# changelog

author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: Vít Ondruch <vondruch@redhat.com> - 0.1.4-5.1
changelog:
  - Fix heap-based buffer overflow when parsing YAML tags.
    Resolves: CVE-2013-6393
  - Fix heap-based buffer overflow when parsing URLs.
    Resolves: CVE-2014-2525


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.8.beta5
changelog:
  - Don't install v8 scl macros, they should come in v8 scldevel subpackage
    - Resolves: rhbz#1065887


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.2-86
changelog:
  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-89
changelog:
  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.4.3-90
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651


author: Pavel Valena <pvalena@redhat.com> - 2.4.5-91
changelog:
  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)


author: Jun Aruga <jaruga@redhat.com> - 2.4.6-92
changelog:
  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix and enhance systemtap tests
  - Remove tests depending on Europe/Moscow to avoid failures due to tzdata change


author: Pavel Valena <pvalena@redhat.com> - 2.3.1-62
changelog:
  - Fix support for dependent^2 SCLs
  - Update to Ruby 2.3.1
    * Remove Patch8:
        ruby-2.3.0-undef-BUILTIN_CHOOSE_EXPR_CONSTANT_P.patch; subsumed
    * Remove Patch10:
        ruby-2.3.1-remove-tests-depending-on-europe-moscow.patch; subsumed
        also removed "UTC=TZ " tests prefix


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.6-1
changelog:
  - update to 9.4.6 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-6.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.9-1
changelog:
  - update to 9.4.9 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-9.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-8.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.12-1
changelog:
  - update to 9.4.12 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-12.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-11.html
    http://www.postgresql.org/docs/9.4/static/release-9-4-10.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.13-1
changelog:
  - update to 9.4.13 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-13.html


author: Petr Kubat <pkubat@redhat.com> - 9.4.14-1
changelog:
  - update to 9.4.14 per release notes
    http://www.postgresql.org/docs/9.4/static/release-9-4-14.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-7
changelog:
  - set the postgresql-ctl context in main package
  - rebase the postgresql-setup to v3.2 to fix --initdb for multiple
    postmasters scenario


author: Jozef Mlich <jmlich@redhat.com> - 9.4.4-1
changelog:
  - rebase to 9.4.4 due to security issues
    CVE-2015-3165 CVE-2015-3167 CVE-2015-3166
    Resolves: #1225798


author: Honza Horak <hhorak@redhat.com> - 9.4.1-1
changelog:
  - Update to 9.4.1
    This also fixes CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1192910


author: Jozef Mlich <jmlich@redhat.com> - 9.4.1-5
changelog:
  - postgreql-setup was updated to 3.1
  - adding tcl-pgtcl to requires of -tcl subpackage
    Resolves: #1199466


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Honza Horak <hhorak@redhat.com> - 1.1.0-4
changelog:
  - Hack bundled libtool to allow major soname number in format sclname-[number]
    Related: RHBZ#1049403


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-3
changelog:
  - Related: #1055555 (add -scldevel subpackage for shipped build-requires garbage)
  - fix installed dirs permissions


author: Jan Pacner <jpacner@redhat.com> - 2.4.9-5
changelog:
  - Resolves: #1075736 (initscript doesnt respect LSB)
  - Resolves: #1057097 (Use the same name for daemon and log file)
  - Resolves: #1075688 (metapackage shouldnt depend on another metapackage)
  - Resolves: #1075025 (Leftovers files after mongodb packages removal)


author: Jan Pacner <jpacner@redhat.com> - 2.0-16
changelog:
  - Related: #1035187 (disable checks about breaking strict-aliasing rules)
  - revert the previous restoration and allow fortifying symbols


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.6.2-3
changelog:
  - Resolves: #1392914
  - Update to 4.6.2
  - Modified/fixed/refactored/removed patches
  - http tests were failing, had to update http-parser too


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-1
changelog:
  - Update to 6.9.1
  - use zvetlik/rh-nodejs6 as a base
  - add gyp as build dependency
  - update/merge/remove patches


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476317
  - disable lots of tests (mainly https and tls)
  - update to latest v6.x release (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-2
changelog:
  - Resolves: RHBZ#1476316
  - disable lots of tests (mainly https and tls)
  - update to latest v6.x release (fixes c-ares CVE), rebase patches
  - remove bundled-ca patch (merged upstream as configure option)
  - fix typo, so http_parser dir gets removed (1478718)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.11.3-5
changelog:
  - Resolves: RHBZ#1508986
  - revert some upstream commits to fix https+openssl-1.0.1 segfaults
  - remove expanding pkgdocdir macros


author: Remi Collet <rcollet@redhat.com> - 5.5.6-9
changelog:
  - gd: fix NULL deref in imagecrop CVE-2013-7327
  - gd: drop vpx support, fix huge memory consumption #1075201


author: Remi Collet <rcollet@redhat.com> - 5.5.6-10
changelog:
  - fileinfo: fix out-of-bounds memory access CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345


author: Remi Collet <rcollet@redhat.com> - 5.5.6-11
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.5.6-12
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.5.20-1
changelog:
  - rebase to PHP 5.5.20 #1057089
  - fix package name in description
  - php-fpm own session and wsdlcache dir
  - php-common doesn't provide php-gmp


author: Remi Collet <rcollet@redhat.com> - 5.5.21-2
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868


author: Remi Collet <rcollet@redhat.com> - 5.5.21-3
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Remi Collet <rcollet@redhat.com> - 1.3.0-1
changelog:
  - release 1.3.0 (beta)
  - use system json-c when available (fedora >= 20)
  - use jsonc name for module and configuration


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.6.beta5
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to 0.11.0
  - Add patch that fixes bignum operations on Ruby 2.0.


author: Jozef Mlich <jmlich@redhat.com> 9.2.7-1
changelog:
  - update to 9.2.7 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html
    Resolves: #1065861
    including fixes for CVE-2014-0066 CVE-2014-0064 CVE-2014-0065
    CVE-2014-0062 CVE-2014-0063 CVE-2014-0060 CVE-2014-0061


author: Jozef Mlich <jmlich@redhat.com> - 9.2.8-1
changelog:
  - update to 9.2.8 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    Resolves: #1079994


author: Jozef Mlich <jmlich@redhat.com> - 9.2.10-1
changelog:
  - Rebase to 9.2.10 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    CVE-2015-0244 CVE-2014-8161 CVE-2015-0241 CVE-2015-0243
    Resolves: #1198663


author: Jozef Mlich <jmlich@redhat.com> - 9.2.10-2
changelog:
  - Release bump, because of previous troubles with ppc64
    and s360x arches and scl metapackage.
    Resolves: #1198663


author: Jozef Mlich <jmlich@redhat.com> - 9.2.13-1
changelog:
  Rebase to 9.2.13 minor vesion per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html
    CVE-2015-3165 CVE-2015-3166 CVE-2015-3167
    Resolves: #1225798


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-1
changelog:
  - rebase to 9.2.6
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html
    Resolves: #1038693
  - More details about replication issues are at
    https://wiki.postgresql.org/wiki/Nov2013ReplicationIssue


author: Honza Horak <hhorak@redhat.com> - 5.6.37-5
changelog:
  - Remove the attempt to implement mysqld@.service, because mysqld_safe
    is not capable of keeping arguments order as mysqld expects
    Reverts: #1449695


author: Honza Horak <hhorak@redhat.com> - 5.6.38-1
changelog:
  - Update to 5.6.38
    Also fixes CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276
    CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294 CVE-2017-10314
    CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
    Resolves: #1505112


author: Michal Schorm <mschorm@redhat.com> - 5.6.39-1
changelog:
  - Rebase to MySQL 5.6.39, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-39.html
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533831
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2562 CVE-2018-2573 CVE-2018-2583
              CVE-2018-2590 CVE-2018-2591 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640
              CVE-2018-2645 CVE-2018-2647 CVE-2018-2665 CVE-2018-2668


author: Michal Schorm <mschorm@redhat.com> - 5.6.40-1
changelog:
  - Rebase to MySQL 5.6.40, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-40.html
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
  - CVE fixes: #1571242
              CVE-2018-2755 CVE-2018-2758 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
              CVE-2018-2773 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787
              CVE-2018-2805 CVE-2018-2813 CVE-2018-2817 CVE-2018-2818 CVE-2018-2819
    Resolves: rhbz#1571242


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.33-1
changelog:
  - Update to MySQL 5.6.33, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html)
    Resolves: #1384963


author: Honza Horak <hhorak@redhat.com> - 5.6.34-1
changelog:
  - Update to MySQL 5.6.34, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html)
    Related: #1384963


author: Michal Schorm <mschorm@redhat.com> - 5.6.36-1
changelog:
  - Udate to MySQL 5.6.36, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  - CVEs fixed by this commit, #1445525:
    CVE-2017-3302 CVE-2017-3305/Riddle CVE-2016-5483/CVE-2017-3600
    CVE-2017-3308 CVE-2017-3309 CVE-2017-3450 CVE-2017-3452
    CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3599
  - CVEs fixed by this commit, #1445533:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257
    CVE-2017-3258 CVE-2017-3273 CVE-2017-3313 CVE-2017-3317
    CVE-2017-3318 CVE-2017-3291
  - CVEs fixed by this commit, #1445537:
    CVE-2017-3312 CVE-2017-3265
  - 'force' option for 'rm' removed in specfile
  - Testsuite extended by '--big-test' option
  - Following tests were disabled, for they started to fail or are unstable:
    main.events_2
  - Resolves: #1452469; MD5 in FIPS mode


author: Michal Schorm <mschorm@redhat.com> - 5.6.36-2
changelog:
  - Previous CVE fix was incomplete, fixed now
  - CVEs fixed by this commit, #1445537:
    CVE-2017-3265
  - Resolves: #1445537


author: Honza Horak <hhorak@redhat.com> - 5.6.37-5
changelog:
  - Remove the attempt to implement mysqld@.service, because mysqld_safe
    is not capable of keeping arguments order as mysqld expects
    Reverts: #1452518


author: Honza Horak <hhorak@redhat.com> - 5.6.23-7
changelog:
  - Do not use system libedit
    Related: #1202016
  - Daemon wrapper to run process with proper SELinux context
    Resolves: #1202016


author: Honza Horak <hhorak@redhat.com> - 5.6.23-9
changelog:
  - Add dependency for semanage
  - Define SELinux context for files under /etc/my.cnf.d
    Related: #1203991


author: Matej Muzila <mmuzila@redhat.com> - 5.6.24-1
changelog:
  - Update to MySQL 5.6.24 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  - Resolves: #1214590
  - Also fixes: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
      CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573


author: Honza Horak <hhorak@redhat.com> - 5.6.24-2
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207514


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.25-1
changelog:
  - Update to MySQL 5.6.25 containing various fixes described at:
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html
  - Resolves: #1247025


author: Michal Schorm <mschorm@redhat.com> - 5.6.36-1
changelog:
  - Udate to MySQL 5.6.36, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  - CVEs fixed by this commit, #1445524:
    CVE-2017-3302 CVE-2017-3305/Riddle CVE-2016-5483/CVE-2017-3600
    CVE-2017-3308 CVE-2017-3309 CVE-2017-3450 CVE-2017-3452
    CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3599
  - CVEs fixed by this commit, #1445534:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257
    CVE-2017-3258 CVE-2017-3273 CVE-2017-3313 CVE-2017-3317
    CVE-2017-3318 CVE-2017-3291
  - CVEs fixed by this commit, #1445538:
    CVE-2017-3312 CVE-2017-3265
  - 'force' option for 'rm' removed in specfile
  - Testsuite extended by '--big-test' option
  - Following tests were disabled, for they started to fail or are unstable:
    main.events_2
  - Resolves: #1351791; MD5 in FIPS mode


