Port to work with Maven 3.0.5
  - Port to work with Java 7
  - Port to work with XMvn 2.1.0


author: Roland Grunberg <rgrunber@redhat.com> - 0.23.0-5.1
changelog:
  - Additional fixes for SCL-iziation.
  - Port to maven-surefire 2.15
  - Port to plexus-archiver 2.4
  - Disable usesNativeCode due to issue with objectweb-asm.
  - Disable o.e.tycho.p2.{maven.repository,tools}.tests due to mockito.


author: Roland Grunberg <rgrunber@redhat.com> - 0.23.0-5.2
changelog:
  - Support extraction of symlinks with plexus-archiver < 2.4.4-4.
  - Re-enable o.e.tycho.p2.{maven.repository,tools}.tests.
  - Add BuildRequires on zip.


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-13
changelog:
  - 3.10.1 Refresh.
    - Add valgrind-3.10.1-di_notify_mmap.patch
    - Add valgrind-3.10.1-memmove-ld_so-ppc64.patch
    - Add valgrind-3.10.1-kernel-4.0.patch.
    - Add valgrind-3.10.1-cfi-redzone.patch.
    - Add valgrind-3.10.1-memfd_create.patch.
    - Add valgrind-3.10.1-syncfs.patch.
    - Add valgrind-3.10.1-arm-process_vm_readv_writev.patch.
    - Add valgrind-3.10.1-fno-ipa-icf.patch.
    - Add valgrind-3.10.1-demangle-q.patch
    - Add valgrind-3.10-1-ppc64-sigpending.patch
    - Filter out -fstack-protector-strong and disable _hardened_build.
    - Add valgrind-3.10.1-send-recv-mmsg.patch
    - Add mount and umount2 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-glibc-version-check.patch
    - Add accept4 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-ppc64-accept4.patch.
    - Add valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10-s390-spechelper.patch.
    - Add valgrind-3.10.1-mempcpy.patch.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-9
changelog:
  - Fix valgrind-3.11.0-pthread_barrier.patch to apply with older patch.
  - Fix multilib issue in config.h with HAVE_AS_AMD64_FXSAVE64.


author: Jacob Wang <jacob.wang@oracle.com> - 6.0-6.0.1
changelog:
  - Rename soft link Dockerfile.rhel7 as Dockerfile.ol7 in 
    devtoolset-6-toolchain-docker-d0e8f8a.tar.bz2 
  - add oracle-dockerfiles.patch [orabug 25079650]
  - - change the install directories to ol7


author: Livy Ge <livy.ge@oracle.com> - 6.1-1.0.1
changelog:
  - Rename soft link Dockerfile.rhel7 as Dockerfile.ol7 in devtoolset-6-toolchain-docker-d0e8f8a.tar.bz2 
  - add oracle-dockerfiles.patch [orabug 25079650]
  - change the install directories to ol7


author: Nick Clifton <nickc@redhat.com> 2.27-1
changelog:
  - Rebase on FSF binutils 2.27 release. (#1356661)
  - Retire: binutils-2.20.51.0.10-copy-osabi.patch
  - Retire: binutils-2.23.2-aarch64-em.patch
  - Retire: binutils-2.23.51.0.3-arm-ldralt.patch
  - Retire: binutils-2.23.52.0.1-revert-pr15149.patch
  - Retire: binutils-2.25.1-gold-testsuite-fixes.patch
  - Retire: binutils-2.25-kernel-ld-r.bugfix.patch
  - Retire: binutils-2.25-kernel-ld-r.patch
  - Retire: binutils-2.25-only-keep-debug.patch
  - Retire: binutils-2.25-x86_64-pie-relocs.patch
  - Retire: binutils-pr18879.patch
  - Retire: binutils-rh1224751.patch
  - Retire: binutils-rh1309347.patch
  - Retire: binutils-rh895241.patch


author: Nick Clifton <nickc@redhat.com> 2.27-3
changelog:
  - Version bump so that the Brew build can be rerun, this time including ppc64 (big-endian)
    (#1358353)


author: Nick Clifton <nickc@redhat.com> 2.27-6
changelog:
  - Move .shstrtab section to end of section list so that the monotonic ordering of section offsets is restored.
    (#1366145)


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Update to elfutils 0.167 (#1366182,#1356263)
    Drop upstreamed patch: elfutils-0.166-elfcmp-comp-gcc6.patch


author: Mark Wielaard <mjw@redhat.com> - 0.168-1
changelog:
  - New upstream release from new project home https://sourceware.org/elfutils/
    Resolves: Rebase elfutils to 0.168 bugfix release (#1412299)


author: Mark Wielaard <mark@klomp.org> - 0.168-3
changelog:
  - Adjust internal library so names (#1412305).
  - Never use old, deprecated, filter_provides_in, it really is too broken.


author: Jakub Jelinek <jakub@redhat.com> 6.1.1-5
changelog:
  - update from Fedora 6.1.1-5
  - make sure to use DTS strip and objdump during brp scripts (#1365531,
    - use DTS binutils even on RHEL7


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-2.2
changelog:
  - update from Fedora 6.3.1-2
  - some further libstdc++_nonshared.a fixes for ppc, ppc64, ppc64le, s390
    and s390x


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-3
changelog:
  - update from Fedora 6.3.1-3
    - fix vec_xl and vec_xst altivec.h intrinsics (#1418397, PR target/79268)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-0.18.20160928.fc25
changelog:
  - Fix attachment of JIT-debug-enabled inf. (7.11.1 regression, RH BZ 1375553).
  - Rebase to FSF GDB 7.11.90.20160928 (pre-7.12 branch snapshot).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-0.19.20160929.fc25
changelog:
  - Rebase to FSF GDB 7.11.90.20160929 (pre-7.12 branch snapshot).
   - Fixes GDB crashes on inf. function call scripts (RH BZ 1378147, Pedro Alves).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-23.fc25
changelog:
  - [testsuite] Various testsuite fixes.
  - [aarch64] Fix gdb.cp/nextoverthrow.exp regression (Yao Qi).


author: DJ Delorie <dj@redhat.com> - 0.7.91-15
changelog:
  Jeff Law <law@redhat.com>
  - Pull in fc24 patches
  - Remove local patch #204
  - Sync BuildRequires and %build with Fedora to fix aarch64 problem
  - Add missing #includes to some aarch64 code


author: DJ Delorie <dj@redhat.com> - 0.7.91-17
changelog:
  - Remove mentions of (and one attempt to patch) backup files in 
    ltrace-0.7.91-unwind-elfutils.patch (#1427140)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: DJ Delorie <dj@redhat.com> - 4.12-3
changelog:
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Duplicate vhangup/chown patch for -m32 also.


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3s
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-26
changelog:
  - Rebase against fedora package:
    - Only build valgrind-openmpi when not creating a software collection.
    - No support for multilib on secondary arches when creating scl.
    - Mandatory Perl build-requires added
    - Add valgrind-3.11.0-shr.patch
    - Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch
    - Update valgrind-3.11.0-wrapmalloc.patch
    - Add valgrind-3.11.0-sighandler-stack.patch
    - Update valgrind-3.11.0-ppoll-mask.patch (#1344082)
    - Add valgrind-3.11.0-arm64-handle_at.patch
    - Add valgrind-3.11.0-ppc64-syscalls.patch
    - Add valgrind-3.11.0-deduppoolalloc.patch
    - Add valgrind-3.11.0-ppc-bcd-addsub.patch
    - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch
    - Update valgrind-3.11.0-cxx-freeres.patch (x86 final_tidyup fix)
    - Add valgrind-3.11.0-s390x-risbgn.patch
    - Add valgrind-3.11.0-cxx-freeres.patch (#1312647)
    - Add valgrind-3.11.0-ppc64-separate-socketcalls.patch
    - Add valgrind-3.11.0-isZeroU.patch
    - Replace valgrind-3.11.0-arm64-ldpsw.patch with upstream version


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.1-BETA1
changelog:
  - Update to valgrind 3.12.0 pre-release.
    - Drop upstreamed patches.
    - Disable exp-tests in %check. GDB crashes on gdb_server tests.


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.2-BETA1
changelog:
  - Add valgrind-3.12-beta1-ppc64be.patch. (#1378963)
  - Enable gdb_server tests again. (#1378143)
  - And disable it again on rhel6 (both i686 and x86_64)
    and rhel7 (ppc64 and ppc64le only) (#1380513)


author: Jingdong Lu <jingdong.lu@oracle.com> - 7.0-8.0.1
changelog:
  - Rename soft link Dockerfile.rhel7 as Dockerfile.ol7 in devtoolset-7-toolchain-docker tarball
  - add oracle-dockerfiles.patch [orabug 25079650] [orabug 27356773] (Avi Miller)
  - change the install directories to ol7
  - Update README.md [Orabug 27405821] (Avi Miller)


author: Nick Clifton <nickc@redhat.com> 2.28-6
changelog:
  - Fix s390 assembler so that it remove fake local symbols from its output.
    (#1460254)
    (#1472486)


author: Nick Clifton <nickc@redhat.com> 2.28-9
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1515340)


author: Nick Clifton <polacek@redhat.com> 2.28-1
changelog:
  - Rebase to FSF binutils 2.28
  - Retire: binutils-2.23.52.0.1-addr2line-dynsymtab.patch
  - Retire: binutils-2.27-local-dynsym-count.patch
  - Retire: binutils-2.27-monotonic-section-offsets.patch
  - Retire: binutils-2.27-aarch64-relro-default.patch
  - Retire: binutils-2.27-power9.patch
  - Import FSF binutils patch to fix running readelf on debug info binaries.
  - Import FSF binutils patch to fix an abort with PowerPC dynamic relocs.
  - Backport patch to add support for putting name, comp_dir and
    producer strings into the .debug_str section. 
  - Add support for GNU BUILD NOTEs.


author: Nick Clifton <nickc@redhat.com> 2.28-8.1
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1519864)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.169-3
changelog:
  - Add elfutils-0.169-dup-shstrtab.patch (#1455687)
  - Add elfutils-0.169-strip-empty.patch (#1455620)


author: Mark Wielaard <mjw@redhat.com> - 0.170-4
changelog:
  - Add elfutils-0.170-dwarf_aggregate_size.patch (#1527966).
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Jeff Law <law@redhat.com> 7.3.1-5.4
changelog:
  - Add Jakub's patch to generalize default exponent handling to
    instead cover all DEC runtime extensions
    Update 0022 patch for changes from Jakub's work.
    (#1561204)


author: Marek Polacek <polacek@redhat.com> 7.3.1-5.7
changelog:
  - fix 0014-Allow-non-logical-expressions-in-IF-statements.patch: also allow
    non logical expressions in ELSE-IF statements


author: Jeff Law <polacek@redhat.com> 7.3.1-5.9
changelog:
  - Fix INCLUDE handling when pathname is on a separate line
  - Integrate updates to patches #0005 and #0014.  Add testcases for
  - various legacy fortran extensions (#1586289)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.0.1-32.fc26
changelog:
  - Backport upstream fix for Intel PKRU (Walfred Tedeschi).
  - Backport upstream fix AVX instr. single-stepping (RH BZ 1515209, Pedro Alves).
  - Fix snapgnulib bundle number.


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-4
changelog:
  - Rebase to fedora valgrind version (#1467952)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-arm-index-hardwire.patch
    - Add valgrind-3.13.0-ucontext_t.patch
    - Add valgrind-3.13.0-gdb-8-testfix.patch
    - Add valgrind-3.13.0-disable-vgdb-child.patch
    - Add valgrind-3.13.0-arm64-hwcap.patch
    - Add valgrind-3.13.0-epoll_pwait.patch
    - Add valgrind-3.13.0-ppc64-diag.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-10
changelog:
  - Add valgrind-3.13.0-ppc64-timebase.patch (#1523871)
  - Sync with rhel 7.5 valgrind (#1523872)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-xml-socket.patch
    - Add valgrind-3.13.0-ppc64-vex-fixes.patch
    - Add valgrind-3.13.0-amd64-eflags-tests.patch
    - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
    - Add valgrind-3.13.0-static-tls.patch


author: Nick Clifton <nickc@redhat.com> 2.30-18
changelog:
  - Fix a seg-fault parsing corrupt DWARF information.  (#1573360)
  - Fix another seg-fault parsing corrupt DWARF information.  (#1573367)
  - Fix a seg-fault copying a corrupt ELF file.  (#1551788)
  - Fix a seg-fault parsing a large ELF files on a 32-bit host.  (#1539891)
  - Fix a seg-fault running nm on a corrupt ELF file.  (#15343247)
  - Fix a seg-fault running nm on a file containing corrupt DWARF information.  (#1551781)
  - Fix another seg-fault running nm on a file containing corrupt DWARF information.  (#1551763)


author: Nick Clifton <nickc@redhat.com> 2.30-19
changelog:
  - Fix a seg-fault running objcopy on a corrupt PE format file.  (#1574702)
  - Fix a seg-fault running objcopy on a corrupt ELF format file.  (#1574705)


author: Nick Clifton <nickc@redhat.com> 2.30-20
changelog:
  - Have the x86 linker resolve relocations against the _end, _edata and __bss_start symbols locally.  (#1576735)
  - Do not generate GNU build notes for linkonce sections.  (#1576362)


author: Nick Clifton <nickc@redhat.com> 2.30-22
changelog:
  - Fix handling of local versioned symbols by the x86 linker.  (PR 23194)
  - Fix linker testsuite failures.


author: Nick Clifton <nickc@redhat.com> 2.30-24
changelog:
  - When installing both ld.bfd and ld.gold, do not reset the current alternative if upgrading.  (#1592069)


author: Nick Clifton <nickc@redhat.com> 2.30-26
changelog:
  - Restore the long-long patch as it is needed for compatibilit between the 32-bit and 64-bit devel rpms.  (#1605913)


author: Nick Clifton <nickc@redhat.com> - 2.30-47
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Update x86_64 linker testsuite after previous delta.  (#1624779)
  - Disable the x86_64 linker's elimination of PLT entries.  (#1624779)
  - Disable readelf's reporting of gaps in build notes.  (#1623556)
  - Fix some more PowerPC64 linker testsuite failures.  (#1584565)
  - Remove PLT eliision patch.  (#1618748)
  - Restore the binutils-2.25-set-long-long.patch.
  - Fix GOLDs creation of PT_NOTE segments.  (#1614908)  (#1614920)
  - Improve objcopy's --merge-notes option.  (#1608390)
  - Remove x86 ISA property notes with empty bits.  (#1609801)
  - Rebuild with fixed binutils
  - Move the .gnu.build.attributes section to after the .comment section.
  - Merge .gnu.build.attribute sections together.  (#1608390)
  - Fix the gold linker so that it can handle relocs in discardeable note sections.  (#1607054)
  - Fix the generation of relocations for assembler created notes.  (#1598551)


author: Nick Clifton <nickc@redhat.com> - 2.30-54
changelog:
  - Fix AArch64 linker testsuite problems.  (#1702247)
  - Fix S390x linker testsuite problems.  (#1702248)
  - Fix PPC64le linker testsuite problems.  (#1702249)


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.30-55.0.1.1
changelog:
  - Configure with --enable-threads to enable multi-threaded linking by ld.gold. [Orabug: 30658379](Egeyar Bagcioglu)
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-8
changelog:
  - Add elfutils-0.170-sys-ptrace.patch
  - Make sure spec can be build even when ldconfig_scriplets aren't defined.
  - Add elfutils-0.170-m68k-packed-not-aligned.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Marek Polacek <polacek@redhat.com> 8.2.1-7
changelog:
  - update from Fedora gcc-8.2.1-7 (#1664796)
  - drop gcc8-fortran-include.patch
  - add -fdec-include and -fpad-source (#1647048)
  - include forgotten ppc* intrinsic headers


author: Marek Polacek <polacek@redhat.com> 8.3.1-2
changelog:
  - update from Fedora 8.3.1-2 gcc (#1664796)
  - put liblsan_preinit.o to FULLPATH instead of FULLLPATH


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3
  - two small autoFDO fixes (#1684650)
  - fix std::hash for 2GB+ strings (PR libstdc++/89629)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.1
changelog:
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730724)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730726)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.2
changelog:
  - move UNSPEC_DARN* from altivec.md to rs6000.md (#1760208)
  - use unspec_volatile for darn (PR target/91481, #1760208, CVE-2019-15847)


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-3.2.0.1
changelog:
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents 
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path 
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
    Add -fopt-info-inline support from Gcc9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
    Add -flive-patching support from Gcc9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-flive-patching.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Fix Orabug 29178534 - SEGV in rdbms with gcc8 running lrgsrgdbcon1
    lrgsrgdbcon2 lrgsrgdbcone
    This is the similar GCC PR89595, add the fix from Gcc9:
    gcc9-pr89595.patch
    also fixes GCC PR PR89655 PR89656, add the fix from Gcc9:
    gcc9-pr89655-pr89656.patch
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from Gcc9:
    gcc9-pr47618.patch
  - Fix Orabug 29457270 - With live patching, still need to obey "inline"
    directive
    This is the similar GCC PR89730, add the fix from Gcc9:
    gcc9-pr89730.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-3.2.0.7
changelog:
  - Fix Orabug 30008525 - Wmisleading-indentation fails for RDBMS source files
    This is the same bug as gcc upstream PR94230 from Gcc11:
    gcc11-pr94230.patch
  - Fix Orabug 29838827 - provide an option to adjust the maximum depth of nested #include
    This is the same bug as gcc upstream PR90581 from Gcc9:
    gcc9-pr90581.patch
  - Fix Orabug 29541051 -  confusing error message when there is a problem
    with ASAN_OPTIONS "ERROR: expected '='"
    This is the same bug as gcc upstream PR89832 from Gcc9:
    gcc9-pr89832.patch
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-16
changelog:
  - Add valgrind-3.14.0-gettid.patch
  - Add valgrind-3.14.0-ppc64-quotactl.patch
  - Add valgrind-3.14.0-ppc-subfe.patch
  - Add valgrind-3.14.0-s390x-vec-facility-bit.patch.
  - Update valgrind-3.14.0-rsp-clobber.patch
  - Add valgrind-3.14.0-subrange_type-count.patch


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 2.32-5
changelog:
  - REBASE TO MATCH gcc-toolset-9 binutils
  - Fix configuring binutils with plugins and address sanitization enabled.  (#1709720)
  - Add: binutils-CVE-2019-9071.patch
  - Add: binutils-CVE-2019-9073.patch
  - Add: binutils-CVE-2019-9074.patch
  - Add: binutils-CVE-2019-9075.patch
  - Add: binutils-CVE-2019-9077.patch
  - Add: binutils-aarch64-gold-PLT-for-MOVW_ABS.patch
  - Add: binutils-alignment-of-decompressed-sections.patch
  - Add: binutils-check-dlsym-for-plugins.patch
  - Add: binutils-disassembling-efi-files.patch
  - Add: binutils-export-demangle.h.patch
  - Add: binutils-gold-8-byte-note-segments.patch
  - Add: binutils-ld-testsuite-fixes.patch
  - Add: binutils-s390x-arch13-descriptions.patch
  - Add: binutils-special-sections-in-groups.patch
  - Retire: binutils-2.22.52.0.1-export-demangle.h.patch
  - Retire: binutils-2.26-lto.patch
  - Retire: binutils-2.30-allow_R_AARCH64-symbols.patch
  - Retire: binutils-CVE-2018-10372.patch
  - Retire: binutils-CVE-2018-10373.patch
  - Retire: binutils-CVE-2018-10534.patch
  - Retire: binutils-CVE-2018-10535.patch
  - Retire: binutils-CVE-2018-17358.patch
  - Retire: binutils-CVE-2018-6323.patch
  - Retire: binutils-CVE-2018-6759.patch
  - Retire: binutils-CVE-2018-7208.patch
  - Retire: binutils-CVE-2018-7568.patch
  - Retire: binutils-CVE-2018-7569.patch
  - Retire: binutils-CVE-2018-7570.patch
  - Retire: binutils-CVE-2018-7642.patch
  - Retire: binutils-CVE-2018-7643.patch
  - Retire: binutils-CVE-2018-8945.patch
  - Retire: binutils-PowerPC-IEEE-long-double-warnings.patch
  - Retire: binutils-debug-section-marking.patch
  - Retire: binutils-disable-readelf-gap-reports.patch
  - Retire: binutils-fix-testsuite-failures-2.patch
  - Retire: binutils-gas-build-notes.patch
  - Retire: binutils-gold-llvm-plugin.patch
  - Retire: binutils-gold-note-segment.patch
  - Retire: binutils-ifunc-relocs-in-notes.patch
  - Retire: binutils-linkonce-notes.patch
  - Retire: binutils-merge-attribute-sections.patch
  - Retire: binutils-missing-notes.patch
  - Retire: binutils-nested-func-name-lookup.patch
  - Retire: binutils-note-merge-improvements.patch
  - Retire: binutils-page-to-segment-assignment.patch
  - Retire: binutils-remove-empty-ISA-properties.patch
  - Retire: binutils-revert-PowerPC-speculation-barriers.patch
  - Retire: binutils-s390x-arch13.patch
  - Retire: binutils-skip-dwo-search-if-not-needed.patch
  - Retire: binutils-speed-up-objdump.patch
  - Retire: binutils-strip-unknown-relocs.patch
  - Retire: binutils-x86-local-relocs.patch
  - Retire: binutils-x86-local-version.patch
  - Retire: binutils-x86_64-disable-PLT-elision.patch


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-14
changelog:
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> - 2.32-14.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1788503)


author: Marek Polacek <polacek@redhat.com> 9.1.1-1.1
changelog:
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - apply Fortran patches (#1728355)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix off-by-one errors in indexed xlat handling.
  - Remove bogus indexed xlat warning.
  - Resolves #1666405.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Jan Kaluza <jkaluza@redhat.com> - 1.1-7
changelog:
  - Obsolete all versions of httpd24-apr and httpd24-apr-util on RHEL7 (#1218271)
  - Do not mention RHSCL version in README and man page (#1219112)
  - Fix bad man page syntax (#1219511)


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-1
changelog:
  - update to 2.4.10
  - remove mod_proxy_html obsolete (#1174790)
  - remove dbmmanage from httpd-tools (#1151375)
  - add slash before root_libexecdir macro (#1149076)
  - ab: fix integer overflow when printing stats with lot of requests (#1091650)
  - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1079925)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-2
changelog:
  - allow enabling additional SCLs using service-environment file
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-6.1
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)
  - core: fix pointer dereference crash with ErrorDocument 400 pointing
    to a local URL-path (CVE-2015-0253)
  - mod_lua: fix possible mod_lua crash due to websocket bug (CVE-2015-0228)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-2
changelog:
  - use HTTPD_LANG in sysconfig file on RHEL6 (#1222055)
  - ignore HTTPD sysconfig variable on RHEL6 (#1204075)
  - call restorecon on /etc/rc.d/init.d/htcacheclean after install (#1222494)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Joe Orton <jorton@redhat.com> - 2.4.25-9
changelog:
  - link only httpd, not support/* against -lselinux -lsystemd (#1433474)
  - don't enable SO_REUSEPORT in default configuration (#1432249)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-9.1
changelog:
  - Resolves: #1473691 - CVE-2017-3167 CVE-2017-3169 CVE-2017-7659 CVE-2017-7668
    CVE-2017-7679 CVE-2017-9788 httpd24-httpd: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-3
changelog:
  - Resolves: #1486843 - apache user is not created during httpd
    installation when apache group already exist
  - Resolves: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.26-5
changelog:
  - Resolves: #1472846 - CVE-2017-9788 CVE-2017-9789 httpd24-httpd: various flaws
  - updated mod_systemd patch


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8
changelog:
  - Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9
changelog:
  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10
changelog:
  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11
changelog:
  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14
changelog:
  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-16
changelog:
  - remove bundled mod_md module
  - Resolves: #1788976 - RFE: updated collection for httpd 2.4
  - Resolves: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite 
    potential open redirect


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-18.1
changelog:
  - Resolves: #1869068 - CVE-2020-9490 httpd24-httpd: httpd: Push diary
    crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-19
changelog:
  - Resolves: #1823836 - Backport of SessionExpiryUpdateInterval directive
  - Resolves: #1600579 - mod_proxy_hcheck Doesn't perform checks in VirtualHost
  - Resolves: #1809494 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set
    worker secret passed to tomcat
  - Resolves: #1828812 - httpd response contains garbage in Content-Type header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-20
changelog:
  - Resolves: #1869069 - CVE-2020-9490 httpd24-httpd: httpd: Push diary crash
    on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-21
changelog:
  - Resolves: #1637891 - RHSCL httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-22
changelog:
  - Resolves: #1869076 - CVE-2020-11984 httpd24-httpd: httpd: mod_proxy_uswgi
    buffer overflow
  - Resolves: #1607737 - TCP healthchecks failing falsely / not actually checking
  - Resolves: #1869078 - CVE-2020-11993 httpd24-httpd: httpd: mod_http2 concurrent
    pool usage


