# changelog

author: Kamil Dudka <kdudka@redhat.com> - 7.74.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2020-8286 - curl: Inferior OCSP verification
      CVE-2020-8285 - libcurl: FTP wildcard stack overflow
      CVE-2020-8284 - curl: trusting FTP PASV responses


author: Kamil Dudka <kdudka@redhat.com> - 7.76.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2021-22890 - TLS 1.3 session ticket proxy host mixup
      CVE-2021-22876 - Automatic referer leaks credentials


author: Nicola Sella <nsella@redhat.com> - 4.4.2-1
changelog:
  - Update to 4.4.2
  - spec: Fix building with new cmake macros (backport from downstream)
  - Warn about key retrieval over http:
  - Fix --setopt=cachedir writing outside of installroot
  - Add vendor to dnf API (RhBug:1876561)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 4.5.1-1
changelog:
  - Add a get_current() method to SwdbInterface
  - Add `from_repo` attribute for Package class (RhBug:1898968,1879168)
  - Correct description of Package().reponane attribute
  - Add unittest for new API
  - Make rotated log file (mode, owner, group) match previous log settings (RhBug:1894344)
  - [doc] Improve description of modular filtering
  - [doc] add documentation for from_repo
  - [doc] deprecated alias for dnf repoquery --deplist <deplist_option-label>
  - New config option module_allow_stream_switch allows switching enabled streams


author: Nicola Sella <nsella@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0
  - Log scriptlets output also for API users (RhBug:1847340)
  - Fix module remove --all when no match spec (RhBug:1904490)
  - yum.misc.decompress() to handle uncompressed files (RhBug:1895059)
  - Make an error message more informative (RhBug:1814831)
  - Add deprecation notice to help messages of deplist
  - Remove Base._history_undo_operations() as it was replaced with transaction_sr code
  - cli/output: Return number of listed packages from listPkgs()
  - Clean up history command error handling
  - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
  - Add api function fill_sack_from_repos_in_cache to allow loading a repo cache with repomd and (solv file or primary xml) only (RhBug:1865803)
  - Packages installed/removed via DNF API are logged into dnf.log (RhBug:1855158)
  - Support comps groups in history redo (RhBug:1657123,1809565,1809639)
  - Support comps groups in history rollback (RhBug:1657123,1809565,1809639)
  - Support comps groups in history undo (RhBug:1657123,1809565,1809639)
  - New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
  - Add get_header() method to the Package class (RhBug:1876606)
  - Fix documentation of globs not supporting curly brackets (RhBug:1913418)


author: Nicola Sella <nsella@redhat.com> - 4.6.1-1
changelog:
  - Update to 4.6.1
  - Fix recreate script
  - Add unit test for fill_sack_from_repos_in_cache (RhBug:1865803)
  - Add docs and examples for fill_sack_from_repos_in_cache (RhBug:1865803)
  - [spec] remove python2 support
  - Remove problematic language
  - The noroot plugin no longer exists, remove mention
  - Run tests for fill_sack_from_repos_in_cache in installroot (RhBug:1865803)
  - expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - Set persistdir and substitutions for fill_sack_from_repos_in_cache tests (RhBug:1865803)
  - Update documentation for module_obsoletes and module_stream_switch
  - print additional information when verifying GPG key using DNS
  - Bugs fixed (RhBug:1897573)
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)


author: Nicola Sella <nsella@redhat.com> - 4.7.0-1
changelog:
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.8.0-1
changelog:
  - Update to 4.8.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - Bugs fixed (RhBug:1946975,1955309)


author: Joe Orton <jorton@redhat.com> - 2.4.46-2
changelog:
  - sanitize CFLAGS used by /usr/bin/apxs by default (#1873020)
  - add $libdir/httpd/build/vendor-apxs which exposes full CFLAGS
  - redefine _httpd_apxs RPM macro to use vendor-apxs