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.32-1
changelog:
  - Update to MySQL 5.6.32, which contains various security fixes
    (http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html)
  - Resolves: #1359623


author: Jakub Dorňák <jdornak@redhat.com> - 5.6.33-1
changelog:
  - Update to MySQL 5.6.33, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html)
    Resolves: #1384962


author: Honza Horak <hhorak@redhat.com> - 5.6.34-1
changelog:
  - Update to MySQL 5.6.34, which contains various security fixes
    (https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html)
    Related: #1384962


author: Michal Schorm <mschorm@redhat.com> - 5.6.39-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-39.html
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533831
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2562 CVE-2018-2573 CVE-2018-2583
              CVE-2018-2590 CVE-2018-2591 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640
              CVE-2018-2645 CVE-2018-2647 CVE-2018-2665 CVE-2018-2668


author: Remi Collet <rcollet@redhat.com> - 5.6.5-4
changelog:
  - core: fix use-after-free vulnerability in the
    process_nested_data function (unserialize) CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: fix use after free vulnerability in unserialize()
    with DateTimeZone CVE-2015-0273
  - enchant: fix  heap buffer overflow in
    enchant_broker_request_dict() CVE-2014-9705
  - ereg: fix heap overflow in regcomp() CVE-2015-2305
  - opcache: fix use after free CVE-2015-1351
  - phar: fix use after free in phar_object.c CVE-2015-2301
  - pgsql: fix NULL pointer dereference CVE-2015-1352
  - soap: fix type confusion through unserialize #1204868
  - zip: integer overflow when processing ZIP archives CVE-2015-2331


author: Remi Collet <rcollet@redhat.com> - 5.6.5-5
changelog:
  - mod_php: filter libphp5.so out of provides #1212726
  - fpm: fix incorrect selinux contexts #1194337


author: Remi Collet <rcollet@redhat.com> - 5.6.5-8
changelog:
  - Phar: fix segmentation fault in Phar::convertToData on
    invalid file CVE-2015-5589
  - Phar: fix buffer overflow and stack smashing error in
    phar_fix_filepath CVE-2015-5590
  - Phar: fix files from archive can be extracted outside of
    destination directory using phar CVE-2015-6833
  - Phar: NULL pointer dereference in phar_get_fp_offset()
    CVE-2015-7803
  - Phar: uninitialized pointer in phar_make_dirstream()
    CVE-2015-7804
  - Xslt: fix NULL pointer dereference in XSLTProcessor class
    CVE-2015-6837 CVE-2015-6838
  - Core: fix use-after-free vulnerability in session
    deserializer CVE-2015-6835
  - Core:  fix multiple unserialization use-after-free issues
    CVE-2015-6834
  - Spl: fix dangling pointer in the unserialization of
    ArrayObject items CVE-2015-6832
  - Spl: fix Use After Free Vulnerability in unserialize()
    CVE-2015-6831
  - Soap: fix type confusion in SOAP serialize_function_call()
    CVE-2015-6836


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-7
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346361


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-11
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Updated %py_byte_compile macro
  Resolves rhbz#1374667


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/rh-python35/root/usr/lib64/python3.5/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-4
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/rh-python34/root/usr/lib64/python3.4/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-10
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-11
changelog:
  - Replace 512 bit dh key with a 1024 bit one (upstream change)
  - Python upstream issue #24985: https://bugs.python.org/issue24985
    python SSL test fails due to minimum key size being increased in OpenSSL
  Resolves: rhbz#1356506


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-12
changelog:
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-13
changelog:
  - Updated the rhbz number for a patch 239
  - Fixed a wrong release number in the previous changelog entry
  Resolves: rhbz#1356506


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Updated to 3.4.2
  - Added scl-utils-build to Requires (rhbz#1144601)
  - Add pynche executable (rhbz#1094640)


author: Marek Skalicky <mskalick@redhat.com> - 0.5.1-10
changelog:
  - Fixed rh-mongodb32 buildrequires boost library from collection
  - Fixed pkgconfig directory ownership


author: Marek Skalicky <mskalick@redhat.com> 2.6.9-1
changelog:
  - Correct SELinux type for slc-helper script 
    Resolves: #1202013
  - Fix mongodb user HOME (Resolves: #1206157)
  - Upgrade to latest minor release 2.6.9 (Resolves: #1207118)


author: Marek Skalicky <mskalick@redhat.com> - 3.2.1-1
changelog:
  - Configuration files updated
    (mongod and mongos also listen on ipv6 localhost by default)
  - test subpackage contains resmoke.py tool instead of smoke.py
  - Upgrade to latest minor upgrade 3.2.1


author: Josef Stribny <jstribny@redhat.com> - 1.10.2-4
changelog:
  - Fix the .so name from * to cbson
  - Get rid of wrong .so provide on RHEL 6
    - Resolves: rhbz#1203138


author: Petr Machata <pmachata@redhat.com> - 1.53.0-8
changelog:
  - Install supporting files (images etc.) for documentation
    (courtesy Marcel Metz, bug 985593)
  - Add many patches for silencing unused local typedef warnings
    (boost-1.53.0-static_assert-unused_typedef.patch,
    boost-1.54.0-bind-static_assert.patch,
    boost-1.54.0-concept-unused_typedef.patch,
    boost-1.54.0-static_warning-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef-2.patch,
    boost-1.53.0-fpclassify-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef-3.patch,
    boost-1.54.0-tuple-unused_typedef.patch,
    boost-1.54.0-random-unused_typedef.patch,
    boost-1.54.0-date_time-unused_typedef.patch,
    boost-1.54.0-date_time-unused_typedef-2.patch,
    boost-1.54.0-spirit-unused_typedef.patch,
    boost-1.54.0-spirit-unused_typedef-2.patch,
    boost-1.54.0-numeric-unused_typedef.patch,
    boost-1.54.0-multiprecision-unused_typedef.patch,
    boost-1.53.0-lexical_cast-unused_typedef.patch,
    boost-1.53.0-regex-unused_typedef.patch,
    boost-1.53.0-thread-unused_typedef.patch,
    boost-1.54.0-unordered-unused_typedef.patch,
    boost-1.54.0-algorithm-unused_typedef.patch,
    boost-1.53.0-graph-unused_typedef.patch,
    boost-1.54.0-locale-unused_typedef.patch,
    boost-1.54.0-property_tree-unused_typedef.patch,
    boost-1.54.0-xpressive-unused_typedef.patch,
    boost-1.54.0-mpi-unused_typedef.patch,
    boost-1.54.0-python-unused_typedef.patch)
  - Add a patch to turn off execstack in Boost.Context
    (boost-1.54.0-context-execstack.patch)
  - Fix boost::mpl::print on GCC (boost-1.54.0-mpl-print.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-13
changelog:
  - Fix compilation of Boost.Pool test cases
    (boost-1.54.0-pool-test_linking.patch)
  - Fix -Wshadow warnings in Boost.Pool
    (boost-1.54.0-pool-max_chunks_shadow.patch)
   -Wshadow warnings in Boost.Thread
    (boost-1.54.0-thread-cond_variable_shadow.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-7
changelog:
  - Add dependency for semanage
  - Define SELinux context for files under /etc/my.cnf.d
    Related: #1203991
  - Add openssl as BuildRequires to run some openssl tests during build
    Related: #1189180


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-9
changelog:
  - Define context for pid file dir explicitely
    Resolves: #1207113
  - Fix mysqladmin crash if run with -u root -p
    Resolves: #1207170


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.25-1
changelog:
  - Rebase to version 10.0.25
    Resolves: #1330445
    Also fixes: CVE-2016-2047 CVE-2016-0668 CVE-2016-0666 CVE-2016-0655
    CVE-2016-0651 CVE-2016-0650 CVE-2016-0649 CVE-2016-0648 CVE-2016-0647
    CVE-2016-0646 CVE-2016-0644 CVE-2016-0643 CVE-2016-0642 CVE-2016-0641
    CVE-2016-0640 CVE-2016-0616 CVE-2016-0610 CVE-2016-0609 CVE-2016-0608
    CVE-2016-0606 CVE-2016-0600 CVE-2016-0598 CVE-2016-0597 CVE-2016-0596
    CVE-2016-0546 CVE-2016-0505 CVE-2015-7744 CVE-2015-4913 CVE-2015-4895
    CVE-2015-4879 CVE-2015-4870 CVE-2015-4861 CVE-2015-4858 CVE-2015-4836
    CVE-2015-4830 CVE-2015-4826 CVE-2015-4819 CVE-2015-4816 CVE-2015-4815
    CVE-2015-4807 CVE-2015-4802 CVE-2015-4792


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.0.26-1
changelog:
  - Rebase to version 10.0.26
    Resolves: #1359868
    Also fixes: CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-5440


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-1
changelog:
  - Rebase to version 10.0.17
  - Added variable for turn off skipping some tests
  - Add SELinux rules for pid file
  - Add SELinux definition for /var/log/mariadb.*
    Related: #1194206


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-4
changelog:
  - Include client plugins into -common package since they are used by both -libs
    and base packages.
  - Do not use libedit
    Related: #1201988
  - Daemon wrapper to run process with proper SELinux context
    Resolves: #1202011
  - Let plugin dir to be owned by -common


author: Michal Schorm <mschorm@redhat.com> - 1:10.0.28-5
changelog:
  - Rebase to 10.0.28
  - JdbcMariaDB.jar test removed
  - PCRE version check added
  - Tests blacklist updated
    Related: #1393306, #1396945
    Also fixes: CVE-2016-3492 CVE-2016-5612 CVE-2016-5616 CVE-2016-5624
                CVE-2016-5626 CVE-2016-5629 CVE-2016-5630 CVE-2016-6662
                CVE-2016-6663 CVE-2016-8283


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Honza Horak <hhorak@redhat.com> - 1:10.0.31-1
changelog:
  - Rebase to 10.0.31
    Also fixes: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238
    CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3313
    CVE-2017-3317 CVE-2017-3318 CVE-2017-3291 CVE-2017-3302 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1463418
  - Fix mysql-prepare-db-dir for CVE-2017-3265
    Resolves: #1463413


author: Honza Horak <hhorak@redhat.com> - 1:10.0.32-1
changelog:
  - Update to 10.0.32
  - Remove mariadb-covscan-stroverflow.patch that was fixed upstream
  - Update bundled pcre version to 8.41
    Related: #1463415


author: Honza Horak <hhorak@redhat.com> - 1:10.0.33-3
changelog:
  - Use selinux for the mysqld_safe_helper also on RHEL-6
    Related: #1463417
  - Print the same messages as before when starting the service in SysV init,
    to not scare users
    Related: #1463411


author: Honza Horak <hhorak@redhat.com> 5.5.35-6
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1056457
  - Use log file corresponding with RHEL-7 base
    Resolves: #1007861
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054649
  - Fix advice after initialization of data stack
    Resolves: #1056135
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042873


author: Honza Horak <hhorak@redhat.com> - 5.5.35-7
changelog:
  - Use correct path to tmp dir
    Related: #1056457
  - Rebase to 5.5.36
    https://kb.askmonty.org/en/mariadb-5536-changelog/


author: Honza Horak <hhorak@redhat.com> - 5.5.37-9
changelog:
  - Update to MariaDB 5.5.37, for various fixes described at
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089366


author: Honza Horak <hhorak@redhat.com> - 5.5.40-10
changelog:
  - Rebase to 5.5.40
    https://kb.askmonty.org/en/mariadb-5540-changelog/
    Also fixes: CVE-2014-4274 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6505 CVE-2014-4287 CVE-2014-6551 CVE-2014-6555 CVE-2014-6484
    CVE-2014-6464 CVE-2014-6559 CVE-2014-6530 CVE-2014-6564 CVE-2014-6469
    CVE-2014-6463
    Resolves: #1160550