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-22.1
changelog:
  - Resolves: #2007237 - CVE-2021-40438 httpd24-httpd: httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23
changelog:
  - Resolves: #2007238 - CVE-2021-40438 httpd24-httpd: httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.1
changelog:
  - Resolves: #2035056 - CVE-2021-44790 httpd24-httpd: httpd: mod_lua: possible
    buffer overflow when parsing multipart content


author: David Kubat <david.kubat@oracle.com> - 2.4.34-23.0.1.1
changelog:
  - Patch mod_proxy_hcheck: don't pile up health checks. (PR 63010) [Orabug: 33213072]
  - replace index.html with Oracle's index page oracle_index.html
  - update vstring in specfile


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.2
changelog:
  - Resolves: #2065438 - CVE-2022-22720 httpd24-httpd: httpd: HTTP request
    smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Kaylin Devchand <kaylin.devchand@oracle.com> - 2.4.34-23.0.3.2
changelog:
  - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and
    fixup last [CVE-2022-31813][Orabug: 34454036]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.3
changelog:
  - Resolves: #1996513 - CVE-2021-33193 httpd24-httpd: httpd: Request splitting
    via HTTP/2 method injection and mod_proxy
  - Resolves: #2007192 - CVE-2021-34798 httpd24-httpd: httpd: NULL pointer
    dereference via malformed requests
  - Resolves: #2007196 - CVE-2021-39275 httpd24-httpd: httpd: out-of-bounds
    write in ap_escape_quotes() via malicious input
  - Resolves: #2007200 - CVE-2021-36160 httpd24-httpd: httpd: mod_proxy_uwsgi: 
    out-of-bounds read via a crafted request uri-path
  - Resolves: #2035029 - CVE-2021-44224 httpd24-httpd: httpd: possible NULL 
    dereference or SSRF in forward proxy configurations
  - Resolves: #2065236 - CVE-2022-22719 httpd24-httpd: httpd: mod_lua: Use of
    uninitialized value of in r:parsebody
  - Resolves: #2066263 - CVE-2022-23943 httpd24-httpd: httpd: mod_sed: Read/write
    beyond bounds
  - Resolves: #2066794 - CVE-2022-22721 httpd24-httpd: httpd: core: Possible
    buffer overflow with very large or unlimited LimitXMLRequestBody
  - Resolves: #2096999 - CVE-2022-26377 httpd24-httpd: httpd: mod_proxy_ajp:
    Possible request smuggling
  - Resolves: #2097017 - CVE-2022-28614 httpd24-httpd: httpd: out-of-bounds read
    via ap_rwrite()
  - Resolves: #2097033 - CVE-2022-28615 httpd24-httpd: httpd: out-of-bounds read
    in ap_strcmp_match()
  - Resolves: #2097453 - CVE-2022-29404 httpd24-httpd: httpd: mod_lua: DoS in
    r:parsebody
  - Resolves: #2097460 - CVE-2022-30522 httpd24-httpd: httpd: mod_sed: DoS
    vulnerability
  - Resolves: #2097482 - CVE-2022-30556 httpd24-httpd: httpd: mod_lua: Information
    disclosure with websockets
  - Resolves: #2098249 - CVE-2022-31813 httpd24-httpd: httpd: mod_proxy:
    X-Forwarded-For dropped by hop-by-hop mechanism


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.5
changelog:
  - Related: #2035029 - CVE-2021-44224 httpd24-httpd: httpd: possible NULL
    dereference or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-23.6
changelog:
  - Resolves: #2176722 - CVE-2023-25690 httpd24-httpd: httpd: HTTP request
    splitting with mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8.1
changelog:
  - Resolves: #1745694 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of data
    request leads to denial of service
  - Resolves: #1745679 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers 
    leads to denial of service
  - Resolves: #1745682 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-16
changelog:
  - don't run posttrans restart if httpd-disable-posttrans exists (#1047097)
  - mod_proxy: fix crash in brigade cleanup under high load (#1040448)
  - remove "webserver" from provides (#1042877)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18
changelog:
  - add legacy action scripts and htcacheclean service file,
    use syslog for suexec logging (#1061009)
  - mod_dav: fix locktoken handling (#1061010)
  - mod_ssl: sanity-check use of "SSLCompression" (#1061011)
  - mod_ssl: allow SSLEngine to override Listen-based default (#1061016)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077885)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077885)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_proxy: add security fix for CVE-2014-0117
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226
  - mod_cache: add secutiry fix for CVE-2013-4352


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
  - mod_proxy_fcgi: fix heap-based buffer overflow (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25
changelog:
  - Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8
changelog:
  - Resolves: #1745692 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: # 1744825 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large 
    amount of data request leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8.1
changelog:
  - Resolves: #1845302 - CVE-2020-11080 httpd24-nghttp2: nghttp2: overly large
    SETTINGS frames can lead to DoS


author: Darren Archibald <darren.archibald@oracle.com> - 1.7.1-11
changelog:
  - Fix for CVE-2023-44487 httpd24-httpd: HTTP/2: Multiple HTTP/2
    enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-7.1
changelog:
  - Resolves: #1744824 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large
    amount of data request leads to denial of service
  - Resolves: #1745691 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood
    using PRIORITY frames resulting in excessive resource consumption


author: Joe Orton <jorton@redhat.com> - 2.9.2-7
changelog:
  - Requires(pre): httpd-filesystem to ensure apache user exists
  - enable mlogc everywhere, use buildcond to disable


author: John Dennis <jdennis@redhat.com> - 0.10.0-1
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-2
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-3
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches,
    fix patch to pickup change in configure script that causes
    HAVE_ECP to be defined
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.
  - Add lasso 2.5.0 version dependency
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-2
changelog:
  - Resolves: bug #1296286
    mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
  - Resolves: bug #1324536
    Installing mod_auth_mellon causes working Kerberos authentication
    to start failing
  - Add ECP.rst documentation file that was erroneously omitted


author: John Dennis <jdennis@redhat.com> - 0.11.0-4
changelog:
  - Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
    Rebuilding due to missing comment in Changelog


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: Luboš Uhliarik <luhliari@redhat.com> - 0.13.1-2
changelog:
  - Resolves: #1514391 - [RFE] Include mod_auth_mellon for RHSCL httpd24
  - Merged with RHEL-7.5 branch, SCLized spec


author: Lubos Uhliarik <luhliari@redhat.com> - 0.13.1-2.1
changelog:
  - Resolves: #1692458 - CVE-2019-3878 httpd24-mod_auth_mellon: mod_auth_mellon:
    authentication bypass in ECP flow


author: Lubos Uhliarik <luhliari@redhat.com> - 0.14.0-2
changelog:
  - Resolves: #1568475 - mod_auth_mellon: tmpfiles.d drop-in wrong location
  - Resolves: #1568837 - ownership test fail


author: Lubos Uhliarik <luhliari@redhat.com> - 0.14.0-3
changelog:
  - Resolves: #1692459 - CVE-2019-3878 httpd24-mod_auth_mellon: mod_auth_mellon:
    authentication bypass in ECP flow


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.5-1
changelog:
  - Remove common subpackage
  - Fix up requires in subpackages on various parts of SCL and deps
  - Own a few unowned directories


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-13
changelog:
  - Add BuildRequires on apache-commons-parent >= 26-7
  - Remove BuildRequires on commons-collections-testframework


author: Orion Poplawski <orion@cora.nwra.com> - 2.1.1-6
changelog:
  - Update to current maven spec guidelines to fix build (bug 979497)
  - Add patch to fix test with junit 4.11


author: Michal Srb <msrb@redhat.com> - 2.3.0-4
changelog:
  - Remove prebuilt documentation in %prep
  - Install NOTICE file with javadoc subpackage
  - Resolves: rhbz#854311


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.6-8
changelog:
  - Add missing barriers in cache initialization
  - Simplify shared lib extraction, resolves: CVE-2013-2035


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4-8
changelog:
  - Install attached artifacts for proper classifier provides
  - Enable aarch64 support
  - Resolves: rhbz#1028551


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Michal Srb <msrb@redhat.com> - 2.2.1-45
changelog:
  - Add missing BR: maven-install-plugin (Resolves: #979504)
  - Migrate to plexus-containers-container-default


author: Mat Booth <fedora@matbooth.co.uk> - 1.7-10
changelog:
  - Remove use of deprecated macros, rhbz #992204
  - Don't ship test jars in main package
  - Install NOTICE file


author: Mat Booth <fedora@matbooth.co.uk> - 1.8.1-1
changelog:
  - Fix removal of cvs java provider, rhbz #962273
  - Update to latest upstream
  - Drop upstreamed patches


author: Roman Kennke <rkennke@redhat.com> 1.9.0-6
changelog:
  - Place JavaDoc in directly under /opt/rh/maven30/root/usr/share/javadoc/maven30-mockito instead
    of /opt/rh/maven30/root/usr/share/javadoc/maven30-mockito/javadoc


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.7-2
changelog:
  - Build with xmvn
  - Use better description
  - Simplify build-requires
  - Update to current packaging guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.4.2-2
changelog:
  - Update to latest packaging guidelines
  - Remove MIT license (only applies to test cases not binary rpm)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: David Nalley <david@gnsa.us> - 1.0-2
changelog:
  - removed needless arguments for setup
  - reduced description line to less than 80 chars
  - added license to -javadoc
  - removed unused source file
  - removed all update_maven_depmap references


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.3.0-5.2
changelog:
  - Use Maven from %{_root_datadir} for now
  - Fix quotation in nested here-documents
  - Fix symlinks to Maven
  - Fix dangling symlinks to Maven JARs
  - Avoid nested here-documents


author: Jan Kaluza <jkaluza@redhat.com> - 1.2-2
changelog:
  - fix incorrectly defined rhel macro in README (#1152494)
  - own the man7 and ma8 directories to remove them weh uninstalling (#1040470)


author: Jan Kaluza <jkaluza@redhat.com> - 1:1.4.4-7
changelog:
  - correct 404 and 50x error pages (#1065981)
  - use initscripts legacy actions for nginx-upgrade (#1065981)
  - expand nginx man page variables (#1066056)


author: Tomas Hrcka <thrcka@redhat.com> - 1.1-20
changelog:
  - Add LICENSE, README and nodejs010.7 man page
  - Minor changes in collection macros nodejs-fixdep,nodejs-symlink-deps


author: Tomas Hrcka <thrcka@redhat.com> - 2.1-2
changelog:
  - RHSCL 2.1 release
  - disable installing of whole collection this will be enabled after devel period


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.21-1
changelog:
  - new upstream release 0.10.21
    http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/
  - resolves an undisclosed security vulnerability in the http module


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: Piotr Popieluch <piotr1212@gmail.com> - 0.1.18-2
changelog:
  - Added LICENSE to %files
  - Added rm -rf node_modules to %prep
  - Capitalized summary
  - Removed Group tag


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1.2.1-2
changelog:
  - the LICENSE file previously contained the wrong license (MIT), but now
    upstream have fixed it to contain the correct license (BSD) (#967442)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0.0-4
changelog:
  - add some post-install hackery to work around potential RPM bug resulting in
    symlinks still pointing to their old locations on upgrade (RHBZ#997978)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.2.11-2
changelog:
  - add macro for EPEL6 dependency generation

  Fri Apr 12 2013 Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.2    .11-2
  - Add support for software collections


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.6.0-1
changelog:
  - update to upstream release 0.6.0
  - History.md is now not included in the npm tarball
  - tests are now not included in the npm tarball, so download separately


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.0-3
changelog:
  - rename from opener to nodejs-opener
  - add exec permission on opener (executable and lib are same file)
  - remove DOS EOLs from LICENSE.txt


author: Ralph Bean <rbean@redhat.com> - 1.2.0-2
changelog:
  - Include license from github.
  - Enable tests.
  - Make cli.js into a symlink.
  - Comment out nodejs_symlink_deps --build, as per review.


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.1.0-2
changelog:
  - Removed %clean and rm -rf %buildroot from %install
  - changed Summary and %description to start with capital letter


author: Tomas Hrcka <thrcka@redhat.com> - 1.4.28-1
changelog:
  - New upstream release 1.4.28
  - Pretrans scriptlet changed to lua RHBZ#1149196 
  - Remove fix_dep on semver package since we have update


author: - Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1
    * Added --libs to pkg-config.
    * Added nss_wrapper-config.cmake
    * Fixed a bug packaging the obj directory.


author: - Andreas Schneider <asn@redhat.com> - 1.0.1-2
changelog:
  - resolves: #1060906 - Fedora package.
  - Remove Group
  - Remove glibc-devel build requirement
  - Do not create a subpackage.


author: Jitka Plesnikova <jplesnik@redhat.com> - 1-20
changelog:
  - Changed name of sub-package devel to scldevel
  - Added the file macros.%{scl_name_base}-scldevel
  - Resolves: rhbz#1055580


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.7-10
changelog:
  - do not install .orig file generated by make xs_generate
  - filter unversioned mod_perl.so from provides


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.8-3.20130221svn1448242
changelog:
  - own include directories in -devel subpackage (#1079938)
  - depend on httpd-2.4 in -devel subpackage


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-13
changelog:
  - Updated dependencies, filters and conditions for dual-life sub-packages
  - Used %perl_compat for dual-life dependencies


author: Paul Howarth <paul@city-fan.org> - 0.19-7
changelog:
  - New upstream re-release of 0.19 by DROLSKY
    - The load_class() subroutine now returns the class name on success
      (CPAN RT#76931)
    - Exceptions and errors from Class::Load no longer contain references to line
      numbers in Class::Load or Module::Runtime; this applies to exceptions
      thrown by load_class, load_first_existing_class, and load_optional_class,
      as well as the error returned by try_load_class
    - Exceptions are now croaked properly so they appear to come from the calling
      code, not from an internal subroutine; this makes the exceptions look more
      like the ones thrown by Perl's require (CPAN RT#68663)
  - This release by DROLSKY -> update source URL
  - BR: perl(Scalar::Util) for the module
  - BR: perl(lib) for the test suite
  - Drop buildreqs perl(strict) and perl(warnings) - not dual-lived


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04:
    - Some small test changes for the latest Module::Implementation and
      Class::Load
  - Bump Class::Load version requirement to 0.15
  - BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
    perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
    suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06:
    - Require Class::Load 0.20 in the code, not just the distro metadata
      (CPAN RT#80002)
    - Weird classes with either an ISA or VERSION constant would cause the XS to
      blow up badly (CPAN RT#79998)
    - Fixed some broken logic that lead to a segfault from the
      014-weird-constants.t test on some Perls (CPAN RT#80059)
  - Bump perl(Class::Load) version requirement to 0.20
  - Drop explicit requirement for perl(Class::Load), no longer needed


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.630-4
changelog:
  - Updated conditions to not require optional BRs (MLDBM, SQL::Statement) for SCL
  - Resolves: rhbz#1064855


author: Paul Howarth <paul@city-fan.org> - 0.107-4
changelog:
  - drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - drop redundant %{?perl_default_filter}
  - don't use macros for commands
  - can't find any dependency cycle so drop %{?perl_bootstrap} usage
  - drop ExtUtils::MakeMaker version requirement to 6.30, actual working minimum


author: Paul Howarth <paul@city-fan.org> - 0.108-1
changelog:
  - Update to 0.108:
    - Repackage, new bug tracker
  - Explicitly run the extra tests
  - Don't need to remove empty directories from the buildroot
  - Drop obsoletes/provides for old -tests sub-package


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Add optional runtime conflict warnings
    - Require 5.8.1, clean up a few things and add a few more tests
    - Use Exporter instead of Sub::Exporter
  - Update patch for building with Test::More < 0.88
  - Drop patch for building with old ExtUtils::MakeMaker, no longer needed
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Instead of silently ignoring conflicts that do not compile, issue a
      conflict warning (CPAN RT#75486)
  - BR: perl(Module::Runtime)
  - Classify buildreqs by usage
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.06-3
changelog:
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from buildroot
  - Add commentary regarding conditionalized buildreqs


author: Paul Howarth <paul@city-fan.org> - 0.07-1
changelog:
  - Update to 0.07
    - Require Test::Fatal ≥ 0.006 to avoid test failures (CPAN RT#76809)
  - Explicitly run author tests, except for EL builds
  - Add buildreqs for new tests
  - Apply old Test::More patch if we have Test::More < 0.96


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.000016-1
changelog:
  - Update to 1.000016
  - Resolves: rhbz#996286 - Change wording about safety/security to satisfy
    CVE-2013-1437
  - Update source URL
  - Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 0.103-14
changelog:
  - Drop EPEL-4 support
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - BR: perl(File::Spec)


author: Paul Howarth <paul@city-fan.org> - 1.105-1
changelog:
  - Update to 1.105
    - Repackage, update bug tracker
    - Drop pod tests
  - Add patch to support building with Test::More < 0.88
  - Classify buildreqs by usage
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 0.34-1
changelog:
  - Update to 0.34
    - Support anonymous stashes on newer perl versions
    - Prevent harmful effects from invalid settings for
      $ENV{PACKAGE_STASH_IMPLEMENTATION}
    - Switch to Module::Implementation
  - BR: perl(Module::Implementation) ≥ 0.06
  - BR: perl(base) for test suite
  - Bump Package::Stash::XS version requirement to 0.26
  - Explicitly run extra tests (except on RHEL ≥ 7, where the necessary
    build dependencies may not be available)
  - Update patch for building with old Test::More version in EPEL-5


author: Paul Howarth <paul@city-fan.org> - 0.35-1
changelog:
  - Update to 0.35
    - Remove old, deprecated API
  - BR: perl(Getopt::Long)
  - perl(Package::DeprecationManager) is no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.36-1
changelog:
  - Update to 0.36
    - Support building with PUREPERL_ONLY
  - BR: perl(Config), perl(Text::ParseWords) and perl(Variable::Magic)
  - Update patch for building with old Test::More version in EPEL-5


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Handle magic more correctly in add_symbol and get_or_add_symbol
  - Add upstream patch to avoid build dependency on Package::Stash
  - BR: perl(Variable::Magic) for the test suite
  - Update patch for building with old Test::More versions


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Petr Šabata <contyk@redhat.com> - 1.967003-1
changelog:
  - 1.967003 bump (backwards-incompatible changes)
  - Spec cleanup and modernization
  - New Source URL
  - Install to vendor


author: Paul Howarth <paul@city-fan.org> - 1.967006-1
changelog:
  - Update to 1.967006 (#789560)
    - Localize the OUT filehandle during Precompile
    - Document the <autotree:Base::Class> form of the <autotree> directive
    - Provide a simple test for the <autotree> directive, t/autotree.t; renamed
      basics.t to ensure it runs before autotree.t
    - Allow a global <skip:> directive that functions the same as modifying
      $Parse::RecDescent::skip prior to compiling a grammar
    - Require that the $file returned by caller() be eq '-', rather than merely
      starting with '-'
    - Warn on empty productions followed by other productions: the empty
      production always matches, so following productions will never be reached
    - NON-BACKWARDS COMPATIBLE CHANGE: a repetition directive such as 'id(s /,/)'
      correctly creates a temporary @item variable to hold the 'id's that are
      matched. That @item variable is then used to set the real $item[] entry for
      that repetition. The same treatment is now given to %item. Formerly, in a
      production like:
        id ',' id(s /,/)
      matched against:
        xxx, yyy, zzz
      The $item{id} entry that should be 'xxx' is overwritten by 'yyy' and then
      'zzz' prior to the action being executed. Now 'yyy' and 'zzz' set
      $item{id}, but in the private %item, which goes out of scope once the
      repetition match completes.
    - EXPERIMENTAL: when precompiling, optionally create a standalone parser by
      including most of the contents of Parse::RecDescent in the resulting
      Precompiled output
    - Accept an optional $options hashref to Precompile, which can be used to
      specify $options->{-standalone}, which currently defaults to false
    - The subroutines import, Precompile and Save are not included in the
      Precompile'd parser
    - The included Parse::RecDescent module is renamed to
      Parse::RecDescent::_Runtime to avoid namespace conflicts with an installed
      and use'd Parse::RecDescent
    - Add a new t/precompile.t to test precompilation
    - Add a new $_FILENAME global to Parse::RecDescent to make it easy for the
      Precompile method to find the module
    - Remove the prototype from _generate; it is not required, and it caused
      t/precompile.t (which ends up re-defining a lot of Parse::RecDescent
      subroutines) to fail needlessly, as the calls to _generate in Replace and
      Extend normally do not see the prototype, but do when re-defined
    - POD documentation for standalone parsers added
    - Added ExtUtils::MakeMaker build/configure version requirements
      (CPAN RT#74787)
  - BR: perl(Test::Pod) and perl(Test::Warn) for additional test coverage
  - Use a patch rather than scripted iconv to fix character encoding
  - Improve %summary
  - Tidy %description
  - Make %files list more explicit
  - Don't use macros for commands
  - Don't need to specify compiler flags for pure-perl package
  - Drop redundant 'find' commands from %install


author: Paul Howarth <paul@city-fan.org> - 1.03-18
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Fix script interpreter for test suite since we're packaging it
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.985-1
changelog:
  - Update to 0.985 (documentation fixes)
  - Add patch to support building with Test::More < 0.88
  - Run the extra tests too
  - BR: perl(File::Find) and perl(File::Temp) for test suite
  - BR: perl(Test::Pod) for the extra tests


author: Paul Howarth <paul@city-fan.org> - 0.926-6
changelog:
  - Be more selective about what to exclude when bootstrapping
  - Don't use macros for commands
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Make %files list more explicit
  - Fix typo in %description


author: Paul Howarth <paul@city-fan.org> - 0.05-6
changelog:
  - Add patch for CPAN RT#50524 (copy contents of %DB::sub entry if it exists)
  - Reinstate compatibility with old distributions like EL-5
    - Add BuildRoot definition
    - Clean buildroot in %install
    - Restore %clean section
    - Restore %defattr
    - Don't use + to terminate find -exec commands
  - Spec clean-up
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't use macros for commands
    - Use tabs
    - Add buildreqs for Perl core modules that might be dual-lived
    - Explicit requires for "use base XXX;" only required prior to rpm 4.9


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - More clearly (and correctly) document the way NOT to use Test::Fatal
    - Try to fix $TODO not working when the user test uses $T::B::Level
  - Explicitly run the extra tests
  - Package examples directory as documentation
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.012-1
changelog:
  - Update to 0.012
    - Go back to auto-detecting the required Test::More, reverting the changes
      made for CPAN RT#62699
  - Drop support for all current EL releases (5 and 6) since we need Test::More
    version 0.96 or later for the test suite


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.01-6
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 1.02-1
changelog:
  - Update to 1.02
    - Re-do everything with Capture::Tiny rather than ties
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1.48-2
changelog:
  - Clarify license (bug #1064447)
  - Remove run-time dependency on Test::Builder::Tester (bug #1064743)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24 (compatibility with Carp 1.25) (#808856)
  - BR: Perl core modules that might be dual-lived
  - BR/R: at least version 1.02 of perl(Tree::DAG_Node)
  - Drop redundant buildreq perl(Test::Exception)
  - Don't need to remove empty directories from buildroot
  - Drop explicit versioned runtime dependency on Test::Builder, satisfied in
    all distributions since the dawn of time (nearly)
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop %defattr, redundant since rpm 4.4
  - Drop redundant %{?perl_default_filter}
  - Make %files list more explicit
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Change text in README referring to licence to match text in body of source,
      since it was in conflict with the Artistic Licence V 2.0
    - Rename CHANGES to Changes as per CPAN::Changes::SPEC
    - Various spelling fixes in the docs


author: Paul Howarth <paul@city-fan.org> - 1.13-1
changelog:
  - Update to 1.13
    - Change the values accepted for the no_attributes option from undef and 1
      to 0 and 1; if undef is used, it becomes 0, so pre-existing code will not
      change behavior, whilst this makes it easier to pass 0 or 1 from the
      command line


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Document the copy() method
    - Patch the copy() method so it respects the {no_attribute_copy => 1} option
    - Add method read_tree(), for text files; it uses Perl6::Slurp, which
      supports utf8
    - Add methods read_attributes() and string2hashref($s) for use by read_tree()
    - Add t/read.tree.t to test read_tree()
    - Add t/tree.utf8.attributes.txt, in utf8, for use by t/read.tree.t
    - Add t/tree.with.attributes.txt and t/tree.without.attributes.txt for use by
      t/read.tree.t
    - Make Perl 5.8.1 a pre-req so we have access to the utf8 pragma


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Replace Path::Tiny with File::Spec, because the former's list of
      dependencies is soooo long :-( (CPAN RT#88435)
    - Move t/pod.t to xt/author/pod.t
  - Explicitly run the author tests


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Merge patch (slightly modified by me) from Tom Molesworth (CPAN RT#88501):
      - Remove 'use open qw(:std :utf8);' because of its global effect
      - Replace Perl6::Slurp with File::Slurp, using the latter's binmode option
        for the encoding
      - Fix docs where I'd erroneously said File::Slurp didn't support utf8


author: Paul Howarth <paul@city-fan.org> - 1.17-1
changelog:
  - Update to 1.17
    - Write test temp files in :raw mode as well as utf-8, for MS Windows users
    - Take the opportunity to change all utf8 to utf-8, as per the docs for Encode,
      except for 'use warnings qw(FATAL utf8);', which doesn't accept utf-8 :-(


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18
    - No changes, code or otherwise, except for the version # in the *.pm, this
      file, and Changelog.ini
    - Somehow a corrupted version got uploaded to search.cpan.org, so I've just
      changed the version # (the file on MetaCPAN was fine)


