# changelog

author: Dominik Wombacher <dominik@wombacher.cc> - 0.9.17-3
changelog:
  - Run cmake tests during package build
  - Include missing file and directories because of version bump


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-3
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Jordan Ogas <jogas@lanl.gov> 0.32-1
changelog:
  - edit el7 patch: update ch-test path
  - add patch: prevent rpath of standard path
  - update builder package files
  - add dependency: findutils
  - add conditional dependencies: fuse3, squashfuse-devel, & git
  - new version 0.32


author: Quentin Dufour <quentin@dufour.io> - 9.6.4
changelog:
  - Skipped 4 versions (9.5.6, 9.5.8, 9.5.8a and 9.6.2)
  - Check all the release notes: https://cisco.github.io/ChezScheme/release_notes/v9.6/release_notes.html


author: Jens Petersen <petersen@redhat.com> - 10.0.0-2
changelog:
  - add license and doc files (#2281419, Benson Muite)
  - add source license comments (#2281419, Benson Muite)


author: Jens Petersen <petersen@redhat.com> - 10.0.0-7
changelog:
  - include nanopass Copyright file (#2281419, Benson Muite)
  - drop bundled(stex) provides since not used


author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Kamil Dudka <kdudka@redhat.com> - 9.2-3
changelog:
  - copy: fix --reflink=auto to fallback in more cases (#2180056)
  - cksum: fix reporting of failed checks (#2180056)


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Omair Majid <omajid@redhat.com> - 8.0.103-1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Add dotnet.macros with %dotnet_runtime_arch and %dotnet_runtime_id


author: Jens Petersen <petersen@redhat.com> - 1.4.5-3
changelog:
  - build with opengl (#2260290, Benson Muite)
  - check: run help command (#2260290, Benson Muite)
  - khrplatform.h is under Khronos License (#2260290, Benson Muite)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1
changelog:
  - New version
    Resolves: rhbz#2241735
    Resolves: rhbz#2241538
    Resolves: rhbz#2241539
    Resolves: rhbz#2241525
    Resolves: rhbz#2241527
    Resolves: rhbz#2241528
    Resolves: rhbz#2241529
    Resolves: rhbz#2241531
    Resolves: rhbz#2241532
    Resolves: rhbz#2241542
    Resolves: rhbz#2241544


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1
changelog:
  - New version
    Resolves: rhbz#2256145
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51766


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98-1
changelog:
  - New version
    Resolves: rhbz#2297124
  - Fixed incorrect parsing of multiline rfc2231 header filename
    Resolves: CVE-2024-39929
  - Dropped upstreamed patches
  - Enabled SRS support


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 3.0.0-2
changelog:
  - after merging the last PR to move to Qt6, merge the remaining features
    on behalf of Frank Dana (by Marie Loise Nolden <loise@kde.org>:
  - Build Qt6-based client with both Qt6 and Qt5 probes


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 1f0fab7ff86, aa19bc1d259, acc117b57f7,
    aff250145af, and 3644f41dc80.  These commits reduce the size of the
    generated gdb-index file, and also ensure that the gdb-index and
    dwarf-5 index are generated consistently even as the number of
    worker threads that GDB uses changes (RHBZ 2232086).


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Rebase to FSF GDB 14.1.
  - Update local patches:
      gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
      gdb-6.6-buildid-locate-rpm.patch
      gdb-6.6-buildid-locate.patch
      gdb-container-rh-pkg.patch
      gdb-core-open-vdso-warning.patch
      gdb-fedora-libncursesw.patch
      gdb-linux_perf-bundle.patch
  - Update backported patches which didn't make it into 14.1:
      gdb-rhbz-2232086-cpp-ify-mapped-symtab.patch
      gdb-rhbz-2232086-generate-gdb-index-consistently.patch
  - Drop upstreamed local patches:
      gdb-6.5-sharedlibrary-path.patch
  - Drop gdb-13.2 backports (which are now in gdb-14.1):
      gdb-binutils29988-read_indexed_address.patch
      gdb-bz2196395-debuginfod-legacy-openssl-crash.patch
      gdb-bz2237392-dwarf-obstack-allocation.patch
      gdb-bz2237515-debuginfod-double-free.patch
      gdb-rhbz2192105-ftbs-dangling-pointer
      gdb-rhbz2233961-CVE-2022-4806.patch
      gdb-rhbz2233965-memory-leak.patch
  - Adjust gdb.spec so that --with-mpfr is no longer passed to
    configure; doing so, combined with some configury changes triggered
    a latent build problem.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-2
changelog:
  - Backport upstream commit bc23ea51f8a83e9524dfb553baa8baacb29e68a9,
    potentially fixing RHBZ 2257562.