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-11
changelog:
  - Rebase to 5.5.41
    Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186116


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fix: CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571
    CVE-2015-0433 CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582
    CVE-2015-2620 CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757
    Resolves: #1247027


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.49-1
changelog:
  - Rebase to 5.5.49
    https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/
    Resolves: #1342454


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Do not change the string arg in XS, use copy instead (CPAN RT#96893)
    - Add README make target
    - Add more distribution metadata
  - This release by ETHER → update source URL
  - Update debugger patch (CPAN RT#96893)
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Copy the contents of the %DB::sub entry if it exists; fixes
      Devel::NYTProf's anon sub handling (CPAN RT#50524)
  - Drop upstreamed debugger patch
  - Drop EL-5 compatibility since we need Devel::CheckBin, which can't be
    built for EPEL-5 or EPEL-6


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Move variable declaration to fix warning under
      -Werror=declaration-after-statement, to allow compilation under MSVC (GH#3)
    - Converted distribution packaging to Dist::Zilla
    - Fix licence in LICENSE and pod
  - Package new upstream CONTRIBUTING and LICENSE files
  - Classify buildreqs by usage


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - Skip pairmap()'s MULTICALL implementation 5.8.9/5.10.0 as it doesn't work
      (CPAN RT#87857)
    - Comment on the fact that package "0" is defined but false (CPAN RT#88201)
    - TODO test in t/readonly.t now passes since 5.19.3 (CPAN RT#88223)
    - Added any, all, none, notall list reduction functions (inspired by
      List::MoreUtils)
    - Added List::Util::product()
    - Added Scalar::Util::unweaken()
    - Avoid C99/C++-style comments in XS code
    - Fix dualvar tests for perl 5.6; fix skip() test counts in dualvar.t
    - Neater documentation examples of other functions that can be built using
      reduce
    - Implement reduce() and first() even in the absence of MULTICALL
    - Various documentation changes/updates
    - Correct uses of overload operators in unit tests (CPAN RT#91969)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Paul Howarth <paul@city-fan.org> - 0.402-1
changelog:
  - Update to 0.402 (significant and slightly incompatible update - see Changes)
  - This release by REHSACK → update source URL
  - Classify buildreqs by usage
  - Modernize spec as this isn't going to anywhere older than F-22


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Another COW violation (CPAN RT#98069)
    - Misleading nesting/indentation found by Coverity (CPAN RT#95405)


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Silence more compiler warnings
    - Disable running of 07bufsize.t by default; COMPRESS_ZLIB_RUN_MOST needs to
      be set to run it, which makes life more bearable on legacy platforms


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.8-3.20130221svn1448242
changelog:
  - own include directories in -devel subpackage (#1079938)
  - depend on httpd-2.4 in -devel subpackage


author: Honza Horak <hhorak@redhat.com> - 2.6.7-9
changelog:
  - Remove NFS register feature for questionable usage for DBs
  - Allow to skip tests during build
  - Simplify few SCL macros


author: Petr Machata <pmachata@redhat.com> - 0.7.91-4
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)
  - Fix a couple nits in ltrace.1 (ltrace-0.7.91-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-7
changelog:
  - Add an upstream patch that fixes missed initialization of some
    fields in struct process after atteching to a multi-threaded
    process.  (ltrace-0.7.2-e_machine.patch)
  - Add upstream patch-set that implements support for the new aarch64
    architecture.  (ltrace-0.7.91-aarch64.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-9
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-11
changelog:
  - Add fixes in handling of bogus paths that come from XDG_CONFIG_DIRS
    (ltrace-0.7.91-XDG_CONFIG_DIRS.patch,
    ltrace-0.7.91-XDG_CONFIG_DIRS-2.patch)
  - Add test suite fixes
    (ltrace-0.7.91-testsuite-system_call_params.patch,
    ltrace-0.7.91-testsuite-system_call_params-2.patch,
    ltrace-0.7.91-testsuite-system_calls.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Jakub Jelinek <jakub@redhat.com> 6.1.1-5
changelog:
  - update from Fedora 6.1.1-5
  - make sure to use DTS strip and objdump during brp scripts (#1365531,
    - use DTS binutils even on RHEL7


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-2.2
changelog:
  - update from Fedora 6.3.1-2
  - some further libstdc++_nonshared.a fixes for ppc, ppc64, ppc64le, s390
    and s390x


author: Jakub Jelinek <jakub@redhat.com> 6.3.1-3
changelog:
  - update from Fedora 6.3.1-3
    - fix vec_xl and vec_xst altivec.h intrinsics (#1418397, PR target/79268)


author: Nick Clifton <nickc@redhat.com> 2.27-1
changelog:
  - Rebase on FSF binutils 2.27 release. (#1356661)
  - Retire: binutils-2.20.51.0.10-copy-osabi.patch
  - Retire: binutils-2.23.2-aarch64-em.patch
  - Retire: binutils-2.23.51.0.3-arm-ldralt.patch
  - Retire: binutils-2.23.52.0.1-revert-pr15149.patch
  - Retire: binutils-2.25.1-gold-testsuite-fixes.patch
  - Retire: binutils-2.25-kernel-ld-r.bugfix.patch
  - Retire: binutils-2.25-kernel-ld-r.patch
  - Retire: binutils-2.25-only-keep-debug.patch
  - Retire: binutils-2.25-x86_64-pie-relocs.patch
  - Retire: binutils-pr18879.patch
  - Retire: binutils-rh1224751.patch
  - Retire: binutils-rh1309347.patch
  - Retire: binutils-rh895241.patch


author: Nick Clifton <nickc@redhat.com> 2.27-3
changelog:
  - Version bump so that the Brew build can be rerun, this time including ppc64 (big-endian)
    (#1358353)


author: Nick Clifton <nickc@redhat.com> 2.27-6
changelog:
  - Move .shstrtab section to end of section list so that the monotonic ordering of section offsets is restored.
    (#1366145)


author: DJ Delorie <dj@redhat.com> - 0.7.91-13
changelog:
  - Remove mentions of (and one attempt to patch) backup files in 
    ltrace-0.7.91-unwind-elfutils.patch (#1427140)


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Update to elfutils 0.166 (#1322412)
    Drop upstreamed patches:
    - elfutils-0.165-elf-libelf.patch
    - elfutils-0.165-nobitsalign-strip.patch


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Update to elfutils 0.167 (#1366182,#1356263)
    Drop upstreamed patch: elfutils-0.166-elfcmp-comp-gcc6.patch


author: Mark Wielaard <mjw@redhat.com> - 0.168-1
changelog:
  - New upstream release from new project home https://sourceware.org/elfutils/
    Resolves: Rebase elfutils to 0.168 bugfix release (#1412299)


author: Mark Wielaard <mark@klomp.org> - 0.168-3
changelog:
  - Adjust internal library so names (#1412305).
  - Never use old, deprecated, filter_provides_in, it really is too broken.


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-9
changelog:
  - Fix valgrind-3.11.0-pthread_barrier.patch to apply with older patch.
  - Fix multilib issue in config.h with HAVE_AS_AMD64_FXSAVE64.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-26
changelog:
  - Rebase against fedora package:
    - Only build valgrind-openmpi when not creating a software collection.
    - No support for multilib on secondary arches when creating scl.
    - Mandatory Perl build-requires added
    - Add valgrind-3.11.0-shr.patch
    - Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch
    - Update valgrind-3.11.0-wrapmalloc.patch
    - Add valgrind-3.11.0-sighandler-stack.patch
    - Update valgrind-3.11.0-ppoll-mask.patch (#1344082)
    - Add valgrind-3.11.0-arm64-handle_at.patch
    - Add valgrind-3.11.0-ppc64-syscalls.patch
    - Add valgrind-3.11.0-deduppoolalloc.patch
    - Add valgrind-3.11.0-ppc-bcd-addsub.patch
    - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch
    - Update valgrind-3.11.0-cxx-freeres.patch (x86 final_tidyup fix)
    - Add valgrind-3.11.0-s390x-risbgn.patch
    - Add valgrind-3.11.0-cxx-freeres.patch (#1312647)
    - Add valgrind-3.11.0-ppc64-separate-socketcalls.patch
    - Add valgrind-3.11.0-isZeroU.patch
    - Replace valgrind-3.11.0-arm64-ldpsw.patch with upstream version


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.1-BETA1
changelog:
  - Update to valgrind 3.12.0 pre-release.
    - Drop upstreamed patches.
    - Disable exp-tests in %check. GDB crashes on gdb_server tests.


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.2-BETA1
changelog:
  - Add valgrind-3.12-beta1-ppc64be.patch. (#1378963)
  - Enable gdb_server tests again. (#1378143)
  - And disable it again on rhel6 (both i686 and x86_64)
    and rhel7 (ppc64 and ppc64le only) (#1380513)


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3s
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Will Cohen <wcohen@redhat.com> - 0.9.9-7
changelog:
  - LLC_REFS and LLC_MISSES do not work on some CPUs.
  - incorrect handling of default unit masks longer than 11 characters
  - Oprofile updates for Avoton
  - Unable to profile jited JVM code when using static huge pages
  - operf causes rpmbuild to fail


author: Will Cohen <wcohen@redhat.com> - 1.1.0-4
changelog:
  - Update events non-x86 architectures (aarch64, power, zseries)
  - Add support for newer Intel processors.


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-0.18.20160928.fc25
changelog:
  - Fix attachment of JIT-debug-enabled inf. (7.11.1 regression, RH BZ 1375553).
  - Rebase to FSF GDB 7.11.90.20160928 (pre-7.12 branch snapshot).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-0.19.20160929.fc25
changelog:
  - Rebase to FSF GDB 7.11.90.20160929 (pre-7.12 branch snapshot).
   - Fixes GDB crashes on inf. function call scripts (RH BZ 1378147, Pedro Alves).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.12-23.fc25
changelog:
  - [testsuite] Various testsuite fixes.
  - [aarch64] Fix gdb.cp/nextoverthrow.exp regression (Yao Qi).


author: DJ Delorie <dj@redhat.com> - 4.12-3
changelog:
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Duplicate vhangup/chown patch for -m32 also.


