# changelog

author: Dave Dykstra <dwd@fedoraproject.org> - 1.1.0-rc.3
changelog:
  - Update to upstream 1.1.0~rc.3.  Uncomment setting squashfuse_version and
    the requiring of fuse2fs on el7.


author: Carl George <carl@george.computer> - 1.1.4-2
changelog:
  - Add pivot provides/conflict of sif-runtime
  - Reduce singularity obsoletes upper bound
  - Remove singularity provides due to incompatibilities introduced in apptainer
  - Add the word singularity to the summary so it shows up in dnf search results
  - Move obsoletes to suid subpackage


author: Dave Dykstra <dwd@fnal.gov> - 1.1.4-3
changelog:
  - Restore the singularity obsoletes on the apptainer main package, so
    that now it is on both the main package and suid subpackage.


author: Dave Dykstra <dwd@fnal.gov> - 1.1.5-1
changelog:
  - Update to upstream 1.1.5, including changing the obsoletes on the main
    apptainer package to conflicts.


author: Edward Maros <ed.maros@ligo.org> - 1.69.0-5
changelog:
  - Cleaned up building to have python version specific development files be associated with the matching python development package


author: Björn Esser <besser82@fedoraproject.org> - 4.0-3
changelog:
  - Apply two upstream patches fixing verbose file allocation table printout
  - Tweak Makefile to build all targets in parallel
  - Compile and link test binary during %build stage


author: Björn Esser <besser82@fedoraproject.org> - 4.0-4
changelog:
  - Patch Makefile to be thread-safe on all targets
  - Clean trailing white-space in some files during %prep


author: Jonathan Wright <jonathan@almalinux.org> - 1.7-2
changelog:
  - adjust description per upstream request
  - https://github.com/leo-arch/clifm/issues/154#issuecomment-1233102727


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-2
changelog:
  - Various provider-related imrovements necessary for PKCS#11 provider correct operations
    Resolves: rhbz#2142517
  - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream
    Resolves: rhbz#2133809
  - Removed recommended package for openssl-libs
    Resolves: rhbz#2093804
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083879
  - Backport of ppc64le Montgomery multiply enhancement
    Resolves: rhbz#2130708
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2142087
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2142087


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-5
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Michel Alexandre Salim <salimma@fedoraproject.org> 3.0.7-5.1
changelog:
  - Merge c9s openssl changes to pick up CVE fixes
  - Back out f2a49ef424f831aac988356fc8b2b910e443dc42 as that caused test failures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.26.08-1
changelog:
  - Update to 6.26.08
  - Drop patch root-move-private-decl.patch (fixed upstream)
  - Drop some previously backported patches
  - Rename patch root-blas-linking-and-ignore-prefix.patch (partially fixed)
  - Backport locking of gInterpreterMutex in TClingClassInfo::IsEnum


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.26.10-1
changelog:
  - Update to 6.26.10
  - Drop patches root-Fixes-for-garbage-collection-in-Python-3.11.patch
    and root-Guard-gInterpreterMutex-in-TClingClassInfo-IsEnum.patch
    (fixed upstream)
  - Use different filenames in io/loopdir tests
  - Update root-test-timeout.patch to address one more issue


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.4.2-3
changelog:
  - Link with libatomic on some 32-bit architectures
  - Fix sphinx doc
  - Backport fixes from upstream git master (OpenSSL 3, Python 3.10)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.4.3-1
changelog:
  - Update to version 5.4.3
  - Drop patches accepted upstream or previously backported
  - Add BR python3-pip and python3-wheel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.0-1
changelog:
  - Update to version 5.5.0
  - Drop patches accepted upstream
  - Address some warnings from Doxygen
  - Build using devtoolset 7 on EPEL 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.1-1
changelog:
  - Update to version 5.5.1
  - Drop doxygen patch accepted upstream
  - Check all sizes (8, 16, 32, 64) in <atomic> check
  - Check operator++ in <atomic> check


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.1-2
changelog:
  - Add missing include - fixes build failure with gcc 13
  - Fix build failure due to possible large memory allocation


author: Henrik Nordstrom <henrik@henriknordstrom.net> 5.6.6-2
changelog:
  - Fixes for CVE-2022-1061 CVE-2022-1207 CVE-2022-1237 CVE-2022-1238
    CVE-2022-1240 CVE-2022-1244 CVE-2022-1283 CVE-2022-1284 CVE-2022-1296
    CVE-2022-1297


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.9.3-1
changelog:
  - Update to 0.9.3; this adds KASLR support Document installing `kernel-
    debuginfo` for better tracing


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.9.4-2
changelog:
  - Update vendored dependencies
  - also generate bundled provides (courtesy of zincati's bundled-
    provides.jq)


author: Tom Callaway <spot@fedoraproject.org> - 1:4.04-5
changelog:
  - pull in all the headers
  - apply null fix for default var in GlobalParams()
  - make a libxpdfcore for texlive-base to use


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.0-1
changelog:
  - Add `--uncompressed` option to zck, allowing for embedding of uncompressed
    digests in the header
  - Various small bug fixes


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.1-1
changelog:
  - Fixed bug that limited size of file that could be compressed using zchunk to 2GB
  - Fixed memory leak