author: Alexandra Hájková <ahajkova@redhat.com> - 14.1-3
changelog:
  - Backport upstream commits 7ae9ecfd801 and 8170efad364 to avoid
    using _PyOS_ReadlineTState  (RHBZ 2250652).


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-2
changelog:
  - backport commit 91874afabcd to solve RHEL-2295897
    This fixes a double free when debugging mysql-workbench


author: Jens Petersen <petersen@redhat.com> - 9.2.6-133
changelog:
  - base subpkg now owns ghcliblib and ghclibplatform dirs (#2185357)
  - s390x: no longer apply unregisterized patches


author: Jens Petersen <petersen@redhat.com> - 9.4.5-134
changelog:
  - rebase to 9.4.5 from ghc9.4 package
  - https://downloads.haskell.org/~ghc/9.4.5/docs/users_guide/9.4.1-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.4.5-136
changelog:
  - sync with ghc9.4: add sphinx7 patch
  - user_guide: update external links patch in line with final upstream


author: Jens Petersen <petersen@redhat.com> - 9.4.5-137
changelog:
  - s390x: patch from @stefansf (IBM) to fix llvm alignment in data sections
    which should fix certain runtime crashes (#2248097)


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-3
changelog:
  - 2283509 - CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-5
changelog:
  - 2293951 - CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)
  - 2293960 - CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-6
changelog:
  - 2295704 - CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - 2295703 - CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - 2295700 - CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - 2295697 - CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()


author: Sérgio M. Basto <sergio@serjux.com> - 1:0.8.1-0.1.0~sonamebump
changelog:
  - Update to 0.8.1 with new soname
  - Drop patches because they are already in the code
  - Add update_third_party.sh helper script


author: Joe Orton <jorton@redhat.com> - 2.4.58-4
changelog:
  - fix OpenSSL 3.0 deprecation warnings (r1913912, r1915067)
  - mod_ssl: move to provider API for pkcs11 support (#2253014)


author: Joe Orton <jorton@redhat.com> - 2.4.59-3
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Joe Orton <jorton@redhat.com> - 2.4.59-4
changelog:
  - mod_ssl: add engine bcond, disable ENGINE support by default for F41+
  - mod_ssl: enable SSL_OP_NO_RENEGOTIATION (upstream PR#426)


author: Nicola Sella <nsella@redhat.com> - 0.70.2-1
changelog:
  - Update to 0.70.2
  - Support "proxy=none" in main config (RhBug:2155713)
  - Fix #1558: Don't assume inclusion of cstdint
  - Disconnect monitors in dnf_repo_loader_finalize() (RhBug:2070153)


author: Jan Kolarik <jkolarik@redhat.com> - 0.71.0-1
changelog:
  - Update to 0.71.0
  - PGP: Use new librepo PGP API, remove gpgme dependency
  - API: Basic support for OpenPGP public keys
  - Avoid using GNU extensions in the dependency splitter regex
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838)
  - Make code C++20 compatible


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Jan Kolarik <jkolarik@redhat.com> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1
  - Fix https://issues.redhat.com/browse/RHEL-27657
  - subject-py: Fix memory leak
  - MergedTransaction: Calculate RPM difference between two same versions as no-op
  - Onboard packit tests
  - Add virtual destructor to TransactionItem


author: Evan Goode <egoode@redhat.com> - 0.73.2-1
changelog:
  - Update to 0.73.2
  - context: use rpmtsAddReinstallElement() when doing a reinstall
  - MergedTransaction: Fix invalid memory access when dropping items
  - ConfigParser: fix use-out-of-scope leaks
  - Since we use rpmtsAddReinstallElement rpm also uninstalls the package
  - Fix countme bucket calculation


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.0-5
changelog:
  - Use curl instead of wget, since wget2 is broken
    (https://gitlab.com/gnuwget/wget2/-/issues/652)
  - Remove yajl daemon dep and replace with jansson.