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.5-1
changelog:
  - the latest upstream minor release, per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.10-1
changelog:
  - update to 9.6.10 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-7.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-8.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-9.html
    https://www.postgresql.org/docs/9.6/static/release-9-6-10.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.3-3
changelog:
  - fix provides to not include plugins as sonames
  - fix syspaths wrappers installation (spotted by Marek Skalický)
  - add *contrib-syspaths wrappers


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.21-1
changelog:
  - new upstream release 0.10.21
    http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/
  - resolves an undisclosed security vulnerability in the http module


author: Troy Dawson <tdawson@redhat.com> - 0.2.3-1
changelog:
  - Updated to 0.2.3
  - Updated BuildRequires and added NODE_PATH
  - Added testing, though set to false until packages are made.


author: Jon VanAlten <jvanaltj@redhat.com> - 1.2.0-60.5
changelog:
  - Remove redundant symlinks to lucene jars
  - Resolves: RHBZ#1193828
  - Replace mongodb's deprecated userAdd with userCreate in thermostat-setup
  - Resolves: RHBZ#1193837


author: Omair Majid <omajid@redhat.com> - 1.2.0-60.7
changelog:
  - Fix dangling symlinks for plugins
  - Add explicit requires on jetty packages
  - Resolves: RHBZ#1194599


author: Jon VanAlten <jvanalte@redhat.com> - 1.2.0-60.1
changelog:
  - Update to 1.2.0 version
  - Use rh-java-common, maven30, rh-mongodb26 collections for deps as needed.


author: Remi Collet <rcollet@redhat.com> 5.6.5-1
changelog:
  - Update to 5.6.5
    http://www.php.net/releases/5_6_5.php
  - FPM: enable ACL for Unix Domain Socket
  - Embdded: filter requires for libphp5-5.6.so
  - add register.content


author: Remi Collet <remi@fedoraproject.org> 5.6.4-2
changelog:
  - Update to 5.6.4
    http://www.php.net/releases/5_6_4.php
  - add sybase_ct extension (in mssql sub-package)
  - xmlrpc requires xml


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-4
changelog:
  - multiple CVE fixes
  - CVE-2013-6639 CVE-2013-6640 CVE-2013-6650 
  - CVE-2013-6668 CVE-2014-1704 CVE-2014-5256


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-7
changelog:
  - Backport api for aborting on uncaught exception
  - https://github.com/joyent/node/commit/fbff7054a47551387a99244e2cf0631f30406798


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-8
changelog:
  - Backport Apply REPLACE_INVALID_UTF8 patch
  - https://github.com/joyent/node/commit/881ac26f27f4ac9585d66c8d8a67d5b246a23d1b


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-9
changelog:
  - Include upstream patch: Meaningful name for builtins in JitCodeEvent API
  - https://github.com/joyent/node/commit/5a60e0d904c38c2bdb04785203b1b784967c870d


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04:
    - Some small test changes for the latest Module::Implementation and
      Class::Load
  - Bump Class::Load version requirement to 0.15
  - BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
    perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
    suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06:
    - Require Class::Load 0.20 in the code, not just the distro metadata
      (CPAN RT#80002)
    - Weird classes with either an ISA or VERSION constant would cause the XS to
      blow up badly (CPAN RT#79998)
    - Fixed some broken logic that lead to a segfault from the
      014-weird-constants.t test on some Perls (CPAN RT#80059)
  - Bump perl(Class::Load) version requirement to 0.20
  - Drop explicit requirement for perl(Class::Load), no longer needed


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Handle magic more correctly in add_symbol and get_or_add_symbol
  - Add upstream patch to avoid build dependency on Package::Stash
  - BR: perl(Variable::Magic) for the test suite
  - Update patch for building with old Test::More versions


author: Jan Kaluza <jkaluza@redhat.com> - 2.0.7-10
changelog:
  - do not install .orig file generated by make xs_generate
  - filter unversioned mod_perl.so from provides


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-13
changelog:
  - Updated dependencies, filters and conditions for dual-life sub-packages
  - Used %perl_compat for dual-life dependencies


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.630-4
changelog:
  - Updated conditions to not require optional BRs (MLDBM, SQL::Statement) for SCL
  - Resolves: rhbz#1064855


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.05-6
changelog:
  - Add patch for CPAN RT#50524 (copy contents of %DB::sub entry if it exists)
  - Reinstate compatibility with old distributions like EL-5
    - Add BuildRoot definition
    - Clean buildroot in %install
    - Restore %clean section
    - Restore %defattr
    - Don't use + to terminate find -exec commands
  - Spec clean-up
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't use macros for commands
    - Use tabs
    - Add buildreqs for Perl core modules that might be dual-lived
    - Explicit requires for "use base XXX;" only required prior to rpm 4.9


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.1.14-1
changelog:
  - Fixed selinux policy
  - Update to 10.1.14 (includes various bug fixes)
  - Add -h and --help options to galera_new_cluster
    Resolves: #1333007


author: Michal Schorm <mschorm@redhat.com> - 1:10.1.19-6
changelog:
  - Rebase to version 10.1.19
  - JdbcMariaDB.jar test removed
  - PCRE version check added
    Related: #1393306, #1396934
    Also fix: CVE-2016-3492 CVE-2016-5616 CVE-2016-5624 CVE-2016-5626
              CVE-2016-5629 CVE-2016-6662 CVE-2016-6663 CVE-2016-8283


author: Honza Horak <hhorak@redhat.com> - 25.3.12-10
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1466473
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed
    Related: #1466473


author: Michal Schorm <mschorm@redhat.com> - 1:10.1.19-7
changelog:
  - Rebase to version 10.1.19
  - JdbcMariaDB.jar test removed
  - PCRE version check added
  - All test removed from blacklist, 2 new added to blacklist
    Related: #1393306, #1396934
    Also fix: CVE-2016-3492 CVE-2016-5616 CVE-2016-5624 CVE-2016-5626
              CVE-2016-5629 CVE-2016-6662 CVE-2016-6663 CVE-2016-8283


author: Honza Horak <hhorak@redhat.com> - 1:10.1.20-1
changelog:
  - Rebase to version 10.1.24
    Also fixes: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238
    CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3313
    CVE-2017-3317 CVE-2017-3318 CVE-2017-3291 CVE-2017-3302 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1463417
  - Fix mysql-prepare-db-dir for CVE-2017-3265
    Resolves: #1463412
  - Use correct directories to search for language files
    Resolves: #1406391
  - Fix SELinux context for the daemon
    Resolves: #1336806


author: Honza Horak <hhorak@redhat.com> - 1:10.1.26-1
changelog:
  - Update to 10.1.26
  - Remove mariadb-covscan-stroverflow.patch that was fixed upstream
  - Update bundled pcre version to 8.41
    Related: #1463417


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
changelog:
  - Update to Ruby 2.0.0-p353
    - Fixes heap overflow in floating point parsing (CVE-2013-4164)
    - Resolves: rhbz#1033906


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
changelog:
  - Use non-prefixed libyaml.
    Resolves: rhbz#1048828
  - Fix RubyGems test suite.
    Resolves: rhbz#1069184
  - Do not use bundled libyaml.
    Resolves: rhbz#1069107


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1071347


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164005
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164005
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164005


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
changelog:
  - Update to Ruby 2.0.0-p645.
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
         with-DESTDIR.patch; subsumed
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
        attack.patch; subsumed
    * Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
        CVE-2014-8080.patch; subsumed
    Resolves: rhbz#1070594


author: Honza Horak <hhorak@redhat.com> - 1:10.2.7-4
changelog:
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Do not use mysql-wait-stop on RHEL-7 service files


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-2
changelog:
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Run mysql-prepare-db-dir as non-root


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-3
changelog:
  - Handle left-over files that do not uninstall
    Resolves: #1487292
  - Fix uninstalled directories
    Resolves: #1487292
  - Files outside of /opt/rh should be in syspath package
    Resolves: #1492645
  - Split mariadb package to more sub-packages to match upstream's RPM list
    Resolves: #1490419


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-4
changelog:
  - Fix issues found by rpmdiff, particularly:
    unexpanded macro %{mysqld_pid_dir} -- left-over from switching pid file dir,
    we can remove in new SCL
    jar files included in connect engine
    Related: #1455850


author: Honza Horak <hhorak@redhat.com> - 1:10.2.8-5
changelog:
  - Support MYSQLD_OPTS and _WSREP_NEW_CLUSTER env vars in init script,
    same as it is done in case of systemd unit file
    Related: #1455850


author: Michal Schorm <mschorm@redhat.com> - 1:10.2.22-1
changelog:
  - Rebase to 10.2.22
    Resolves: #1510416
    Resolves: #1645934
  - Use downstream tmpfiles instead of the upstream one
  - Patch 2 upstreamed
  - Patch 8 obsolete - upstream started to use macros
  - Patch 40 upstreamed
  - Add patch for wsrep_recover_position function in mysqld_safe
    Resolves: #1694679
  - CVEs fixed: #1664048
    CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3156
    CVE-2018-3282 CVE-2018-3277 CVE-2018-3143 CVE-2018-3251 CVE-2018-3185
  - CVEs fixed: #1617946
    CVE-2018-3058 CVE-2018-3060 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066
  - CVEs fixed: #1572138
    CVE-2018-2755 CVE-2018-2759 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771
    CVE-2018-2777 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786
    CVE-2018-2787 CVE-2018-2810 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819
    CVE-2018-3081
  - CVEs fixed: #1559064
    CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665
    CVE-2018-2668 CVE-2018-3133
  - CVEs fixed: #1558264
    CVE-2017-15365
  - CVEs fixed: #1558261
    CVE-2017-10268 CVE-2017-10378
  - CVEs fixed: #1640321
    CVE-2018-3174


author: Honza Horak <hhorak@redhat.com> - 25.3.20-2
changelog:
  - Fix paths in garpd init script and turn on SCL there
    Related: #1415720
  - Include garbd-service-environment because the one from mariadb-server
    does not need to be installed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.26-5
changelog:
  - Resolves: #1472846 - CVE-2017-9788 CVE-2017-9789 httpd24-httpd: various flaws
  - updated mod_systemd patch


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-3
changelog:
  - Resolves: #1486843 - apache user is not created during httpd
    installation when apache group already exist
  - Resolves: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22
changelog:
  - Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-1
changelog:
  - update to 2.4.10
  - fix return value of htcacheclean init script when lockfile exists, but
    htcacheclean is not running (#1092067)
  - use proper SELinux context for initscripts (#1093039)
  - remove mod_proxy_html obsolete (#1174790)
  - remove dbmmanage from httpd-tools (#1151375)
  - add slash before root_libexecdir macro (#1149076)
  - ab: fix integer overflow when printing stats with lot of requests (#1091650)
  - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1079925)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-2
changelog:
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-1
changelog:
  - update to version 2.4.12
  - fix possible crash in SIGINT handling (#1184034)
  - fix return value of httpd init script when lockfile exists, but
    httpd is not running (#1184441)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.12-4.1
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)
  - core: fix pointer dereference crash with ErrorDocument 400 pointing
    to a local URL-path (CVE-2015-0253)
  - mod_lua: fix possible mod_lua crash due to websocket bug (CVE-2015-0228)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8
changelog:
  - Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8.1
changelog:
  - Resolves: #1745694 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of data
    request leads to denial of service
  - Resolves: #1745679 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers 
    leads to denial of service
  - Resolves: #1745682 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9
changelog:
  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10
changelog:
  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11
changelog:
  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14
changelog:
  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page


author: Jan Kaluza <jkaluza@redhat.com> - 1.4.6-2
changelog:
  - initial spec rewrite for scl build
  - fix strict-aliasing gcc warning
  - remove unused SHA384 and SHA512 code
  - update license


author: Joe Orton <jorton@redhat.com> - 2.4.18-10
changelog:
  - load more built modules (including mod_http2) by default (#1302653)
  - lower log-level for mod_ssl NPN debugging (#1302653)


author: Joe Orton <jorton@redhat.com> - 2.4.25-2
changelog:
  - merge default config changes from Fedora
  - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8
changelog:
  - Resolves: #1745692 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: # 1744825 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large 
    amount of data request leads to denial of service


