# changelog

author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-7
changelog:
  - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-9
changelog:
  - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav ?karvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Tomá? Mráz <tmraz@redhat.com> - 20180921-1.git391ed9f
changelog:
  - OpenSSH: Generate policy for sign algorithms
  - Enable >= 255 bits EC curves in FUTURE policy
  - OpenSSH: Add group1 key exchanges in LEGACY policy
  - NSS: Add SHA224 to hash lists
  - Print warning when update-crypto-policies --set FIPS is used
  - fips-mode-setup: Kernel boot options are now modified with grubby


author: Tomá? Mráz <tmraz@redhat.com> - 20180925-1.git71ca85f
changelog:
  - Use Recommends instead of Requires for grubby
  - Revert setting of HostKeyAlgorithms for ssh client for now


author: Tomá? Mráz <tmraz@redhat.com> - 20181026-1.gitd42aaa6
changelog:
  - Fix regression in discovery of additional configuration
  - NSS: add DSA keyword to LEGACY policy
  - GnuTLS: Add 3DES and RC4 to LEGACY policy


author: Tomá? Mráz <tmraz@redhat.com> - 20181120-1.gitd2b3bc4
changelog:
  - Print warning when update-crypto-policies --set is used in the FIPS mode
  - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy
  - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE
  - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY


author: Tomá? Mráz <tmraz@redhat.com> - 20190211-2.gite3eacfc
changelog:
  - add crypto-policies.7 manual page
  - Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS
  - cleanup duplicate and incorrect information from update-crypto-policies.8
    manual page
  - update-crypto-policies: Fix endless loop
  - update-crypto-policies: Add warning about the need of system restart
  - FUTURE: Add mistakenly ommitted EDDSA-ED25519 signature algorithm
  - openssh: Add missing SHA2 variants of RSA certificates to the policy
  - return exit code 2 when printing usage from all the tools
  - update-crypto-policies: add --no-reload option for testing


author: Akemi Yagi <toracat@elrepo.org> - 6.5.5-1
changelog:
  - Updated with the 6.5.5 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.5]


author: S.Tindall <s10dal@elrepo.org> - 6.5.6-1
changelog:
  - Updated with the 6.5.6 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.6]


author: S.Tindall <s10dal@elrepo.org> - 6.5.7-1
changelog:
  - Updated with the 6.5.7 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.7]


author: S.Tindall <s10dal@elrepo.org> - 6.5.8-1
changelog:
  - Updated with the 6.5.8 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.8]


author: Akemi Yagi <toracat@elrepo.org> - 6.5.9-1
changelog:
  - Updated with the 6.5.9 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9]


author: Akemi Yagi <toracat@elrepo.org> - 6.6.0-1
changelog:
  - Updated with the 6.6 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6]


author: S.Tindall <s10dal@elrepo.org> - 6.6.1-1
changelog:
  - Updated with the 6.6.1 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.1]


author: S.Tindall <s10dal@elrepo.org> - 6.6.2-1
changelog:
  - Updated with the 6.6.2 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.2]


author: S.Tindall <s10dal@elrepo.org> - 6.6.3-1
changelog:
  - Updated with the 6.6.3 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.3]


author: AlterOS Support <support@alter-os.ru> - 6.6.28-1
changelog:
  - Updated with the 6.6.28 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.28]
  - CONFIG_HYPERV_VSOCKETS=y
  - CONFIG_HID_HYPERV_MOUSE=y


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Iryna Shcherbina <ishcherb@redhat.com> - 5.10.1-4
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.15.8-2
changelog:
  - Update Provides: bundled(*) version numbers, remove ones dropped upstream
  - Restore Provides: bundled(protobuf), unbundling support dropped years ago
  - Remove no longer used BuildRequires: yasm and pkgconfig(protobuf)


author: Troy Dawson <tdawson@redhat.com> - 5.15.8-3.1
changelog:
  - Specifically for epel9 only, until things switch to python3
  - Bundle python2 for building only
  - Bundled re2
  - No docs


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