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.3.2-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - BR: python3-setuptools to fix ModuleNotFoundError: No module named 'distutils'


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Sérgio Basto <sergio@serjux.com> - 5.0.3-1
changelog:
  - Update lxc to 5.0.3 (inspired in https://build.opensuse.org/package/show/Virtualization:containers/lxc)


author: Packit <hello@packit.dev> - 101-1
changelog:
  Changes with 101
  ----------------
    * Add minimal-raw and clean up the compose handler a bit (#3962)
      * Author: Ondřej Budai, Reviewers: Achilleas Koutsou
    * RHEL-16006: improve error on missing package name (#3964)
      * Author: Florian Schüller, Reviewers: Ondřej Budai, Tomáš Hozza
    * Support configuring distro aliases via ENV and set aliases in the composer template. (#3927)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai, Sanne Raymaekers
    * Tag rhel 9.2+ with SEV_LIVE_MIGRATABLE_V2 (#3970)
      * Author: Amelia Crate, Reviewers: Ondřej Budai, Tomáš Hozza
    * Update osbuild/images to v0.40.0 (#3973)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Simon de Vlieger
    * cloud/awscloud: create secure instance in the same subnet (#3961)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: describe security groups using filters (#3965)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Ondřej Budai
    * cloud/awscloud: max 4 overrides are allowed when creating a fleet (#3946)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * cloud/awscloud: remove restricting egress rule from SG (#3954)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: take instance type from host (#3947)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß, Simon de Vlieger
    * cmd/osbuild-jobsite-builder: actually assign the stdout buffer (#3958)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cmd/osbuild-jobsite: capture osbuild's stdout (#3953)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * composer: glitchtip integration (#3907)
      * Author: Diaa Sami, Reviewers: Ondřej Budai
    * errors-level logs to glitchtip (#3934)
      * Author: Diaa Sami, Reviewers: Ondřej Budai
    * jobsite/manager: create export directory (#3955)
      * Author: Simon de Vlieger, Reviewers: Sanne Raymaekers
    * jobsite/manager: turn off compression (#3957)
      * Author: Simon de Vlieger, Reviewers: Sanne Raymaekers
    * jobsite: `manager` and `builder` (#3937)
      * Author: Simon de Vlieger, Reviewers: Sanne Raymaekers
    * osbuild-runner: run osbuild in an ec2 vm (#3939)
      * Author: Sanne Raymaekers, Reviewers: Nobody
    * osbuildexecutor/aws.ec2: pass the manifest to the job manager (#3948)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * switch to images/pkg/dnfjson and remove internal copy (#3828)
      * Author: Diaa Sami, Reviewers: Nobody
    * templates/packer: let the executor listen on all interfaces (#3949)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * templates/packer: rename executor log group (#3959)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * templates/packer: set -builder-path to /var/cache/osbuild-builder (#3950)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * templates/packer: setup vector in osbuild-executor (#3952)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * tools/appsre-build-fedora: wait until rpms are built upstream (#3971)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * worker-executor followups: fix oneshot service and secure instance for non-default vpcs (#3945)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2024-02-26


author: Packit <hello@packit.dev> - 102-1
changelog:
  Changes with 102
  ----------------
    * CI: Drop SonarQube in favor of Snyk (#3984)
      * Author: Jakub Rusz, Reviewers: Simon Steinbeiß
    * Enable masked systemd services in cloudapi (HMS-3661) (#3972)
      * Author: Gianluca Zuccarelli, Reviewers: Brian C. Lane, Tomáš Hozza
    * Enable testing in OpenShift (#3681)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * README: Fix reference to developer guide (#3969)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * Skip Image Tests tests for image types already covered in osbuild/images (#3967)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * build(deps): bump golangci/golangci-lint-action from 3 to 4 (#3941)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump stackrox/kube-linter-action from 1.0.4 to 1.0.5 (#3982)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * ci: skip ostree-remount check in CS9 due to bug RHEL-25249 (#3978)
      * Author: mcattamoredhat, Reviewers: Irene Díez, Xiaofeng Wang
    * images: update dependency (#3983)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    * integration test for worker-executor (HMS-3634) (#3968)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * templates/packer: fix vector repos (#3987)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * test: remove libvirt workaround (#3975)
      * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz, Tomáš Hozza
    * tests: Drop bigiso test (HMS-3710) (#3988)
      * Author: Simon Steinbeiß, Reviewers: Ondřej Budai