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-2
changelog:
  - use HTTPD_LANG in sysconfig file on RHEL6 (#1222055)
  - ignore HTTPD sysconfig variable on RHEL6 (#1204075)
  - call restorecon on /etc/rc.d/init.d/htcacheclean after install (#1222494)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-5
changelog:
  - apachectl: use httpd from the SCL in apachectl (#1319780)
  - apachectl: ignore HTTPD variable also on RHEL6 (#1221681)


author: Joe Orton <jorton@redhat.com> - 2.4.18-6
changelog:
  - fix apxs generated Makefile path to build directory (#1319837)
  - use redirects for lang-specific /manual/ URLs (#1324406)


author: Joe Orton <jorton@redhat.com> - 2.4.18-7
changelog:
  - mod_lua: use anonymous shm segment (#1225116)
  - revert 'apachectl graceful' to start httpd if stopped (#1221702)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.18-1
changelog:
  - update to version 2.4.18
  - add support for http/2
  - mod_auth_digest: use anonymous shared memory (#1225116)
  - core: improve error message for inaccessible DocumentRoot (#1207093)
  - ab: try all addresses instead of failing on first one when not available (#1209552)
  - apachectl: ignore HTTPD variable from sysconfig (#1221681)
  - apachectl: fix "graceful" documentation (#1221702)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1221650)
  - do not display "bomb" icon for files ending with "core" (#1196553)
  - mod_proxy_wstunnel: load this module by default (#1253396)


author: Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-7.1
changelog:
  - Resolves: #1744824 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large
    amount of data request leads to denial of service
  - Resolves: #1745691 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood
    using PRIORITY frames resulting in excessive resource consumption


author: Luboš Uhliarik <luhliari@redhat.com> - 1.5.1-1.1
changelog:
  - Resolves: #1540984 - CVE-2017-12613 httpd24-apr: apr: Out-of-bounds
    array deref in apr_time_exp*() functions


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-8.1
changelog:
  - Rebase to 3.9.0-8.
  - Don't cleanup fake 32-bit libgcc created in %build. make regtest
    might depend on it to build -m32 binaries.
  - Use nonexp-regtest in check so gdbserver_tests are not run.
    They might hang the build.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Roland Grunberg <rgrunber@redhat.com> - 1:4.4.1-14.3
changelog:
  - Always use artifact alias org.eclipse.tycho:org.eclipse.jdt.core.
  - We use version of Jasper that requires javax.el* (2.x).


author: Jakub Jelinek <jakub@redhat.com> 4.9.1-5
changelog:
  - update from 4.9 branch
  - fix libgfortran overflows on allocation (#1125219, CVE-2014-5044)
  - backport -fsanitize=alignment support from the trunk


author: Jakub Jelinek <jakub@redhat.com> 4.9.2-5
changelog:
  - update from 4.9 branch (#1149294, #1025729)
  - don't include libatomic and libitm packages on RHEL 7 (#1160176)
  - avoid file dependency in devtoolset-*-libstdc++-devel package (#1167957)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.8-29.fc21
changelog:
  - Backport vDSO regression.
  - Revert the makeinfo workaround from 7.8-27.fc21.
  - Further 1.75x improvement of the interactive symbols lookup (Doug Evans).


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-1
changelog:
  - Update to 2.0.17.
  - Add OSGI manifest info to the runtime jar.
  - Bundle generator docs with the generator in the main package.


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Alexander Kurtakov <akurtako@redhat.com> 2.0.17-6
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about
    subtracting one from an index value.


author: Petr Machata <pmachata@redhat.com> - 0.155-2
changelog:
  - The bzip2-devel, zlib-devel and xz-devel dependencies should be
    unconditional.  These are all shipped in all currently supported
    OS's.


author: Petr Machata <pmachata@redhat.com> - 0.155-3
changelog:
  - Make sure the highest address for the CU is marked as end_sequence.
    (elfutils-0.155-dwarf_line.patch)


author: Mark Wielaard <mjw@redhat.com> - 0.155-7
changelog:
  - Don't blow up stack in dwarf_getsrclines with lots of lines.
    (elfutils-0.155-dwarf_getsrclines.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 2.24-14
changelog:
  - Rebase to official binutils 2.24 release and recent patches.
    - Fix detection of little endian PPC64 binaries.  (#1095885)
    - Fix detection of uncompressed .debug_str sections.  (#1082370)
    - Fix compiling using gcc 4.9  (#1087374)
    - Use 2.24 in Source string.  Delete unused patches.
    - Fix decoding of abbrevs using a DW_FORM_ref_addr attribute.  (#1056797)
    - Import fixes on 2.24 branch that affect AArch64 IFUNC and PLT handling.
    - Fix building opcodes library with -Werror=format-security.  (#1037026)
    - Delete: binutils-2.23.52.0.1-64-bit-thin-archives.patch
    - Delete: binutils-rh980601.patch
    - Remove: binutils-2.23.52.0.1-revert-pr15149.patch from spec file.


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-9
changelog:
  - dts3.1 merge from rhel-7.1
  - remove bodies of with_java, with_virtguest, with_virthost conditionals


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.8.4-2
changelog:
  - Resolves: RHBZ#1476315
  - backport https://github.com/nodejs/node/commit/e3ef382f357d2bd12e7429711936aa79cc1d7699
  - use system CA at build-time, fixes segfaulting npm


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:4.6.2-7
changelog:
  - Resolves: RHBZ#1476315
  - bump epoch for rhscl 3.0 deadline
  - turn off snapshots
  - add c-ares patch


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: Tomas Hrcka <thrcka@redhat.com> - 4.3.0-5
changelog:
  - New upstream release 4.3.0
  - https://nodejs.org/en/blog/release/v4.3.0/
  - Build with bundled openssl, this will be reverted ASAP
  - Unbundled http-parser


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 4.8.4-2
changelog:
  - Resolves: RHBZ#1479519, #1476314
  - backport https://github.com/nodejs/node/commit/e3ef382f357d2bd12e7429711936aa79cc1d7699
  - use system CA at build-time, fixes segfaulting npm


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:4.6.2-5
changelog:
  - Resolves: RHBZ#1479519, #1476314
  - bump epoch for rhscl 3.0 deadline
  - turn off snapshots
  - add c-ares patch


author: Tomas Orsava <torsava@redhat.com> - 2.7.8-17
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346358


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-1
changelog:
  - Rebased to Python 2.7.13
  - Removed backport of PEP 466 (Patches 213-228)
  - Rebased/rewritten patches 1, 6, 10, 55, 102, 112, 134, 136, 137, 146, 153,
    156, 167, 170, 180, 181, 189, 191
  - Dropped patches 166, 184, 196, 197, 229, 230, 232, 237, 238, 242
  - Added the rewheel module: patch 198
  Resolves: rhbz#1402809


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-2
changelog:
  - Rebuilding because some .pyc/.pyo files were not properly generated in the
    official build for some reason


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-3
changelog:
  - Reworked and readded patch 224: File based configuration of HTTPS verification
  Resolves: rhbz#1417838


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1709403 and rhbz#1709407


author: Victor Stinner <vstinner@redhat.com> - 2.7.16-4
changelog:
  - Fix regression in the crypt module introduced in update to Python 2.7.16
    (fix the name of the _crypt module init function).


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.8-14
changelog:
  - Modified 00224-pep476-add-toggle-for-cert-verify.patch to use certificate verification
  config file from python27 SCL directory.
  Resolves: rhbz#1111464


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-3
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703534 and rhbz#1704372


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.8-1
changelog:
  - Update to 2.7.8.
  Resolves: rhbz#1167912
  - Make python-devel depend on scl-utils-build.
  Resolves: rhbz#1170993


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.8-2
changelog:
  - Fix %check
  unset DISPLAY
   setion not failing properly on failed test
  - Fixed CVE-2013-1752, CVE-2013-1753 
  Resolves: rhbz#1187779


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-4
changelog:
  - drop explicit Requires for openssl, gd
  - run nginx under SCL environment from systemd service
  - fix module .conf path in nginx.conf
  - pass PERL5LIB, LD_LIBRARY_PATH from env when perl is loaded (#1421927)


author: Joe Orton <jorton@redhat.com> - 1:1.10.2-7
changelog:
  - filter auto-provides from module subpackages (#1434349)
  - drop perl vendorarch directory ownership (#1434333)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.10.2-8
changelog:
  - Resolves: CVE-2017-7529 rh-nginx110-nginx: nginx: Integer overflow
    in nginx range filter module leading to memory disclosure


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9
changelog:
  - Resolves: #1648226 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation
  - Resolves: #1648220 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-9.1
changelog:
  - Resolves: #1744814 - CVE-2019-9511 rh-nginx110-nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1744327 - CVE-2019-9513 rh-nginx110-nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745041 - CVE-2019-9516 rh-nginx110-nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-8.1
changelog:
  - Resolves: #1648363 - CVE-2018-16845 rh-nginx110-nginx: nginx:
    Denial of service and memory disclosure via mp4 module
  - Resolves: #1650091 - CVE-2018-16843 rh-nginx110-nginx: nginx:
    Excessive memory consumption via flaw in HTTP/2 implementation


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-0.1.GIT
changelog:
  - New upstream (pre-)release.
  - Add valgrind-3.14.0-add-vector-h.patch.
  - Add valgrind-3.14.0-disable-s390x-z13.patch.


author: Marek Polacek <polacek@redhat.com> 8.2.1-7
changelog:
  - update from Fedora gcc-8.2.1-7 (#1664796)
  - drop gcc8-fortran-include.patch
  - add -fdec-include and -fpad-source (#1647048)
  - include forgotten ppc* intrinsic headers


author: Marek Polacek <polacek@redhat.com> 8.3.1-2
changelog:
  - update from Fedora 8.3.1-2 gcc (#1664796)
  - put liblsan_preinit.o to FULLPATH instead of FULLLPATH


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3
  - two small autoFDO fixes (#1684650)
  - fix std::hash for 2GB+ strings (PR libstdc++/89629)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.1.90.20180727-41.fc29
changelog:
  - Reenable libipt.
  - Rebuild due to new libipt release.
  - Adjust bundled libipt; remove unnecessary patch.
  - Sync IPv6 patch with F-28 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Keith Seitz <keiths@redhat.com> - 8.2-3.el7
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Marek Polacek <polacek@redhat.com> 8.3.1-3.1
changelog:
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730724)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730726)


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-16
changelog:
  - Add valgrind-3.14.0-gettid.patch
  - Add valgrind-3.14.0-ppc64-quotactl.patch
  - Add valgrind-3.14.0-ppc-subfe.patch
  - Add valgrind-3.14.0-s390x-vec-facility-bit.patch.
  - Update valgrind-3.14.0-rsp-clobber.patch
  - Add valgrind-3.14.0-subrange_type-count.patch


author: Nick Clifton <nickc@redhat.com> 2.30-24
changelog:
  - When installing both ld.bfd and ld.gold, do not reset the current alternative if upgrading.  (#1592069)


author: Nick Clifton <nickc@redhat.com> 2.30-26
changelog:
  - Restore the long-long patch as it is needed for compatibilit between the 32-bit and 64-bit devel rpms.  (#1605913)


author: Nick Clifton <nickc@redhat.com> - 2.30-47
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Update x86_64 linker testsuite after previous delta.  (#1624779)
  - Disable the x86_64 linker's elimination of PLT entries.  (#1624779)
  - Disable readelf's reporting of gaps in build notes.  (#1623556)
  - Fix some more PowerPC64 linker testsuite failures.  (#1584565)
  - Remove PLT eliision patch.  (#1618748)
  - Restore the binutils-2.25-set-long-long.patch.
  - Fix GOLDs creation of PT_NOTE segments.  (#1614908)  (#1614920)
  - Improve objcopy's --merge-notes option.  (#1608390)
  - Remove x86 ISA property notes with empty bits.  (#1609801)
  - Rebuild with fixed binutils
  - Move the .gnu.build.attributes section to after the .comment section.
  - Merge .gnu.build.attribute sections together.  (#1608390)
  - Fix the gold linker so that it can handle relocs in discardeable note sections.  (#1607054)
  - Fix the generation of relocations for assembler created notes.  (#1598551)