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-3
changelog:
  - Added support for "pin-source" within PKCS#11 URI (#1670026)
  - Search objects in all matching tokens (#1760751)
  - Set flag RSA_FLAG_EXT_PKEY for RSA keys (#1760541)
  - Fixed various bugs


author: Felix Kaechele <heffer@fedoraproject.org> - 1:1.18.0-1
changelog:
  - Update to 1.18.0
  - Increased types_hash_max_size to 4096 in default config
  - Add gpg source verification
  - Add Recommends: logrotate
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-4 + 0.10.3-10
changelog:
  - Remove openssh-ldap subpackage (#1871025)
  - pkcs11: Do not crash with invalid paths in ssh-agent (#1868996)
  - Clarify documentation about sftp-server -m (#1862504)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-3 + 0.10.4-1
changelog:
  - Unbreak seccomp filter on arm (#1897712)
  - Add a workaround for Debian's broken OpenSSH (#1881301)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-4 + 0.10.4-1
changelog:
  - Remove "PasswordAuthentication yes" from vendor configuration as it is
    already default and it might be hard to override.
  - Fix broken obsoletes for openssh-ldap (#1902084)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-5 + 0.10.4-1
changelog:
  - Use /usr/share/empty.sshd instead of /var/empty/sshd
  - Allow emptu labels in PKCS#11 tokens (#1919007)
  - Drop openssh-cavs subpackage


author: Jakub Jelen <jjelen@redhat.com> - 8.2p1-3 + 0.10.3-9
changelog:
  - Simplify reference to crypto policies in configuration files
  - Unbreak gssapi authentication with GSSAPITrustDNS over jump hosts
  - Correctly print FIPS mode initialized in debug mode
  - Enable SHA2-based GSSAPI key exchange methods (#1666781)
  - Do not break X11 forwarding when IPv6 is disabled
  - Remove fipscheck dependency as OpenSSH is no longer FIPS module
  - Improve documentation about crypto policies defaults in manual pages


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-1 + 0.10.3-10
changelog:
  - New upstream release (#1840503)
  - Unbreak corner cases of sshd_config include
  - Fix order of gssapi key exchange algorithms


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-3 + 0.10.3-10
changelog:
  - Do not lose PIN when more slots match PKCS#11 URI (#1843372)
  - Update to new crypto-policies version on server (using sshd_config include)
  - Move redhat configuraion files to larger number to allow simpler override
  - Move sshd_config include before any other definitions (#1824913)


author: Daiki Ueno <dueno@redhat.com> - 0.23.19-1
changelog:
  - Update to upstream 0.23.19 release
  - Check archive signature in %prep
  - Switch to using Meson as the build system


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.0-455
changelog:
  - 5.32.0 bump (see <https://metacpan.org/pod/release/XSAWYERX/perl-5.32.0/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-459
changelog:
  - Do not use a C compiler reserved identifiers
  - Fix SvUV_nomg() macro definition
  - Fix SvTRUE() documentation
  - Fix ext/XS-APItest/t/utf8_warn_base.pl tests
  - Fix IO::Handle::error() to report write errors (GH#6799)
  - Fix a link to Unicode Technical Standard #18 (GH#17881)
  - Fix setting a non-blocking mode in IO::Socket::UNIX (GH#17787)
  - Fix running actions after stepping in a debugger (GH#17901)
  - Fix a buffer size for asctime_r() and ctime_r() functions
  - Prevent from an integer overflow in RenewDouble() macro
  - Fix a buffer overread in when reallocating formats (GH#17844)
  - Fix a number of arguments passed to a BOOT XS subroutine (GH#17755)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-462
changelog:
  - Fix inheritance resolution of lexial objects in a debugger (GH#17661)
  - Fix a misoptimization when assignig a list in a list context (GH#17816)
  - Fix handling left-hand-side undef when assigning a list (GH#16685)
  - Fix a memory leak when compiling a long regular expression (GH#18054)
  - Fix handling exceptions in a global destruction (GH#18063)
  - Fix sorting with a block that calls return (GH#18081)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-463
changelog:
  - Run-require complete perl by perl-CPAN
  - Fix ownership of /usr/share/perl5/{ExtUtils,File,Module,Text,Time} directories
  - Fix a buffer overflow when compiling a regular expression with a bracketed
    character class with a white space
  - Fix a mismatch with the recursive subpatterns (GH#18096)
  - Update perl-IO-Zlib metadata
  - Fix sv_collxfrm macro to respect locale
  - Fix an iterator signedness in handling a mro exception (GH#18155)
  - Fix a code flow in Perl_sv_inc_nomg()


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-464
changelog:
  - Fix un undefined behavior in Perl_custom_op_get_field()
  - Fix Config variable names in in t/op tests
  - Fix fetching a magic on the stacked file test operators