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Fix tests failing on 5.6.x due to differing DESTROY semantics
    - Excise superfluous local($@) call - 7% speedup
    - Fix broken URLs (CPAN RT#55659)
    - Proper exception on erroneous usage of bare catch/finally (CPAN RT#81070)
    - Proper exception on erroneous use of multiple catch{} blocks
    - Clarify exception occuring on unterminated try block (CPAN RT#75712)
    - Fix the prototypes shown in docs to match code (CPAN RT#79590)
    - Warn loudly on exceptions in finally() blocks
    - dzilify
  - Ship upstream LICENSE and README files
  - Classify buildreqs by usage
  - Add buildreqs for extra tests and explicitly run them


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - Optionally use Sub::Name to name the try/catch/finally blocks, if available
  - BR:/R: perl(Sub::Name)
  - Drop obsoletes/provides for old -tests subpackage


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Work around Perl RT#119311, which was causing incorrect error messages in
      some cases during global destruction
      (https://github.com/doy/try-tiny/pull/9)
  - Add patch to support building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Fix tests for pre-Test-More-0.88 (https://github.com/doy/try-tiny/pull/10)
  - Drop upstreamed patch for building with Test::More < 0.88


author: Remi Collet <rcollet@redhat.com> 1.1-4
changelog:
  - avoid empty debuginfo subpackage
  - add LICENSE, README and php54.7 man page #1061454
  - add scldevel subpackage #1063356


author: Remi Collet <remi@fedoraproject.org> - 3.1.13-1
changelog:
  - Version 3.1.13 (beta) - API 3.1.0 (stable)
  - add patches from upstream (fixes some tests)
  - change serveur port for tests (allow 32/64 bits build)


author: Remi Collet <remi@fedoraproject.org> - 3.1.15-0.1.svn329724
changelog:
  - update to 3.1.15dev with new directive 'enable_opcode_cache' (disabled)
    which allow to cache only user data and use another opcode cache
  - switch most configuration to upstream default


author: Remi Collet <rcollet@redhat.com> - 3.1.15-0.4.20140912
changelog:
  - upstream has switched from SVN to GIT
  - disable shm_strings_buffer in provided configuration
  - fix segfault when Zend Opcache is ebabled #1052178


author: Remi Collet <rcollet@redhat.com> 5.4.16-4
changelog:
  - improve mod_php, pgsql and ldap description
  - add missing man pages (phar, php-cgi)
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix #985350


author: Remi Collet <rcollet@redhat.com> 5.4.16-8
changelog:
  - relocate RPM macro #1008483
  - remove ZTS conditional stuf for ligibility
  - add mod_php for httpd24 collection


author: Remi Collet <rcollet@redhat.com> - 5.4.16-18
changelog:
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.4.16-20
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.40-2
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352


author: Remi Collet <rcollet@redhat.com> 1:1.9.4-5
changelog:
  - update Archive_Tar to 1.3.11
  - add explicit requires on all needed extensions (phpci)
  - fix pecl launcher (need ini to be parsed for some
    extensions going to be build as shared, mainly simplexml)
  - move metadata to /var/lib/pear
  - own %{_localstatedir}/www (#956529)
  - update config only if needed in %post
  - remove %config flag for macros.pear


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Remi Collet <rcollet@redhat.com> - 7.0.1-2
changelog:
  - allow wildcard in opcache.blacklist_filename and provide
    default /etc/php.d/opcache-default.blacklist


author: Remi Collet <rcollet@redhat.com> 1.1-5
changelog:
  - avoid empty debuginfo subpackage
  - add LICENSE, README and php55.7 man page #1061455
  - add scldevel subpackage #1063357


author: Remi Collet <rcollet@redhat.com> - 5.5.6-8
changelog:
  - fix patch name
  - fix memory leak introduce in patch for CVE-2014-1943
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712


author: Remi Collet <rcollet@redhat.com> - 5.5.6-9
changelog:
  - gd: fix NULL deref in imagecrop CVE-2013-7327
  - gd: drop vpx support, fix huge memory consumption #1075201


author: Remi Collet <rcollet@redhat.com> - 5.5.6-10
changelog:
  - fileinfo: fix out-of-bounds memory access CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345


author: Remi Collet <rcollet@redhat.com> - 5.5.6-11
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.5.20-1
changelog:
  - rebase to PHP 5.5.20 #1057089
  - fix package name in description
  - php-fpm own session and wsdlcache dir
  - php-common doesn't provide php-gmp


author: Remi Collet <rcollet@redhat.com> - 5.5.21-2
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868


author: Remi Collet <rcollet@redhat.com> - 5.5.21-3
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 1.3.0-1
changelog:
  - release 1.3.0 (beta)
  - use system json-c when available (fedora >= 20)
  - use jsonc name for module and configuration


author: Slavek Kabrda <bkabrda@redhat.com> - 1.1-20
changelog:
  - Require python-pip and python-wheel (note: in rh-python34
    this is not necessary, because "python" depends on these).


author: Charalampos Stratakis <cstratak@redhat.com> - 1.1-21
changelog:
  - Properly define XDG_DATA_DIRS variable to avoid breaking applications (rhbz#1266529)
  - Escape apostrophs in metapackage manual page(rhbz#1219527)


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-10
changelog:
  - Modified patch so tests can acknowledge the existense or lack
  of SSLv2 support
  Resolves: rhbz#1319703


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-12
changelog:
  - Modified 00224-pep476-add-toggle-for-cert-verify.patch to use certificate verification
  config file from python27 SCL directory.
  Resolves: rhbz#1111464


author: Tomas Orsava <torsava@redhat.com> - 2.7.8-15
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346358


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-1
changelog:
  - Rebased to Python 2.7.13
  - Removed backport of PEP 466 (Patches 213-228)
  - Rebased/rewritten patches 1, 6, 10, 55, 102, 112, 134, 136, 137, 146, 153,
    156, 167, 170, 180, 181, 189, 191
  - Dropped patches 166, 184, 196, 197, 229, 230, 232, 237, 238, 242
  - Added the rewheel module: patch 198
  Resolves: rhbz#1402809


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-2
changelog:
  - Rebuilding because some .pyc/.pyo files were not properly generated in the
    official build for some reason


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1709403 and rhbz#1709407


author: Victor Stinner <vstinner@redhat.com> - 2.7.16-4
changelog:
  - Fix regression in the crypt module introduced in update to Python 2.7.16
    (fix the name of the _crypt module init function).


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703534 and rhbz#1704372


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-1
changelog:
  - Update to 2.7.18, the last release of the Python 2 series
  - Security fix for CVE-2019-18348
  - Security fix for CVE-2019-20907
  Resolves: rhbz#1882656, rhbz#1882670, rhbz#1882666


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883541


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-1
changelog:
  - Update to 2.7.18, the last release of the Python 2 series
  - Security fix for CVE-2019-18348
  - Security fix for CVE-2019-20907
  Resolves: rhbz#1881145, rhbz#1765149, rhbz#1856542


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883254


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-3
changelog:
  - Security fixes for CVE-2021-3177, CVE-2021-23336 and CVE-2020-27619
  Resolves: rhbz#1918168, rhbz#1928904, rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-4
changelog:
  - Security fixes for CVE-2021-3733, CVE-2021-3737, CVE-2021-4189 and CVE-2022-0391
  - Fix test suite issues with the latest expat security update
  Resolves: rhbz#1995234, rhbz#1995162, rhbz#2036020, rhbz#2047376


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-3
changelog:
  - Properly generate bytecompilation files for Python itself
  Fixes:
  rhbz#967224
  rhbz#967288
  rhbz#968199


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-9
changelog:
  - Add patch to resolve missing libffi while building
  - Remove BuildRequires: db4-devel, add BuildRequires: libdb-devel


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.8-1
changelog:
  - Update to 2.7.8.
  Resolves: rhbz#1167912
  - Make python-devel depend on scl-utils-build.
  Resolves: rhbz#1170993


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.8-2
changelog:
  - Fix %check setion not failing properly on failed test
  - Fixed CVE-2013-1752, CVE-2013-1753 
  Resolves: rhbz#1187779


author: Tomas Orsava <torsava@redhat.com> - 3.6-3
changelog:
  - Moved the license text to %doc due to %license macro not working properly
    in RHSCLs with respect to package uninstallation. (rhbz#1334670)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
  - Rebase to new snapshot with some fixes integrated
  - Reenable one test that I can't replicate the failure with.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.2.1-5
changelog:
  - Rebuild to generate bytecode properly after fixing rhbz#956289
  - scl-utils now compile man-pages -> use proper name in %files.


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Charalampos Stratakis <cstratak@redhat.com> - 7.1.0-2
changelog:
  - Change license tag to doc tag so directory is owned by the collection
  - Will revert when ownership of directories is defined in scl-utils-build package
  Resolves: rhbz#1334447


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Rebased to 8.1.2
  - Updated to a new PyPI source URL
  - Rebased and renamed prefix-stripping Patch 0
  Resolves: rhbz#1344674


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-4
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1882669


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-5
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1882668


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-4
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1774944


author: Charalampos Stratakis <cstratak@redhat.com> - 8.1.2-5
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1774985


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
  - update for upstream release
  - Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
  - Fix python main package having dependencies for the python2.6 subpackage
  - Fix places that used the default python instead of python26
  - Attempt to make byte compilation more robust in case we add python3 to EPEL5
  - Run unittests on python3 in F15+


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996705


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tomas Orsava <torsava@redhat.com> - 13.1.0-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory
  Resolves: rhbz#1353200


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1-4
changelog:
  - Remove unneded rhel-5 specifics.
  - Add some more dependencies to metapackage spec.
  - Fix the enable scriptlet variable definition to be really secure.
  - Move the rpm scripts to python-devel, so that possible depending
  collections can use them as well.


author: Robert Kuska <rkuska@redhat.com> - 1-7
changelog:
  - Make building depending collections on top of python33 easier
  - Add prep phase with setup macro because of rhel7 requirements


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/python33/root/usr/lib64/python3.3/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-4
changelog:
  - Own the pkgconfig dir and tapsetdir, these are not owned by any
  the respective packages in SCL (rhbz#966547).


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-5
changelog:
  - Disable default bytecompilation during build, fixes rhbz#971427.
  - Fix for gettext plural form headers, fixes rhbz#968928.
  - Compile debug build libraries with -O1, fixes rhbz#967900.
  - Print repr() in when C assert fails in debug build, fixes rhbz#971858.


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-8
changelog:
  - Fix memory leak in gdbm module (rhbz#977308)
  - Make building depending collections on top of python33 easier
  - Fix build with libffi containing multilib wrapper for ffi.h (rhbz#979696).


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-9
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-13
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-14
changelog:
  - Addendum for the Fix for CVE-2016-0772 (rhbz#1303647)
    In this version of Python, smtplib has 644 permissons, not 755,
    thus I modified the patch to expect this and not adjust the permissons.
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-15
changelog:
  - Addendum for the Fix for CVE-2016-5699 (rhbz#1303699)
    Python 3.3 does not yet have functions fullmatch and subTest,
    the patch was rewritten accordingly
  Resolves: rhbz#1346359


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.5-1
changelog:
  - Rebuilt for SCL.
  - Updated to version 1.5.
  - python-imaging is only a soft dependency, removing it for now.


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099 
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996706


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-5
changelog:
  - Rename the patch for test imports to be the same as in RHEL 6 branch.
  - Fix failure in fips mode if index name is too long.
  Resolves: rhbz#1054676


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core SDK 3.1.107 and Runtime 3.1.7
  - Resolves: RHBZ#1862589
  - Resolves: RHBZ#1861112


author: Andrew Slice <aslice@redhat.com> - 3.1.117-1
changelog:
  - Update to .NET SDK 3.1.117 and Runtime 3.1.17
  - Fix renaming of coreclr to dotnet-coreclr
  - Remove the core-setup-hardening patch because the cmake file already contains the diff.
  - Resolves: RHBZ#1978388


author: Omair Majid <omajid@redhat.com> - 3.1.119-2
changelog:
  - Add initial support for bootstrapping and -source-built-artifacts subpackage
  - Related: RHBZ#2006868


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-6
changelog:
  - SASL password overflow via integer overflow (CVE-2018-16839)
  - fix use-after-free in handle close (CVE-2018-16840)
  - fix bad arethmetic when outputting warnings to stderr (CVE-2018-16842)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-10
changelog:
  - fix SMTP end-of-response out-of-bounds read (CVE-2019-3823)
  - fix NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)
  - fix NTLM type-2 out-of-bounds buffer read (CVE-2018-16890)
  - xattr: strip credentials from any URL that is stored (CVE-2018-20483)


author: Omair Majid <omajid@redhat.com> - 7.61.0-4
changelog:
  - Initial build for rh-dotnet30
  - SCL'ize package
  - Remove -minimal package
  - Fix dependencies to work on RHEL 7
  - Resolves: RHBZ#1746116


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-15
changelog:
  - do not crash when HTTPS_PROXY and NO_PROXY are used together (#1873327)
  - libcurl: wrong connect-only connection (CVE-2020-8231)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Omair Majid <omajid@redhat.com> - 2.8.1-11
changelog:
  - SCL'ize package
  - Remove dependency on python3
  - Remove pathfix invocation
  - Resolves: RHBZ#1746116


author: Andrew Slice <aslice@redhat.com> - 5.0.205-1
changelog:
  - Update to .NET SDK 5.0.205 and Runtime 5.0.8
  - Added a patch to remove references to the tests directory from other patches.
  - Resolves: RHBZ#1979991


author: Mat Booth <mat.booth@redhat.com> - 1-7
changelog:
  - Split installation between main metapackage and "base" metapackage,
    rhbz#1361195
  - Enable DTS 6, if installed


author: Mat Booth <mat.booth@redhat.com> - 3.2-14.2
changelog:
  - Perform bootstrap build
  - Add a patch to use exec maven plugin as an alternative to the unavailable
    antlr2 maven plugin


author: Mat Booth <mat.booth@redhat.com> - 1.54-1
changelog:
  - Update to 1.54, fixes rhbz#1270249
  - Install with mvn_install
  - Fix test suite failures, fixes rhbz#1049007
  - Move some tests that were erroneously in the main jar,
    avoids a runtime dep on junit in OSGi metadata


author: Mat Booth <mat.booth@redhat.com> - 1.54-1
changelog:
  - Update to 1.54, fixes rhbz#1275172
  - Install with mvn_install
  - Move some tests that were erroneously in the main jar,
    avoids a runtime dep on junit in OSGi metadata
  - Fix most of the test failures


author: Mat Booth <mat.booth@redhat.com> - 3.1-10.2
changelog:
  - Build as a compat package to avoid conflicts
  - Fix references to asm to use asm5 compat package
  - Don't try to disable doclinting
  - Accomodate for older bnd tool


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.6.0-6
changelog:
  - Disable droplets being loaded by the reconciler.
  - Fix possible NPE in droplet p2.runnable property check.


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.1-1
changelog:
  - Update to Neon.1 release.
  - Set qualifiers at source-modification-time instead of build-time, to
    eliminate descrepancies between architectures, rhbz#1374938
  - Set bootstrap flag for new primary architecture.


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.1-2.2
changelog:
  - Re-synchronise with Fedora branch
  - Add missing requires to test package to fix symlinks,
    rhbz#1373096 and rhbz#1367471


author: Nick Boldt <nboldt@redhat.com> - 1:4.6.1-2.3
changelog:
  - Increase minimum memory for Eclipse/devstudio, rhbz#1389057
  - Enable nashorn extension for javascript tools/devstudio, rhbz#1380438


author: Mat Booth <mat.booth@redhat.com> - 1:4.6.2-3
changelog:
  - Drop dep on javax.annotation APIs, these should instead be provided by the JRE
    through the system bundle - rhbx#1392150


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.6.2-7
changelog:
  - Hide the p2 Droplets from the Available Software Sites listing.
  - Guard against null URI path in droplet check for Install Wizard Combo.
  - Resolves: rhbz#1413778, rhbz#1420225


author: Mat Booth <mat.booth@redhat.com> - 1:9.1.0-1
changelog:
  - Update to Neon.1 release
  - Fix bootstrapping modes
  - Fix binary stripping and permissions on native libraries
  - Fix build on ppc64le


author: Mat Booth <mat.booth@redhat.com> - 5.7.0-1
changelog:
  - Update to latest release
  - Fix indexing problems caused by split-packages in Lucene libs - rhbz#1397238
  - Drop some ancient obsoletes


author: Mat Booth <mat.booth@redhat.com> - 5.7.1-1.3
changelog:
  - Add patch to prevent hanging when loading a large man page in the hoverhelp
  - Resolves: rhbz#1483335


author: Mat Booth <mat.booth@redhat.com> - 3.13.2-1
changelog:
  - Update to latest release
  - Set qualifiers to source-modification-time instead of build-time, to
    eliminate descrepancies between architectures
  - Add SDK package for sources


author: Mat Booth <mat.booth@redhat.com> - 2.12.0-1.2
changelog:
  - Always use droplets
  - Avoid unnecessary symlinks before Eclipse is bootstrapped
  - Only build core modules before Eclipse is bootstrapped


author: Mat Booth <mat.booth@redhat.com> - 4.4.0-4.2
changelog:
  - Fix self-requirements, temporarily disable circular BR
  - Port to older jetty
  - Add missing BRs on servlet and jetty
  - Relax dep on gson


author: Mat Booth <mat.booth@redhat.com> - 1.7.1-0.3.git3aeac6a
changelog:
  - Rebuild against new maven-indexer
  - Port tests to latest jetty to drop dep on obsolete jetty8
  - Port to latest lucene and use from OSGi instead of embedding
  - Organise patches


author: Mat Booth <mat.booth@redhat.com> - 3.20.2-2
changelog:
  - Change tests packaging to avoid broken symlinks in sdk package
  - Move development features into tests package


author: Mat Booth <mat.booth@redhat.com> - 9.0.2-2
changelog:
  - Backport patch to compensate for API changes in CDT
  - Use global instead of define for macros
  - Increase max heap used in build for arm


author: Mat Booth <mat.booth@redhat.com> - 1:5.1.2-1
changelog:
  - Update to release 5.1.2
  - Remove bundled third-party libs rhbz#1339362
  - Fix valid encoding detection failure rhbz#1327642
  - Improve system jython integration
  - Make symlinking jars more portable


author: Mat Booth <mat.booth@redhat.com> - 1:5.1.2-1.2
changelog:
  - Prevent bytecode compilation inside the SCL
  - Always use droplets location
  - Fixup references to asm 5 and lucene 5
  - Patch out fund raising screen
  - Remove pep/autopep8 symlinking for now


author: Mat Booth <mat.booth@redhat.com> - 4.1.0-2
changelog:
  - Improve bootstrapping mode
  - Split out local connecter, which requires CDT
  - Add a SDK package for source bundles


author: Mat Booth <mat.booth@redhat.com> - 3.8.0-1
changelog:
  - Update to tagged version
  - Drop ancient provides/obsoletes
  - Merge some sub-packages to eliminate cyclical deps and simplify
    the packaging a little bit
  - Rationalise BRs and Rs


author: Mat Booth <mat.booth@redhat.com> - 3.8.0-1.2
changelog:
  - Disable features that require datatools, which is not yet available
  - Fix version requirements of rhino and gson
  - Patch to accomodate older jetty
  - Filter out incorrect auto-requires on rhino


author: Mat Booth <mat.booth@redhat.com> - 3.8.2-1.2
changelog:
  - Disable bits that rely on datatools
  - Re-add jetty patch
  - Use glassfish servlet in wst.server.preview.adapter


author: Omair Majid <omajid@redhat.com> - 2.3.19-9
changelog:
  - Use .mfiles to pick up xmvn metadata
  - Don't use obsolete _mavendepmapfragdir macro
  - Fix FTBFS issues


author: gil cattaneo <puntogil@libero.it> 2.3.19-11
changelog:
  - fix FTBFS
  - adapt to current guideline
  - fix some rpmlint problems
  - enable javadoc task
  - enable maven-upload task for generate pom file
  - Fix paths to jython


author: Mat Booth <mat.booth@redhat.com> - 2.4.0-2.2
changelog:
  - Build using the easymock3 compat package
  - Disable unbuildable modules spring-bridge, persistence
  - Don't package maven plugins


author: Noa Resare <noa@resare.com> - 18.0-5
changelog:
  - enable module guava-testlib
  - enable tests in guava-testlib
  - backport fix to HashMap related test from 19.0-SNAPSHOT


author: Mat Booth <mat.booth@redhat.com> - 18.0-6.2
changelog:
  - Disable building tests due to unavailable Google 'truth' library
  - Avoid run-time dep on findbugs annotations
  - Remove some problematic doc files causing "cpio: bad magic" on EL6


author: Mat Booth <mat.booth@redhat.com> - 2.6.3-2.2
changelog:
  - Remove all unneeded providers, we only need json
  - Switch to Glassfish javax.ws.rs API
  - Remove deps on unavailable jersey 1.x libs and skip tests


author: Mat Booth <mat.booth@redhat.com> - 5.1.2-0.1.gite0570bf
changelog:
  - Update to 5.1.2 snapshot (as available in Maven Central)
  - Port to Lucene 5
  - Drop unneeded dep on truezip
  - Adopt license macro


author: Mat Booth <mat.booth@redhat.com> - 1.10.19-10
changelog:
  - Explicitly import more cglib packages in OSGi metadata to prevent mockito
    failing under certain circumstances during Eclipse test suites


author: Mat Booth <mat.booth@redhat.com> - 6.9.12-1
changelog:
  - Update to upstream version 6.9.12
  - Avoid 'SNAPSHOT' in pom version to fix tests in testng-remote package


author: Mat Booth <mat.booth@redhat.com> - 0.25.0-7.2
changelog:
  - Perform bootstrap build
  - Drop patch for porting to plexus/maven-archiver 3.0.1
  - Add patch for porting to xmvn 2.1.0
  - Drop patches for porting to surefire > 2.17
  - Workaround bugs in maven-plugin-plugin due to having java 8 code on the
    classpath when extracting mojo descriptors


author: Mat Booth <mat.booth@redhat.com> - 0.23.0-4
changelog:
  - Fix build against new maven-archiver, which removed some deprecated methods
    that tycho was using


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - config: document value 2 for protocol.version (upstream patch)
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1
    (see #1625677)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Arbitrary path overwriting via export-marks in-stream command
    Resolves: CVE-2019-1348
  - Recursive submodule cloning allows using git directory twice with synonymous
    directory name written in .git/
    Resolves: CVE-2019-1349
  - Fixes CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Carl George <carl@george.computer> - 2.3.4-4
changelog:
  - Use vendored libraries on RHEL
  - Skip test on RHEL
  - Don't build man pages on RHEL due to missing ronn
  - Don't build html versions of man pages


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.27.0-4
changelog:
  - Fixes CVE-2022-23521 and CVE-2022-41903
  - Tests: try harder to find open ports for apache, git, and svn
  - Resolves: #2162071


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-1
changelog:
  - Initial commit with git v2.9.2
  - Fixes troubles with infinite loop in "git ls-tree" for broken symlink
    under refs/heads
  - Rename git.service to git@.service to make it usable
  - Resolves: #1204191 #1251460


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-5
changelog:
  - fix service file to use rh-git29 instead of native git
  - fix desktop file - changed names & paths inside the file,
      use scl rh-git29 instead of native git, change filename
      and path of the file to system directory instead of scl
  - *git-daemon: xinetd.d: use system directory and added prefix to the filename
  - *git-gitweb: store git.conf to directory of httpd24 sclm add scl prefix
      to the filename and correct paths inside the file to correct rh-git29
      www directory
  - fix doubled path for emacs-sitelisp files
  - build and link files with httpd24-libcurl
    Resolves: #1345897


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-1
changelog:
  - Rebase to 2.9.3
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1359176 #1382708


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-3
changelog:
  - prevent command injection via malicious ssh URLs
  - dissalow repo names beginning with dash
    Resolves: CVE-2017-8386 CVE-2017-1000117


author: Sebastian Kisela <skisela@redhat.com> - 2.9.3-4
changelog:
  - Backport the fix for CVE-2018-11235 and CVE-2018-11233.
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.11.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 2.7.x.


author: Marcel Plch <mplch@redhat.com> - 2.9.3-6
changelog:
  - Patch for arbitrary code execution via .gitmodules (CVE-2018-17456)
  - Original backport by Jonathan Nieder for Debian
  - Original backport: https://repo.or.cz/git/debian.git/commit/63af93488dc4066a937aaa130b35dff398db2368
  - Original tests: https://repo.or.cz/git/debian.git/commit/2b4d394113d28a856f2cf375d0cbef3806e9a2c8
  - Resolves: rhbz#1638265


author: Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
changelog:
  - Update to 1.8.15 (#1660514)
  - Build with new OpenSLL for ALPN support (#1595865)
  - Fix seemless reloads for send-proxy/accept-proxy (#1649041)
  - Resolve CVE-2018-11469 (#1584788)
  - Resolve CVE-2018-20102 (#1659017)
  - Resolve CVE-2018-20103 (#1659018)


author: Alexander Kurtakov <akurtako@redhat.com> 1.8-0.12.svn1230816.11
changelog:
  - Move to Batik 1.7 manifests.
  - Remove old stuff.
  - Remove provenance=W3C attribute from Import-Package. (rhbz #1073110)


author: Alexander Kurtakov <akurtako@redhat.com> 0:5.4.1-2
changelog:
  - Organize Sources numbering.
  - Drop old jpackage header - package has nothing in common anymore.
  - Drop 3+ years old provides/obsoletes.
  - Move old changelog to separate file to ease working with the spec file.