author: Nick Clifton <nickc@redhat.com> - 2.30-54
changelog:
  - Fix AArch64 linker testsuite problems.  (#1702247)
  - Fix S390x linker testsuite problems.  (#1702248)
  - Fix PPC64le linker testsuite problems.  (#1702249)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.
  - Add elfutils-0.173-index-shadow.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.
  - Add elfutils-0.174-no-shadow.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Nick Clifton <nickc@redhat.com> 2.30-18
changelog:
  - Fix a seg-fault parsing corrupt DWARF information.  (#1573360)
  - Fix another seg-fault parsing corrupt DWARF information.  (#1573367)
  - Fix a seg-fault copying a corrupt ELF file.  (#1551788)
  - Fix a seg-fault parsing a large ELF files on a 32-bit host.  (#1539891)
  - Fix a seg-fault running nm on a corrupt ELF file.  (#15343247)
  - Fix a seg-fault running nm on a file containing corrupt DWARF information.  (#1551781)
  - Fix another seg-fault running nm on a file containing corrupt DWARF information.  (#1551763)


author: Nick Clifton <nickc@redhat.com> 2.30-19
changelog:
  - Fix a seg-fault running objcopy on a corrupt PE format file.  (#1574702)
  - Fix a seg-fault running objcopy on a corrupt ELF format file.  (#1574705)


author: Nick Clifton <nickc@redhat.com> 2.30-20
changelog:
  - Have the x86 linker resolve relocations against the _end, _edata and __bss_start symbols locally.  (#1576735)
  - Do not generate GNU build notes for linkonce sections.  (#1576362)


author: Nick Clifton <nickc@redhat.com> 2.30-22
changelog:
  - Fix handling of local versioned symbols by the x86 linker.  (PR 23194)
  - Fix linker testsuite failures.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.1.90.20180727-39.fc29
changelog:
  - [dts] Fix build by removing a patch for already removed pahole.py .
  - [dts rhel6] Fix build by updating gdb-gnat-dwarf-crash-3of3.patch .


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-8
changelog:
  - Add elfutils-0.170-sys-ptrace.patch
  - Make sure spec can be build even when ldconfig_scriplets aren't defined.
  - Add elfutils-0.170-m68k-packed-not-aligned.patch


author: Stan Cox <scox@redhat.com> - 9.3.2-3
changelog:
  - rhbz1503116 possible soname clashes between base rhel- and devtoolset- dyninst
  - rhbz1538757 segfault with a glibc built with binutils-2.27: handle R_*_IRELATIVE


author: Stan Cox <scox@redhat.com> - 9.3.2-6
changelog:
  - rhbz1498558 Needs dyninst-devtoolset installed
  - rhbz1470149 Use separate debuginfo for dyninst-testsuite
  - rhbz1647471 so name clashes


author: Remi Collet <remi@fedoraproject.org> - 3.2.1-1
changelog:
  - Redis 3.2.1 - Release date: Fri Jun 17 15:01:56 CEST 2016
  - Upgrade urgency HIGH: Critical fix to Redis Sentinel,
    due to 3.2.0 regression compared to 3.0.


author: Remi Collet <rcollet@redhat.com> - 3.2.3-1
changelog:
  - rebase to 3.2.3 #1368102
  - fix redis-shutdown script
  - init script doesn't support load/force-reload option #1369495


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - provide redis-check-rdb as a symlink to redis-server
    add patch from https://github.com/antirez/redis/pull/3494
  - data and configuration should not be publicly readable #1374717
  - remove /var/run/redis with systemd
  - add man pages from https://github.com/antirez/redis/pull/3491 #1369821


author: Remi Collet <rcollet@redhat.com> - 3.2.13
changelog:
  - rebase to 3.2.13
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-5
changelog:
  - fix service file to use rh-git29 instead of native git
  - fix desktop file - changed names & paths inside the file,
      use scl rh-git29 instead of native git, change filename
      and path of the file to system directory instead of scl
  - *git-daemon: xinetd.d: use system directory and added prefix to the filename
  - *git-gitweb: store git.conf to directory of httpd24 sclm add scl prefix
      to the filename and correct paths inside the file to correct rh-git29
      www directory
  - fix doubled path for emacs-sitelisp files
  - build and link files with httpd24-libcurl
    Resolves: #1345897


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-1
changelog:
  - Rebase to 2.9.3
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1359176 #1382708


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.3-3
changelog:
  - prevent command injection via malicious ssh URLs
  - dissalow repo names beginning with dash
    Resolves: CVE-2017-8386 CVE-2017-1000117


author: Sebastian Kisela <skisela@redhat.com> - 2.9.3-4
changelog:
  - Backport the fix for CVE-2018-11235 and CVE-2018-11233.
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.11.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 2.7.x.


author: Marcel Plch <mplch@redhat.com> - 2.9.3-5
changelog:
  - Patch for arbitrary code execution via .gitmodules (CVE-2018-17456)
  - Original backport by Jonathan Nieder for Debian
  - Original backport: https://repo.or.cz/git/debian.git/commit/63af93488dc4066a937aaa130b35dff398db2368
  - Original tests: https://repo.or.cz/git/debian.git/commit/2b4d394113d28a856f2cf375d0cbef3806e9a2c8
  - Resolves: rhbz#1638265


author: Petr Stodulka <pstodulk@redhat.com> - 2.9.2-1
changelog:
  - Initial commit with git v2.9.2
  - Fixes troubles with infinite loop in "git ls-tree" for broken symlink
    under refs/heads
  - Resolves: #1204191


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251466


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-18
changelog:
  - Upgrade to Ruby 2.2.9.
    Resolves: rhbz#1549646
    Resolves: CVE-2017-17405
    * Remove Patch7: rubygems-2.2.4-Limit-API-endpoint-to-original-security
      -domain.patch
      subsumed
    * Remove Patch8: rubygems-2.2.5-Fix-API-endpoint-domain-clamping.patch
      subsumed
    * Remove Patch9: ruby-2.2.3-dsym_fstrs-for-object-allocation-gc-phase.patch
      subsumed
    * Remove Patch10: ruby-2.3.0-test_gem_remote_fetcher.rb-get-rid-of-errors.patch
      subsumed
    * Remove Patch11: ruby-2.2.3-vm_args.c-protect-value-stack-from-calling-other
      -met.patch
      subsumed


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-19
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549646


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-2
changelog:
  - Fixed operating_system to properly install binary extensions.
  - Rebase patches to apply cleanly.
  - Fix PPC64LE support.
  - Fix -tcltk requires.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251465


author: Marek Skalicky <mskalick@redhat.com> - 3.0.6-1
changelog:
  - Fixed systemd service PIDFile setting (#1231269)
  - Temporarily disable WiredTiger (FPC request to bundle it)
  - Enable c++11 (MongoDB requires it since 3.0.5)
  - Upgrade to version 3.0.6


author: Marek Skalicky <mskalick@redhat.com> - 3.0.6-2
changelog:
  - Enable bundled WiredTiger
    (FPC ticket - https://fedorahosted.org/fpc/ticket/562,
     upstream discussion - https://groups.google.com/forum/#!topic/mongodb-dev/31FQSo4KVCI)


author: Marek Skalický <mskalick@redhat.com> - 3.4.5-0.2.git4d4d965
changelog:
  - Build also mongoreplay
  - patch vendored dependency github.com/spacemonkeygo/spacelog to use syscall.Dup3


author: Marek Skalický <mskalick@redhat.com> - 1.2-2
changelog:
  - Rebase to libunwind 1.2 from Fedora 27 and convert it to SCL
  - Do not install man pages - latex2man is not RHEL and it is needed
    to regenerate manpages (libunwind is only dependency of rh-mongodb34
    collection and using it for other purposes is not supported)


author: Remi Collet <remi@fedoraproject.org> - 1.6.0-1
changelog:
  - update to 1.6.0
  - add fix for https://jira.mongodb.org/browse/CDRIVER-2042
    from https://github.com/mongodb/mongo-c-driver/pull/421


author: Remi Collet <remi@fedoraproject.org> - 1.6.1-2
changelog:
  - rebuild with new upstream tarball
  - add examples in devel documentation
  - use patch instead of sed hacks for rpm specific changes


author: Marek Skalický <mskalick@redhat.com> - 1.6.3-2
changelog:
  - Rebase to mongo-c-driver from Fedora 27 and convert it to SCL
  - disable man pages (RHEL does not contain new enough sphinx)


author: Marek Skalický <mskalick@redhat.com> - 1.60.0-2
changelog:
  - disable using libquadmath (gcc in RHEL6 does not provide)
  - Disable container library - it contains typedef redefinition
    which fails with gcc 4.4 in RHEL6


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.1.2-3
changelog:
  - Remove ExclusiveArch. While a MongoDB instance is little endian only, this is a client
  - Build with openssl 1.0


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.035-3
changelog:
  - Remove using of iconv, because it is not needed (bug #1368046)
  - Fix default value for nossl option (bug #1366773)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-368
changelog:
  - Do not use unitialized memory in $h{\const} warnings (RT#128189)
  - Fix precedence in hv_ename_delete (RT#128086)
  - Do not treat %: as a stash (RT#128238)


author: Paul Howarth <paul@city-fan.org> - 2:1.23-1
changelog:
  - Update to 1.23
    - Fixed several issues with the handling of non-integer values passed to
      from_epoch() (GH#11)
      - This method was simply broken for negative values, which would end up
        being incremented by a full second, so for example -0.5 became 0.5
      - The method did not accept all valid float values; specifically, it did
        not accept values in scientific notation
      - Finally, this method now rounds all non-integer values to the nearest
        millisecond, which matches the precision we can expect from Perl itself
        (53 bits) in most cases
    - Make all DateTime::Infinite objects return the system's representation of
      positive or negative infinity for any method that returns a number or
      string representation (year(), month(), ymd(), iso8601(), etc.); previously
      some of these methods could return "Nan", "-Inf--Inf--Inf", and other
      confusing outputs (CPAN RT#110341)


author: Paul Howarth <paul@city-fan.org> - 2:1.24-1
changelog:
  - Update to 1.24
    - The last release partially broke $dt->time; if you passed a value to use
      as unit separator, it was ignored (CPAN RT#112585)


author: Paul Howarth <paul@city-fan.org> - 2:1.25-1
changelog:
  - Update to 1.25
    - DateTime->from_object would die if given a DateTime::Infinite object; now
      it returns another DateTime::Infinite object (CPAN RT#112712)
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2:1.27-1
changelog:
  - Update to 1.27
    - Added an environment variable PERL_DATETIME_DEFAULT_TZ to globally set the
      default time zone (GH#14); using this is very dangerous - be careful!
  - BR: perl-generators


author: Paul Howarth <paul@city-fan.org> - 2:1.28-1
changelog:
  - Update to 1.28
    - Fixed handling of some floating point epochs; since DateTime treated the
      epoch like a string instead of a number, certain epochs with a non-integer
      value ended up treated like integers (Perl is weird) (GH#15, fixes GH#6)


author: Paul Howarth <paul@city-fan.org> - 2:1.33-1
changelog:
  - Update to 1.33
    - When you pass a locale to $dt->set you will now get a warning suggesting
      you should use $dt->set_locale instead (CPAN RT#115420)
    - Added support for $dt->truncate( to => 'quarter' ) (GH#17)
    - Fixed the $dt->set docs to say that you cannot pass a locale (even though
      you can but you'll get a warning) and added more docs for $dt->set_locale
    - Require DateTime::Locale 1.05
    - Require DateTime::TimeZone 2.00
  - Take advantage of NO_PACKLIST option in recent EU:MM


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add get_winsize and set_winsize
    - Explicitly drop support for Win32 (CPAN RT#77813)
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add support for PERL_MM_OPT
    - Fix typo in compiler detection error message (CPAN RT#75649)
    - Fix "redefinition of typedef" errors with v5.19.4 and above
  - Classify buildreqs by usage


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.9-6
changelog:
  - Fixed file conflict with others Perl SCLs
  - Update local path in default perl.conf
  - Resolves: rhbz#1227192, rhbz#1210621


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-8
changelog:
  - Register a collection into the httpd environment (bug #1382514)
  - Pass SCL environment to subprocesses (bug #1382514)


author: Petr Pisar <ppisar@redhat.com> - 2.0.9-10
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626273)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.21-1
changelog:
  - Upstream update.
  - Reflect Attribute::Params::Validate having been dropped from
    Params::Validate.
  - Add %license.