  — Somewhere on the Internet, 2024-03-06


author: Packit <hello@packit.dev> - 103-1
changelog:
  Changes with 103
  ----------------
    * Drop distro aliases and dot-notation tests (HMS-3710) (#3989)
      * Author: Simon Steinbeiß, Reviewers: Tomáš Hozza
    * Fixed link to developer guide (#4018)
      * Author: Cloud Jerry, Reviewers: Brian C. Lane
    * Packer: don't source non-existing file in worker_executor.sh (HMS-3727) (#3997)
      * Author: Tomáš Hozza, Reviewers: Sanne Raymaekers
    * Packer: make osbuild-executor worker config more configurable (HMS-3727) (#3985)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai, Sanne Raymaekers
    * Packer: remove escaped newline from worker config (HMS-3727) (#4002)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai
    * Remove rhel-10.0 alias from the openshift template (#4017)
      * Author: Ondřej Budai, Reviewers: Simon de Vlieger
    * Test/Koji: test only combinations that we run in the service (HMS-3710) (#3992)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai, Simon Steinbeiß
    * Use distro repos in cloudapi (#3928)
      * Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    * Worker: allow configuring executor CloudWatch group (HMS-3727) (#3998)
      * Author: Tomáš Hozza, Reviewers: Simon de Vlieger
    * ci: add a PR best practices check (#3990)
      * Author: Simon de Vlieger, Reviewers: Simon Steinbeiß
    * deps: bump (#4015)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * deps: update images to v0.43.0 (#3986)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * osbuild-jobsite: push sources to executor (HMS-3633) (#3981)
      * Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger
    * osbuild-worker: Convert osbuild raw json error to a string for logging (#3994)
      * Author: Brian C. Lane, Reviewers: Simon de Vlieger
    * templates/packer: make worker_config script executable (HMS-3727) (#3993)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    * templates/packer: set up vector correctly in the executor (HMS-3727) (#3996)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    * templates/packer: vector expects a yaml configuration now (HMS-3727) (#3995)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-03-20


author: Packit <hello@packit.dev> - 104-1
changelog:
  Changes with 104
  ----------------
    * Add installer customizations to blueprints and cloud API (HMS-1161) (#4005)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Execute OpenShift Virtualization tests only on RHEL 9.x nightly (#4044)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * bump osbuild/images to 51 and add expiredate fields to user customizations (#4041)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: allow internet access on secure instance again (#4025)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * cloudapi: Override the request distro with the blueprint distro (#4006)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou
    * osbuild-jobsite-builder: disable http.Server timeouts (#4031)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite-manager: close writer before sending the store (#4029)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite: increase populate timeout (#4027)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    * osbuild-worker: add support for mtls dnf repo secrets (HMS-3798) (#4035)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * repositories: remove rhel-8-beta (#4024)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    * templates/packer: support ldap service account for repo mtls conf (#4049)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * test: drop oscap test script and gitlab job (HMS-3710) (#3991)
      * Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß
    * worker: drop backwards compatibility for DepsolveJob serialisation (COMPOSER-1612) (#4021)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-04-03