author: Michal Srb <msrb@redhat.com> - 5.0.3-1.1
changelog:
  - SCL-ize spec file
  - Remove dependency on unavailable parent POM
  - Drop jpackage_script
  - Make it a compat package


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.9.2-1
changelog:
  - Update to upstream version 1.9.2
  - Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
  - Remove RPM bug workaround


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Roman Vais <rvais@redhat.com> - 1.57-1
changelog:
  - Update to upstream version 1.57
  - Correct directory setup in prep section
  - Change of tarball name in source url to correspond to upstream


author: Roman Vais <rvais@redhat.com> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Add patch for issue https://github.com/cbeust/jcommander/issues/367


author: gil cattaneo <puntogil@libero.it> 1.1-10
changelog:
  - rebuilt for upgrade el apis gid:aid (rhbz#1223468)
  - adapt to current guideline
  - use mvn()-like BRs
  - fix rpmlint problem in changelog entries


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.1-21
changelog:
  - Update to current packaging guidelines
  - Remove rpm bug workaround
  - Remove legacy obsoletes/provides


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7.6-2.5
changelog:
  - Fix various security flaws
  - Resolves: CVE-2018-11307, CVE-2018-12022, CVE-2018-12023,
    CVE-2018-14718, CVE-2018-14719, CVE-2018-14720, CVE-2018-14721,
    CVE-2018-19360, CVE-2018-19361, CVE-2018-19362


author: Marian Koncek <mkoncek@redhat.com> - 2.7.6-2.9
changelog:
  - Fix security vulnerabilities
  - Resolves: CVE-2020-10969, CVE-2020-11113, CVE-2020-10968, CVE-2020-11111,
    CVE-2020-11112


author: Michael Simacek <msimacek@redhat.com> - 0:6.1.3-1
changelog:
  - Update to upstream version 6.1.3
  - Use new upstream location
  - Generate scripts with jpackage_script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-1
changelog:
  - Update to upstream version 3.0.0
  - Remove legacy obsoletes/provides
  - Update to current packaging guidelines


author: Mat Booth <mat.booth@redhat.com> - 3.0.1-2
changelog:
  - Fix build against new maven-archiver, which removed some deprecated methods
    that this plugin was using


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: gil cattaneo <puntogil@libero.it> - 1.0.5-5
changelog:
  - update Url and Source0 fields
  - minor changes to adapt to current guideline
  - introduce license macro


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: gil cattaneo <puntogil@libero.it> 31-4
changelog:
  - remove enforcer plugin support
  - related to rhbz#1308237,1308238
  - use BRs mvn()-like
  - introduce license macro


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.2-15
changelog:
  - Use %jpackage_script to generate scripts.
  - Add OSGi metadata to manifest instead of discarding everything else in it.
  - Drop dependency on xml-commons-api, add one on java(-headless).
  - Crosslink javadocs with Java's.
  - Include NOTICE* in docs.
  - Update URLs.
  - Specfile cleanups.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Mat Booth <mat.booth@redhat.com> - 1.9.5-1
changelog:
  - Update to latest upstream release
  - Add a bootstrap mode to break circular self-dependency
  - Patch out use of optional external unixsocket library that is not present
    in Fedora
  - Patch to avoid bundling ASM inside the shaded jar


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3-22
changelog:
  - Elimitate race condition when injecting JAR manifest
  - Resolves: rhbz#1495234
  - Remove bogus hamcrest-text JAR


author: Mat Booth <mat.booth@redhat.com> - 4.5.6-2
changelog:
  - Add a patch to allow building with mockito 2
  - Don't package tests jars, the tests jars have the same OSGi metadata as the
    main jars, which can cause tycho to resolve the wrong one when building
    eclipse plugins


author: Marian Koncek <mkoncek@redhat.com> - 4.5.9-1.3
changelog:
  - Fix incorrect handling of malformed authority component in request URIs
  - Resolves: CVE-2020-13956


author: Michael Simacek <msimacek@redhat.com> - 2.0.6-12
changelog:
  - Repack tarball without bundled jars
  - The repacked jar contains slightly different source (force push by upstream?)
  - Correct license tag


author: Severin Gehwolf <sgehwolf@redhat.com> - 5.2.0-3
changelog:
  - Add explicit requirement on javapackages-tools since junit5 script
    uses java-functions. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 5.3.1-1
changelog:
  - Update to latest upstream release
  - Conditionally build the console modules
  - Remove stuff for discontinued gradle plugin


author: Mat Booth <mat.booth@redhat.com> - 5.4.0-1
changelog:
  - Update to latest upstream release
  - License switched to EPL only now the surefire provider was moved to the
    Apache Surefire project


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.2.17-23.4
changelog:
  - Fix Unsafe deserialization flaw in Chainsaw log viewer
  - Fix SQL injection when application is configured to use JDBCAppender
  - Fix remote code execution when application is configured to use JMSSink
  - Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-4
changelog:
  - Remove legacy obsoletes/provides
  - Remove dependency on junit-addons
  - Remove build-dependency on maven-invoker-plugin


author: Mat Booth <mat.booth@redhat.com> - 2.23.9-1
changelog:
  - Update to latest upstream version
  - Switch to maven build system using a custom pom to avoid a dep on gradle


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-4
changelog:
  - drop explicit Requires for openssl, gd
  - run nginx under SCL environment from systemd service
  - fix module .conf path in nginx.conf
  - pass PERL5LIB, LD_LIBRARY_PATH from env when perl is loaded (#1421927)


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-7
changelog:
  - filter auto-provides from module subpackages (#1434349)
  - drop perl vendorarch directory ownership (#1434333)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.10.2-8
changelog:
  - Resolves: CVE-2017-7529 rh-nginx110-nginx: nginx: Integer overflow
    in nginx range filter module leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-8.1
changelog:
  - Resolves: #1648363 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1650091 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9
changelog:
  - Resolves: #1648226 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1648220 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9.1
changelog:
  - Resolves: #1744814 - CVE-2019-9511 rh-nginx110-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744327 - CVE-2019-9513 rh-nginx110-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745041 - CVE-2019-9516 rh-nginx110-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 1.12-3
changelog:
  - Resolves: #1469535 - mistakes in README file
  - Resolves: #1264421 - Unexpanded macros in metapackage README


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.12.1-1
changelog:
  - update to 1.12.1
  - Resolves: CVE-2017-7529 nginx: Integer overflow in nginx range filter module
    leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.12.1-2.1
changelog:
  - Resolves: #1648364 - CVE-2018-16845 rh-nginx112-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1650094 - CVE-2018-16844 rh-nginx112-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1650088 - CVE-2018-16843 rh-nginx112-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.12.1-3
changelog:
  - Resolves: #1648227 - CVE-2018-16843 rh-nginx112-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1648224 - CVE-2018-16844 rh-nginx112-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648221 - CVE-2018-16845 rh-nginx112-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.12.1-3.1
changelog:
  - Resolves: #1744816 - CVE-2019-9511 rh-nginx112-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744332 - CVE-2019-9513 rh-nginx112-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745039 - CVE-2019-9516 rh-nginx112-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - update to version 1.14.1
  - Resolves: #1648223 - CVE-2018-16845 rh-nginx114-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1648225 - CVE-2018-16844 rh-nginx114-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648228 - CVE-2018-16843 rh-nginx114-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1.1
changelog:
  - Resolves: #1744818 - CVE-2019-9511 rh-nginx114-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744330 - CVE-2019-9513 rh-nginx114-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745043 - CVE-2019-9516 rh-nginx114-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - update to version 1.14.1
  - Resolves: #1650092 - CVE-2018-16843 rh-nginx114-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1650093 - CVE-2018-16844 rh-nginx114-nginx: nginx:
    Excessive CPU usage via flaw in HTTP/2 implementation
  - Resolves: #1648365 - CVE-2018-16845 rh-nginx114-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-3
changelog:
  - Resolves: #1745696 - CVE-2019-9511 rh-nginx116-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745689 - CVE-2019-9513 rh-nginx116-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745668 - CVE-2019-9516 rh-nginx116-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-4.1
changelog:
  - Resolves: #1848449 - CVE-2019-20372 rh-nginx116-nginx: nginx: HTTP request
    smuggling via error pages in http/ngx_http_special_response.c


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-5
changelog:
  - Resolves: #1798233 - CVE-2019-20372 rh-nginx116-nginx: nginx: HTTP request
    smuggling via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-6
changelog:
  - Resolves: #1963181 - CVE-2021-23017 rh-nginx116-nginx: nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-1
changelog:
  - Resolves: #1853206 - RFE: add collection for NGINX 1.18
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1963183 - CVE-2021-23017 rh-nginx118-nginx: nginx: Off-by-one
    in ngx_resolver_copy() when labels are followed by a pointer to a root 
    domain name


author: Alan Steinberg <alan.steinberg@oracle.com> - 1:1.20.1-1.1
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Natalya Naumova <natalya.naumova@oracle.com> - 1:1.8.0-3.0.1
changelog:
  - Updated index.html and poweredby.png [orabug 20082737]
  - added oracle modifications for passenger-4.0.50


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.8.1-1.1
changelog:
  - Resolves: #1648362 - CVE-2018-16845 rh-nginx18-nginx: nginx: Denial of
    service and memory disclosure via mp4 module


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.3.0-1
changelog:
  - Update to 8.3.0
  - update V8 to 6.0
  - update libuv to 1.13.1
  - add bundled provides for npm modules
  - enable aarch64 builds


author: Zuzana Svetlikova <zsvtelik@redhat.com> - 8.9.4-2
changelog:
  - Resolves: RHBZ#1513560 #1542079
  - fix outdated minizlib dependency in npm node_modules tree
  - https://github.com/nodejs/node/pull/16509


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.1.0-1
changelog:
  - Initial v10 packaging
  - patch crypto/openssl 1.1.0 -> 1.0.2
  - remove scl prefixes from bundled dependencies
  - TODO: update patches and dependencies


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.10.0-1
changelog:
  - rebase to v10.10.0
  - update patches for openssl
  - TODO: remove useless comments, fix failing tests, update bundled provides


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 10.10.0-2
changelog:
  - Resolves: RHBZ#1584252
  - comment out native.req file to prevent conflict with other Node.js
  - installations (rhbz#1637922)


author: Jan Staněk <jstanek@redhat.com> - 10.16.3-1
changelog:
  - Rebase to version 10.16.3
  - Resolves: rhbz#1744307 rhbz#1744593 rhbz#1744732 rhbz#1744745 rhbz#1744773 rhbz#1744807 rhbz#1745090 rhbz#1745160


author: Jan Staněk <jstanek@redhat.com> - 10.16.3-1
changelog:
  - Rebase to version 10.16.3
  - Resolves: rhbz#1744308 rhbz#1744594 rhbz#1744733 rhbz#1744746 rhbz#1744774 rhbz#1744808 rhbz#1745091 rhbz#1745161


author: Honza Horak <hhorak@redhat.com> - 12.10.0-1.1
changelog:
  - Rebase to 12.10.0 and apply patches for openssl compatibility
    (patches prepared by Zuzana and Jan)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 12.16.1
changelog:
  - Resolves: RHBZ#1800402, RHBZ#1800401, RHBZ#1800377, RHBZ#1774113
  - also 1788310, 1788305, 1788301 (December security release)
  - also 1793482
  - use devtoolset-8, build with -j4
  - added uvwasi bundled dependency
  - revert more features #23188, #30637, #29598, #29292, #29489, #30055, #30053


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 12.16.1
changelog:
  - Resolves: RHBZ#1800404, RHBZ#1800403, RHBZ#1800378, RHBZ#1774113
  - Resolves: RHBZ#1803154, RHBZ#1803157, RHBZ#1803160 (nmp CVEs)
  - also 1793482
  - use devtoolset-8, build with -j4
  - added uvwasi bundled dependency
  - revert more features #23188, #30637, #29598, #29292, #29489, #30055, #30053


author: Jan Staněk <jstanek@redhat.com> - 12.22.2-1
changelog:
  - Rebase to 12.22.2
    Resolves: CVE-2021-22918, CVE-2021-23362, CVE-2021-27290, CVE-2021-33502
  - Drop upstreamed deps-y18n-address-prototype-pollution-issue.patch


author: Jan Staněk <jstanek@redhat.com> - 12.22.4-1
changelog:
  - Rebase to 12.22.4 with additional fixes (http2-update-handling-of-streams-on-rst_stream-frames.patch)
    Resolves: CVE-2021-22930
  - Backport fix for CVE-2021-23343 in bundled(nodejs-path-parse)
    Resolves: rhbz#1986744


author: Jan Staněk <jstanek@redhat.com> - 12.22.12-1
changelog:
  - Rebase to last upstream release
    Resolves: CVE-2021-37701 CVE-2021-37712 CVE-2021-22960 CVE-2021-22959
    Resolves: CVE-2021-3918 CVE-2021-44531 CVE-2021-44532 CVE-2021-44533
    Resolves: CVE-2022-21824 CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 12.22.12-2
changelog:
  - Re-create patch for CVE-2021-44906 and apply to all found bundled dependencies
    Resolves: rhbz#2073596


author: Jan Staněk <jstanek@redhat.com> - 14.17.2-1
changelog:
  - Rebase to 14.17.2
    Resolves: CVE-2021-22918, CVE-2021-23362, CVE-2021-27290, CVE-2021-33502
  - Remove upstreamed deps-y18n-CVE-2020-7774.patch


author: Jan Staněk <jstanek@redhat.com> - 14.17.4-1
changelog:
  - Rebase to 14.17.4 with additional fixes (update-handling-on-rst_stream-frames.patch)
    Resolves: CVE-2021-22930
  - Patch bundled(nodejs-path-parse) for CVE-2021-23343
    Resolves: rhbz#1986745


author: Jan Staněk <jstanek@redhat.com> - 14.17.6-1
changelog:
  - Rebase to 14.17.6
    Resolves: rhbz#2031767 rhbz#2031769
  - Drop CVE-2021-23343-path-parse-redos.patch: fixed upstream


author: Jan Staněk <jstanek@redhat.com> - 14.20.1-2
changelog:
  - Record additional fixes included in current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824
    Resolves: CVE-2022-0235 CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 14.21.1-2
changelog:
  - Provide full-i18n subpackage
    Resolves: rhbz#2009880
  - Properly backport CVE-2022-0235 fix
    Resolves: CVE-2022-0235
  - Fix prototype poisoning in qs dependency
    Resolves: CVE-2022-24999


author: Jan Staněk <jstanek@redhat.com> - 14.21.3-1
changelog:
  - Rebase to 14.21.3
    Resolves: rhbz#2153715
    Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900
    Resolves: CVE-2022-4904


author: Alan Steinberg <alan.steinberg@oracle.com> - 14.21.3-4
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 14.21.3-3
changelog:
  - Decrease debuginfo verbosity to reduce memory consumption during final library linking
  - Only for Firefox, need to build for i686 and ppc64
  - Related: rhbz#2153715


author: Jan Staněk <jstanek@redhat.com> - 14.21.3-4
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-32067 CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Tomas Hrcka <thrcka@redhat.com> - 4.3.0-5
changelog:
  - New upstream release 4.3.0
  - https://nodejs.org/en/blog/release/v4.3.0/
  - Build with bundled openssl, this will be reverted ASAP
  - Unbundled http-parser


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.6.2-4
changelog:
  - Resolves: #1392914
  - Update to 4.6.2
  - Modified/fixed/refactored patches
  - http tests were failing, had to update http-parser too


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.8.4-2
changelog:
  - Resolves: RHBZ#1476314
  - backport https://github.com/nodejs/node/commit/e3ef382f357d2bd12e7429711936aa79cc1d7699
  - fix segfaulting npm


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.8.4-2
changelog:
  - Resolves: RHBZ#1476315
  - backport https://github.com/nodejs/node/commit/e3ef382f357d2bd12e7429711936aa79cc1d7699
  - fix segfaulting npm


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 0.1.3-4
changelog:
  - Add missing ExclusiveArch and BuildArch
  - Use macro in -runtime dependency
  - Rebuilt with updated metapackage


author: Tomas Hrcka <thrcka@redhat.com> - 0.0.4-4
changelog:
  - Add missing macro /usr/lib/rpm/rh-nodejs4-symlink-deps /opt/rh/rh-nodejs4/root/usr/lib/node_modules


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1.2.2-1
changelog:
  - New upstrem release
  - change license
  - change URL
  - remove Source1 and Source10
  - add LICENSE to %doc
  - updated Summary and %description


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 3.4.0-5
changelog:
  - Update addon.gypi
  - Update patch
  - Fixdep badly processed deps
  - Updated with script
  - Rebuild from zvetlik/rh-nodejs6


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-2
changelog:
  - Rebuild from zvetlik/rh-nodejs6
  - newer releases have problems with debug
  - add procps-ng for tests
  - remove unused patches


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476317
  - turn off lots of tests (mainly https and tls)
  - update to latest v6.x version (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)
  - add lldbinit


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476316
  - turn off lots of tests (mainly https and tls)
  - update to latest v6.x version (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)
  - add lldbinit


author: Tomas Hrcka <thrcka@redhat.com> - 0.0.4-4
changelog:
  - Add missing macro /usr/lib/rpm/rh-nodejs6-symlink-deps /opt/rh/rh-nodejs6/root/usr/lib/node_modules


author: Jared Smith <jsmith@fedoraproject.org> - 3.0.2-1
changelog:
  - Update to upstream 3.0.2 release
  - disable self-test until we get all the run-time dependencies into Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 5.1.2-3
changelog:
  - Fix package review issues
  - Use npm(foo) syntax for BuildRequires
  - Drop unnecessary buildroot cleanup
  - Fix capitalization of Summary:


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 8.1.4-1
changelog:
  - Security update (https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/)
  - Fixes RHBZ#1463132 and RHBZ#1469706


author: Jan Staněk <jstanek@redhat.com> - 8.16.1-1
changelog:
  - Rebase to 8.16.1
  - Resolves: rhbz#1744305 rhbz#1744591 rhbz#1744734 rhbz#1744747 rhbz#1744771 rhbz#1744809 rhbz#1745092 rhbz#1745158


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Jan Kaluza <jkaluza@redhat.com> - 4.0.50-5
changelog:
  - use /var/run/passenger instead of /tmp for temporary directory
  - use rpath to find libev and libev-eio


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0-2
changelog:
  - Added definition of LD_LIBRARY_PATH into the macro %__perl
  - Added macro %perl_small for SCL restrictions


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0-3
changelog:
  - Define macros %tests_req and %tests_subpackage_requires in case the
    perl-macros is not in buildroot


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
  - Update to 20120719:
    - Support using data from RangeMessage.xml, so you can use the latest data
      from ISBN without updating this module
  - Fix shellbang and permissions of make_data.pl script to placate rpmlint
  - Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
    not in normal operation
  - Don't need to remove empty directories from the buildroot
  - BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
  - BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
  - Update to 20120719.001:
    - Require Test::More ≥ 0.95 for subtest support
    - No code or feature changes
  - Bump Test::Manifest version requirement to 1.21
  - Bump Test::More version requirement to 0.95
  - Drop redundant buildreq perl(Test::Prereq)


author: Paul Howarth <paul@city-fan.org> - 20140910.001-1
changelog:
  - Update to 20140910.001
    - Update to the latest data (2014-09-10)
  - Use %license
  - Classify buildreqs by usage
  - Drop redundant LWP::Simple requires filter


author: Paul Howarth <paul@city-fan.org> - 20140910.002-1
changelog:
  - Update to 20140910.002
    - Look in the current directory for RangeMessage.xml if it's not in other
      locations; this can help with various Perl app packagers (also try
      ISBN_RANGE_MESSAGE env var)


author: Petr Pisar <ppisar@redhat.com> - 2.04-2
changelog:
  - Do not load Test::Deep where not needed
  - Make Test::Deep tests optional as it's not in the core in contrast to the
    CGI-Fast


author: Paul Howarth <paul@city-fan.org> - 2.132830-1
changelog:
  - Update to 2.132830
    - Fixed incorrectly encoded META.yml
    - META validation used to allow a scalar value when a list (i.e. array
      reference) was required for a field; this has been tightened and
      validation will now fail if a scalar value is given
    - Installation on Perls < 5.12 will uninstall older versions installed
      due to being bundled with ExtUtils::MakeMaker
    - Updated Makefile.PL logic to support PERL_NO_HIGHLANDER
    - Dropped ExtUtils::MakeMaker configure_requires dependency to 6.17
    - CPAN::Meta::Prereqs now has a 'merged_requirements' method for combining
      requirements across multiple phases and types
    - Invalid 'meta-spec' is no longer a fatal error: instead, it will usually
      be treated as spec version "1.0" (prior to formalization of the meta-spec
      field); conversion has some heuristics for guessing a version depending on
      other fields if 'meta-spec' is missing or invalid
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 2.140640-1
changelog:
  - Update to 2.140640
    - Improved bad version handling during META conversion
    - When downgrading multiple licenses to version 1.x META formats, if all the
      licenses are open source, the downgraded license will be "open_source", not
      "unknown"
    - Added a 'load_string' method that guesses whether the string is YAML or
      JSON
  - Drop obsoletes/provides for old tests sub-package
  - Classify buildreqs by usage
  - Package upstream's CONTRIBUTING file
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.142060-1
changelog:
  - Update to 2.142060
    - Added ability for CPAN::Meta::Converter to convert metadata fragments
      (incomplete portions of a metadata structure)
    - Optimized internal use of JSON for datastructure cloning
    - Removed dependency on List::Util 1.33
    - Clarified language around 'dynamic_config' in the Spec
    - Clarified use of 'file' for the 'provides' field in the Spec
    - CPAN::Meta::Merge is a new class for merging two possibly overlapping
      instances of metadata, which will accept both CPAN::Meta objects and
      (possibly incomplete) hashrefs of metadata
  - Use %license


author: Petr Šabata <contyk@redhat.com> - 2.142690-1
changelog:
  - Update to 2.142690
    - Fixed use of incorrect method in CPAN::Meta::Merge implementation
    - Clarified documentation that no_index is a list of exclusions, and that
      indexers should generally exclude 'inc', 'xt' and 't' as well
    - CPAN::Meta::History::Meta_1_0 through 1_4 are added as a permanent
      record of 1.x versions of the metaspec


author: Paul Howarth <paul@city-fan.org> - 2.143240-1
changelog:
  - Update to 2.143240
    - Give correct path in nested merges such as resources
    - Removed strings test that should have been removed when
      CPAN::Meta::Requirements was removed to a separate dist


author: Paul Howarth <paul@city-fan.org> - 2.130-1
changelog:
  - Update to 2.130
    - from_string_hash can take optional constructor arguments
    - bad_version_hook callback gets module name as well as version string
    - undefined/empty versions given to from_string_hash or
      add_string_requirement now carp and are coerced to "0" instead of being
      fatal; this is more consistent with how the other requirement functions
      work
  - Provide six-digit version in a more robust way


author: Paul Howarth <paul@city-fan.org> - 2.131-1
changelog:
  - Update to 2.131
    - Merging Module => 0 into requirements is now optimized
    - Scalar::Utils removed as a prerequisite


author: Paul Howarth <paul@city-fan.org> - 1.5-1
changelog:
  - Update to 1.5
    - Work around global destruction order issue (CPAN RT#23568/68526)
  - This release by SHAY ⇒ update source URL
  - Drop %defattr, redundant since rpm 4.4
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Classify buildreqs by usage
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Another COW violation (CPAN RT#98069)
    - Misleading nesting/indentation found by Coverity (CPAN RT#95405)


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Silence more compiler warnings
    - Disable running of 07bufsize.t by default; COMPRESS_ZLIB_RUN_MOST needs to
      be set to run it, which makes life more bearable on legacy platforms


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Paul Howarth <paul@city-fan.org> - 0.101622-1
changelog:
  - Update to 0.101622
    - Add a link to an Advent article about Data-Section
    - Update bugtracker, repo, etc.
  - Run the release tests separately
  - BR: perl(base), perl(File::Find), perl(File::Temp) and perl(lib) for the test
    suite
  - Drop BR: perl(Pod::Coverage::TrustPod) and perl(Test::Pod::Coverage) as
    upstream has dropped their Pod coverage test
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.200003-1
changelog:
  - Update to 0.200003
    [THIS MIGHT BREAK STUFF]
    - Add an "encoding" parameter to set encoding of data section contents; this
      defaults to UTF-8
  - Drop support for old distributions as we now need Test::FailWarnings, which
    isn't available there


author: Paul Howarth <paul@city-fan.org> - 0.200005-1
changelog:
  - Update to 0.200005
    - Open DATA handles both :raw and :bytes to avoid content munging on Win32
    - This is not yet a perfect solution for Win32


author: Paul Howarth <paul@city-fan.org> - 0.200006-1
changelog:
  - Update to 0.200006
    - Skip tests on Win32 pre-5.14 related to line endings; perl munges the data
      before we're able to get at it


author: Paul Howarth <paul@city-fan.org> - 0.009-1
changelog:
  - Update to 0.009
    - In META.{yml,json}, point to public git repository
    - Bugfix: permit time of day for a DST change to extend up to 24:59:59,
      which POSIX (unclearly) permits and is actually seen in the current
      rule for timezone Asia/Amman
    - Support the extended form of the recipe syntax that is used by
      version 3 of the tzfile(5) file format
    - Bugfix: correct ->offset_for_local_datetime for perpetual-DST ruleset
      that can arise with the tzfile3 system
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.038-1
changelog:
  - Update to 0.038
    - Added: Support Exporter.pm's import negation syntax qw( !foo )
    - Added: Support Exporter.pm's regexp import syntax qw( /foo/ )
    - Fix minor error in documentation of generators
    - Improved handling of hashrefs of options passed to tags, and hashrefs of
      options found within %EXPORT_TAGS arrayrefs
    - Only attempt to merge hashes if we're sure they're both really hashes!


author: Paul Howarth <paul@city-fan.org> - 0.040-1
changelog:
  - Update to 0.040
    - Document warning and error messages produced by Exporter::Tiny
    - Exporter::Tiny would previously cause B.pm to be loaded into memory any
      time it exported anything: it no longer does
    - No longer die when redefining locally defined subs
    - Warn when redefining any subs
  - Use %doc where possible


author: Paul Howarth <paul@city-fan.org> - 0.042-1
changelog:
  - Update to 0.042
    - Add an 'unimport' feature
    - Option validation needs to happen after expanding tags
    - Housekeeping on %TRACKED


author: Paul Howarth <paul@city-fan.org> - 2.064-1
changelog:
  - Update to 2.064
    - Use android-compatible flags when calling gzip in
      IO-Compress/t/050interop-gzip.t (CPAN RT#90216)


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - IO::Uncompress::Gzip
      - Documentation of ExtraFlags stated the XFL values for BEST_COMPRESSION
        and BEST_SPEED use the values 2 and 4 respectively; they should be 4 and
        2 (code for setting XFL was correct)
    - IO::Uncompress::Gunzip
      - Fix regression preventing gunzip to in-memory file handle (CPAN RT#95494)


author: Paul Howarth <paul@city-fan.org> - 2.067-1
changelog:
  - Update to 2.067
    - IO::Compress::RawDeflate unnecessarily loads IO::Seekable (CPAN RT#100257)
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Disable running of some of the slower test harnesses by default;
      COMPRESS_ZLIB_RUN_MOST needs to be set to run them, which makes life more
      bearable on legacy platforms


author: Paul Howarth <paul@city-fan.org> 2.110-18
changelog:
  - don't build-require modules that this package provides (problem stupidly
    introduced in previous release)
  - don't need to remove empty directories from buildroot
  - drop %defattr, redundant since rpm 4.4


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.046-4
changelog:
  - Add 0001-test-and-fix-for-RT-52317-Calling-run3-garbles-STDIN.patch (RHBZ#1062267).
  - Spec-file cosmetics.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.048-1
changelog:
  - Upstream update.
  - Add RELEASE_TESTING=1 to work around upstream trying to discourage
    us from running pod-tests.