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561102)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561102)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-380
changelog:
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1561101)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1561101)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-381
changelog:
  - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653529)
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c (bug #1653524)
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c (bug #1653526)
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c (bug #1653521)


author: Honza Horak <hhorak@redhat.com> 5.5.36-2
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1056440
  - Do not blindly remove socket during start
    Resolves: #1045401
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054261
  - Fix advice after initialization of data stack
    Resolves: #1054458
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042875


author: Honza Horak <hhorak@redhat.com> - 5.5.37-5
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089209


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160515


author: Matej Muzila <mmuzila@redhat.com> - 5.5.41-1
changelog:
  - Rebase to MySQL 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186114


author: Jakub Dorňák <jdornak@redhat.com> - 5.5.44-1
changelog:
  - Rebase to 5.5.44
    Also fixes: CVE-2015-2582 CVE-2015-2620 CVE-2015-4737 CVE-2015-4752
    CVE-2015-4757 CVE-2015-2648 CVE-2015-2643
    Resolves: #1247023


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-59
changelog:
  - Don't prefix bundling provides.
  - Don't enable collections for build.
  - Optimize operating_system.rb a bit.


author: Pavel Valena <pvalena@redhat.com> - 2.3.0-60
changelog:
  - Fix ruby lib path in macros.ruby.rh-ruby23
    - Resolves: rhbz#1255753
  - Manually set UTC timezone for tests


author: Pavel Valena <pvalena@redhat.com> - 2.3.6-67
changelog:
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549649


author: Pavel Valena <pvalena@redhat.com> - 2.3.8-68
changelog:
  - Upgrade to Ruby 2.3.8.
    Resolves: CVE-2018-16395
    Resolves: CVE-2018-16396
    Resolves: rhbz#1563078
    Removed Patch11: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602880)


author: Jun Aruga <jaruga@redhat.com> - 2.3.8-70
changelog:
  - Refresh expired certificates.
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Jan Kaluza <jkaluza@redhat.com> - 4.0.50-5
changelog:
  - use /var/run/passenger instead of /tmp for temporary directory
  - use rpath to find libev and libev-eio


author: Jakub Dorňák <jdornak@redhat.com> - 5.7.16-1
changelog:
  - Udate to MySQL 5.7.16, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-16.html
    Resolves: #1376457


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-1
changelog:
  - Udate to MySQL 5.7.18, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
  - CVEs fixed by this commit, #1445527:
    CVE-2016-5483/CVE-2017-3600 CVE-2017-3308 CVE-2017-3309
    CVE-2017-3331 CVE-2017-3450 CVE-2017-3453 CVE-2017-3454
    CVE-2017-3455 CVE-2017-3456 CVE-2017-3457 CVE-2017-3458
    CVE-2017-3459 CVE-2017-3460 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3465 CVE-2017-3467
    CVE-2017-3468 CVE-2017-3599
  - CVEs fixed by this commit, #1445518:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3251
    CVE-2017-3256 CVE-2017-3257 CVE-2017-3258 CVE-2017-3273
    CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 CVE-2017-3319
    CVE-2017-3320 CVE-2017-3291
  - CVEs fixed by this commit, #1445520:
    CVE-2017-3312
  - 'force' option for 'rm' removed in specfile
  - Sample my-*.cnf are gone (removed by upstream)
  - Testsuite extended by '--big-test' option
  - Fixed SCL exit code processing ('set -e')
  - Following tests were disabled, for they started to fail or are unstable:
    main.datadir_permission main.m_i_db main.grant_user_lock
  - Resolves: #1449689; MD5 in FIPS mode


author: Honza Horak <hhorak@redhat.com> - 5.7.18-2
changelog:
  - Run mysqld with correct context
    Resolves: #1461102
  - Work-around for #1172683 is not needed any more, SELinux context is
    properly defined for mysqld_safe-scl-helper binary in selinux-policy
    package already.
    However, what we really need is context of mysqld,
    not mysqld_safe, so using mysqld-scl-helper instead and defining own
    context for this file.
    Related: #1461102
  - Do not run mysql-check-socket script as mysql user, since then it
    cannot see other processes' open files, as per see fuser(1) man page.
    Since the script only reads data, running it as root on RHEL-6 does not
    cause any security issues.
    Resolves: #1461445


author: Honza Horak <hhorak@redhat.com> - 5.7.20-1
changelog:
  - Update to MySQL 5.7.20, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html
    Also fixes: CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276
                CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294
                CVE-2017-10314 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
    Resolves: #1505114


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.21-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
  - Add rpcgen to buildrep
  - Add support for libtirpc
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - CVE fixes: #1533834
              CVE-2018-2696 CVE-2018-2703 CVE-2018-2565 CVE-2018-2573 CVE-2018-2576
              CVE-2018-2583 CVE-2018-2586 CVE-2018-2590 CVE-2018-2600 CVE-2018-2612
              CVE-2018-2622 CVE-2018-2640 CVE-2018-2645 CVE-2018-2646 CVE-2018-2647
              CVE-2018-2665 CVE-2018-2667 CVE-2018-2668


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-1
changelog:
  - Udate to MySQL 5.7.18, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
  - CVEs fixed by this commit, #1445528:
    CVE-2016-5483/CVE-2017-3600 CVE-2017-3308 CVE-2017-3309
    CVE-2017-3331 CVE-2017-3450 CVE-2017-3453 CVE-2017-3454
    CVE-2017-3455 CVE-2017-3456 CVE-2017-3457 CVE-2017-3458
    CVE-2017-3459 CVE-2017-3460 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3465 CVE-2017-3467
    CVE-2017-3468 CVE-2017-3599
  - CVEs fixed by this commit, #1445517:
    CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3251
    CVE-2017-3256 CVE-2017-3257 CVE-2017-3258 CVE-2017-3273
    CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 CVE-2017-3319
    CVE-2017-3320 CVE-2017-3291
  - CVEs fixed by this commit, #1445521:
    CVE-2017-3312
  - 'force' option for 'rm' removed in specfile
  - Sample my-*.cnf are gone (removed by upstream)
  - Testsuite extended by '--big-test' option
  - Fixed SCL exit code processing ('set -e')
  - Following tests were disabled, for they started to fail or are unstable:
    main.datadir_permission main.m_i_db main.grant_user_lock
  - Resolves: #1452514; MD5 in FIPS mode


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-2
changelog:
  - Previous CVE fix was incomplete, fixed now
  - CVEs fixed by this commit, #1445521:
    CVE-2017-3312
  - Resolves: #1445521


author: Honza Horak <hhorak@redhat.com> - 5.7.18-2
changelog:
  - Run mysqld with correct context
    Resolves: #1466474
  - Work-around for #1172683 is not needed any more, SELinux context is
    properly defined for mysqld_safe-scl-helper binary in selinux-policy
    package already.
    However, what we really need is context of mysqld,
    not mysqld_safe, so using mysqld-scl-helper instead and defining own
    context for this file.
    Related: #1466474
  - Do not run mysql-check-socket script as mysql user, since then it
    cannot see other processes' open files, as per see fuser(1) man page.
    Since the script only reads data, running it as root on RHEL-6 does not
    cause any security issues.
    Resolves: #1466477


author: Honza Horak <hhorak@redhat.com> - 5.7.20-2
changelog:
  - Release bump for rebuilding on new arches
    Related: #1518842
  - Use gcc from devtoolset-7 for building because otherwise the build
    fails on aarch64 (RHEL-7 only)
    Related: #1518842


author: Honza Horak <hhorak@redhat.com> - 5.7.24-1
changelog:
  - Update to 5.7.24
    Also fixes the following CVEs:
    CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
    CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
    CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779
    Resolves: #1642523
    CVE-2018-3054 CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 CVE-2018-3061
    CVE-2018-3062 CVE-2018-3064 CVE-2018-3065 CVE-2018-3066 CVE-2018-3070
    CVE-2018-3071 CVE-2018-3077 CVE-2018-3081
    Resolves: #1643060
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162
    CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174
    CVE-2018-3282 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3133
    CVE-2018-3143 CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3185
    CVE-2018-3155
    Resolves: #1643049


author: Honza Horak <hhorak@redhat.com> - 5.7.11-1
changelog:
  - Update to 5.7.11
    Thanks to Norvald H. Ryeng
    Removing tar ball with boost and using mysql tar ball with boost bundled


author: Honza Horak <hhorak@redhat.com> - 5.7.15-1
changelog:
  - Update to MySQL 5.7.15, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html
    Resolves: #1376457
  - Adjust list of problematic tests from Fedora


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.6.4-3
changelog:
  - Change owner of thermostat-command-channel script to
    thermostat:thermostat. Resolves: RHBZ#1379702


author: Jie Kang <jkang@redhat.com> - 1.6.6-1
changelog:
  - Rebase to latest Thermostat 1.6.6. Resolves rhbz#1398394
  - Use jline from rh-java-common instead of rh-thermostat16
  - Remove self-br for bootstrap build
  - Use java-devel-openjdk requires instead of a hard
    require on java-1.7.0-openjdk. Resolves rhbz#1398232


author: Pavel Valena <pvalena@redhat.com> - 0.3.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3
  - Correct attributes for websocket_mask.so


author: Jun Aruga <jaruga@redhat.com> - 9.0.6-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jun Aruga <jaruga@redhat.com> - 3.6.0-2
changelog:
  - Add openssl-devel dependency to enable HTTPS support.
  - Add regenerated parser logic.
  - Improve Ruby load path to run test suite.
  - Improve files section.


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/python33/root/usr/lib64/python3.3/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-5
changelog:
  - Disable default bytecompilation during build, fixes rhbz#971427.
  - Fix for gettext plural form headers, fixes rhbz#968928.
  - Compile debug build libraries with -O1, fixes rhbz#967900.
  - Print repr() in when C assert fails in debug build, fixes rhbz#971858.