author: Packit <hello@packit.dev> - 106-1
changelog:
  Changes with 106
  ----------------
    * Active worker gauge (COMPOSER-2215) (#4089)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    * Add CI job to detect possible problematic usage of `trap` (#3977)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Makefile: remove installation of dnf-json (#4076)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * Show worker count on grafana dashboard (COMPOSER-2215) (#4092)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * Update Arm EC2 instance to a newer one (#4064)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * Update osbuild/images to v0.56.0 (#4096)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    * configurable worker timeouts (COMPOSER-2215) (#4090)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * osbuild-worker: fix mtls credentials injection in depsolve job (#4082)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    * osbuild-worker: fix nil pointer in depsolve job (#4086)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Tomáš Hozza
    * osbuild/images 0.55 (#4075)
      * Author: Sanne Raymaekers, Reviewers: Brian C. Lane
    * osbuildexecutor/ec2: pass extraEnv only to sources invocation (#4083)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * templates/packer: fix proxy config in ldap service account init (#4098)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * tests: Fix leapp repo url (#4085)
      * Author: Jakub Rusz, Reviewers: Alexander Todorov
    * worker: support http proxy for depsolve and osbuild sources job HMS-3798 (#4066)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-04-24


author: Packit <hello@packit.dev> - 108-1
changelog:
  Changes with 108
  ----------------
    * Reenable codecov via action (#4119)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * Update osbuild/images v0.59.0 (HMS-4031) (#4127)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * Use copr rpms for the community workers (#4129)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * build(deps): bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible (#4080)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#4000)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#4110)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (#3999)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump the go-deps group across 1 directory with 14 updates (#4123)
      * Author: dependabot[bot], Reviewers: Achilleas Koutsou, Ondřej Budai, Tomáš Hozza
    * cloudapi: Add UploadTypesLocal for local_save status reports (#4038)
      * Author: Brian C. Lane, Reviewers: Simon Steinbeiß
    * templates/dashboards: fix community-stage tenant variable (#4100)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * templates/packer: add failure script (#4101)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai, Tomáš Hozza
    * test: update osname for edge deployments (#4148)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou
    * tools/fedora-worker-packer: increase timeout further (#4134)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * tools/fedora-worker-packer: small fixes (commit sha + timeout increase) (#4133)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller

  — Somewhere on the Internet, 2024-05-15


author: Packit <hello@packit.dev> - 109-1
changelog:
  Changes with 109
  ----------------
    * Add RHEL-9.5 repo definitions (#4158)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * Add support for arbitrary kickstart file injection into ISOs (HMS-3879) (#4135)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Minor user customization test improvements (#4007)
      * Author: andremarianiello, Reviewers: Brian C. Lane
    * templates/packer: invert tag logic (#4150)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Ondřej Budai
    * test: execute dmesg task as privileged user (#4094)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2024-05-29


author: Packit <hello@packit.dev> - 110-1
changelog:
  Changes with 110
  ----------------
    * :broom: Add c10s and el10 repos, update distro aliases, update SPEC, c8s EOL (#4179)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Alexander Todorov, Florian Schüller, Simon de Vlieger
    * Fix condition in `tools/provision.sh` for el10 and re-enable snapshot URL validation (#4186)
      * Author: Tomáš Hozza, Reviewers: Alexander Todorov
    * GH actions / containerfiles: update F37 to F40 (#4168)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * Testing with rhel-9.5 nightly (#4126)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * cmd/osbuild-worker-executor: add oaas as worker executor (#4189)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * go.mod: bump osbuild/images to v0.65.0 (#4198)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * main: rework the way the mock logger is passed (#4196)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * obuild-worker: extract workerClientErrorFrom() helper and add tests (#4188)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Florian Schüller
    * osbuild-worker-executor: fix order of `assert.Equal()` in tests (#4192)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * osbuild-worker-executor: make test output silent again (#4191)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * osbuild-worker: do not use `error` in clienterror.Error.Details (#4145)
      * Author: Michael Vogt, Reviewers: Florian Schüller
    * templates/openshift/composer: remove maintenance cronjob (#4178)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * templates/packer: switch to fedora-40 (#4162)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    * templates/packer: use import_tasks instead of include_tasks (#4176)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * test/cases/ubi-wsl: test rhel9 ga (HMS-4207) (#4165)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    * test: skip ostree-remount due to issue RHEL-25249 (#4121)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou, Xiaofeng Wang
    * test: update ostree osname in pending test cases (#4173)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-06-12