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Silence "Statement unlikely to be reached" warning
    - Repository information fix, and typo fixes
    - Converted to using dzil
  - Specify all dependencies
  - Don't need to remove empty directories from the buildroot
  - Restore EL-5 compatibility


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24
    - No longer mark BSD::Resource as required (GH #6)
    - Skip core-dump tests on OS X; they're not as straightforward as the test
      script would like (GH #5)


author: Paul Howarth <paul@city-fan.org> - 2.27300-1
changelog:
  - Update to 2.27300
    - Fixed a problem about substr in perl 5.8.6 and below
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 0.402-1
changelog:
  - Update to 0.402 (significant and slightly incompatible update - see Changes)
  - This release by REHSACK → update source URL
  - Classify buildreqs by usage
  - Modernize spec as this isn't going to anywhere older than F-22


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Bump Class::C3 dependency on 5.8, which in turn will automatically install
      Class::C3::XS if possible
    - Fix nonfunctional SYNOPSIS (CPAN RT#78325)
  - This release by BOBTFISH -> update source URL
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - BR: perl(Cwd), perl(File::Path), perl(File::Spec) for bundled Module::Install
  - Bump perl(Class::C3) version requirement to 0.24
  - Drop unnecessary version requirement for perl(ExtUtils::MakeMaker)


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Implemented and then reverted a change to use Sub::Name (CPAN RT#98097)
  - Modernize spec
  - Hack out references to currently-unavailable Test::CleanNamespaces


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Resolve an edge-case with DEPRECATED (CPAN RT#101555)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.000016-1
changelog:
  - Update to 1.000016
    - Re-release to fix prereqs and other metadata
  - This release by ETHER -> update source URL
  - Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.000018-1
changelog:
  - Update to 1.000018
    - Re-release of de-tainting fix without unstated non-core test dependencies
  - Drop BR: perl(Test::Fatal)


author: Paul Howarth <paul@city-fan.org> - 1.000019-1
changelog:
  - Update to 1.000019
    - Warnings now disabled inside during the evaluation of generated version sub
      (CPAN RT#89282)
  - BR: perl(Config), perl(File::Basename) and perl(IO::File) for the test suite


author: Paul Howarth <paul@city-fan.org> - 1.000022-1
changelog:
  - Update to 1.000022
    - New is_indexable() object method (CPAN RT#84357)
    - Eliminated dependency on IO::File (and by virtue, XS)
    - Removed cruft in test infrastructure left behind from separation from
      Module::Build
    - Repository moved to https://github.com/Perl-Toolchain-Gang/Module-Metadata
    - .pm file is now wholly ascii, for nicer fatpacking (CPAN RT#95086)
    - Some code micro-optimizations
      (https://github.com/Perl-Toolchain-Gang/Module-Metadata/pull/4)
    - Fixed all out of date prereq declarations
    - Work around change in comparison behaviour in Test::More 0.95_01 by being
      more explicit with our tests - now explicitly checking the string form of
      the extracted version, rather than the entire version object
    - Ensure the extracted version is returned as a version object in all cases
      (CPAN RT#87782)
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 1.000024-1
changelog:
  - Update to 1.000024
    - Support installations on older perls with an ExtUtils::MakeMaker earlier
      than 6.63_03
  - Don't bother trying to run the release tests
  - Package new documentation files from upstream: CONTRIBUTING LICENSE README.md


author: Paul Howarth <paul@city-fan.org> - 1.000025-1
changelog:
  - Update to 1.000025
    - Evaluate version assignment in a clean environment, to fix assignment in a
      block (CPAN RT#101095)
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.106-1
changelog:
  - Update to 1.106
    - Update github links
    - Typo fix
  - Update patch for building with Test::More < 0.88


author: Jitka Plesnikova <jplesnik@redhat.com> - 3.24-3
changelog:
  - Perl 5.20 re-rebuild of bootstrapped packages
  - Disable Perl(Tk) tests temporarily until Perl-Tk works with perl-5.20


author: Paul Howarth <paul@city-fan.org> - 1.04-1
changelog:
  - Update to 1.04
    - Module now maintained by Sanko Robinson; please see TODO for a possible set
      of changes to this module that may affect code written for old, pre-perl
      5.14.0 platforms!
    - Don't install benchmark.pl (CPAN RT#16167)
  - This release by SANKO -> update source URL
  - Switch to Module::Build flow
  - Update shellbang patch
  - Modernize spec since EPEL < 7 will never have buildreq CPAN::Meta
  - Drop obsoletes/provides for old -tests subpackage


author: Paul Howarth <paul@city-fan.org> - 1.5.0-1
changelog:
  - Update to v1.5.0
    - Readonly::XS is no longer needed
    - Typo fix (CPAN RT#86350)
    - Array and Hash scalar references were not made deeply readonly
      (CPAN RT#37864)
    - Upstream magic related bugs were reported to p5p and fixed in perl itself
      so we can resolve the following local issues:
      - CPAN RT#24216 ('looks_like_number' doesn't handle Readonly properly)
      - CPAN RT#29487 (magical variable bug in perl 5.8.5)
      - CPAN RT#36653 (Readonly scalar as class name sometimes undefined)
      - CPAN RT#57382 (tie-related bug in perl's core)
      - CPAN RT#70167 (unaccessed read-only variables are undef in select calls)
    - Reported Perl RT#120122 (tie + smartmatch bug) upstream to p5p; will
      eventually resolve local (CPAN RT#59256)
    - Use readonly support exposed in Internals on perl ≥ 5.8.0
    - Checking Readonly::XS::Okay is no longer suggested... never should have
      been
  - Update shellbang patch


author: Paul Howarth <paul@city-fan.org> - 1.610-1
changelog:
  - Update to 1.61
    - Fix array and hash tie() while in XS mode (exposed by Params::Validate
      tests)
    - Fix implicit undef value regression
      (https://github.com/sanko/readonly/issues/8)
    - Normal constants (strings, numbers) do not appear to be read-only to
      Internals::SvREADONLY($) but perl itself doesn't miss a beat when you
      attempt to assign a value to them; fixing test regression in
      t/general/reassign.t
    - Minor documentation fixes (spell check, etc.)
      (https://github.com/sanko/readonly/issues/7)
  - Update shellbang patch


author: Paul Howarth <paul@city-fan.org> - 2.00-1
changelog:
  - Update to 2.00
    - Deprecation of Readonly::XS as a requirement for fast, readonly scalars is
      complete
  - Upstream dropped TODO file


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - Skip pairmap()'s MULTICALL implementation 5.8.9/5.10.0 as it doesn't work
      (CPAN RT#87857)
    - Comment on the fact that package "0" is defined but false (CPAN RT#88201)
    - TODO test in t/readonly.t now passes since 5.19.3 (CPAN RT#88223)
    - Added any, all, none, notall list reduction functions (inspired by
      List::MoreUtils)
    - Added List::Util::product()
    - Added Scalar::Util::unweaken()
    - Avoid C99/C++-style comments in XS code
    - Fix dualvar tests for perl 5.6; fix skip() test counts in dualvar.t
    - Neater documentation examples of other functions that can be built using
      reduce
    - Implement reduce() and first() even in the absence of MULTICALL
    - Various documentation changes/updates
    - Correct uses of overload operators in unit tests (CPAN RT#91969)


author: Paul Howarth <paul@city-fan.org> - 0.103007-1
changelog:
  - Update to 0.103007
    - Fix regex to allow guessing from meta things like perl_5
    - Replace 'use base' with 'use parent'
  - BR: perl(Try::Tiny) for the test suite
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.103008-1
changelog:
  - Update to 0.103008
    - Faster!
    - Add new_from_short_name to LicenseUtils for spdx.org-style short names
    - Avoid double trailing dots in expanded licenses
    - Fix some errors in (3-clause) BSD license text
    - The 2-clause BSD ("FreeBSD") license no longer incorrectly puts "FreeBSD"
      as the owner in the license full text
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.103009-1
changelog:
  - Update to 0.103009
    - Updated FSF mailing address in license text for GFDL version 1.2, GPL
      versions 1 and 2, and LGPL 2.1
  - Update patch for building with old Test::More versions
  - Don't try to run the extra tests with EL-5 or EL-6


author: Paul Howarth <paul@city-fan.org> - 0.103010-1
changelog:
  - Update to 0.103010
    - Fix guess_license_from_pod's return on GPL licenses
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.928-1
changelog:
  - Update to 0.928
    - Cope with subroutines with spaces in their names when catching warnings
    - Don't assume that the source sub isn't blessed in tests (!)


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Do not change the string arg in XS, use copy instead (CPAN RT#96893)
    - Add README make target
    - Add more distribution metadata
  - This release by ETHER → update source URL
  - Update debugger patch (CPAN RT#96893)
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Copy the contents of the %DB::sub entry if it exists; fixes
      Devel::NYTProf's anon sub handling (CPAN RT#50524)
  - Drop upstreamed debugger patch
  - Drop EL-5 compatibility since we need Devel::CheckBin, which can't be
    built for EPEL-5 or EPEL-6


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Move variable declaration to fix warning under
      -Werror=declaration-after-statement, to allow compilation under MSVC (GH#3)
    - Converted distribution packaging to Dist::Zilla
    - Fix licence in LICENSE and pod
  - Package new upstream CONTRIBUTING and LICENSE files
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Avoid assuming that t/todo.t is always called t/todo.t
  - Classify buildreqs by usage
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.001003-1
changelog:
  - Update to 1.001003
    - Documentation updates for maintainer change
  - This release by EXODIST -> update source URL
  - Drop obsoletes/provides for old tests sub-package


author: Paul Howarth <paul@city-fan.org> - 1.001006-1
changelog:
  - Update to 1.001006
    - Documentation updates
    - Subtests accept args
    - Outdent subtest diag
    - Changed install path for perl 5.12 or higher


author: Paul Howarth <paul@city-fan.org> - 1.001011-1
changelog:
  - Update to 1.001011
    - Fix windows test bug (GH#491)
    - Integrate Test::Tester and Test::use::ok for easier downgrade from trial
    - Remove POD Coverage test
  - Obsolete/Provide perl-Test-Tester and perl-Test-use-ok
  - Classify buildreqs by usage
  - Use features from recent ExtUtils::MakeMaker to simplify spec
  - Run tests with AUTHOR_TESTING=1 so we do the threads test too


author: Paul Howarth <paul@city-fan.org> - 1.001014-1
changelog:
  - Update to 1.001014
    - Fix a unit test that broke on some platforms with spaces in the $^X path
    - Add a test to ensure that the Changes file is updated


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Fix test that fails when FOO or BAR environment variables are set
      (CPAN RT#93447)


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.15
    - Adjusted packaging and tests to become perl-5.6 friendly, including only
      using core or dual-lifed prerequisites
  - Switch to ExtUtils::MakeMaker flow


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.16
    - Fix prereq problem with last release - now no longer testing the example
      scripts for user installs


author: Paul Howarth <paul@city-fan.org> - 0.017-1
changelog:
  - Update to 0.017
    - Handle other warning handlers passing us partial warning messages by
      re-adding the source file and line number
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.019-1
changelog:
  - Update to 0.019
    - Fix test to allow for special characters (e.g. MSWin32 file separators) in
      filenames (PR#7)


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - Fix an obscure issue with loading modules during global destruction
      (https://github.com/doy/try-tiny/pull/11)
    - Documentation updates (https://github.com/doy/try-tiny/pull/12)
  - Add patch to support building with Test::More < 0.88 again


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Also skip the test if Capture::Tiny is too old
      (https://github.com/doy/try-tiny/issues/17)


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Add optional test deps as recommended prereqs
      (https://github.com/doy/try-tiny/pull/18)
  - Update patch for building with Test::More < 0.88


author: Jitka Plesnikova <jplesnik@redhat.com>, Petr Pisar <ppisar@redhat.com> - 2.3-1
changelog:
  - Initial version for SCL 2.3
  - Escape apostrophs in rh-perl-520(7) manual page
  - Fix ownership of man directories
  - Resolves: rhbz#1219522, rhbz#1225445


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.9-6
changelog:
  - Fixed file conflict with others Perl SCLs
  - Update local path in default perl.conf
  - Resolves: rhbz#1227192, rhbz#1210621


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-8
changelog:
  - Register a collection into the httpd environment (bug #1382514)
  - Pass SCL environment to subprocesses (bug #1382514)


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-10
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626273)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561102)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561102)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561101)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561101)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-381
changelog:
  - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653529)
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c (bug #1653524)
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c (bug #1653526)
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c (bug #1653521)


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Grok dist names ending with something numeric containing underscores
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.150001-1
changelog:
  - Update to 2.150001
    - Include allowed values for license field in 1.x historic licenses rather
      than linking to Module::Build
    - Documented when fragment merging became available


author: Paul Howarth <paul@city-fan.org> - 2.150005-1
changelog:
  - Update to 2.150005
    - Metadata merging now does deep hash merging as long as keys don't conflict
    - Serialized CPAN::Meta objects now include a x_serialization_backend entry
    - Declared extra developer prereq
    - Added test for 'x_deprecated' field in "provides"
    - Noted explicitly that historical META spec files are licensed under the
      same terms as Perl
    - Changed some test data from UTF-8 to ASCII


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - Bump Module::Metadata prereq for $VERSION parsing (CPAN RT#101095)
    - Consistently require same version of CPAN::Meta::Requirements
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - Declare the minimum version required for the "merged_requirements"
      interface
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 2.132-1
changelog:
  - Update to 2.132
    - Precision of version requirement "0.00" is preserved when merging
      requirements


author: Paul Howarth <paul@city-fan.org> - 2.133-1
changelog:
  - Update to 2.133
    - In fixing preservation of "0.00", some Module => 0 optimizations were lost;
      this restores those optimizations


author: Paul Howarth <paul@city-fan.org> - 2.140-1
changelog:
  - Update to 2.140
    - Added method for getting structured requirements
    - Skips impossible tests on Perls earlier than 5.8.0 (before v-string magic)
    - On Perls before 5.8.1, pad 1-part and 2-part literal v-strings to avoid old
      version.pm bugs with v-strings less than 3 characters
    - Protect internal _isa_version from non-refs that pass ->isa('version')
    - Much better error messages, explaining what conflicted and how
    - Repackage with fixed tests
    - Expanded dist.ini from author bundle to individual plugins


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.035-3
changelog:
  - Remove using of iconv, because it is not needed (bug #1368046)
  - Fix default value for nossl option (bug #1366773)


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Major optimization to mkopt
  - Use %license
  - Simplify find expression using -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.23-1
changelog:
  - Update to 1.23
    - Fixed several issues with the handling of non-integer values passed to
      from_epoch() (GH#11)
      - This method was simply broken for negative values, which would end up
        being incremented by a full second, so for example -0.5 became 0.5
      - The method did not accept all valid float values; specifically, it did
        not accept values in scientific notation
      - Finally, this method now rounds all non-integer values to the nearest
        millisecond, which matches the precision we can expect from Perl itself
        (53 bits) in most cases
    - Make all DateTime::Infinite objects return the system's representation of
      positive or negative infinity for any method that returns a number or
      string representation (year(), month(), ymd(), iso8601(), etc.); previously
      some of these methods could return "Nan", "-Inf--Inf--Inf", and other
      confusing outputs (CPAN RT#110341)


author: Paul Howarth <paul@city-fan.org> - 2:1.24-1
changelog:
  - Update to 1.24
    - The last release partially broke $dt->time; if you passed a value to use
      as unit separator, it was ignored (CPAN RT#112585)


author: Paul Howarth <paul@city-fan.org> - 2:1.25-1
changelog:
  - Update to 1.25
    - DateTime->from_object would die if given a DateTime::Infinite object; now
      it returns another DateTime::Infinite object (CPAN RT#112712)
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.27-1
changelog:
  - Update to 1.27
    - Added an environment variable PERL_DATETIME_DEFAULT_TZ to globally set the
      default time zone (GH#14); using this is very dangerous - be careful!
  - BR: perl-generators


author: Paul Howarth <paul@city-fan.org> - 2:1.28-1
changelog:
  - Update to 1.28
    - Fixed handling of some floating point epochs; since DateTime treated the
      epoch like a string instead of a number, certain epochs with a non-integer
      value ended up treated like integers (Perl is weird) (GH#15, fixes GH#6)


author: Paul Howarth <paul@city-fan.org> - 2:1.33-1
changelog:
  - Update to 1.33
    - When you pass a locale to $dt->set you will now get a warning suggesting
      you should use $dt->set_locale instead (CPAN RT#115420)
    - Added support for $dt->truncate( to => 'quarter' ) (GH#17)
    - Fixed the $dt->set docs to say that you cannot pass a locale (even though
      you can but you'll get a warning) and added more docs for $dt->set_locale
    - Require DateTime::Locale 1.05
    - Require DateTime::TimeZone 2.00
  - Take advantage of NO_PACKLIST option in recent EU:MM


author: Paul Howarth <paul@city-fan.org> - 0.10-1
changelog:
  - Update to 0.10
    - We need Module::Runtime 0.009 for module_notional_filename (#6)
  - Update patch for building with Test::More < 0.88
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Drop the dep on List::MoreUtils
      (https://github.com/doy/dist-checkconflicts/pull/8)
  - Update patch for building with Test::More < 0.88
  - Don't try to run the extra tests for EPEL builds
  - Specify version requirements for extra test modules


author: Petr Pisar <ppisar@redhat.com> - 7.10-5
changelog:
  - Own ExtUtils/MM directory by perl-ExtUtils-MM-Utils only
  - Require perl-devel by perl-ExtUtils-MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.18-4
changelog:
  - No longer needs any non-core buildreqs, and hence bootstrapping
  - Drop references to pwhich, which is no longer included
  - This release by PLICEASE → update source URL


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Compress::FAQ - Added a section on bgzip (CPAN RT#103295)
    - IO::Compress::Zip - Zip64 needs to be first in extra field to work around
      a Windows Explorer bug (see
      http://www.info-zip.org/phpBB3/viewtopic.php?f=3&t=440 for details)


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add get_winsize and set_winsize
    - Explicitly drop support for Win32 (CPAN RT#77813)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add support for PERL_MM_OPT
    - Fix typo in compiler detection error message (CPAN RT#75649)
    - Fix "redefinition of typedef" errors with v5.19.4 and above
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 1:0.96-1
changelog:
  - Update to 0.96
    - Require Module::Load::Conditional 0.66 to resolve CVE-2016-1238
      (avoid loading optional modules from default .)
  - Update patch for use of ExtUtils::MM::Utils
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.92-5
changelog:
  - Address intermittent test failures (CPAN RT#20105, RH BZ#1094395)
  - Add runtime dependency on Data::Dumper
  - Add build dependency on IO::Tty for the test suite
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.94-1
changelog:
  - Update to 0.94
    - Update License discrepancies (CPAN RT#100858)
    - Many typo corrections
    - Fix t/pty.t fails on Solaris 10 (CPAN RT#20105)
  - Drop upstreamed patch for CPAN RT#20105
  - Use %license


author: Petr Pisar <ppisar@redhat.com> - 1.25-4
changelog:
  - Break build-cycle: perl-IPC-System-Simple → perl-Test-Perl-Critic
    → perl-Perl-Critic → perl-PPI → perl-IO-All → perl-File-MimeInfo
    → perl-File-BaseDir → perl-IPC-System-Simple


author: Paul Howarth <paul@city-fan.org> - 2.27400-1
changelog:
  - Update to 2.27400
    - Applied and merged long term neglected patches and pull requests
    - Modified Makefile.PL to set UNINST=1 if needed on old perls
    - Decode decimals to Perl's internal NV type
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Add FORCE_SAFE_INC option to address CVE-2016-1238
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.000027-1
changelog:
  - Update to 1.000027
    - Work around issues with an unconfigured Log::Contextual
    - Allow tests to pass in a perl with no taint support


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.21-1
changelog:
  - Upstream update.
  - Reflect Attribute::Params::Validate having been dropped from
    Params::Validate.
  - Add %license.