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-11
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-15
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-16
changelog:
  - Addendum for the Fix for CVE-2016-0772 (rhbz#1303647)
    In this version of Python, smtplib has 644 permissons, not 755,
    thus I modified the patch to expect this and not adjust the permissons.
  Resolves: rhbz#1346359


author: Tomas Orsava <torsava@redhat.com> - 3.3.2-17
changelog:
  - Addendum for the Fix for CVE-2016-5699 (rhbz#1303699)
    Python 3.3 does not yet have functions fullmatch and subTest,
    the patch was rewritten accordingly
  Resolves: rhbz#1346359


author: Robert Kuska <rkuska@redhat.com> - 2.5.2-4
changelog:
  * Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.5.2-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-1
changelog:
  - Updated to the latest Fedora version 3.4.0
  - Renumbered Patch 1 to 2 to be in line with Fedora
  - Added Patch 1 from Fedora that fixes CVE-2013-7440 and CVE-2013-2099
  - Added Patch 3 from upstream for tests to pass without an active mongodb;
    We can't test pymongo with a running database like in Fedora, because in
    RHEL/RHSCLs it's packaged as a separate collection
  - Removed BuildRequires: python-nose as the test suite isn't using it any more


author: Tomas Orsava <torsava@redhat.com> - 3.4.0-2
changelog:
  - Removed the commented out filter macros at the top of the specfile.
    While they were commented out, they still took effect since the macros still
    expanded. However, they were causing error messages in the buildlog [0] and
    causing the provides/requires generator script not to finish. Thus the
    packages were missing some of the required Provides and Requires tags.
    [0] warning: Ignoring invalid regex ^%{_scl_prefix}/.*$|%{_root_sysconfdir}/rpm/macros.rh-python36-config$
       (% signs were doubled to avoid rpm-lint warnings)


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-12
changelog:
  - Moved pythondeps-scl-35.sh and 2 macro definitions from the rh-python35-build
    subpackage here to the python-devel subpackage where it should be for
    dependant collections to build properly
  - Also defined the 2 macros in this spec file so they are available during the
    build of Python itself
  Resolves: rhbz#1422346


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Tomas Orsava <torsava@redhat.com> - 3.6.3-4
changelog:
  - Security fix for CVE-2019-9636
  - Increased the stack size to avoid segfault during tests
  Resolves: rhbz#1689322


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/rh-python36/root/usr/lib64/python3.6/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Tomas Orsava <torsava@redhat.com> - 3.12-1
changelog:
  - Updated to the current Fedora version
  - Removed Patch 0 as it is already patched in 3.12:
    http://pyyaml.org/ticket/247


author: Pavel Kajaba <pkajaba@redhat.com> - 9.5.2-1
changelog:
  - Rebase to 9.5.2 (CVE-2016-3065) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.2-2
changelog:
  - fix upgrade path from rh-postgresql94 (rhbz#1334351)
  - fix path to binary directory in Makefile.regress (rhbz#1334706)


author: Petr Kubat <pkubat@redhat.com> - 9.5.4-1
changelog:
  - Rebase to 9.5.4 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-4.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-3.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.7-1
changelog:
  - Rebase to 9.5.7 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-7.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-6.html
    http://www.postgresql.org/docs/9.5/static/release-9-5-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.1-1
changelog:
  - Rebase to 9.5.1 (CVE-2016-0773) per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5-1.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.14-1
changelog:
  - update to 9.5.14 per release notes:
    https://www.postgresql.org/docs/9.5/static/release-9-5-10.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-11.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-12.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-13.html
    https://www.postgresql.org/docs/9.5/static/release-9-5-14.html


author: Remi Collet <rcollet@redhat.com> - 5.4.16-18
changelog:
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587


author: Remi Collet <rcollet@redhat.com> - 5.4.40-2
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352


author: Remi Collet <rcollet@redhat.com> - 7.0.1-2
changelog:
  - allow wildcard in opcache.blacklist_filename and provide
    default /etc/php.d/opcache-default.blacklist


author: Remi Collet <remi@fedoraproject.org> - 3.1.13-1
changelog:
  - Version 3.1.13 (beta) - API 3.1.0 (stable)
  - add patches from upstream (fixes some tests)
  - change serveur port for tests (allow 32/64 bits build)


author: Remi Collet <remi@fedoraproject.org> - 3.1.15-0.1.svn329724
changelog:
  - update to 3.1.15dev with new directive 'enable_opcode_cache' (disabled)
    which allow to cache only user data and use another opcode cache
  - switch most configuration to upstream default


author: Remi Collet <rcollet@redhat.com> - 3.1.15-0.4.20140912
changelog:
  - upstream has switched from SVN to GIT
  - disable shm_strings_buffer in provided configuration
  - fix segfault when Zend Opcache is ebabled #1052178


author: Mat Booth <mat.booth@redhat.com> - 1.2.9-8
changelog:
  - Fix unstripped binaries and empty debuginfo package
  - Ensure presence of ant-junit at buildtime
  - Fixed mixed use of space and tabs


author: Mat Booth <mat.booth@redhat.com> - 2.0.17-17.2
changelog:
  - Add Wno-strict-overflow flag to remove unnecessary warning about subtracting
    one from an index value.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.11-60.fc24
changelog:
  - New Fedora GDB testfile: rhbz1261564-aarch64-watchpoint.exp
  - Backport gdb-7.11 stable branch PR gdb/19676 fix (Pedro Alves).


author: Marek Polacek <polacek@redhat.com> 5.2.1-1.1
changelog:
  - for DTS lib{l,t}san-devel require lib{l,t}san >= 5.1.1 (#1247146)
  - rename libgccjit to devtoolset-4-libgccjit; install libgccjit.so.* into
    /opt/rh/devtoolset-4/root/lib64/


author: Jakub Jelinek <jakub@redhat.com> 5.2.1-1.2
changelog:
  - split documentation out of devtoolset-4-libgccjit-devel package into
    devtoolset-4-libgccjit-docs (#1245102)
  - add 32-bit linker script and 32-bit gcc driver wrapper so that
    32-bit devtoolset-4-libgccjit{,-devel} can be used for linking
    and at runtime on x86_64 (#1245102)


author: Jakub Jelinek <jakub@redhat.com> 5.3.1-6
changelog:
  - update from Fedora 5.3.1-5 (#1305952)
  - include non-stripped copies of *.a libraries in the debuginfo subpackage


author: Mat Booth <mat.booth@redhat.com> - 9.0.0-1.3
changelog:
  - Disable optimisation that generates no-strict-overflow warning instead of
    simply disabling the warning


author: Mat Booth <mat.booth@redhat.com> - 1:4.0.0-1
changelog:
  - Update to latest upstream release
  - No longer necessary to symlink optparse
  - Now archful package due to having a native component


author: Mat Booth <mat.booth@redhat.com> - 1:4.1.0-2.4
changelog:
  - Add all necessary symlinks for jython
  - Don't bother users with upstream project fund-raising screen
  - rhbz#1251408


author: Jeff Law <law@redhat.com> 2.25-7
changelog:
  - Resync with Fedora (binutils-2.25)
    Reapply DTS specific patches
    Backport testsuite patch to fix gold testsuite failure


author: Nick Clifton <nickc@redhat.com> 2.25-9
changelog:
  - Import patch from FSF to preserve the sh_link and sh_info fields in stripped ELF sections.
    (#1246390)


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-13
changelog:
  - 3.10.1 Refresh.
    - Add valgrind-3.10.1-di_notify_mmap.patch
    - Add valgrind-3.10.1-memmove-ld_so-ppc64.patch
    - Add valgrind-3.10.1-kernel-4.0.patch.
    - Add valgrind-3.10.1-cfi-redzone.patch.
    - Add valgrind-3.10.1-memfd_create.patch.
    - Add valgrind-3.10.1-syncfs.patch.
    - Add valgrind-3.10.1-arm-process_vm_readv_writev.patch.
    - Add valgrind-3.10.1-fno-ipa-icf.patch.
    - Add valgrind-3.10.1-demangle-q.patch
    - Add valgrind-3.10-1-ppc64-sigpending.patch
    - Filter out -fstack-protector-strong and disable _hardened_build.
    - Add valgrind-3.10.1-send-recv-mmsg.patch
    - Add mount and umount2 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-glibc-version-check.patch
    - Add accept4 to valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10.1-ppc64-accept4.patch.
    - Add valgrind-3.10.1-aarch64-syscalls.patch.
    - Add valgrind-3.10-s390-spechelper.patch.
    - Add valgrind-3.10.1-mempcpy.patch.


author: Mat Booth <mat.booth@redhat.com> - 1:4.5.0-3.9
changelog:
  - Fix further ant version tests rhbz#1243711
  - Tighten up deps on junit/hamcrest
  - Build javadocs with java 8


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-13.fc23
changelog:
  - Rebase to FSF GDB 7.9.90.20150822 (7.10 branch snapshot).
  - Remove --with testsuite BuildRequires: prelink (prelink is orphaned in F-23+).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.10-18.el7
changelog:
  - [rhel7] Provide libstdc++-v3-python with C++11 even on RHEL-7 (RH BZ 1239290).
  - Do not provide libstdc++-v3-python lib64 files on 32-bit archs.
  - [rhel6,rhel7] Delete pahole.py on Python2 systems.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.169-3
changelog:
  - Add elfutils-0.169-dup-shstrtab.patch (#1455687)
  - Add elfutils-0.169-strip-empty.patch (#1455620)


author: Mark Wielaard <mjw@redhat.com> - 0.170-4
changelog:
  - Add elfutils-0.170-dwarf_aggregate_size.patch (#1527966).
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Jeff Law <law@redhat.com> 7.3.1-5.4
changelog:
  - Add Jakub's patch to generalize default exponent handling to
    instead cover all DEC runtime extensions
    Update 0022 patch for changes from Jakub's work.
    (#1561204)


author: Marek Polacek <polacek@redhat.com> 7.3.1-5.7
changelog:
  - fix 0014-Allow-non-logical-expressions-in-IF-statements.patch: also allow
    non logical expressions in ELSE-IF statements


author: Jeff Law <polacek@redhat.com> 7.3.1-5.9
changelog:
  - Fix INCLUDE handling when pathname is on a separate line
  - Integrate updates to patches #0005 and #0014.  Add testcases for
  - various legacy fortran extensions (#1586289)


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-1
changelog:
  - valgrind 3.13.0 final.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch


author: Mark Wielaard <mjw@redhat.com>
changelog:
  - Rebase to fedora valgrind version (#1467952)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-arm-index-hardwire.patch
    - Add valgrind-3.13.0-ucontext_t.patch
    - Add valgrind-3.13.0-gdb-8-testfix.patch
    - Add valgrind-3.13.0-disable-vgdb-child.patch
    - Add valgrind-3.13.0-arm64-hwcap.patch
    - Add valgrind-3.13.0-epoll_pwait.patch
    - Add valgrind-3.13.0-ppc64-diag.patch


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-10
changelog:
  - Add valgrind-3.13.0-ppc64-timebase.patch (#1523871)
  - Sync with rhel 7.5 valgrind (#1523872)
    - Add --error-exitcode=1 to /bin/true check.
    - Add valgrind-3.13.0-xml-socket.patch
    - Add valgrind-3.13.0-ppc64-vex-fixes.patch
    - Add valgrind-3.13.0-amd64-eflags-tests.patch
    - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
    - Add valgrind-3.13.0-static-tls.patch


author: Nick Clifton <polacek@redhat.com> 2.28-1
changelog:
  - Rebase to FSF binutils 2.28
  - Retire: binutils-2.23.52.0.1-addr2line-dynsymtab.patch
  - Retire: binutils-2.27-local-dynsym-count.patch
  - Retire: binutils-2.27-monotonic-section-offsets.patch
  - Retire: binutils-2.27-aarch64-relro-default.patch
  - Retire: binutils-2.27-power9.patch
  - Import FSF binutils patch to fix running readelf on debug info binaries.
  - Import FSF binutils patch to fix an abort with PowerPC dynamic relocs.
  - Backport patch to add support for putting name, comp_dir and
    producer strings into the .debug_str section. 
  - Add support for GNU BUILD NOTEs.


author: Nick Clifton <nickc@redhat.com> 2.28-7
changelog:
  - Fix s390 assembler so that it remove fake local symbols from its output.
    (#1460254)
    (#1472486)


author: Nick Clifton <nickc@redhat.com> 2.28-9.1
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1519864)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.0.1-32.fc26
changelog:
  - Backport upstream fix for Intel PKRU (Walfred Tedeschi).
  - Backport upstream fix AVX instr. single-stepping (RH BZ 1515209, Pedro Alves).
  - Fix snapgnulib bundle number.


author: Nick Clifton <nickc@redhat.com> 2.28-10
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1515340)