author: Packit <hello@packit.dev> - 111-1
changelog:
  Changes with 111
  ----------------
    * Remove rhel-8.10 jobs from test matrix (#4172)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Set executor hostname via cloud-init (#4221)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * Switch to oaas / osbuild-worker-executor (HMS-4097) (#4184)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * Update the RH GPG release key in all repos and update test manifests. (#4194)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Use latest 9.5 for RHEL upgrade tests (#4216)
      * Author: Alexander Todorov, Reviewers: Achilleas Koutsou, Jakub Rusz
    * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#4141)
      * Author: dependabot[bot], Reviewers: Ondřej Budai
    * build(deps): bump the go-deps group across 1 directory with 15 updates (#4210)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * cloud/awscloud: use instance requirements when creating secure instance (#4207)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * cloudapi: more details for non-service errors (#4227)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * golangci: fix integration tests for images (#4214)
      * Author: Florian Schüller, Reviewers: Michael Vogt
    * internal/awscloud: retry CreateFleet (HMS-4098) (#4220)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * internal/osbuildexecutor: verify expected input from handleBuild (#4204)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt
    * main: journald support with external correlation (#4047)
      * Author: Lukáš Zapletal, Reviewers: Nobody
    * osbuild-worker-executor/main_test: use random port for tests (#4218)
      * Author: Florian Schüller, Reviewers: Michael Vogt
    * osbuild-worker-executor: `job-id` in control.json as hostname (#4208)
      * Author: Michael Vogt, Reviewers: Sanne Raymaekers
    * osbuildexecutor: allow file type `tar.TypeGNUSparse` too (#4205)
      * Author: Michael Vogt, Reviewers: Florian Schüller
    * templates/dashboards: revert active worker count (#4174)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller

  — Somewhere on the Internet, 2024-06-26


author: Packit <hello@packit.dev> - 113-1
changelog:
  Changes with 113
  ----------------
    * build(deps): bump the go-deps group across 1 directory with 10 updates (#4259)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * osbuild-worker: tweak error to not include a \n for a failed stage (#4257)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * repositories: update Fedora 40 gpg keys (#4258)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-07-11


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc1


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.3.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc4


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-4
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.7,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc1


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.8-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.8-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.8-rc3


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.2-5
changelog:
  - Fix incompatible pointer type passed to GEOSPolygonize_r
  - This makes the package compatible with
    https://fedoraproject.org/wiki/Changes/PortingToModernC.


author: Jan Grulich <jgrulich@redhat.com> - 5.15.14-2
changelog:
  - HTTP2: Delay any communication until encrypted() can be responded to
    Resolves: CVE-2024-39936
  - KDE/Qt patchset collection respin


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.2
changelog:
  - Make fill_process_comm() open comm file as READ_ONLY
  - throttlectl.sh: use legal value for exit on fail
  - stalld: free malloc'd buffer on function exit
  - throttling.c:  null terminate input buffer
  - stalld.conf: Fix stalld service start fail
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Clark Williams <williams@redhat.com> - 1.19.3
changelog:
  - src/utils.c: fix off-by-one error in buffer allocation
  - Makefile:  change build to use FORTIFY_SOURCE=3


author: Clark Williams <williams@redhat.com> - 1.19.5
changelog:
  - Makefile:  refactor CFLAGS/LDFLAGS for local and koji builds
  - doc/Releases.md:  Add a note about tagging


author: Bojan Smojver <bojan@rexursive com> - 4.4.3-3
changelog:
  - CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786
    CVE-2023-27787 CVE-2023-27788 CVE-2023-27789


author: Jonathan Wright <jonathan@almalinux.org> - 7.2.5-8
changelog:
  - Enable tests by default
    selectively disable tests that fail in mock for redis
    disable redis-sentinel tests, they always fail in mock


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-1
changelog:
  - update to xen-4.17.2 which includes
    x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569]
    x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982]
  - remove patches now included upstream


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-2
changelog:
  - arm32: The cache may not be properly cleaned/invalidated [XSA-437,
  	CVE-2023-34321]
  - top-level shadow reference dropped too early for 64-bit PV guests
  	[XSA-438, CVE-2023-34322]
  - x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]