author: Paul Howarth <paul@city-fan.org> - 1:1.4417-1
changelog:
  - Update to 1.4417
    - Outputs the version of backends used
    - Updated repo metadata and boilerplate files
    - Pointed issue tracker to the Perl-Toolchain-Gang Github repo
  - Classify buildreqs by usage
  - Use %license
  - Package CONTRIBUTING.mkdn and README files
  - Expand %description
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1:1.4421-1
changelog:
  - Update to 1.4421
    - Add CPAN_META_JSON_BACKEND to allow requesting non-JSON.pm backends
    - Add CPAN_META_JSON_DECODER to allow Mojo::JSON/JSON::Tiny to be used just
      for decoding
    - Re-encode strings before decode_json since that expects bytes
    - Add test cases for wide characters in META files
    - Bump JSON::PP prerequisite to 2.27300 to work around a bug before perl
      5.8.7; includes a test to confirm correct behavior
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.010-1
changelog:
  - Update to 1.010
    - Added 'msys' as a Unix-type OS
  - BR: perl-generators where available
  - Simplify find command using -delete
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 0.103011-1
changelog:
  - Update to 0.103011
    - Do not load Sub::Install, since it isn't used!
    - Eliminate superfluous FULL STOP characters (".")
  - Update patch for building with old Test::More versions
  - Classify buildreqs by usage
  - Use %doc where possible


author: Paul Howarth <paul@city-fan.org> - 0.103012-1
changelog:
  - Update to 0.103012
    - Consider license names without parentheses when scanning text for license
    - When scanning text for license, put known substrings inside \b..\b
  - Simplify find command using -delete
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Do not lose argument(s) to import
      (https://github.com/rjbs/Test-Deep/issues/29)


author: Paul Howarth <paul@city-fan.org> - 0.119-1
changelog:
  - Update to 0.119
    - Overloading of & and | no longer can change All or Any objects found as
      arguments
    - An All as an argument to an All constructed is flattened out into its
      All-ed values; the same goes for Any
    - Remove use of Test::NoWarnings for user-facing tests


author: Paul Howarth <paul@city-fan.org> - 1.120-1
changelog:
  - Update to 1.120
    - Add none() test; it's like any(), but negative
    - Fix stringification of any() expectations


author: Paul Howarth <paul@city-fan.org> - 1.302022-1
changelog:
  - Update to 1.302022
    - Many micro-optimizations
    - Spelling fixes and tests
    - Fix leaky File.t file so that tmp doesn't fill up
    - Move some modules out of the known broken list in xt tests
    - Add Test2-based tools to downstream testing
    - Change when PID/TID are stashed (for forkprove)
    - VMS fixes for Files.t and IPC system
    - Improve thread checks to better detect broken 5.10 builds
    - Use thread checks to skip/run t/Legacy/Regression/637.t


author: Paul Howarth <paul@city-fan.org> - 1.302026-1
changelog:
  - Update to 1.302026
    - Do not fail if Test2::API::Breakage cannot load (rare 5.10.0 issue)
    - Potential fix for t/Legacy/Regression/637.t
    - Make t/Legacy/Regression/637.t AUTHOR_TESTING for now
    - Add Generic event type
    - Make sure enabling culling/shm sets pid and tid (fix #679)


author: Paul Howarth <paul@city-fan.org> - 1.302030-1
changelog:
  - Update to 1.302030
    - Use pre_filter instead of filter for TODO in Test::Builder (fix #683)
    - Fix typos in transitions doc (#681)
    - Add 'inherit_trace' param to run_subtest
    - Properly skip thread test when threads are broken


author: Paul Howarth <paul@city-fan.org> - 1.302037-1
changelog:
  - Update to 1.302037
    - Restore PerlIO layer cloning on STDERR and STDOUT
  - Bump obsoletes/provides versions for perl-Test2 to maintain upgrade path from
    packages in third-party repositories


author: Paul Howarth <paul@city-fan.org> - 1.302040-1
changelog:
  - Update to 1.302040
    - Fix broken MANIFEST.SKIP entries (#689)
    - Add Info event for better diagnostics


author: Paul Howarth <paul@city-fan.org> - 0.022-1
changelog:
  - Update to 0.022
    - Propagate all warnings to any previously-declared __WARN__ handlers
      (unlike with __DIE__, merely calling warn() is not sufficient)


author: Paul Howarth <paul@city-fan.org> - 0.023-1
changelog:
  - Update to 0.023
    - Properly handle propagating warnings to previously declared handlers that
      are not coderefs (i.e. a sub name, or the magic DEFAULT and IGNORE)


author: Paul Howarth <paul@city-fan.org> - 0.025-1
changelog:
  - Update to 0.025
    - Prereqs lowered from required to suggested:
      - CPAN::Meta::Check
      - CPAN::Meta::Requirements
    - Tests are now quieter to avoid causing confusion, by suppressing the
      printing of stderr in tests


author: Paul Howarth <paul@city-fan.org> - 0.026-1
changelog:
  - Update to 0.026
    - Fixed use of modules loaded by t/zzz-check-breaks.t
    - Fix stderr suppression on perl 5.6


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix syntax of example code (PR#22)
    - 'perl' removed from prerequisite recommendations, to avoid tripping up CPAN
      clients
    - Sub::Util is used preferentially to Sub::Name in most cases (PR#27)
  - This release by ETHER → update source URL
  - Modernize spec
  - Don't run the extra tests


author: Paul Howarth <paul@city-fan.org> - 1:0.231-1
changelog:
  - Update to 0.231
    - Restore test compatibility where Perl does not provide
      &Config::non_bincompat_options (CPAN RT#102626)


author: Paul Howarth <paul@city-fan.org> - 1:0.233-1
changelog:
  - Update to 0.233
    - The diagnostic about inheriting from ourselves was removed; it served no
      purpose as Perl already warns if we try to inherit in a circular way


author: Paul Howarth <paul@city-fan.org> - 1:0.234-1
changelog:
  - Update to 0.234
    - Fix the test for PMC loading to work on versions on Perl that don't have
      Config::non_bincompat_options (CPAN RT#102626)


author: Petr Pisar <ppisar@redhat.com> - 2.0.10-10
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626275)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-395
changelog:
  - perl package installs all core modules, interpreter moved to
    perl-interpreter package, perl-core package is obsolete
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
    (bug #1464903)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-398
changelog:
  - Fix reporting malformed UTF-8 character (RT#131646)
  - Fix File::Glob rt131211.t test random failures
  - Fix t/op/hash.t test random failures
  - Parse caret variables with subscripts as normal variables inside ${...}
    escaping (RT#131664)
  - Do not display too many bytes when reporting malformed UTF-8 character
  - Fix select called with a repeated magical variable (RT#131645)
  - Fix error message for "our sub foo::bar" (RT#131679)
  - Fix executing arybase::_tie_it() in Safe compartement (RT#131588)
  - Fix handling attribute specification on our variables (RT#131597)
  - Fix splitting non-ASCII strings if unicode_strings feature is enabled (RT#130907)
  - Fix compiler warnings in code generated by ExtUtils::Constant
    (CPAN RT#63832, CPAN RT#101487)
  - Fix GCC version detection for -D_FORTIFY_SOURCE override (RT#131809)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-399
changelog:
  - Fix unreliable Time-HiRes tests (CPAN RT#122819)
  - Do not require $Config{libs} providers by perl-devel package (bug #1481324)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-404
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561100)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561100)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-405
changelog:
  - 5.26.3 bump (bug #1658969)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c)
  - Fix CVE-2018-18314 (heap based buffer overflow)


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - More Makefile.PL updates
    - Makefile.PL now checks for a working compiler using ExtUtils::HasCompiler
      (inlined into the build) rather than ExtUtils::CBuilder (CPAN RT#113685)
  - Simplify find command using -delete
  - Fix EPEL conditional - only currently buildable for EPEL 7 onwards
  - Drop BR: for Test::Pod::No404s, which breaks koji builds


author: Paul Howarth <paul@city-fan.org> - 2.150010-1
changelog:
  - Update to 2.150010
    Added:
    - Merged Parse::CPAN::Meta 1.4420 into this distribution
    Fixed:
    - CPAN::Meta::Prereqs now fully accepts phases and types starting with 'x_';
      new 'phases' and 'types_in' interfaces have been added
    - No longer relies on JSON backend for data structure cloning; this is much
      faster than using JSON::PP
    - The cloning routine would raise an error on expected types when it
      previously would stringify; the old behavior is restored
    - Fixed used of Encode in Parse::CPAN::Meta::load_json_string (cherry picked
      from Parse::CPAN::Meta 1.4422)
    - Added "use warnings" to Parse::CPAN::Meta
    - The YAML and JSON backend variables are ignored when building/testing the
      perl core itself, where non-core backends are not yet installed
    Tests:
    - The 'extra_mappings' feature for meta merging is now tested and documented
    - During tests, delete new environment variables added by Parse::CPAN::Meta
      1.4418
    Spec:
    - Clarifies acceptable values for booleans
    - Cleaned up text and links of historical specs
  - Obsolete old perl-Parse-CPAN-Meta package
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.013-1
changelog:
  - Update to 0.013
    - Make tests more resilient against dev versions of dependencies
  - BR: perl-generators
  - Drop legacy Group: tag
  - Take advantage of features in recent EU::MM to simplify flow


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Undef versions are now passed through to CPAN::Meta::Requirements for the
      check, rather than failing with "Missing version" errors


author: Paul Howarth <paul@city-fan.org> - 2.140-7
changelog:
  - Introduce build-condition for optional tests
  - Simplify find command using -delete
  - Switch to hunspell for spell check


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.200007-1
changelog:
  - Update to 0.200007
    - Rename the test library "Parent.pm" to "Mother.pm" to avoid conflict with
      core "parent.pm" on case-insensitive systems
  - Drop legacy Group: tag
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - No longer include a Makefile.PL in the distribution
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Convert .cvsignore to .gitignore
  - Classify buildreqs by usage
  - Don't need to remote empty directories from the buildroot
  - Make %files list more explicit
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 2:1.41-1
changelog:
  - Update to 1.41
    - The DateTime->add and ->subtract methods now accept DateTime::Duration
      objects; this used to work by accident but is now done intentionally, with
      docs and tests (GH#45)


author: Paul Howarth <paul@city-fan.org> - 2:1.42-1
changelog:
  - Update to 1.42
    - The DateTime::Duration->add and ->subtract methods now accept
      DateTime::Duration objects; this used to work by accident but is now done
      intentionally, with docs and tests (GH#50)


author: Paul Howarth <paul@city-fan.org> - 2:1.43-1
changelog:
  - Update to 1.43
    - Added a small optimization for boolification overloading: rather than
      relying on a fallback to stringification, we now return true directly,
      which is a little faster in cases like "if ($might_be_dt) { ... }"
    - The datetime() method now accepts a single argument to use as the separator
      between the date and time portion; this defaults to "T"
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 2:1.44-1
changelog:
  - Update to 1.44
    - Added a stringify() method, which does exactly the same thing as
      stringification overloading does (GH#58)
    - Added an is_last_day_of_month() method to indicate whether or not an object
      falls on the last day of its month (GH#60)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - No longer include a Makefile.PL in the distribution
    - In META.{yml,json}, point to public bug tracker
    - In META.json, specify type of public repository
  - Classify buildreqs by usage
  - Make %files list more specific
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - No longer include a Makefile.PL in the distribution
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - In META.json, specify type of public repository
  - Drop redundant %{?perl_default_filter}
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.14-1
changelog:
  - Update to 0.14
    - A couple of minor optimizations (GH#8)
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    - Switch to GitHub Issues
  - Author/Release tests moved to xt/, so don't bother trying to run them


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    - Generated exception classes are now added to %INC; if you subclass a
      generated class with "use base" then base.pm will no longer attempt to load
      the requested class (GH#8)


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    - The full_message() method in Exception::Class::Base now calls message()
      instead of accessing the object's hash key, which makes it easier to
      override message() in a subclass (GH#11)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    - You can now pass "frame_filter", "filter_frames_early" and "skip_frames"
      to the throw() method of an exception class; these will be passed on to
      the Devel::StackTrace constructor (GH#6)


author: Petr Pisar <ppisar@redhat.com> - 2.12-367
changelog:
  - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree()
    and remove_tree()) (bug #1457834)


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Release with new tooling
  - This release by ETHER → update source URL
  - BR: perl-generators
  - Simpify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.014-1
changelog:
  - Update to 1.014
    - pushd/tempd warn if called in void context (GH#9)
    - Fixed test failures on some 5.8 perls
  - Simplify find command using -delete
  - Use features from recent EUMM to simplify %install
  - Use %license
  - Drop redundant Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix prototype errors while lazy loading File::GlobMapper (CPAN RT#117675)
    - zipdetails: Avoid loading optional modules from default . (CPAN RT#116538,
      CVE-2016-1238)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.98-1
changelog:
  - Update to 0.98
    - Added wait_loop_callback for run_forked()
    - Only search in curdir in can_run() when on Win32 (CPAN RT#105601)
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 1.25-12
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
  - Introduce build-condition for optional tests
  - Use %license where possible
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.93000-1
changelog:
  - Update to 2.93
    - Changed the number detection logic (experimental)
    - Correct 0 handling (GH#23)
    - Removed base.pm dependency (GH#5)
    - Fixed wrong character offset (CPAN RT#116998)
    - Address VAX issues (CPAN RT#118469)
    - Various documentation fixes
    - Remove . in @INC in json_pp (GH#25, CVE-2016-1238)
    - Removed $VAR1 from json_pp output (GH#11)
    - Fixed an issue to ignore trailing 0 (GH#29)
    - Added Scalar::Util dependency for Perl 5.8+ (CPAN RT#84347)
    - Fixed issues spotted by Nicolas Seriot's JSON Test Suite including
      experimental UTF-16/32 support and backward incompatible change of
      C style comment handling (now disabled by default) (GH#28)
    - Moved the guts of JSON::PP::Boolean into lib/JSON/PP/Boolean.pm and gave
      it a proper version
    - Refactored incremental parser to let it handle incomplete JSON text
      properly
    - Imported and tweaked tests from JSON.pm
    - Minor code clean up
    - Fixed not to fail tests under Perl 5.25.* (CPAN RT#119114)
    - Reworked documentation, based on the one for JSON::XS
    - Let json_pp utility show the version of JSON::PP
    - Fix loading order of B module (GH#31)
    - Fixed isa tests for bignum
  - This release by ISHIGAKI → update source URL
  - Use five-digit version number for rpm to maintain upgrade path
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1:2.96-1
changelog:
  - Update to 2.96
    - json_pp now prints an encoded json string (CPAN RT#123653)
    - Fix is_bool to use ->isa("JSON::PP::Boolean"), instead of
      UNIVERSAL::isa("JSON::PP::Boolean") (GH#34)
    - Avoid use of newer Test::More features (CPAN RT#122421)


author: Paul Howarth <paul@city-fan.org> - 1:2.97-1
changelog:
  - Update to 2.97
    - Fix is_bool to use blessed() instead of ref()
    - Use 5 digit minor version number for a while to avoid confusion (GH#33)
  - Stick to 2 digit minor version downstream as we already bumped epoch


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Don't run pod tests on user installs
    - Stop using Module::Install to fix installation when @INC doesn't have the
      current directory (CPAN RT#119016)
    - Repository migrated to the github moose organization
  - This release by HAARG → update source URL
  - Simplify find command using -delete


author: Petr Pisar <ppisar@redhat.com> - 0.09-10
changelog:
  - Break build cycle when bootstrapping (Test::CleanNamespaces →
    Package::Stash → Module::Implementation)


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Add FORCE_SAFE_INC option to address CVE-2016-1238
  - BR: perl-generators
  - Simplify find command using -delete
  - Drop legacy Group: tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.000031-1
changelog:
  - 1.000031 bump; Used trial version to compete with Perl 5.24
    - Refactor and expand test cases
    - Fix a $VERSION extraction issue on perl 5.6.2 (CPAN RT#105978, PR#17)
    - Fix the detection of package Foo when $Foo::VERSION is set (CPAN RT#85961)
    - Fix missing "use" statement in refactored test helper (only affected older
      perls, due to other module interactions)
    - Temporary directories cleaned up during tests
    - More accurately mark tests as TODO, so as to have a quieter and less
      confusing test run without passing TODO tests
    - Be less noisy on failure when building as part of perl core (see
      Perl RT#126685)


author: Paul Howarth <paul@city-fan.org> - 1.000033-1
changelog:
  - Update to 1.000033
    - Use a more strict matching heuristic when attempting to infer the "primary"
      module name in a parsed .pm file
    - Only report "main" as the module name if code was seen outside another
      namespace, fixing bad results for pod files (CPAN RT#107525)
    - Fix file operation in tests for VMS
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Fix spurious warning in taint mode (GH#12)
  - Update patch for building with old Test::More versions
  - No documentation for Package::Stash::Conflicts in this release
  - Classify buildreqs by usage
  - Use %license where possible
  - Don't try to run the extra tests for EL builds as we won't have the
    dependencies


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %doc where possible
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Explicitly load the B module; previously, the code relied on this already
      being loaded by something else (GH#11)
    - Removed the alpha warning from the docs


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Trying to create a validator for positional parameters where a required
      param came after one with a default did not throw an exception
    - A positional params validator with a slurpy type that had coercions did not
      return the coerced values; it returned the original values instead


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - The source_for() exported by Params::ValidationCompiler did not work at all
      (GH#16)


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - All exceptions now include a stack trace by default when treated as a
      string; this makes finding where validation failed a lot easier (GH#18)
    - The name for a subroutine is now used in some exception messages, even if
      Sub::Util cannot be installed


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - The exceptions.t test would fail if Sub::Util was not installed (GH#19)
    - Fix test failures on Windows (GH#20)


author: Paul Howarth <paul@city-fan.org> - 0.094-1
changelog:
  - Update to 0.094
    - Path::Tiny will prefer PerlIO::utf8_strict over encoding(UTF-8) if
      available and Unicode::UTF8 is not installed
    - The 'touch' method can now set the current time on files that aren't owned,
      as long as they are writeable
    - Improved consistency of symlink support inspection; now always looks at
      $Config{d_symlink}
    - Skips impossible test on 'msys' platform.
  - BR: perl-generators where possible
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.096-1
changelog:
  - Update to 0.096
    - Improved method for hiding some modules during tests
  - BR: perl-generators unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.098-1
changelog:
  - Update to 0.098
    - Added 'realpath' option for 'tempfile' and 'tempdir' for situations where
      an absolute temporary path just isn't enough


author: Paul Howarth <paul@city-fan.org> - 0.100-1
changelog:
  - Update to 0.100
    - Fixed tests for eventual removal of '.' from @INC in Perl
    - Fixed filehandle mode doc typo
    - Fixed doc typo in relative() that mentioned rel2abs instead of abs2rel


author: Paul Howarth <paul@city-fan.org> - 0.104-1
changelog:
  - Update to 0.104
    - The 'absolute' method now always returns an absolute path, even if a user
      provided a relative path for the base path; the old, odd behavior was
      documented, but people often don't read docs so the new behavior avoids
      surprises
    - Added 'cached_temp' method


author: Paul Howarth <paul@city-fan.org> - 1.010-4
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88
    - Spell checker is always hunspell now
  - Introduce build-condition for optional tests


author: Petr Pisar <ppisar@redhat.com> - 3.28-2
changelog:
  - Introduce a build-condition on groff
  - Rename a _without_tk build-condition to
    _without_perl_Pod_Perldoc_enables_tk_test


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Fix support of 5.8 (GH#29, GH#34)
    - Additional optimizations
    - More extensive test suite


author: Paul Howarth <paul@city-fan.org> - 0.200-1
changelog:
  - Update to 0.200
    - Reimplement in pure Perl, with a dynamic dependency on a new Ref::Util::XS
      module that contains the fast XS implementation
  - This release by ARC → update source URL
  - Package is now noarch


author: Paul Howarth <paul@city-fan.org> - 0.203-1
changelog:
  - Update to 0.203
    - Fix space/tab issue in Makefile
    - Don't use DynamicPrereqs for unrelated Makefile.PL snippet
    - Use of the Pure-Perl implementation can now be forced at runtime by setting
      either $Ref::Util::IMPLEMENTATION or $ENV{PERL_REF_UTIL_IMPLEMENTATION} to
      "XS"
    - Fix is_*_formatref() error messages (GH#38)
    - Speed enhancements for is_*_formatref() on 5.8+
    - Restore 5.6 and 5.8 compatibility
    - PP behaviour now matches XS for \v1.2.3 and \sub {}
    - Updated documentation to reflect the PP/XS split


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 1.20141117-1
changelog:
  - Update to 1.20141117
    - Improved export mechanism
    - Removed useless Exporter tests
    - Improved docs (CPAN RT#79681)


author: Paul Howarth <paul@city-fan.org> - 1.20141117-6
changelog:
  - Package LICENSE file
  - Drop legacy spec file elements not needed for EL-6 onwards
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Remove useless use of UNIVERSAL::isa (CPAN RT#105948)
  - Classify buildreqs by usage
  - Drop obsoletes/provides for old tests sub-package
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for common commands
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.103013-1
changelog:
  - Update to 0.103013
    - guess_license_from_pod() now knows about Software::License::CC0_1_0
    - Enable "v" as a version word
    - Improve FreeBSD (2-Clause) phrases
    - Added EUPL v1.1 and v1.2
  - This release by LEONT → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Possible fix for very weird failures seen under threaded Perls with some
      modules that use Specio


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Simplify checks for overloading to not call overload::Overloaded(); just
      checking the return value of overload::Method() is sufficient


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Many bug fixes and improvements to the types created by
      {any,object}_{can,does,isa}_type; in some cases, an invalid value could
      cause an exception in type check itself, and in other cases, a value that
      failed a type check would cause an exception when generating a message
      describing the failure
    - The messages describing a failure for all of these types have been improved
    - You can now create anonymous *_does and *_isa types using the exports from
      Specio::Declare


author: Paul Howarth <paul@city-fan.org> - 0.40-1
changelog:
  - Update to 0.40
    - Fixed more bugs with {any,object}_{can,does,isa}_type
      - When passed a glob (not a globref) they would die in their type check
      - On Perl 5.16 or earlier, passing a number to an any_* type would also die
    - Fixed subification overloading: if Sub::Quote was loaded, this would be
      used, but any environment variables needed for the closure would not be
      included, which broke enums, among other things


author: Paul Howarth <paul@city-fan.org> - 0.42-1
changelog:
  - Update to 0.42
    - Fixed checks for whether a class is loaded in light of upcoming
      optimization in Perl 5.28 (GH#12)
    - The Perl library claimed it provided types named LaxVersionStr and
      StrictVersionStr but they were really named LaxVersion and StrictVersion;
      the names have now been fixed to match the documentation, so they are
      LaxVersionStr and StrictVersionStr


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 0.001012-1
changelog:
  - Update to 0.001012
    - Many small performance improvements
  - BR: perl-generators
  - Simplify find command using -delete
  - Update old Test::More patch
  - Package new LICENSE file


author: Paul Howarth <paul@city-fan.org> - 0.001013-1
changelog:
  - Update to 0.001013
    - Avoid possible warnings about special variables only being used once
  - Update old Test::More patch


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Paul Howarth <paul@city-fan.org> - 1.122-1
changelog:
  - Update to 1.122
    - Added $Test::Deep::LeafWrapper to control the behavior of simple values in
      the "expected" definition
    - Documentation improvements
    - Avoid a few evals, localize $@ in a few places where eval is used
    - Goodbye tabs, hello spaces
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.123-1
changelog:
  - Update to 1.123
    - Remove test suite reliance on "." appearing @INC
    - When an object with stringification overloading fails to match a "re" test,
      its stringification is included in the diagnostics


author: Paul Howarth <paul@city-fan.org> - 1.124-1
changelog:
  - Update to 1.124
    - Avoid an uninitialized warning when array_each() compares to a
      non-reference


author: Paul Howarth <paul@city-fan.org> - 1.126-1
changelog:
  - Update to 1.126
    - If objects in the "expected" structure have an as_test_deep_cmp method, it
      will be called and its return (which should be a Test::Deep::Cmp object)
      will be used as the test for that location in the structure
    - Internal undocumented class_base routine has been replaced with a
      different, clearly private routine
    - The LeafWrapper is also used for objects with an unknown reftype (like
      LVALUE or other weird ones)


author: Paul Howarth <paul@city-fan.org> - 1.127-1
changelog:
  - Update to 1.127
    - Do not eagerly convert simple scalars into tests in the all, any and none
      tests; this was breaking LeafWrapper application
  - Drop EL-5-isms
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1:1.302106-1
changelog:
  - Update to 1.302106
    - Combine multiple diags into one event
    - Make version number in HashBase sane


author: Paul Howarth <paul@city-fan.org> - 1:1.302111-1
changelog:
  - Update to 1.302111
    - Fix some fragile tests
    - Apply p5p test patch from Craig A. Berry
    - Allow regexp in Test::Tester


author: Paul Howarth <paul@city-fan.org> - 1:1.302113-1
changelog:
  - Update to 1.302113
    - Fix test on threaded 5.8
    - Fix SIGPIPE in IPC test
    - Mark t/Test2/regression/gh_16.t as usually AUTHOR_TESTING only


author: Paul Howarth <paul@city-fan.org> - 1:1.302118-1
changelog:
  - Update to 1.302118
    - Added pre-subtest hook to Test2::API (GH#801)
    - ipc_wait now reports exit and signal values
    - Add better interface for ipc_wait
    - Fix event Out of Order bug
    - Add driver_abort() hook for IPC Drivers


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Improve support for warnings with trailing newlines
  - This release by BIGJ → update source URL
  - Classify buildreqs by usage
  - Simplify find command using -delete
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.03-1
changelog:
  - Update to 0.03
    - Add the $SIG{__WARN__} hook in an INIT block; we really don't want to
      trigger this because of a compile-time warning, and because of a bug in
      Test::Builder, this can actually cause the warning to be lost entirely
      (https://github.com/Test-More/test-more/issues/729)
    - The Test2::Event::Warning event now returns true for increments_count,
      which means that the test failure caused by a warning will not be output
      as a TAP test line; previously this was just seen as a diag line, which
      could be quite confusing
      (https://github.com/Test-More/test-more/issues/728)


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04
    - Load Test2::Event::Warning in the plugin instead of relying on Test2 to do
      it for us; this should avoid the bug fixed in the previous version and
      eliminates the need for the INIT block, which caused its own problems


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
  - Update to 0.05
    - Skip compile.t on Windows; this test uses IPC::Run3, which doesn't seem to
      work well on that platform (CPAN RT#118443)


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Warnings inside a subtest were not emitted as TAP events, breaking the TAP
      and making for great confusion: this is because of a bug in the core TAP
      formatter (https://github.com/Test-More/test-more/issues/776); warnings
      are now emitted as Ok events instead of Warning events


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - "finally" blocks are now run for all methods of leaving the try block
       (including via exit, goto) (CPAN RT#112099)
    - Switch from finalizers using an array to a hash, to resolve segfaults when
      creating a pseudofork on MSWin before perl 5.20
      (karenetheridge/Sub-Name/#3)
    - Repository moved to the github p5sagit organization (the primary is on
      shadowcat, mirrored to github)
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Enabled some tests of finally blocks that were disabled on 5.6, now that
      that functionality works (since 0.13) (GH#4)


author: Paul Howarth <paul@city-fan.org> - 1.71-5
changelog:
  - Soften Business::ISBN dependency from Requires: to Suggests: to avoid
    pulling in gd and X libraries (#1380152)


author: Paul Howarth <paul@city-fan.org> - 0.61-1
changelog:
  - Update to 0.61
    - Avoid relying on current working directory being in @INC
    - Documentation typo fixes
  - Drop redundant Group: tag
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
   - Allow quoted map keys in arrays (GH#146)
   - B::Deparse is loaded at runtime now
   - New feature $YAML::Preserve (GH#9)
  - This release by INGY → update source URL


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Declare variables with our() to avoid warnings (GH#109, GH#171)
    - Empty mapping value at the end resolves to null (was becoming empty string)
      (GH#131, GH#170)
    - Output key in warning when duplicate key was found (GH#119, GH#169)
    - Allow reading and writing to IO::Handle (GH#157, GH#168)


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24
    - Fix $LoadCode (GH#180, GH#181, GH#182)
  - This release by TINITA → update source URL
  - Drop redundant Group: tag


author: Petr Pisar <ppisar@redhat.com> - 1.10-5
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 3.10-2
changelog:
  - Net::libnetFAQ document replaced with a hyper link because of the Artistic
    license (CPAN RT#117888)


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Skip failing tests with old Moo or when Sub::Util is broken
      (CPAN RT#107643)


author: Petr Pisar <ppisar@redhat.com> - 0.28-3
changelog:
  - Break build-cycle: perl-namespace-autoclean → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Break build-cycle: perl-namespace-autoclean → perl-Mouse → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Remove unused direct test dependency on Class::MOP


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Exclusively use Package::Stash::PP on perls < 5.8.7 until a fixed
      Package::Stash::XS ships - breakage keeps getting re-introduced
      (CPAN RT#74151, CPAN RT#107343)
    - Explicitly document the late runtime binding of 'sort SUBNAME ...'
      (CPAN RT#101247)
    - No longer rely on Sub::Identify - either use Sub::Util or B (CPAN RT#96945)
  - Classify buildreqs by usage
  - Filter dependency on private package namespace::clean::_Util
  - Drop EL-6 support since build requirements can't be met there


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Allow packages to be cleaned multiple times
    - Ensure the debugger workarounds are applied only when DB::sub is actively
      used (they are superfluous otherwise)
    - Work around P5#72210, resulting in fails on 5.8.8 -Duselongdouble
    - Fix incorrect name in META (CPAN RT#107813)
  - BR: perl-generators where available
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.236-1
changelog:
  - Update to 0.236
    - Add Travis test configuration
    - Make test for PMC availability more reliable
    - Disable benchmark test rt62341.t as it runs out of memory on many smoker
      systems (CPAN RT#118310)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 20160302-1
changelog:
  - Update to 20160302
    - Corrected a minor problem in which an unwanted newline was placed before
      the closing brace of an anonymous sub with a signature, if it was in a
      list (CPAN RT#112534)
    - Corrected a minor problem in which occasional extra indentation was given
      to the closing brace of an anonymous sub in a list when the -lp parameter
      was set


author: Paul Howarth <paul@city-fan.org> - 20170521-1
changelog:
  - Update to 20170521
    - Includes fix for CVE-2016-10374: Uses current working directory without
      symlink-attack protection
    - See CHANGES for details of other bug fixes and enhancements
  - Simplify find command using -delete


author: Petr Pisar <ppisar@redhat.com> - 2.0.10-13
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1623267)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-443
changelog:
  - Fix propagating non-string variables in an exception value (RT#134291)
  - Include trailing zero in scalars holding trie data (RT#134207)
  - Fix a use after free in /(?{...})/ (RT#134208)
  - Fix a use after free in debugging output of a collation
  - Fix file mode of a perl-example.stp example


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
changelog:
  - Fix a NULL pointer dereference in PerlIOVia_pushed()
  - Fix a crash when setting $@ on unwinding a call stack (RT#134266)
  - Fix parsing a denominator when parsing a Unicode property name
  - Fix a documentation about a future API change
  - Do not run File-Find tests in parallel


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
changelog:
  - Adjust spec file to rpm-build-4.15.0-0.rc1.1
  - Fix parsing a Unicode property name when compiling a regular expression
  - Fix a buffer overread when parsing a Unicode property while compiling
    a regular expression (RT#134133)
  - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
  - Fix a buffer overread when compiling a regular expression with many escapes
    (RT#134325)
  - Fix a buffer overflow when compiling a regular expression with many branches
    (RT#134329)
  - Correct a misspelling in perlrebackslash documentation (RT#134395)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-446
changelog:
  - Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
  - Fix a detection for futimes (RT#134432)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.1-447
changelog:
  - 5.30.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.1/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-448
changelog:
  - Fix overloading for binary and octal floats (RT#125557)
  - Fix handling undefined array members in Dumpvalue (RT#134441)
  - Fix taint mode documentation regarding @INC
  - Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
  - Fix an unintended upgrade to UTF-8 in the middle of a transliteration
  - Fix a race in File::stat() tests (GH#17234)
  - Fix a buffer overread when parsing a number (GH#17279)
  - Fix GCC 10 version detection (GH#17295)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix memory corruption on perls 5.8.0 - 5.8.3
    - Improve use of constants in compile-time perl version checks
  - BR: perl-generators unconditionally
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Paul Howarth <paul@city-fan.org> - 2:1.51-1
changelog:
  - Update to 1.51
    - Fix CLDR formatting of 'S' pattern with more than 9 digits of precision;
      while we only store nanoseconds in the DateTime object we should still be
      able to handle an arbitrary number of digits properly (GH#89)
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.0010-1
changelog:
  - Update to 0.0010
    - Makefile.PL: better prereqs declaration
    - Documentation typo fix
  - Switch upstream from search.cpan.org to metacpan.org
  - Drop legacy Group: tag
  - Use plain 'perl' instead of '%{__perl}' macro
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:2.04-1
changelog:
  - Update to 2.04.
  - Remove release_tests (Dropped by upstream).
  - Remove author_tests (Avoid packaging bloat).


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Add rules files for 'prove' and Test::Harness to specify that tests need to
      be run serially for now
    - Support spaces (and other special characters too) in share files (GH#2)
  - BR: perl(CPAN::Meta::YAML) so we can process testrules.yml


author: Paul Howarth <paul@city-fan.org> - 1.016-1
changelog:
  - Update to 1.016
    - Directories created with tempd will only be cleaned up by the PID that
      created them, not by forked children
  - Switch upstream from search.cpan.org to metacpan.org


author: Tom Stellard <tstellar@redhat.com> - 3.72-21
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Make sure that Net::SSLeay::CTX_get0_param is defined before using
      X509_V_FLAG_PARTIAL_CHAIN; Net::SSLeay 1.85 defined only the second with
      LibreSSL 2.7.4 but not the first (CPAN RT#128716)
    - Prefer AES for server side cipher default since it is usually
      hardware-accelerated
    - Fix test t/verify_partial_chain.t by using the newly exposed function
      can_partial_chain instead of guessing (wrongly) if the functionality is
      available


author: Paul Howarth <paul@city-fan.org> - 2.066-5
changelog:
  - Runtime openssl dependency should be on openssl-libs
  - Always require preferred IPv6 back-end: IO::Socket::IP ≥ 0.31
  - Always require preferred IDN back-end: URI::_idna
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.98-1
changelog:
  - Update to 0.98
    - Switch to using $!{EINTR}
    - Honor umask for user/group permissions on a +rw file
    - Remove commented code from CPAN RT#50739
    - Fix _write on invalid objects (GH#63)
    - Make slave the controlling terminal so more programs can be called from
      IPC::Run reliably (GH#54)
    - Prevent Not a GLOB reference in close_terminal by untieing before close
      (GH#53)
    - Fix '&' closing the stdin of the right process (GH#46)
    - Do POSIX::_exit not ::exit (GH#41)
    - Ensure child Win32 processes have same priority as parent (GH#40)
    - Add unit test for passing use of Readonly.pm (GH#38)
    - Fix GLOB test in IPC::Run::IO->new (GH#39)
    - Fix for memory leak (GH#86, CPAN RT#57990)
    - MANIFEST was updated; new tests may start shipping now


author: Paul Howarth <paul@city-fan.org> - 0.99-1
changelog:
  - Update to 0.99
    - Fixes for Windows unit tests so they skip or pass
      - t/autoflush.t
      - t/readonly.t
      - t/run_stdin-callback-return-array.t


author: Paul Howarth <paul@city-fan.org> - 20180523.0-1
changelog:
  - Update to 20180523.0
    - Fix using fd in child process when it happens to be the same number in the
      child as it was in the parent (GH#99)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 1.25-12
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
  - Introduce build-condition for optional tests
  - Use %doc where possible
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 1:4.00-1
changelog:
  - Update to 4.00
    - BACKWARD INCOMPATIBILITY: As JSON::XS 4.0 changed its policy and enabled
      allow_nonref by default, JSON::PP also enabled allow_nonref by default
    - Implement allow_tags that was introduced by JSON::XS 3.0
    - Add boolean_values that was introduced by JSON::XS 4.0
    - Allow literal tags in strings in relaxed mode, as JSON::XS 3.02 does
    - Allow PERL_JSON_PP_USE_B environmental variable to restore old number
      detection behavior for compatibility
    - Various documentation updates
  - Drop provides filter, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.000035-1
changelog:
  - Update to 1.000035
    - Fix how relative paths are absolutized, so they work properly on MSWin32
      (GH#24)
    - Quieten noisy tests (GH#31)


author: Paul Howarth <paul@city-fan.org> - 1.86-0.2.09
changelog:
  - Get libraries to link against from pkg-config
    https://github.com/radiator-software/p5-net-ssleay/pull/127


author: Paul Howarth <paul@city-fan.org> - 1.88-1
changelog:
  - Update to 1.88
    Summary of major changes since version 1.85
    - Mike McCauley has stepped down as maintainer: the new maintainers are Chris
      Novakovic, Heikki Vatiainen and Tuure Vartiainen
    - The source code has moved from the now-defunct Debian Subversion server
      (alioth.debian.org) to GitHub
      (https://github.com/radiator-software/p5-net-ssleay)
    - Net-SSLeay is provided under the terms of the Artistic License 2.0; this
      has been the case since version 1.66, but references to other licenses
      remained in the source code, causing ambiguity
    - Perl 5.8.1 or newer is now required to use Net-SSLeay; this has already
      been the case for some time in practice, as the test suite hasn't fully
      passed on Perl 5.6 for several years
    - Much-improved compatibility with OpenSSL 1.1.1, and improved support for
      TLS 1.3
    - Fixed a long-standing bug in cb_data_advanced_put() that caused memory
      leaks when callbacks were frequently added and removed
    - Support in the test suite for "hardened" OpenSSL configurations that set a
      default security level of 2 or higher (e.g., in the OpenSSL packages that
      ship with recent versions of Debian, Fedora and Ubuntu)


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Avoid new warning in 5.21.x regarding too many arguments for printf/sprintf
    - Canonical repository moved to https://github.com/moose/Package-Stash
  - Package new CONTRIBUTING file
  - Specify all build dependencies
  - Don't bother running the extra tests
  - Simplify find command using -delete
  - Drop EL-5 support
    - Drop legacy Group: tag
    - Drop explicit buildroot cleaning in %install section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Quiet compiler warning (GH#2)
    - Canonical repository moved to https://github.com/moose/Package-Stash-XS
  - Package new CONTRIBUTING file
  - Don't bother running the extra tests
  - Drop EL-5 support
    - Drop legacy Group: tag
    - Drop explicit buildroot cleaning in %install section
    - BR: perl-devel and perl(Variable::Magic) unconditionally
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.015-3
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Fixed a bug with inlining Moose types: if a type's parent needed
      environment variables, those would not get closed over (GH#22)
    - Added a debug option to dump the source of the subroutine before it is
      eval'd


author: Paul Howarth <paul@city-fan.org> - 0.30-1
changelog:
  - Update to 0.30
    - Added a new option for named params, "return_object", which causes the
      validation sub to return an object with methods for each param rather than
      a hashref; this is a great way to avoid typos in hash keys (idea
      shamelessly stolen from Toby Inkster's Type::Params module)
    - Tweaked the POD formatting so that the table of contents generated by
      MetaCPAN is more useful
    - Optionally use Class::XSAccessor


author: Paul Howarth <paul@city-fan.org> - 0.106-1
changelog:
  - Update to 0.106
    - The PERL_PATH_TINY_NO_FLOCK environment variable has been added to allow
      users to disable file locking (and any associated warnings)
    - Detection of unsupported 'flock' is no longer BSD-specific; this allows
      detecting and warning, for example, with the Luster filesystem on Linux
    - Improve reliability and diagnostics of tests run via 'do'


author: Paul Howarth <paul@city-fan.org> - 0.108-1
changelog:
  - Update to 0.108
    - Fixed a bug where failure to load optional modules would trigger an
      external $SIG{__DIE__} handler


author: Paul Howarth <paul@city-fan.org> - 0.204-1
changelog:
  - Update to 0.204
    - Fix Makefile.PL so that the 'install' sub is patched before WriteMakefile()
      is called (GH#41)


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Emmanuel Seyman <emmanuel@seyman.fr> - 2.000007-1
changelog:
  - Update to 2.000007
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to "make" with %{make_build}
  - Tage LICENSE file as such


author: Paul Howarth <paul@city-fan.org> - 2.001001-1
changelog:
  - Update to 2.001001
  - This release by HAARG: update source URL
  - Classify buildreqs by usage
  - Fix permissions verbosely
  - Drop redundant use of %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.103014-1
changelog:
  - Update to 0.103014
    - Added SPDX license expression support
  - This release by LEONT → update source URL


author: Paul Howarth <paul@city-fan.org> - 0.43-1
changelog:
  - Update to 0.43
    - Optimized compile-time operations to make Specio itself quicker to load;
      Specio's load time is a non-trivial part of the load time of DateTime (and
      presumably other things that use it)
    - Based on https://github.com/houseabsolute/DateTime.pm/issues/85
  - Package new CODE_OF_CONDUCT.md file


author: Paul Howarth <paul@city-fan.org> - 0.44-1
changelog:
  - Update to 0.44
    - Replaced the use of B with XString if it is installed; the latter is much
      smaller and provides the one subroutine from B we cared about (based on
      GH#15)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.987-15
changelog:
  - Drop some support for older distributions
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workarounds for building with Test::More < 0.94


author: Paul Howarth <paul@city-fan.org> - 1.44.3-1
changelog:
  - Update to 1.443
    - Found another relative path require issue:
      http://blogs.perl.org/users/ryan_voots/2017/04/trials-and-troubles-with-changing-inc.html
    - This is another attempt at avoiding failures from the v5.26 removal of . from @INC
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.10-14
changelog:
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section
  - Drop redundant explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 3:1.302166-1
changelog:
  - Update to 1.302166
    - Better diagnostics when a context is destroyed unexpectedly
    - Add an event to notify when END phase starts


author: Paul Howarth <paul@city-fan.org> - 3:1.302168-1
changelog:
  - Update to 1.302168
    - Fix typo in a Test2::API::Breakage warning
    - Delay loading of Term::Table until needed


author: Paul Howarth <paul@city-fan.org> - 3:1.302169-1
changelog:
  - Update to 1.302169
    - Update inlined Object::HashBase
    - Avoid 'used only once' warnings in BEGIN and END blocks


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
  - Update to 0.33
    - Clean up some manpage language (Debian Bug #322351, CPAN RT#49519)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 0.34-1
changelog:
  - Update to 0.34
    - Added a note that XS warnings might not be caught (CPAN RT#42070, GH#1)
    - Removed TODO section
    - Updated Copyright section


author: Paul Howarth <paul@city-fan.org> - 0.35-1
changelog:
  - Update to 0.35
    - Create META.json so that perl Makefile.PL stops complaining (GH#2)
    - Update META.yml (GH#3)
    - Add missing comma in Makefile.PL (GH#4)
    - Pod clean-up (GH#5)
    - README clean-up: assign copyright to current author (GH#6)


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.07-1
changelog:
  - Update to 0.07
    - Reverted back to using the Warning event type, since the bug in the Test2
      core that caused this to be a problem has since been fixed
    - Replaced use of Test2::Bundle::Extended with Test2::V0
  - Package new document CODE_OF_CONDUCT.md
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Use IPC::Run3 instead of Capture::Tiny for all tests, which fixes an issue
      with the 'tap-bug-in-test2.t' on Windows (CPAN RT#129294)


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Skip tests of "when" and "given/when" usage for perl 5.27.7 *only*
      (see CPAN RT#123908)


author: Paul Howarth <paul@city-fan.org> - 1.28-1
changelog:
  - Update to 1.28
    - Security fix: only enable loading globs when $LoadCode is set (GH#213)
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (CPAN RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 20181120-1
changelog:
  - Update to 20181120 (see CHANGES.md for details)
  - Drop UTF-8 patch, no longer needed
  - Text documentation converted to markdown upstream


author: Remi Collet <rcollet@redhat.com> 1.0-1
changelog:
  - initial packaging from php55 from rhscl 1.1
  - install macro in /usr/lib/rpm/macros.d
  - each package requires runtime (for license)


author: Remi Collet <rcollet@redhat.com> - 5.6.5-4
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868
  - zip: integer overflow when processing ZIP archives CVE-2015-2331


author: Remi Collet <rcollet@redhat.com> - 5.6.5-5
changelog:
  - mod_php: filter libphp5.so out of provides #1212726
  - fpm: fix incorrect selinux contexts #1194337


author: Remi Collet <rcollet@redhat.com> - 5.6.5-8
changelog:
  - Phar: fix segmentation fault in Phar::convertToData on
    invalid file CVE-2015-5589
  - Phar: fix buffer overflow and stack smashing error in
    phar_fix_filepath CVE-2015-5590
  - Phar: fix files from archive can be extracted outside of
    destination directory using phar CVE-2015-6833
  - Phar: NULL pointer dereference in phar_get_fp_offset()
    CVE-2015-7803
  - Phar: uninitialized pointer in phar_make_dirstream()
    CVE-2015-7804
  - Xslt: fix NULL pointer dereference in XSLTProcessor class
    CVE-2015-6837 CVE-2015-6838
  - Core: fix use-after-free vulnerability in session
    deserializer CVE-2015-6835
  - Core:  fix multiple unserialization use-after-free issues
    CVE-2015-6834
  - Spl: fix dangling pointer in the unserialization of
    ArrayObject items CVE-2015-6832
  - Spl: fix Use After Free Vulnerability in unserialize()
    CVE-2015-6831
  - Soap: fix type confusion in SOAP serialize_function_call()
    CVE-2015-6836


author: Remi Collet <rcollet@redhat.com> 5.6.5-1
changelog:
  - Update to 5.6.5
    http://www.php.net/releases/5_6_5.php
  - FPM: enable ACL for Unix Domain Socket
  - Embdded: filter requires for libphp5-5.6.so
  - add register.content


author: Remi Collet <remi@fedoraproject.org> 1:1.9.5-3
changelog:
  - update Archive_Tar to 1.3.13
  - merge with SCL spec file
  - requires httpd-filesystem for /var/www/html ownership (F21+)


author: Remi Collet <remi@fedoraproject.org> 1:1.10.1-3
changelog:
  - fix https connexion via proxy #1322260
  - improve default config, to avoid change in scriptlet #1356933
  - remove unneeded scriplets


author: Remi Collet <rcollet@redhat.com> 1:1.10.1-1
changelog:
  - update PEAR to 1.10.1 for PHP 7 and RHSCL 2.3
  - update Archive_Tar to 1.4.2
  - update Console_Getopt to 1.4.1
  - update Structures_Graph to 1.1.1
  - update XML_Util to 1.3.0
  - add PEAR_Manpages to 1.10.0


author: Remi Collet <rcollet@redhat.com> - 7.1.5-2
changelog:
  - fix License, timelib is MIT
  - add upstream security patches for oniguruma CVE-2017-9224,
    CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - update to 7.2.7 for rh-php72 collection in RHSCL 7.2
  - FPM: add getallheaders, backported from 7.3


author: Remi Collet <rcollet@redhat.com> 1:1.10.5-1
changelog:
  - initial package for rh-php72 in RHSCL-3.2
  - update PEAR to 1.10.5
  - update Archive_Tar to 1.4.3
  - update XML_Util to 1.4.3
  - add patch for PHP 7.2 from https://github.com/pear/pear-core/pull/71


author: Remi Collet <rcollet@redhat.com> - 7.3.33-1
changelog:
  - rebase to 7.3.33 #2100753
  - fix uninitialized array in pg_query_params() leading to RCE
    CVE-2022-31625


author: Remi Collet <rcollet@redhat.com> 1:1.10.9-1
changelog:
  - initial package for rh-php73 in RHSCL-3.4
  - update PEAR to 1.10.9
  - update Archive_Tar to 1.4.7
  - update Console_Getopt to 1.4.2


author: Robert Kuska <rkuska@redhat.com> - 2.0-4
changelog:
  - Fix macros name shipped with build subpackage
  - Define new macro scl_no_vendor for build subpackage


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python34/root/usr/lib64/python3.4/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-10
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-11
changelog:
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-12
changelog:
  - Replace 512 bit dh key with a 1024 bit one (upstream change)
  - Python upstream issue #24985: https://bugs.python.org/issue24985
    python SSL test fails due to minimum key size being increased in OpenSSL
  Resolves: rhbz#1356506


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Updated to 3.4.2
  - Added scl-utils-build to Requires (rhbz#1144601)
  - Add pynche executable (rhbz#1094640)


author: Robert Kuska <rkuska@redhat.com> - 2.0-2
changelog:
  - Properly define XDG_DATA_DIRS variable to avoid breaking applications (rhbz#1266529)
  - Change packages installed by default with collection (rhbz#1229582)
  - Escape apostrophs in metapackage manual page (rbhz#1219528)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python35/root/usr/lib64/python3.5/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-11
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Updated %py_byte_compile macro
  Resolves rhbz#1374667


author: Tomas Lestach <tlestach@redhat.com> 5.1.2-4
changelog:
  - do not require exact version of oracle instantclient
  - fixed tito build warning
  - replace legacy name of Tagger with new one


author: Charalampos Stratakis <cstratak@redhat.com> - 13.1.2-2
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1353206


author: Tomas Orsava <torsava@redhat.com> - 2.0-1
changelog:
  - Created the rh-python36 metapackage by importing rh-python35, applying the
    following patch and modifying the version to 36
  - Moved pythondeps-scl-35.sh and 2 macro definitions from the -build subpackage
    to the rh-python35-python-devel subpackage where it should be for dependant
    collections to build properly
  Resolves: rhbz#1422346


author: Tomas Orsava <torsava@redhat.com> - 3.12-1
changelog:
  - Updated to the current Fedora version
  - Removed Patch 0 as it is already patched in 3.12:
    http://pyyaml.org/ticket/247


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-10
changelog:
  - numpy should own /opt/rh/rh-python36/root/usr/lib64/python3.6/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.12-1
changelog:
  - Update to 3.6.12 (rhbz#1873080)
  - Security fixes for CVE-2019-18348 (rhbz#1765148), CVE-2019-16935 (rhbz#1798002),
    CVE-2020-8492 (rhbz#1810620), CVE-2019-20907 (rhbz#1856545),
    CVE-2020-14422 (rhbz#1857276)
  - Fix faulthandler stack size
  - Reduce the number of tests running during the profile guided optimizations build
    and enable the optimizations for all the supported architectures


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-12
changelog:
  - Moved pythondeps-scl-35.sh and 2 macro definitions from the rh-python35-build
    subpackage here to the python-devel subpackage where it should be for
    dependant collections to build properly
  - Also defined the 2 macros in this spec file so they are available during the
    build of Python itself
  Resolves: rhbz#1422346


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-1
changelog:
  - Updated to the latest Fedora version 3.4.0
  - Renumbered Patch 1 to 2 to be in line with Fedora
  - Added Patch 1 from Fedora that fixes CVE-2013-7440 and CVE-2013-2099
  - Added Patch 3 from upstream for tests to pass without an active mongodb;
    We can't test pymongo with a running database like in Fedora, because in
    RHEL/RHSCLs it's packaged as a separate collection
  - Removed BuildRequires: python-nose as the test suite isn't using it any more


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-2
changelog:
  - Removed the commented out filter macros at the top of the specfile.
    While they were commented out, they still took effect since the macros still
    expanded. However, they were causing error messages in the buildlog [0] and
    causing the provides/requires generator script not to finish. Thus the
    packages were missing some of the required Provides and Requires tags.
    [0] warning: Ignoring invalid regex ^%{_scl_prefix}/.*$|%{_root_sysconfdir}/rpm/macros.rh-python36-config$
       (% signs were doubled to avoid rpm-lint warnings)


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-3
changelog:
  - Add virtual provides for the bundled libraries
  - Correct the license information to reflect the bundled libraries
  Resolves: rhbz#1774951


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.1-4
changelog:
  - Use the system level root certificate instead of the one bundled in requests
  Resolves: rhbz#1826520


author: Tomas Orsava <torsava@redhat.com> - 2.0-1
changelog:
  - Created the rh-python38 metapackage by importing and modifying rh-python36
  - Resolves: rhbz#1671025


author: Tomas Orsava <torsava@redhat.com> - 3.8.0-8
changelog:
  - Building with new gcc from devtoolset
  - Re-added dtrace and -fno-semantic-interposition
  - Resolves: rhbz#1671025


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-13
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1815645


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-15
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1817494


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.6-1
changelog:
  - Update to 3.8.6
  - Security fixes for CVE-2020-26116, CVE-2020-14422 and CVE-2019-20907
  Resolves: rhbz#1882438, rhbz#1883256, rhbz#1857277, rhbz#1856546


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.11-1
changelog:
  - Update to 3.8.11
  - Security fixes for CVE-2021-3426, CVE-2021-23336, CVE-2021-3177 and CVE-2020-27619
  Resolves: rhbz#1935913, rhbz#1928904, rhbz#1918168, rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.11-2
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Update to 3.8.13
  - Fix test suite issues with the latest expat security update
  Resolves: rhbz#2068592


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.14-1
changelog:
  - Update to 3.8.14
  - Fixes for CVE-2015-20107, CVE-2020-10735, CVE-2021-28861
  Resolves: rhbz#2125237, rhbz#2125239, rhbz#2125238


author: Darren Archibald <darren.archibald@oracle.com> - 3.8.18-2
changelog:
  - Update to 3.8.18
  - Security fixes for CVE-2007-4559, CVE-2022-45061, CVE-2023-24329 CVE-2023-40217


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.6-1
changelog:
  - Update to 3.8.6
  - Security fixes for CVE-2020-26116, CVE-2020-14422 and CVE-2019-20907
  Resolves: rhbz#1885289, rhbz#1885287, rhbz#1885290, rhbz#1885296


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Miro Hrončok <mhroncok@redhat.com> - 19.2.3-1
changelog:
  - Update to 19.2.3 (#1742230)
  - Drop patch that should strip path prefixes from RECORD files, the paths are relative


author: Lumír Balhar <lbalhar@redhat.com> - 19.3.1
changelog:
  - Rebase to 19.3.1 to enable support for manylinux2014
  Resolves: rhbz#1827267
  - + some other fixes from Fedora 32 where we have the same version now


author: Charalampos Stratakis <cstratak@redhat.com> - 19.3.1-2
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Christian Heimes <cheimes@redhat.com> - 2.14-18
changelog:
  - Add build dependency on cpp for unit tests
  - Add dependency on python-ply version to prevent "yacc table file version is out of date"
  - Fixes RHBZ#1668230


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Tomas Orsava <torsava@redhat.com> - 41.6.0-1
changelog:
  - Upgrade to 41.6.0 (#1758945).
  - https://setuptools.readthedocs.io/en/latest/history.html#v41-6-0
  - Disabled a failing upstream test: https://github.com/pypa/setuptools/issues/1896


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.7-2
changelog:
  - Subpackage python2-urllib3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lumír Balhar <lbalhar@redhat.com> - 1.25.7-7
changelog:
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1968074
  - Update RECENT_DATE dynamically


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <rcollet@redhat.com> - 3.2.3-1
changelog:
  - rebase to 3.2.3 #1368102
  - fix redis-shutdown script
  - init script doesn't support load/force-reload option #1369495


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - provide redis-check-rdb as a symlink to redis-server
    add patch from https://github.com/antirez/redis/pull/3494
  - data and configuration should not be publicly readable #1374717
  - remove /var/run/redis with systemd
  - add man pages from https://github.com/antirez/redis/pull/3491 #1369821


author: Remi Collet <rcollet@redhat.com> - 3.2.13
changelog:
  - rebase to 3.2.13
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192


author: Remi Collet <rcollete@redhat.com> - 5.0.5-1
changelog:
  - rebase to 5.0.5
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollete@redhat.com> - 6.0.16-2
changelog:
  - update to 6.0.16 for
    CVE-2021-32626 CVE-2021-32627 CVE-2021-32628 CVE-2021-32687
    CVE-2021-41099 CVE-2021-32675


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058613
  - Add LICENSE, README and man page.
    Resolves: rhbz#1063707


author: Josef Stribny <jstribny@redhat.com> - 1:4.0.2-1
changelog:
  - Update to ActionPack 4.0.2
    - Resolves: rhbz#1037985
  - Fix CVE-2013-6417, CVE-2013-6414, CVE-2013-6415, CVE-2013-6416 and CVE-2013-4491
    - Resolves: rhbz#1036421


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-3
changelog:
  - Fix Timing attack vulnerability in Action Controller - rhbz#1301933
    - Resolves: CVE-2015-7576
  - Fix Possible Object Leak and Denial of Service attack - rhbz#1301946
    - Resolves: CVE-2016-0751
  - Fix Possible Information Leak Vulnerability - rhbz#1301963
    - Resolves: CVE-2016-0752
  - Fix Object leak vulnerability for wildcard controller routes - rhbz#1301981
    - Resolves: CVE-2015-7581


author: Vít Ondruch <vondruch@redhat.com> - 1:4.1.5-4
changelog:
  - Fix directory traversal and information leak.
    Resolves: CVE-2016-2097
  - Fix code injection vulnerability.
    Resolves: CVE-2016-2098


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Nested attributes rejection proc bypass - rhbz#1301957
    - Resolves: CVE-2015-7577


author: Pavel Valena <pvalena@redhat.com> - 1:4.1.5-2
changelog:
  - Fix possible input validation circumvention - rhbz#1301973
    - Resolves: CVE-2016-0753
  - Fix Timing attack vulnerability in basic authentication - rhbz#1301933
    - Resolves: CVE-2015-7576


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.1.0-6
changelog:
  - Rebuilt for Ruby 1.9.3.
  - Removed unneeded %defattr and %clean section.
  - Introduced -doc subpackage.


author: Josef Stribny <jstribny@redhat.com> - 1.10.2-4
changelog:
  - Fix the .so name from * to cbson
  - Get rid of wrong .so provide on RHEL 6
    - Resolves: rhbz#1203138


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.4.0-2
changelog:
  - Removed the duplicated "git checkout" in comment.
  - BR: rubygem(therubyracer) for tests, don't use deprecated js.


author: <Minnikhanov@gmail.com> - 2.3.0-1
changelog:
  - Updated mail to latest upstream release (v.2.3.0 2011-04-27)
  - Test excluded. May be need Zentest >= 4.4.0 and rubygem(rcov).


author: Vít Ondruch <vondruch@redhat.com> - 0.3.1-1
changelog:
  - Updated to the latest upstream version.
  - Tests enabled.
  - Documentation moved into separate package.
  - Remove unnecessary Hoe runtime dependency.


author: Josef Stribny <jstribny@redhat.com> - 1:1.4.5-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Added patch0 to fix tests for Ruby 2.0
  - Update to Rack 1.4.5


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.3.1-1
changelog:
  - Update from Marek Goldmann <mgoldman@redhat.com>
    - Updated to 1.3.1
    - Patch to make it work with Rake >= 0.9.0.beta.0


author: Josef Stribny <jstribny@redhat.com> - 3.2.6-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to sass 3.2.6.
  - Own extra and rails directories (rhbz#911648).


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.6.beta5
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to 0.11.0
  - Add patch that fixes bignum operations on Ruby 2.0.


author: Jun Aruga <jaruga@redhat.com> - 1:4.2.6-5
changelog:
  - Fix a render file directory traversal in Action View
    Resolves: CVE-2019-5418
  - Fix a denial of service vulnerability in Action View
    Resolves: CVE-2019-5419


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.0.4-1
changelog:
  - Update to Journey 1.0.4, as this version is needed by ActionPack 3.2.6.
  - Remove unneded Requires: ruby.


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.0-1
changelog:
  - Update to loofah 2.0.0 (RHBZ #1096760)
  - Adjustments for https://fedoraproject.org/wiki/Changes/Ruby_2.1


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.2-1
changelog:
  - Update to loofah 2.0.2 (rhbz#1218819)
  - Drop patch to skip failing test (it works now, with Nokogiri 1.6.6.2)
  - Drop Fedora 19 support
  - Use %license macro


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 2.0.3-1
changelog:
  - Update to loofah 2.0.3 (rhbz#1256165)
  - Use %autosetup macro
  - Drop macros for Fedora 20 (it is now EOL)
  - Drop unneeded %license definition


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Run unit and acceptance tests in a single process
  - Patch test suite to work outside rake/bundler


author: Pavel Valena <pvalena@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - License file is missing https://github.com/rails/rails-html-sanitizer/pull/47
  - Skip failing tests due to possible incompatibility with libxml2


author: Pavel Valena <pvalena@redhat.com> - 3.4.2-6
changelog:
  - Add rubygem-builder to BuildRequires
  - Add rubygem-gherkin to BuildRequires
  - Add rubygem-multi_test to BuildRequires
  - Add rubygem-ffi to BuildRequires


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.1.6-2
changelog:
  - Update to shoulda-context 1.1.6
  - Clean up comments
  - Remove unnecessary BR: on ruby
  - Exclude developer-only files from binary packages


author: Jun Aruga <jaruga@redhat.com> - 1:5.0.1-1
changelog:
  - Update to Active Support 5.0.1.
  - Fix warnings: Fixnum and Bignum are deprecated in Ruby trunk
  - Fix Ruby 2.4.0 compatibility.


author: Jun Aruga <jaruga@redhat.com> - 9.0.6-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Pavel Valena <pvalena@redhat.com> - 2.0.3-3
changelog:
  - Include Gemfile and Rakefile in -doc subpackage
  - Do not use %license macro
  - Explicitly require runtime subpackage


author: Jun Aruga <jaruga@redhat.com> - 3.6.0-2
changelog:
  - Add openssl-devel dependency to enable HTTPS support.
  - Add regenerated parser logic.
  - Improve Ruby load path to run test suite.
  - Improve files section.


author: Jun Aruga <jaruga@redhat.com> - 3.7.1-1
changelog:
  - Update to Sprockets 3.7.1.
  - Update scl_prefix_nodejs declaration to build with no-SCL environment.


author: Pavel Valena <pvalena@redhat.com> - 0.3.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
  - Correct attributes for websocket_mask.so


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-2
changelog:
  - Fixed operating_system to properly install binary extensions.
  - Rebase patches to apply cleanly.
  - Fix PPC64LE support.
  - Fix -tcltk requires.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251465


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251466


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-18
changelog:
  - Upgrade to Ruby 2.2.9.
    Resolves: rhbz#1549646
    Resolves: CVE-2017-17405
    * Remove Patch7: rubygems-2.2.4-Limit-API-endpoint-to-original-security
      -domain.patch
      subsumed
    * Remove Patch8: rubygems-2.2.5-Fix-API-endpoint-domain-clamping.patch
      subsumed
    * Remove Patch9: ruby-2.2.3-dsym_fstrs-for-object-allocation-gc-phase.patch
      subsumed
    * Remove Patch10: ruby-2.3.0-test_gem_remote_fetcher.rb-get-rid-of-errors.patch
      subsumed
    * Remove Patch11: ruby-2.2.3-vm_args.c-protect-value-stack-from-calling-other
      -met.patch
      subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-19
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549646


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com>
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Josef Stribny <jstribny@redhat.com> - 1.7.6-2
changelog:
  - Keep ssl_certs/certificate_manager.rb file (used in tests)
  - Correctly add load paths for gems during tests


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Jun Aruga <jaruga@redhat.com> - 2.5.0-5
changelog:
  - They are broken by recen tzdata update.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.3-6
changelog:
  - Update to Ruby 2.5.3.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563076
    Removed Patch11: ruby-2.5.0-parse.y-assignable_error.patch; subsumed
    Removed Patch12: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
    Removed Patch13: ruby-2.5.0-st.c-retry-operations-if-rebuilt.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir
    Resolves: rhbz#1602877


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-7
changelog:
  - Upgrade to Ruby 2.5.5.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-9
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952998
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1953001


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1701182
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950331
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-120
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Upgrade to Ruby 2.6.9.
    Resolves: rhbz#2056947
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Resolves: CVE-2020-36327


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-128
changelog:
  - Upgrade to Ruby 2.7.1.
    Resolves: rhbz#1826872
  - Call load builtin macro if it is defined, or call own load macro.


author: Vít Ondruch <vondruch@redhat.com> - 2.7.3-129
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947931
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950016


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-130
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: rhbz#1996669
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: rhbz#1996666
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: rhbz#1996668
  - Revert a commit changing CFLAGS to avoid failures in test_jit.rb.
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327
  - Fix some failing Bundler tests with old Git.


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-130
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Revert a commit changing CFLAGS to avoid failures in test_jit.rb.
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327
  - Fix some failing Bundler tests with old Git.


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-131
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2128631
  - Fix buffer overflow in CGI.escape_html.
    Resolves: CVE-2021-41816
  - Fix Regular Expression Denial of Service Vulnerability of Date parsing methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 2.7.8-132
changelog:
  - Upgrade to Ruby 2.7.8.
    Resolves: rhbz#2149267
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Jun Aruga <jaruga@redhat.com> - 1.2.1-1
changelog:
  - Update to pg 1.2.1.
  - Add marking lines at the start and end of the setup.log
  - Assign a random testing port.


author: Jun Aruga <jaruga@redhat.com> - 3.7-2
changelog:
  - Add explicit IRB dependency.
    Related: rhbz#1921719
  - Fix a typo in the scldevel description.
    Related: rhbz#1903661


author: Jun Aruga <jaruga@redhat.com> - 3.0.0-144
changelog:
  - Upgrade to Ruby 3.0.0.
    Resolves: rhbz#1903661
  - Skip the ssl tests for offline on Brew build environment.
  - Remove the rdoc symbolic files that are specific in SCL.


author: Jun Aruga <jaruga@redhat.com> - 3.0.0-145
changelog:
  - Fix the ruby systemtap file path.
    Resolves: rhbz#1932291
  - Revert removing the rdoc symbolic files that are specific in SCL.
  - Bundle RDoc into StdLib.
    Resolves: rhbz#1921719
  - Merge commits from Fedora rawhide branch.
    Related: rhbz#1903661


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-148
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
    Resolves: rhbz#1995172
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
    Resolves: rhbz#1995174
  - Fix StartTLS stripping vulnerability in Net::IMAP. (CVE-2021-32066)
    Resolves: rhbz#1995173
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
    Resolves: rhbz#1968497
  - Re-enable SSL tests.
  - Fix some failing Bundler tests with old Git.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-148
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
    Resolves: rhbz#1980842
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
    Resolves: rhbz#1980824
  - Fix StartTLS stripping vulnerability in Net::IMAP. (CVE-2021-32066)
    Resolves: rhbz#1980834
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
    Resolves: rhbz#1968498
  - Re-enable SSL tests.
  - Fix some failing Bundler tests with old Git.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-149
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2128628
  - Fix user-installed rubygems plugins are not being loaded.
    Resolves: rhbz#2128629
  - Fix buffer overflow in CGI.escape_html.
    Resolves: CVE-2021-41816
  - Fix regular expression denial of service vulnerability of Date parsing
    methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-2
changelog:
  - Add the basedir option to mysql_install_db to avoid an error on mariadb <= 5.5.64.
    Resolves: rhbz#1903661


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2
changelog:
  - Update to current packaging guidelines
  - Remove legacy build conditionals
  - Remove file requires
  - Remove usage of shutil (not available on RHEL)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-2.3
changelog:
  - Update requires
  - Install ant.d config file to correct directory in rh-java-common
  - Use correct JAVADIR in bindir scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-1
changelog:
  - update to Varnish 6.0.6
  - Resolves: #1819937 - rh-varnish6-varnish: varnish: remote clients may
    cause Varnish to assert and restart which could result in DoS
  - Resolves: #1707831 - Permissions wrong on /var/opt/rh/rh-varnish6/log/varnish
  - remove unused varnish.tmpfiles


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
changelog:
  - new version 6.0.8
  - Resolves: #1982864 - CVE-2021-36740 rh-varnish6-varnish: varnish: HTTP/2
    request smuggling attack via a large Content-Length header for a POST request


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2.1
changelog:
  - Resolves: #2081576 - CVE-2022-23959 rh-varnish6-varnish: varnish: HTTP/1
    request smuggling vulnerability


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2.3
changelog:
  - Resolves: #2246295 - CVE-2023-44487 rh-varnish6-varnish: HTTP/2: Multiple 
    HTTP/2 enabled web servers are vulnerable to a DDoS attack(Rapid Reset Attack)


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
changelog:
  - new version 6.0.8
  - Resolves: #1982865 - CVE-2021-36740 rh-varnish6: varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: Vít Ondruch <vondruch@redhat.com> - 1:4.1.5-5
changelog:
  - Fix Timing attack vulnerability in Action Controller.
    Resolves: CVE-2015-7576
  - Fix Possible Object Leak and Denial of Service attack.
    Resolves: CVE-2016-0751
  - Fix Possible Information Leak Vulnerability.
    Resolves: CVE-2016-0752
  - Fix Object leak vulnerability for wildcard controller routes.
    Resolves: CVE-2015-7581


author: Vít Ondruch <vondruch@redhat.com> - 1:4.1.5-6
changelog:
  - Fix Directory traversal and information leak in Action View.
    Resolves: CVE-2016-2097
  - Fix code injection vulnerability.
    Resolves: CVE-2016-2098


author: Vít Ondruch <vondruch@redhat.com> - 1:4.0.2-7
changelog:
  - Update the CVE-2016-2097 patch to the latest upstream version.
    Related: CVE-2016-2097
  - Update the CVE-2016-2098 patch to the latest upstream version.
    Related: CVE-2016-2098


author: Vít Ondruch <vondruch@redhat.com> - 2.6.6-1
changelog:
  - Updated to the latest upstream (#670589).
  - Removed flawed require check.
  - Removed obsolete BuildRoot.
  - Removed obsolete cleanup.
  - Package setup and test execution reworked.
  - Removed bindir magick.


author: Vít Ondruch <vondruch@redhat.com> - 0.5.0-1
changelog:
  - Update to i18n 0.5.0.
  - Documentation moved into subpackage.
  - Removed unnecessary cleanup.
  - Preparetion for test suite execution during build.


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Bump version.
  - Add -scldevel sub-package.
    Resolves: rhbz#1063297
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058615
  - Add LICENSE, README and man page.
    Resolves: rhbz#1061459


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492
  - Allow MD5 in OpenSSL for tests.


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: Andrey Yutman <andrey.yutman@oracle.com> - 1.9.3.484-50.0.1
changelog:
  - Backport fix FTBFS due to support for RFC 5649 in OpenSSL
  - Fix "dh key too small" error
  - Fix test suite for new tzdata


author: Livy Ge <livy.ge@oracle.com> - 1.9.3.484-51.0.1
changelog:
  - Backport fix FTBFS due to support for RFC 5649 in OpenSSL
  - Fix test suite for new tzdata
  - Fix "dh key too small" error


author: Vít Ondruch <vondruch@redhat.com> - 1:3.2.8-7
changelog:
  - Fix i18n missing translation XSS.
    * rubygem-actionpack-3.2.16-CVE-2013-4491-Stop-using-i18ns-built-in-HTML-error-handling.patch
    - Resolves: CVE-2013-4491
  - Fix Action View DoS.
    * rubygem-actionpack-3.2.16-CVE-2013-6414-Only-use-valid-mime-type-symbols-as-cache-keys.patch
    - Resolves: CVE-2013-6414
  - Fix number_to_currency XSS.
    * rubygem-actionpack-3.2.16-CVE-2013-6415-Escape-the-unit-value-provided-to-number_to_currency.patch
    - Resolves: CVE-2013-6415
  - Fix unsafe query generation risk in Ruby on Rails (incomplete fix for
    CVE-2013-0155) (CVE-2013-6417).
    * rubygem-actionpack-3.2.16-CVE-2013-6417-Deep-Munge-the-parameters-for-GET-and-POST.patch
    - Resolves: CVE-2013-6417


author: Vít Ondruch <vondruch@redhat.com> - 1:3.2.8-14
changelog:
  - Fix Timing attack vulnerability in Action Controller.
    Resolves: CVE-2015-7576
  - Fix Possible Object Leak and Denial of Service attack.
    Resolves: CVE-2016-0751
  - Fix Possible Information Leak Vulnerability.
    Resolves: CVE-2016-0752


author: Vít Ondruch <vondruch@redhat.com> - 1:3.2.8-16
changelog:
  - Update the CVE-2016-2097 to the latest upstream version.
    Related: CVE-2016-2097
  - Update the CVE-2016-2098 patch to the latest upstream version.
    Related: CVE-2016-2098


author: Lukas Zapletal <lzap+rpm@redhat.com> - 1:3.2.8-7
changelog:
  - RHBZ#969448 - NULLS FIRST/LAST SQL statement fix for PostgreSQL
    - Resolves: rhbz#969486
  - Add BR: rubygem(json), since older version of RDoc does not pull it in.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1:3.2.6-1
changelog:
  - Update to ActiveResource 3.2.6.
  - Removed no longer needed BuildRoot tag.
  - Run tests without Rake.
  - Introduce -doc subpackage.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1:3.2.6-1
changelog:
  - Update to ActiveSupport 3.2.6.
  - Removed unneeded BuildRoot tag.
  - Tests no longer fail with newer versions of Mocha, remove workaround.


author: Vít Ondruch <vondruch@redhat.com> - 1.0.9-2
changelog:
  - More concise summary
  - Do not remove manpages, they are used internally
  - Added buildroot cleanup in clean section


author: Matthew Kent <mkent@magoazul.com> - 2.6.5-2
changelog:
  - Move file rename to build stage (#530275).
  - Simplify %check stage (#530275).
  - Remove disable of test_syntax2, fixed by new ruby build (#530275).


author: <Minnikhanov@gmail.com> - 2.2.15-2
changelog:
  - Fix Comment 18 #665560. https://bugzilla.redhat.com/show_bug.cgi?id=665560#c18 
  - Remove create Gemfile.lock at prep-section.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.2-1
changelog:
  - Update to mongo 1.9.2.
  - Enabled test suite for non-SCL builds.
  - Import into ruby193 RHSCL.
    - Resolves: rhbz#1009573


author: Lubomir Rintel (Good Data) <lubo.rintel@gooddata.com> - 0.2.5-2
changelog:
  - Bring tests back
  - Depend on ruby(abi)
  - Replace defines with globals
  - Don't delete the world-writable file, fix permissions instead


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1:1.4.0-1
changelog:
  - Update to Rack 1.4.
  - Moved gem install to %prep to be able to apply patches.
  - Applied two patches that fix test failures with Ruby 1.8.7-p357.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.2.6-1
changelog:
  - Update to Railties 3.2.6.
  - Move some files into -doc subpackage.
  - Remove the unneeded %defattr.
  - Introduce %check section (not running tests yet, as they are part of dependency loop).


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.8.beta5
changelog:
  - Don't install v8 scl macros, they should come in v8 scldevel subpackage
    - Resolves: rhbz#1065887


author: Josef Stribny <jstribny@redhat.com> - 0.18.1-2
changelog:
  - Filter auto-generated requires from example .sh script included in tests
    - Related: rhbz#1063274


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.3-1
changelog:
  - Updated to tilt 1.3.3.
  - Removed patch that fixed BZ #715713, as it is a part of this version.
  - Excluded unnecessary files.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.3-2
changelog:
  - Rebuilt for Ruby 1.9.3.
  - Introduced %bootstrap macro to deal with dependency loop for BuildRequires.


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Bump version.
  - Drop rails dependencies.
    Resolves: rhbz#1056022
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058616
  - Add LICENSE, README and man page.
    Resolves: rhbz#1061460


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
changelog:
  - Update to Ruby 2.0.0-p353
    - Fixes heap overflow in floating point parsing (CVE-2013-4164)
    - Resolves: rhbz#1033906


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
changelog:
  - Fix RubyGems test suite.
    Resolves: rhbz#1069184
  - Do not use bundled libyaml.
    Resolves: rhbz#1069107


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1071347


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164005
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164005
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164005


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
changelog:
  - Update to Ruby 2.0.0-p645.
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
         with-DESTDIR.patch; subsumed
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
        attack.patch; subsumed
    * Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
        CVE-2014-8080.patch; subsumed
    Resolves: rhbz#1070594


author: Akira TAGOH <tagoh@redhat.com> - 0.1-0.15.1617svn
changelog:
  - Update rpm macros to the latest guidelines.
  - Build against python26 for EPEL5.

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.10-2
changelog:
  - backport fix for remote DoS or unspecified other impact via type confusion
    (RHBZ#991116; CVE-2013-2882)


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-4
changelog:
  - multiple CVE fixes
  - CVE-2013-6639 CVE-2013-6640 CVE-2013-6650 
  - CVE-2013-6668 CVE-2014-1704 CVE-2014-5256


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-7
changelog:
  - Backport api for aborting on uncaught exception
  - https://github.com/joyent/node/commit/fbff7054a47551387a99244e2cf0631f30406798


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-8
changelog:
  - Backport Apply REPLACE_INVALID_UTF8 patch
  - https://github.com/joyent/node/commit/881ac26f27f4ac9585d66c8d8a67d5b246a23d1b


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-9
changelog:
  - Include upstream patch: Meaningful name for builtins in JitCodeEvent API
  - https://github.com/joyent/node/commit/5a60e0d904c38c2bdb04785203b1b784967c870d


